Where we work · Marshall Islands
ISO and GRC certification consulting in Marshall Islands
Achieve ISO and GRC certification in Marshall Islands with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Sydney office team
- Effivity and Academy included
Sectors that ask for certification in Marshall Islands
Clients include
In short
ISO and GRC certification in Marshall Islands at a glance
Fish and ships shape much of the compliance picture in the Marshall Islands. The Marshall Islands Marine Resources Authority acts as the Competent Authority under the Marine Resources Act 1997 and regulates the processing, marketing and export of fish, while the Fisheries Act requires a health certificate on a form the Authority approves for every export of fish or fish products. The Maritime Administrator administers the law for vessels on the Republic's register, and the Ministry of Health administers the Food Safety Act 2010. The Nitijela's 2025 Acts include the Cybersecurity Act, the Electronic Transactions Act and the Personal Data Protection Act, the last binding core Government ministries and agencies and naming the Economic Policy, Planning and Statistics Office as competent authority. The Asia Pacific Accreditation Cooperation lists no accreditation body for the Marshall Islands, so certificates usually carry accreditation from another economy, never from Sterling. Public tenders set their own certificate conditions under the Procurement Code Act, 2023. Sterling's Sydney office serves the Marshall Islands, drawing on 8,100+ client engagements in 60+ countries, 20+ years of practice, and Effivity and Sterling Academy included with every engagement.
Explore
ISO and GRC standards Sterling delivers in Marshall Islands
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
ISO 22301Sterling guide to the standardISO 37001Sterling guide to the standardISO 37301Sterling guide to the standard
Financial services, payments & AML
Food safety & agriculture
FSSC 22000Sterling guide to the standardHACCPSterling guide to the standardISO 22000Sterling guide to the standard
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Marshall Islands (18)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Personal Data Protection Act 2025 the Economic Policy, Planning and Statistics Office, which section 406 makes the competent authority responsible for administering the Chapter | The Act applies to core Government ministries and agencies that collect, use, store, process, disclose or transfer personal data of natural persons; it is not a general private-sector data protection code. It defines data controllers and processors to include a third party acting on behalf of a core Government ministry or agency, so a contractor handling personal data for a ministry sits inside its vocabulary. Six principles bind the ministries and agencies: legitimate purpose, data minimisation, accuracy, retention, integrity and security, and accountability. Ministries must run a complaints process, keep records of complaints and report to the competent authority each year. The Act's effective-date section ties commencement to a period after certification under Article IV, section 21 of the Constitution, so confirm with the competent authority when and how it applies to your work. It names no ISO standard. | |
| Ministry of Health, which section 1923 of the Food Safety Act 2010 makes responsible for administering the Chapter and its regulations Food businesses, importers and food handlers | Food Safety Act 2010 (Title 7, Chapter 19 of the Marshall Islands Revised Code). Food business premises, other than businesses engaged in primary production only, must be registered with the Ministry of Health before they start operating, and the Ministry keeps the register. Operators must put in place the procedures the regulations prescribe, and any extra precautions needed, to ensure the safety of food imported, exported, processed, handled, stored, displayed or sold. All food handlers must be trained by the health authorities or an organisation they accredit before starting work. The Minister may make regulations on the importation and exportation of food, on practices from primary production to sale, and on tracing and recall. The Act does not name HACCP or ISO 22000. | HACCP, ISO 22000 |
| Marshall Islands Marine Resources Authority, which section 119 of the Marshall Islands Marine Resources Act 1997 makes the Competent Authority for implementing the international fisheries and related obligations of the Marshall Islands and the regulator of the processing, marketing and export of fish and fish products Fish and fish-product processors and exporters | Marshall Islands Marine Resources Act 1997 (Title 51, Chapter 1) and Fisheries Act (Title 51, Chapter 2). The Marine Resources Act defines a fish processing establishment as a place where fish are cut up, cleaned, sorted, loined, canned, dried, gutted, salted, iced, chilled, frozen or otherwise preserved or processed for sale. Section 227 of the Fisheries Act bars export of fish or fish products caught in the Fishery Waters without meeting the licensing and certification requirements of the Title and the Authority's written permission, and section 227A says no operator or business may export fish or fish products without an accompanying health certificate on a form approved by the Authority. Neither Act names HACCP or a food safety management standard. | HACCP, ISO 22000, FSSC 22000 |
| Republic of the Marshall Islands Maritime Administrator, created by section 103 of the Maritime Administration, Documentation and Identification of Vessels Act 1990 Shipowners, ship managers and vessel operators using the Marshall Islands flag | Maritime Administration, Documentation and Identification of Vessels Act 1990 (Title 47, Chapter 1). Section 103 lets the Minister delegate to the Maritime Administrator the administration of all matters pertaining to vessels of the Republic, including rules and regulations and seaworthiness and proper manning. Section 140 requires registered vessels to undergo inspection and carry proof of it, and section 155 says the international conventions and agreements to which the Republic is a party must be complied with by documented vessels engaged in foreign trade. The Act names no ISO management system standard. | ISO 9001, ISO 14001, ISO 45001 |
| Marshall Islands Monetary Authority, established by section 404 of the Monetary Authority Act 2025 Banks, financial service providers and payment systems | Monetary Authority Act 2025 (Title 17, Chapter 4) and Banking Act 1987 (Title 17, Chapter 1). Section 407 of the Monetary Authority Act says the Authority operates and promotes safe, sound and efficient payment, clearing and securities settlement systems and oversees them, and regulates, licenses, registers and supervises banks and other financial service providers, payment systems and other financial market infrastructures as further specified in the Banking Act 1987. The Banking Act sets the licensing regime for banking business. The Acts name no ISO or PCI standard. | ISO/IEC 27001, PCI DSS, SOC 2 |
| the Director of the Office of National Security, who exercises the cybersecurity functions the Cybersecurity Act 2025 assigns to that Office, with a Chief Information Security Officer and the Cyber Security Incident Response Team of the Marshall Islands (CSIRT-MH) Owners of critical information infrastructure and information-system operators | Cybersecurity Act 2025 (Title 40, Chapter 4, enacted as Public Law 2025-0027). The Director may designate a computer system as critical information infrastructure by written order to its owner where it is necessary for continuous delivery of an essential service. The owner of designated infrastructure must manage cybersecurity risk with technical, operational and organisational measures; run rolling cybersecurity risk assessments, internal cybersecurity policies and procedures, an incident reporting policy and an awareness programme; and report significant incidents through an early warning, a notification and a final report. The Director may order an audit of designated infrastructure. The Act also provides for accreditation of cybersecurity service providers once implementing regulations are made. It names no ISO standard, and the Cybercrimes Act 2025 separately defines computer-related offences. | ISO/IEC 27001 |
| the Digital Transformation Unit established by the Digital Transformation and Identity Verification Act 2025, within the legal framework of the Electronic Transactions Act 2025 Online services, e-commerce and digital government suppliers | Electronic Transactions Act 2025 (Title 20, Chapter 8), which establishes a framework to recognise the legal validity and equivalence of electronic transactions, signatures and records for public, commercial and non-commercial purposes, and the Digital Transformation and Identity Verification Act 2025, which promotes digital transformation, establishes the Digital Transformation Unit and adopts an enabling framework for electronic identity verification. Neither Act names an ISO standard. | ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 |
| the Workers Compensation Board that the Workers Compensation Act 2019 provides for Employers and workplaces in every sector | Workers Compensation Act 2019 (Title 16, Chapter 7). Section 733 requires every employer to secure the payment of compensation for work-related injuries and deaths by keeping it insured with an insurer authorised to transact general casualty insurance in the Republic, or, for the Government and employers the Board authorises, through a self-insurance fund. The Act sets a compensation regime rather than workplace safety rules and does not name ISO 45001. | ISO 45001 |
| National Environmental Protection Authority, established by section 104 of the National Environmental Protection Act 1984, and the Ministry of Environment, established by the Ministry of Environment Act, 2018 Developers, operators and public bodies whose actions affect the environment | National Environmental Protection Act 1984 (Title 35, Chapter 1), whose sections 133 and 134 require government ministries and agencies to include an environmental impact statement in recommendations and reports on major governmental action significantly affecting the human environment, and Ministry of Environment Act, 2018, which establishes the Ministry to strengthen coordination on environmental protection, conservation, sustainable use of natural resources, renewable energy and climate adaptation. Neither names ISO 14001. | ISO 14001 |
| National Energy Office, established by section 904 of the National Energy Office Act 2018 Energy users, utilities and building owners | National Energy Office Act 2018. The Office promotes the conservation and efficient use of renewable energy, monitors electricity tariffs, and monitors and approves the quality of imported petroleum products against fuel standards. Section 909 lets the Minister make regulations on a framework for reporting efficiency in energy use, energy efficiency standards for new buildings and renovations, and appliance labelling and minimum energy efficiency performance standards. The Act does not name ISO 50001. | ISO 50001 |
| the Building Inspector under the National Building Code Act 2025 Builders, developers and building owners | National Building Code Act 2025 (Title 10, Chapter 14). Section 1405 lets Cabinet prescribe regulations on standards and controls for buildings, including structure, resistance to fire, access and egress, and firefighting equipment, and section 1414 provides that a building is not to be occupied until the Building Inspector has issued a Certificate to Occupy. The Act names no ISO standard. | ISO 9001, ISO 45001 |
| the Registrar of Foreign Investment under the Foreign Investment Business License Act 1990, with the Office of Commerce and Investment as the Government's business arm under the Office of Commerce and Investment Act 2013 Foreign investors and exporters | Foreign Investment Business License Act 1990 (Title 36, Chapter 2): section 203 says no non-citizen may do business in the Republic without first obtaining a foreign investment business license, and section 204A requires the Registrar to maintain a Reserved List of sectors reserved for citizen investors. The Office of Commerce and Investment Act 2013 (listed on the legislature's site as the Office of Commerce, Investment and Tourism Act 2013) sets the Office's function of developing economic and social development programmes and businesses of economic importance such as tourism. | |
| the Chief Procurement Officer and procuring entities under the Procurement Code Act, 2023, with the Government Ethics Board named for conflict-of-interest matters Government contractors, suppliers and their agents | Procurement Code Act, 2023 (Title 44, Chapter 1), Part VII on standards of conduct. Section 140 makes it a breach of ethical standards of procurement for any person to offer, give or agree to give an employee a gratuity or an offer of employment in connection with a decision, specification or contract, and section 141 prohibits contingent fees for securing a Government contract except for bona fide employees or established commercial selling agencies. The Ombudsman's Office Act 2025 separately establishes an independent Office to address corruption and abuse of office by public officials. Neither Act names ISO 37001. | ISO 37001, ISO 37301 |
| the Cabinet and national government agencies, whose roles the Disaster Risk Management Act, 2023 sets Public bodies, infrastructure operators and businesses that must keep operating through hazards | Disaster Risk Management Act, 2023 (Title 7), which enacts a Disaster Risk Management Law to reduce vulnerability of people and communities to damage, injury and loss of life and property resulting from natural or manmade disasters, and provides for the roles and powers of Cabinet, national government agencies, local governments and other parties in reduction, preparation, response and recovery. The Act does not name ISO 22301. | ISO 22301 |
| Tobolar Copra Processing Authority, established under the Tobolar Copra Processing Authority Act 1992 Copra processing and coconut-based products | Tobolar Copra Processing Authority Act 1992 (Title 10, Chapter 13). Section 1310 gives Tobolar the objective of assuming responsibility for the management, operation and maintenance of all aspects of copra processing for the Republic and of assuring a continuing market for copra, and section 1311 gives it the functions of planning, establishing, managing, operating and maintaining copra processing services. The Act names no ISO standard. | |
| Civil Aviation Directorate, established by section 103 of the Civil Aviation Safety Act 1988 Aircraft owners, operators and aviation maintenance providers | Civil Aviation Safety Act 1988 (Title 12, Chapter 1), which creates the Directorate to regulate and promote civil aviation to foster its safe development. Under section 129 the owner of an aircraft registered in the Marshall Islands may apply to the Director for an airworthiness certificate, and the Director issues it where the aircraft conforms to its type and, after inspection, is in condition for safe operation. The Act names no AS9100 or other management system standard. | AS9100 |
| Ministry of Health, with the Board of Health Professions established by section 603 of the Health Professional Licensing Act, 2009 Health services and health professionals | Health Professional Licensing Act, 2009 (Title 7), which provides for the licensing of health professionals and establishes the Board, and Health Services Act 1983, which relates to health services in the Republic. These Acts license people and services; they do not set rules for manufacturing or registering medical devices and name no ISO standard. | ISO 13485 |
| the Telecommunications Regulator, an office within the Ministry established by section 508 of the Telecommunications (Reform) Act 2025 Telecommunications operators and internet service providers | Telecommunications (Reform) Act 2025 (Title 40, Chapter 5), which aims at a regulated open market that promotes competition and innovation to further digital development goals. The Regulator receives and adjudicates notifications and registrations for the provision of telecommunications networks and services, assigns and renews radio frequency and station licences, manages numbering resources, and keeps public registries of authorised providers and licensees. The Act names no ISO standard. | ISO/IEC 20000-1, ISO/IEC 27001 |
Accreditation and recognition
- Asia Pacific Accreditation Cooperation (APAC): Regional cooperation of accreditation bodies whose published member list shows no accreditation body for the Marshall Islands.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Procurement Code Act, 2023 (the Minister and Secretary of Finance and the Chief Procurement Officer, with each procuring entity running its own solicitation): Section 122 requires the procuring entity to describe the minimum experience, training and certification requirements or qualifications that bidders, contractors, suppliers or employees must meet to be considered responsible. A bidder must be current with tax payments, must not be debarred or suspended, and, except where donor-funded procurement rules prescribe otherwise, must be a registered business with a physical presence in the Marshall Islands. Sections 124 and 125 give a preference to Marshall Islands contractors on lower-value contracts. The Code names no general ISO certificate requirement, so read the conditions in each solicitation.
Sterling in Marshall Islands
Sterling delivers in Marshall Islands from its Sydney office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Marshall Islands clients ask
Does the Marshall Islands have a data protection law?
Yes, the Personal Data Protection Act 2025 is on the Nitijela's legislation site as Public Law 2025-43, but it applies to core Government ministries and agencies, not to private businesses generally. The Economic Policy, Planning and Statistics Office is the competent authority. A contractor processing personal data for a ministry should ask that ministry what it must follow, and confirm timing with the Office.
Who regulates fish exports and food safety?
The Marshall Islands Marine Resources Authority regulates the processing, marketing and export of fish and fish products, and the Fisheries Act requires a health certificate on a form it approves for each export. The Ministry of Health administers the Food Safety Act 2010, including registration of food business premises. Ask both bodies which requirements apply to your product and market.
Does the Marshall Islands have its own accreditation body?
No body is listed for the Marshall Islands in the regional accreditation cooperation's published membership. Local organisations therefore tend to hold certificates issued under accreditation granted in another economy, within the international recognition arrangements. Before signing with a certification body, read its accreditation certificate for scope and expiry, and ask your customer whether that accreditation satisfies it.
What does the Cybersecurity Act 2025 require of businesses?
Its duties fall on owners of critical information infrastructure, which the Director designates by written order where a system is necessary for an essential service. Owners must manage risk, run rolling risk assessments, keep policies and an incident reporting policy, and report significant incidents in stages. If you have no designation order, ask the Director's office whether any of your systems are covered.
Are certification audits in the Marshall Islands conducted in English?
Mostly in English, which is the language of the Acts on the Nitijela's site and of most business records. The Constitution gives both texts equal authority but lets the Marshallese text prevail on any difference. Staff interviews can be held in Marshallese when people prefer, so settle the working language, interpreter needs and document language with the certification body when you apply.
Do Marshall Islands Government tenders require ISO certificates?
Not as a general rule. Under the Procurement Code Act, 2023 each procuring entity must describe the minimum experience, training and certification requirements bidders must meet, so a certificate may count in one solicitation and carry no weight in another. Bidders must also be registered businesses with a physical presence in the Marshall Islands unless donor-funded rules prescribe otherwise. Read the solicitation closely.
Next step
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Personal Data Protection Act 2025 — rmiparliament.org (accessed 18 Oct 2026)
- Food Safety Act 2010 (Title 7, Chapter 19 of the Marshall Islands Revised Code). Food business premises, other than businesses engaged in primary production only, must be registered with the Ministry of Health before they start operating, and the Ministry keeps the register. Operators must put in place the procedures the regulations prescribe, and any extra precautions needed, to ensure the safety of food imported, exported, processed, handled, stored, displayed or sold. All food handlers must be trained by the health authorities or an organisation they accredit before starting work. The Minister may make regulations on the importation and exportation of food, on practices from primary production to sale, and on tracing and recall. The Act does not name HACCP or ISO 22000. — rmiparliament.org (accessed 18 Oct 2026)
- Marshall Islands Marine Resources Act 1997 (Title 51, Chapter 1) and Fisheries Act (Title 51, Chapter 2). The Marine Resources Act defines a fish processing establishment as a place where fish are cut up, cleaned, sorted, loined, canned, dried, gutted, salted, iced, chilled, frozen or otherwise preserved or processed for sale. Section 227 of the Fisheries Act bars export of fish or fish products caught in the Fishery Waters without meeting the licensing and certification requirements of the Title and the Authority's written permission, and section 227A says no operator or business may export fish or fish products without an accompanying health certificate on a form approved by the Authority. Neither Act names HACCP or a food safety management standard. — rmiparliament.org (accessed 18 Oct 2026)
- Maritime Administration, Documentation and Identification of Vessels Act 1990 (Title 47, Chapter 1). Section 103 lets the Minister delegate to the Maritime Administrator the administration of all matters pertaining to vessels of the Republic, including rules and regulations and seaworthiness and proper manning. Section 140 requires registered vessels to undergo inspection and carry proof of it, and section 155 says the international conventions and agreements to which the Republic is a party must be complied with by documented vessels engaged in foreign trade. The Act names no ISO management system standard. — rmiparliament.org (accessed 18 Oct 2026)
- Monetary Authority Act 2025 (Title 17, Chapter 4) and Banking Act 1987 (Title 17, Chapter 1). Section 407 of the Monetary Authority Act says the Authority operates and promotes safe, sound and efficient payment, clearing and securities settlement systems and oversees them, and regulates, licenses, registers and supervises banks and other financial service providers, payment systems and other financial market infrastructures as further specified in the Banking Act 1987. The Banking Act sets the licensing regime for banking business. The Acts name no ISO or PCI standard. — rmiparliament.org (accessed 18 Oct 2026)
- Cybersecurity Act 2025 (Title 40, Chapter 4, enacted as Public Law 2025-0027). The Director may designate a computer system as critical information infrastructure by written order to its owner where it is necessary for continuous delivery of an essential service. The owner of designated infrastructure must manage cybersecurity risk with technical, operational and organisational measures; run rolling cybersecurity risk assessments, internal cybersecurity policies and procedures, an incident reporting policy and an awareness programme; and report significant incidents through an early warning, a notification and a final report. The Director may order an audit of designated infrastructure. The Act also provides for accreditation of cybersecurity service providers once implementing regulations are made. It names no ISO standard, and the Cybercrimes Act 2025 separately defines computer-related offences. — rmiparliament.org (accessed 18 Oct 2026)
- Electronic Transactions Act 2025 (Title 20, Chapter 8), which establishes a framework to recognise the legal validity and equivalence of electronic transactions, signatures and records for public, commercial and non-commercial purposes, and the Digital Transformation and Identity Verification Act 2025, which promotes digital transformation, establishes the Digital Transformation Unit and adopts an enabling framework for electronic identity verification. Neither Act names an ISO standard. — rmiparliament.org (accessed 18 Oct 2026)
- Workers Compensation Act 2019 (Title 16, Chapter 7). Section 733 requires every employer to secure the payment of compensation for work-related injuries and deaths by keeping it insured with an insurer authorised to transact general casualty insurance in the Republic, or, for the Government and employers the Board authorises, through a self-insurance fund. The Act sets a compensation regime rather than workplace safety rules and does not name ISO 45001. — rmiparliament.org (accessed 18 Oct 2026)
- National Environmental Protection Act 1984 (Title 35, Chapter 1), whose sections 133 and 134 require government ministries and agencies to include an environmental impact statement in recommendations and reports on major governmental action significantly affecting the human environment, and Ministry of Environment Act, 2018, which establishes the Ministry to strengthen coordination on environmental protection, conservation, sustainable use of natural resources, renewable energy and climate adaptation. Neither names ISO 14001. — rmiparliament.org (accessed 18 Oct 2026)
- National Energy Office Act 2018. The Office promotes the conservation and efficient use of renewable energy, monitors electricity tariffs, and monitors and approves the quality of imported petroleum products against fuel standards. Section 909 lets the Minister make regulations on a framework for reporting efficiency in energy use, energy efficiency standards for new buildings and renovations, and appliance labelling and minimum energy efficiency performance standards. The Act does not name ISO 50001. — rmiparliament.org (accessed 18 Oct 2026)
- National Building Code Act 2025 (Title 10, Chapter 14). Section 1405 lets Cabinet prescribe regulations on standards and controls for buildings, including structure, resistance to fire, access and egress, and firefighting equipment, and section 1414 provides that a building is not to be occupied until the Building Inspector has issued a Certificate to Occupy. The Act names no ISO standard. — rmiparliament.org (accessed 18 Oct 2026)
- Foreign Investment Business License Act 1990 (Title 36, Chapter 2): section 203 says no non-citizen may do business in the Republic without first obtaining a foreign investment business license, and section 204A requires the Registrar to maintain a Reserved List of sectors reserved for citizen investors. The Office of Commerce and Investment Act 2013 (listed on the legislature's site as the Office of Commerce, Investment and Tourism Act 2013) sets the Office's function of developing economic and social development programmes and businesses of economic importance such as tourism. — rmiparliament.org (accessed 18 Oct 2026)
- Procurement Code Act, 2023 (Title 44, Chapter 1), Part VII on standards of conduct. Section 140 makes it a breach of ethical standards of procurement for any person to offer, give or agree to give an employee a gratuity or an offer of employment in connection with a decision, specification or contract, and section 141 prohibits contingent fees for securing a Government contract except for bona fide employees or established commercial selling agencies. The Ombudsman's Office Act 2025 separately establishes an independent Office to address corruption and abuse of office by public officials. Neither Act names ISO 37001. — rmiparliament.org (accessed 18 Oct 2026)
- Disaster Risk Management Act, 2023 (Title 7), which enacts a Disaster Risk Management Law to reduce vulnerability of people and communities to damage, injury and loss of life and property resulting from natural or manmade disasters, and provides for the roles and powers of Cabinet, national government agencies, local governments and other parties in reduction, preparation, response and recovery. The Act does not name ISO 22301. — rmiparliament.org (accessed 18 Oct 2026)
- Tobolar Copra Processing Authority Act 1992 (Title 10, Chapter 13). Section 1310 gives Tobolar the objective of assuming responsibility for the management, operation and maintenance of all aspects of copra processing for the Republic and of assuring a continuing market for copra, and section 1311 gives it the functions of planning, establishing, managing, operating and maintaining copra processing services. The Act names no ISO standard. — rmiparliament.org (accessed 18 Oct 2026)
- Civil Aviation Safety Act 1988 (Title 12, Chapter 1), which creates the Directorate to regulate and promote civil aviation to foster its safe development. Under section 129 the owner of an aircraft registered in the Marshall Islands may apply to the Director for an airworthiness certificate, and the Director issues it where the aircraft conforms to its type and, after inspection, is in condition for safe operation. The Act names no AS9100 or other management system standard. — rmiparliament.org (accessed 18 Oct 2026)
- Health Professional Licensing Act, 2009 (Title 7), which provides for the licensing of health professionals and establishes the Board, and Health Services Act 1983, which relates to health services in the Republic. These Acts license people and services; they do not set rules for manufacturing or registering medical devices and name no ISO standard. — rmiparliament.org (accessed 18 Oct 2026)
- Telecommunications (Reform) Act 2025 (Title 40, Chapter 5), which aims at a regulated open market that promotes competition and innovation to further digital development goals. The Regulator receives and adjudicates notifications and registrations for the provision of telecommunications networks and services, assigns and renews radio frequency and station licences, manages numbering resources, and keeps public registries of authorised providers and licensees. The Act names no ISO standard. — rmiparliament.org (accessed 18 Oct 2026)
- Asia Pacific Accreditation Cooperation (APAC) — apac-accreditation.org (accessed 18 Oct 2026)
- Procurement Code Act, 2023 — rmiparliament.org (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Sydney team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
australia@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice