Where we work · Iraq
ISO and GRC certification consulting in Iraq
Achieve ISO and GRC certification in Iraq with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Dubai office team
- Effivity and Academy included
Sectors that ask for certification in Iraq
Clients include
ISO and GRC certification in Iraq at a glance
Three public bodies shape how standards work reaches Iraqi organisations. The Central Organization for Standardization and Quality Control, set up by Law No. 54 of 1979 under the Ministry of Planning, adopts Iraqi standards and keeps the national measurement system. The Iraqi Commission for Accreditation, also a Ministry of Planning formation, lists accreditation of laboratories, inspection bodies and certification bodies among its roles. The Communications and Media Commission regulates digital platforms, data centres and cybersecurity service companies, while the Central Bank of Iraq publishes guides on fraud and corruption, governance and ESG for banks. Demand comes from banks, telecommunications and data-centre operators, IT service firms, manufacturers and importers, construction contractors and suppliers to government bodies. Certificates come from accredited certification bodies, never from Sterling. Sterling, with 8,100+ client engagements in 60+ countries and 20+ years of practice, serves Iraqi organisations from its Dubai office, with Effivity and Sterling Academy included with the engagement. Audits and consulting are delivered remotely, or on site where it is practical and safe to do so.
ISO and GRC standards Sterling delivers in Iraq
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Iraq (4)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Central Organization for Standardization and Quality Control (COSQC; Arabic: الجهاز المركزي للتقييس والسيطرة النوعية) Standards and metrology (all sectors) | Established by Law No. 54 of 1979, as amended, and placed under the Ministry of Planning. Its own site lists its functions as adopting, publishing, reviewing, amending, cancelling and replacing Iraqi standards, keeping the national measurement system and the reference standards, unifying and developing measurement and calibration methods, marking weights, measures and precious-metal articles, running tests and analyses for standardisation, giving advice on standards and training staff in the field. It also handles patents and industrial designs. Its services menu includes the sale of Iraqi standards and consultations on standards. | |
| Central Bank of Iraq Banking and financial institutions | The Bank's guides and standards page lists, among others, a guide on combating fraud and corruption for banks operating in Iraq (2024), a corporate governance guide for banks (2018), environmental, social and governance guides for banks (2024) and a wider ESG guide (2025), and a consumer protection guide (2023). | |
| Communications and Media Commission (CMC; Arabic: هيأة الاعلام والاتصالات) Communications, media, digital platforms and information technology | Created under Law No. 65 of 2004 as the regulator for media, telecommunications and information technology. Its Framework Regulations for Digital Platforms and Services state that they came into force on 17 February 2025 and require service providers in scope to apply international best practice and to comply with Iraqi laws, regulations and governmental decrees on personal data protection and on cybersecurity. Its information technology page also lists a regulation on the work of companies specialised in cybersecurity services, a regulation on data-centre services dated 20 July 2026 and a regulation on electronic waste dated 9 April 2026. | |
| Ministry of Planning Planning, government contracting and quality policy | The Ministry's published tasks include sponsoring the private sector, evaluating government contracting activity and promoting partnership and good governance and the adoption of international and local quality standards. COSQC and the Iraqi Commission for Accreditation are formations of the Ministry. |
Accreditation and recognition
- Iraqi Commission for Accreditation (Arabic: الهيأة العراقية للإعتماد), a formation of the Ministry of Planning: National accreditation body.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Instructions for the implementation of government contracts (No. 1 of 2008; No. 2 of 2014) and the standard contract documents of the General Government Contracts Department (Ministry of Planning, General Government Contracts Department): The Department prepares and amends standard contract documents, follows contracting procedures and receives requests to list contractors who breach their obligations. The criteria for a given tender are set in that tender's own documents.
- Registration and classification of contracting companies and contractors (Instructions No. 3 of 2009) (Ministry of Planning): The Ministry publishes the classified contractors and consultancy offices and notes that the lists do not replace confirming a firm's classification and legal position with the Ministry.
Sterling in Iraq
Sterling delivers in Iraq from its Dubai office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Iraq clients ask
Who sets national standards in Iraq?
The Central Organization for Standardization and Quality Control, known as COSQC. It was established by Law No. 54 of 1979, as amended, under the Ministry of Planning, and its published functions include adopting, publishing, reviewing and amending Iraqi standards and keeping the national measurement system. Check with COSQC which Iraqi standard applies to your product.
Which body accredits certification bodies in Iraq?
The Iraqi Commission for Accreditation, a formation of the Ministry of Planning, lists accreditation of conformity assessment bodies among its roles, including laboratories, inspection bodies and bodies that certify management systems. Ask any certification body for its accreditation certificate, because it shows which accreditation body assessed it and for what scope.
Are certification audits in Iraq conducted in English?
Often partly. Regulator publications are in Arabic, with some regulations issued in both languages and the Arabic text prevailing. English works in banking, technology and international business, while shop-floor interviews are usually in Arabic. Settle the audit language, interpreters and the language of controlled documents with the certification body when you apply.
Which Iraqi regulator covers digital platforms, data centres and cybersecurity service companies?
The Communications and Media Commission, created under Law No. 65 of 2004. Its page lists framework regulations for digital platforms in force from 17 February 2025, a regulation on cybersecurity service companies and a data-centre services regulation dated 20 July 2026. Read the regulation that matches your licence type and confirm its scope with the Commission.
How are Iraqi organisations served by Sterling?
From Sterling's Dubai office. Audits and consulting are delivered remotely, or on site where it is practical and safe to do so. Sterling's consultants prepare the management system and its evidence, with Effivity and Sterling Academy included in the engagement, while the certificate itself comes from an accredited certification body.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Established by Law No. 54 of 1979, as amended, and placed under the Ministry of Planning. Its own site lists its functions as adopting, publishing, reviewing, amending, cancelling and replacing Iraqi standards, keeping the national measurement system and the reference standards, unifying and developing measurement and calibration methods, marking weights, measures and precious-metal articles, running tests and analyses for standardisation, giving advice on standards and training staff in the field. It also handles patents and industrial designs. Its services menu includes the sale of Iraqi standards and consultations on standards. — cosqc.gov.iq; mop.gov.iq (accessed 18 Oct 2026)
- The Bank's guides and standards page lists, among others, a guide on combating fraud and corruption for banks operating in Iraq (2024), a corporate governance guide for banks (2018), environmental, social and governance guides for banks (2024) and a wider ESG guide (2025), and a consumer protection guide (2023). — cbi.iq (accessed 18 Oct 2026)
- Created under Law No. 65 of 2004 as the regulator for media, telecommunications and information technology. Its Framework Regulations for Digital Platforms and Services state that they came into force on 17 February 2025 and require service providers in scope to apply international best practice and to comply with Iraqi laws, regulations and governmental decrees on personal data protection and on cybersecurity. Its information technology page also lists a regulation on the work of companies specialised in cybersecurity services, a regulation on data-centre services dated 20 July 2026 and a regulation on electronic waste dated 9 April 2026. — cmc.iq (accessed 18 Oct 2026)
- The Ministry's published tasks include sponsoring the private sector, evaluating government contracting activity and promoting partnership and good governance and the adoption of international and local quality standards. COSQC and the Iraqi Commission for Accreditation are formations of the Ministry. — mop.gov.iq (accessed 18 Oct 2026)
- Iraqi Commission for Accreditation (Arabic: الهيأة العراقية للإعتماد), a formation of the Ministry of Planning — mop.gov.iq (accessed 18 Oct 2026)
- Instructions for the implementation of government contracts (No. 1 of 2008; No. 2 of 2014) and the standard contract documents of the General Government Contracts Department — mop.gov.iq (accessed 18 Oct 2026)
- Registration and classification of contracting companies and contractors (Instructions No. 3 of 2009) — mop.gov.iq (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Dubai team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
uae@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice