hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

Where we work · Indonesia · Surabaya

ISO and GRC certification consulting in Surabaya

Achieve ISO and GRC certification in Surabaya with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.

  • 11 standards for Surabaya
  • Jakarta office team
  • Effivity software included
  • Academy training included

Clients include

  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
In short

ISO and GRC certification in Surabaya at a glance

Surabaya's own city website calls it the centre of East Java's government and economy, and that economy shows up in several distinct places. Inside the city, the Rungkut industrial estate rents ready-built factories, small-industry units and warehouses, and runs a wastewater plant and a cyber security response team of its own. Along the waterfront, Pelindo's terminals at Tanjung Perak handle the freight behind the city's long trading history. Beyond the boundary, the Gresik special economic zone at JIIPE is organised around a deep-sea port for copper, chemicals, glass and renewable energy, while Juanda airport adds a domestic and an international terminal. Each setting raises different questions about quality, safety, environment, information security and continuity. National law and accreditation are covered on the Indonesia page. Sterling serves Surabaya from its Jakarta office, bringing 20+ years of experience, 8,100+ client engagements in 60+ countries, and Effivity and Sterling Academy with every engagement.

Surabaya is the capital of East Java, which the city government describes as the centre of the province's government and economy, and it has been an important port since Majapahit times. Its industry is spread across estate-based manufacturing in Rungkut, the Tanjung Perak port and container terminals, and the Gresik special economic zone next door.

Standards

Standards Sterling delivers in Surabaya

Each page sets out why the standard is asked for in Surabaya, what it requires and how Sterling delivers it locally. National law and accreditation are covered on the Indonesia page.

Industries

Industries in Surabaya that ask for certification

  • Estate-based manufacturing and ready-built factories: PT SIER, which runs the Surabaya Industrial Estate Rungkut and a second estate in Pasuruan, rents ready-built factory buildings, small-industry units and warehouses, and shows occupied industrial land of 330.4 ha at Rungkut and 682 ha at Pasuruan on its website in 2026. Standards asked for: ISO 9001, ISO 14001, ISO 45001, ISO 50001, ISO/IEC 27001
  • Port, container terminals and freight: Pelindo reports Tanjung Perak, Surabaya, as its busiest passenger terminal in the run-up to Lebaran in March 2026, names Tanjung Perak as one of four trial sites for electronic pilotage announced in July 2026, and issues container-terminal statements datelined Surabaya in October 2026. Standards asked for: ISO 9001, ISO 45001, ISO 14001, ISO 22301, ISO/IEC 27001
  • Heavy industry, metals, chemicals and glass at the Gresik special economic zone: JIIPE, designated as the Gresik special economic zone by Government Regulation 71 of 2021, covers 1,761 ha of industrial land and about 400 ha of port area on the Madura Strait, and names copper, chemicals, glass and renewable energy among its industries. Standards asked for: ISO 14001, ISO 45001, ISO 50001, ISO 9001, ISO 22301
  • City government, regional trade and services: The Surabaya city government describes the city as the capital of East Java and the centre of its government and economy, with 31 districts, and runs its own LPSE e-procurement service alongside employment and economic-empowerment services. Standards asked for: ISO 9001, ISO 37001, ISO 37301, ISO/IEC 27001, Indonesia Personal Data Protection Law
  • Air gateway and airport services: Juanda International Airport, managed within the InJourney Airports group, has a domestic terminal (Terminal 1) and an international terminal (Terminal 2), and its website carries pages for an integrated management system policy and a safety management system policy. Standards asked for: ISO 45001, ISO 9001, ISO 22301, ISO/IEC 27001

Industrial areas and zones in Surabaya

  • Surabaya Industrial Estate Rungkut (SIER) (Industrial estate operated by PT SIER, with a wastewater treatment plant that receives effluent from tenants): manufacturing, small industry, warehousing and logistics
  • PIER, SIER's second estate in Pasuruan (Industrial estate operated by PT SIER, with its own wastewater treatment plant): manufacturing, ready-built factories, warehousing
  • JIIPE, Gresik Special Economic Zone (Special economic zone (KEK) designated by Government Regulation 71 of 2021, with an integrated deep-sea port): copper, chemicals, glass, renewable energy

Local authorities

  • Pemerintah Kota Surabaya: Runs the city's service portal, which lists employment services, economic empowerment and LPSE e-procurement among its public services.
  • Gresik SEZ administrator's office at JIIPE: Provides one-stop licensing, centralised AMDAL (environmental impact) administration and facilitated construction permits for tenants of the zone.

National laws, regulators and accreditation are on the Indonesia page.

Ports and logistics

  • Port: Tanjung Perak, Surabaya (Pelindo network); the JIIPE deep-sea port in Gresik
  • Airport: Juanda International Airport: Terminal 1 (domestic) and Terminal 2 (international)

Container terminals, estate warehouses and the JIIPE port give exporters, freight handlers and port-side service firms customers who ask about quality, safety and continuity.

Sterling in Surabaya

Served from Sterling's Jakarta office. One team carries the work from scoping to certificate, with Effivity ISO & GRC software and preferential Sterling Academy access, with complimentary awareness training for your people. Sterling does not certify; certification decisions stay with independent bodies.

Nearby cities

Requirements, clause by clause

What the standards require, clause by clause

Before you start in Surabaya, read what each clause and subclause requires of you, how to implement it, the evidence auditors look for and the mistakes to avoid.

Questions Surabaya clients ask

Who looks after ISO and GRC work for Surabaya organisations?

Surabaya organisations are served from Sterling's Jakarta office, with visits to Surabaya sites when a stage needs them and remote working sessions for the rest. Effivity and Sterling Academy come with the engagement. The certificate itself is issued by an accredited certification body that you appoint, never by Sterling.

What should tenants of the SIER and PIER estates know before an ISO 14001 project?

The estate operator runs a wastewater treatment plant that takes effluent from tenants in both estates, so a tenant's aspects register should show what goes to the shared plant and what stays on site. The operator lists its discharge permit and environmental-feasibility references on its website. Agree discharge terms with the operator and the environmental authority.

What does the JIIPE special economic zone mean for suppliers around Surabaya?

It brings heavy-industry tenants in copper, chemicals, glass and renewable energy to the Madura Strait, and those tenants pass quality, safety and environmental questions down to contractors and suppliers. Licensing and environmental-impact administration for tenants sit with the zone's area manager. Ask each tenant which management-system evidence it expects before you bid.

Do Surabaya's industrial estates publish a cyber security incident team?

SIER does. It publishes an RFC 2350 description of its own cyber security incident response team, issued in March 2024, which serves the operator's staff and is funded from its IT budget. It shows how an estate operator documents incident handling. Tenants run their own systems, so each still needs its own incident procedure.

Next step

Start with a free discovery call

A Sterling consultant goes through your entities, your sites and your target date with you. No proposal until the scope is agreed.

Sources

  1. Estate-based manufacturing and ready-built factories — sier.id (accessed 8 Oct 2026)
  2. Port, container terminals and freight — pelindo.co.id (accessed 8 Oct 2026)
  3. Heavy industry, metals, chemicals and glass at the Gresik special economic zone — jiipe.com (accessed 8 Oct 2026)
  4. City government, regional trade and services — surabaya.go.id (accessed 8 Oct 2026)
  5. Air gateway and airport services — juanda-airport.com; injourney.id (accessed 8 Oct 2026)
  6. Surabaya Industrial Estate Rungkut (SIER) — sier.id
  7. PIER, SIER's second estate in Pasuruan — sier.id
  8. JIIPE, Gresik Special Economic Zone — jiipe.com
  9. Pemerintah Kota Surabaya — surabaya.go.id (accessed 8 Oct 2026)
  10. Gresik SEZ administrator's office at JIIPE — jiipe.com (accessed 8 Oct 2026)

Talk to a consultant

Plan your certification with the Jakarta team.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

indonesia@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice