Where we work · Myanmar

ISO and GRC certification consulting in Myanmar

Achieve ISO and GRC certification in Myanmar with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.

Request a discovery call See all 20 standards

20 standards, one team
Accredited certification route
Singapore office team
Effivity and Academy included

Sectors that ask for certification in Myanmar

Garment makers working to cut, make and package orders for export
Food processors and packaged food makers
Fishery and aquaculture exporters
Banks, payment firms and card acquirers
Agricultural and livestock product exporters
Manufacturers in industrial and special economic zones

Clients include

Talk to the Singapore office

We call youA Sterling consultant replies within one working day.
Scope and proposalAgreed on the call; no proposal before the scope is clear.
CertificationOne team takes you through to the independent audit.

In short

ISO and GRC certification in Myanmar at a glance

Myanmar's quality and compliance demand rests on statutes that businesses meet long before a buyer asks for a certificate. The Law on Standardization of 2014 gives a National Standard Council the task of prescribing Myanmar Standards, mandatory ones included, and the Department of Research and Innovation is the country's ISO correspondent member and administers technical regulations. The Myanmar Accreditation Body appears on the Asia Pacific Accreditation Cooperation list as an affiliate, so buyers abroad often look to accreditation from another economy. The National Food Law and the Department of Food and Drug Administration govern food, the Department of Fisheries requires a HACCP-based system from fishery exporters, and the Environmental Conservation Law makes listed categories of business obtain prior permission. The Central Bank of Myanmar expects banks to hold Board-approved continuity and information security arrangements. Certificates come from accredited certification bodies, never from Sterling. Sterling's Singapore office serves Myanmar clients, drawing on 8,100+ client engagements in 60+ countries and 20+ years of experience, with Effivity and Sterling Academy included with the engagement.

Explore

ISO and GRC standards Sterling delivers in Myanmar

Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.

Regulators and laws that drive certification in Myanmar (13)

Law or regulator	What it asks for	Standards it cites
Telecommunications Law 2013 (confidentiality of user information) Ministry of Communications, Information and Technology and its Directorate of Communication, the Ministry and Department the Law itself names; the Law names no separate data-protection authority	Section 17 requires a telecommunications licence holder to keep the information transmitted or received through its service confidential and not to disclose the information of any individual user to a third person except where existing laws allow. This is a rule for licensed telecommunications operators and not a general data-protection regime for all organisations.
Law Protecting the Privacy and Security of Citizens (2017) Not stated in the English-language official sources; confirm any supervising authority from the Burmese text with Myanmar counsel	The Ministry of Information's database of enacted laws lists this law under its Burmese title, beside the Electronic Transactions Law 2004 for electronic records. The English title is a translation of the Burmese listing; confirm the scope, any registration step and the current amended text with Myanmar counsel before relying on it.
Ministry of Health: Department of Food and Drug Administration (FDA) and the Myanmar Food and Drug Board of Authority Food businesses, packaged food and catering	National Food Law, Law No. 5/97 of 3 March 1997, which the Ministry of Information's law database also lists as amended in 2024. The Law has the Board of Authority lay down good manufacturing practices and the policy on inspection, labelling and advertising; it requires a recommendation from the health department before a licence for controlled food is issued, and it has the Ministry of Health assign food inspectors who check whether good manufacturing practices are observed. Permission to import or export food commercially goes only to a person holding a health department recommendation certificate. The Law refers to the Department of Health; the directives published on the Myanmar Trade Portal come from the Board of Authority and the Department of Food and Drug Administration, among them Directive 8/2022 of 20 January 2022 on labelling of prepackaged foods, which covers all packaged food sold to consumers and catering services. The FDA's April 2014 Guideline on Drug Registration Application sets out the documents for registering medicines.
Department of Fisheries, Ministry of Agriculture, Livestock and Irrigation (acting as national competent authority) Fishery and aquaculture exporters, processors and feed mills	Directive No. 8/2018, the technical regulation for export and import fishery products, as listed on the Myanmar Trade Portal. Export processing establishments operate on a licence from the Department, and export to particular markets needs a Listing or, for the EU only, an Approval. Processing establishments must run a HACCP-based own check system that follows at least the ASEAN General Principles of Food Hygiene, with documented prerequisite programmes (good manufacturing practices, control of raw materials, water and ice, pests, chemicals and packaging), the seven HACCP principles, records open to the authority, a review of the system at least once a year and internal audits of sanitation, good manufacturing practice and HACCP at least once a year. Feed mills supplying aquaculture must also run a HACCP-based feed safety system.	HACCP
National Standard Council and the department assigned under the Law on Standardization; Department of Research and Innovation (DRI) Standards, accreditation and technical regulations (all sectors)	Law on Standardization, Pyidaungsu Hluttaw Law No. 28 of 3 July 2014. A National Standard Council prescribes Myanmar Standards by adopting international, regional or foreign standards or adapting them, and prescribes mandatory standards where human health, property and safety are concerned; other standards are voluntary. Bodies that carry out technical and laboratory examination apply for an accreditation certificate, which the Law routes through the department, a standards working committee and the Council. DRI is listed on the ISO website as Myanmar's correspondent member since 1 July 2005. DRI's own site lists a national standards and quality unit, a National Analytical Laboratory and a food research department, and the Myanmar Trade Portal says DRI administers technical regulations and hosts the TBT Enquiry Point.	ISO/IEC 17025
Environmental Conservation Department, Ministry of Natural Resources and Environmental Conservation (as the Trade Portal's legal listing names them) Projects, factories and operations with environmental impact	Environmental Conservation Law, Pyidaungsu Hluttaw Law No. 9 of 30 March 2012. The Ministry may, with Government approval, name the categories of business, work-site or factory that must obtain prior permission, set terms and conditions and inspect against them, and the Law provides for a system of environmental and social impact assessment for activities that may have a significant impact. It defines an environmental audit as a periodic, documented and objective evaluation of compliance with regulatory requirements, of the environmental management system and of environmental risks. Confirm the categories and procedures that apply to your activity with the Department.
Ministry of Labour (Factories and General Labour Laws Inspection Department, as the Ministry's site lists it); Ministry of Industry (Chief Inspector of Boilers) Factories, workplaces and boiler users	Occupational safety and health law, Pyidaungsu Hluttaw Law No. 8 of 2019, listed in the Ministry of Information's law database under a Burmese title that translates as the law on workplace hazard prevention and health. The Boiler Law, Pyidaungsu Hluttaw Law No. 39 of 14 July 2015, has boilers registered after inspection and used under a certificate issued by the chief inspector, with separate certificates for boiler repairers and boiler attendants. Confirm the sections that apply to your workplace with the Ministry.
Central Bank of Myanmar (CBM) Banks, payment service providers and card businesses	Financial Institutions Law, Pyidaungsu Hluttaw Law No. 20 of 25 January 2016, under which CBM issues guidelines to banks. CBM's Guideline on Risk Management Practices of Banks, dated 20 November 2020, asks each bank for a Board-approved business continuity plan with arrangements for a back-up site or outsourced provider and regular testing, a comprehensive strategy for IT risk including cyber-resilience and outsourced IT services, a Board-approved framework of controls over IT and data security with access and password controls, an incident response plan for material cyber incidents, and a chief information security officer. CBM's payment pages also publish a merchant acquiring service order, an e-card instruction, business continuity guidelines for participants in its CBM-NET payment system and lists of licensed payment card issuers and merchant acquiring providers. None of these names an ISO standard.
Electronic Transactions Control Board, formed under the Electronic Transactions Law Electronic records, signatures and digital services	Electronic Transactions Law, Law No. 5 of 30 April 2004. It recognises the authenticity and integrity of electronic records and data messages, and a person that wants to act as a certification authority for electronic signatures needs a licence from the Control Board. The Law asks a certification authority to use a trustworthy system so as not to cause intrusion or misuse of its computers, software and procedures, and to keep electronic signatures secret and private under security procedures. It names no ISO standard.
Myanmar Investment Commission; Directorate of Investment and Company Administration (DICA); industrial zone committees Investors, industrial zone occupiers and small and medium enterprises	Myanmar Investment Law, Pyidaungsu Hluttaw Law No. 40 of 18 October 2016 (the English copy on the Myanmar Trade Portal is headed as an unofficial translation). An investor must follow applicable laws and the best standards practised internationally so as not to cause damage or pollution to the natural and social environment, must respect labour laws and pay compensation for work-related injury, and, where the environmental law requires prior approval, reports the environmental and social impact assessment to the Commission. The Industrial Zone Law, Pyidaungsu Hluttaw Law No. 7 of 26 May 2020, sets up committees to run industrial zones, and the Small and Medium Enterprises Development Law, Pyidaungsu Hluttaw Law No. 23 of 9 April 2015, states an aim of helping small and medium enterprises compete in foreign markets with internationally standardised quality products and services. Confirm current texts and any amendments with DICA.
Myanmar Competition Commission; consumer protection bodies under the Consumer Protection Law Consumer-facing and market-facing businesses	Competition Law, Pyidaungsu Hluttaw Law No. 9 of 24 February 2015, which forms the Myanmar Competition Commission, and Consumer Protection Law, Pyidaungsu Hluttaw Law No. 9 of 15 March 2019, which defines consumer protection as protecting consumers' rights and interests in goods and services. The Myanmar Trade Portal lists a Consumer Affairs Department. Neither law names an ISO standard.
Anti-corruption bodies under the Anti-Corruption Law; Directorate of Investment and Company Administration for company law Companies and organisations dealing with public bodies	Anti-Corruption Law, Pyidaungsu Hluttaw Law No. 23 of 7 August 2013, which defines bribery as giving, receiving or promising a gift or advantage for an improper purpose and which the Ministry of Information's law database lists with later amendments, the fourth being Law No. 20 of 2018. The Myanmar Companies Law, Pyidaungsu Hluttaw Law No. 29 of 2017, is administered by DICA according to the Trade Portal's legal listing. Confirm the current texts and the competent body with counsel.
Ministry of Commerce (Department of Trade); line ministries named on the Myanmar Trade Portal Exporters and traders	The Myanmar Trade Portal's export guide says export licences are issued by the Department of Trade on the recommendation of the relevant line ministry, for example the Department of Agriculture for seeds, plants and pesticides, the Department of Fisheries for fish products and the Department of Food and Drug Administration for medicines, medical appliances and foodstuffs. It names the Department of Agriculture, the Livestock Breeding and Veterinary Department, the Department of Fisheries and the FDA as responsible for sanitary and phytosanitary measures that follow Codex, ASEAN and OIE standards, and it says DRI administers technical regulations. On garments, it says almost all production is done as cut, make and package for customers abroad.

Accreditation and recognition

Myanmar Accreditation Body (MAB): Listed by the Asia Pacific Accreditation Cooperation (APAC) as an affiliate, with a website address on the Myanmar standards site. The Law on Standardization also provides an application and approval route for an accreditation certificate for bodies that carry out technical and laboratory examination.

Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.

Economic zones

Special economic zones named on the Myanmar Trade Portal: export processing and manufacturing, trade and logistics
Industrial zones under the Industrial Zone Law: manufacturing and processing
Special Economic Zone Law (2014) and the designation of zone areas: export processing and manufacturing, trade and logistics

Sterling in Myanmar

Sterling delivers in Myanmar from its Singapore office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.

Questions Myanmar clients ask

Is there a national accreditation body in Myanmar?

The Myanmar Accreditation Body, known as MAB, is listed by the Asia Pacific Accreditation Cooperation as an affiliate. That cooperation states that affiliates are not signatories to its mutual recognition arrangement and that their services are not recognised under it. For a management system certificate that buyers abroad accept, ask the certification body which accreditation body accredited it and confirm that body sits within the international arrangements.

Which agency regulates food safety in Myanmar?

Food controls sit with the Ministry of Health. Under the National Food Law, Law No. 5/97, a Board of Authority fixes good manufacturing practices and a recommendation is needed before a controlled-food licence is issued. The Department of Food and Drug Administration issues directives such as the January 2022 labelling directive for prepackaged foods. Check the directives covering your product with the Ministry before you start production.

Do seafood exporters in Myanmar need a HACCP system?

Yes, where they export. The Department of Fisheries' technical regulation for export fishery products, Directive No. 8/2018, expects processing establishments to run a HACCP-based own check system that follows at least the ASEAN General Principles of Food Hygiene, review it at least once a year and run internal audits. Particular markets add a Listing or Approval. Confirm the current text with the Department.

What does the Law on Standardization do?

Law No. 28 of 3 July 2014 creates a National Standard Council that prescribes Myanmar Standards by adopting or adapting international, regional or foreign standards, and that can prescribe mandatory standards where health, property and safety are at stake. It also sets an application route for an accreditation certificate for examination bodies. Ask the department or your counsel whether a standard that affects your product is mandatory.

Are audits in Myanmar run in Burmese or English?

Either can be arranged. Laws and directives are issued in Burmese, and the English copies on the Myanmar Trade Portal include texts headed as unofficial translations, so controlled documents may need both languages. Settle the audit language, any interpreter and the language of records with the certification body when you apply, so auditors and site staff can follow each other.

What do Myanmar banks need for continuity and IT security?

The Central Bank of Myanmar's Guideline on Risk Management Practices of Banks, dated 20 November 2020, asks for a Board-approved continuity plan with a back-up site and regular tests, IT and data security controls, a cyber incident response plan and a chief information security officer. It names no ISO standard, but providers to banks should expect the same questions in due diligence.

Next step

Start with a free discovery call

A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.

Book a discovery call

Sources

Telecommunications Law 2013 (confidentiality of user information) — myanmartradeportal.gov.mm (accessed 23 Oct 2026)
Law Protecting the Privacy and Security of Citizens (2017) — moi.gov.mm (accessed 23 Oct 2026)
National Food Law, Law No. 5/97 of 3 March 1997, which the Ministry of Information's law database also lists as amended in 2024. The Law has the Board of Authority lay down good manufacturing practices and the policy on inspection, labelling and advertising; it requires a recommendation from the health department before a licence for controlled food is issued, and it has the Ministry of Health assign food inspectors who check whether good manufacturing practices are observed. Permission to import or export food commercially goes only to a person holding a health department recommendation certificate. The Law refers to the Department of Health; the directives published on the Myanmar Trade Portal come from the Board of Authority and the Department of Food and Drug Administration, among them Directive 8/2022 of 20 January 2022 on labelling of prepackaged foods, which covers all packaged food sold to consumers and catering services. The FDA's April 2014 Guideline on Drug Registration Application sets out the documents for registering medicines. — myanmartradeportal.gov.mm; moi.gov.mm (accessed 18 Oct 2026)
Directive No. 8/2018, the technical regulation for export and import fishery products, as listed on the Myanmar Trade Portal. Export processing establishments operate on a licence from the Department, and export to particular markets needs a Listing or, for the EU only, an Approval. Processing establishments must run a HACCP-based own check system that follows at least the ASEAN General Principles of Food Hygiene, with documented prerequisite programmes (good manufacturing practices, control of raw materials, water and ice, pests, chemicals and packaging), the seven HACCP principles, records open to the authority, a review of the system at least once a year and internal audits of sanitation, good manufacturing practice and HACCP at least once a year. Feed mills supplying aquaculture must also run a HACCP-based feed safety system. — myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Law on Standardization, Pyidaungsu Hluttaw Law No. 28 of 3 July 2014. A National Standard Council prescribes Myanmar Standards by adopting international, regional or foreign standards or adapting them, and prescribes mandatory standards where human health, property and safety are concerned; other standards are voluntary. Bodies that carry out technical and laboratory examination apply for an accreditation certificate, which the Law routes through the department, a standards working committee and the Council. DRI is listed on the ISO website as Myanmar's correspondent member since 1 July 2005. DRI's own site lists a national standards and quality unit, a National Analytical Laboratory and a food research department, and the Myanmar Trade Portal says DRI administers technical regulations and hosts the TBT Enquiry Point. — myanmartradeportal.gov.mm; moi.gov.mm (accessed 18 Oct 2026)
Environmental Conservation Law, Pyidaungsu Hluttaw Law No. 9 of 30 March 2012. The Ministry may, with Government approval, name the categories of business, work-site or factory that must obtain prior permission, set terms and conditions and inspect against them, and the Law provides for a system of environmental and social impact assessment for activities that may have a significant impact. It defines an environmental audit as a periodic, documented and objective evaluation of compliance with regulatory requirements, of the environmental management system and of environmental risks. Confirm the categories and procedures that apply to your activity with the Department. — myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Occupational safety and health law, Pyidaungsu Hluttaw Law No. 8 of 2019, listed in the Ministry of Information's law database under a Burmese title that translates as the law on workplace hazard prevention and health. The Boiler Law, Pyidaungsu Hluttaw Law No. 39 of 14 July 2015, has boilers registered after inspection and used under a certificate issued by the chief inspector, with separate certificates for boiler repairers and boiler attendants. Confirm the sections that apply to your workplace with the Ministry. — moi.gov.mm; myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Financial Institutions Law, Pyidaungsu Hluttaw Law No. 20 of 25 January 2016, under which CBM issues guidelines to banks. CBM's Guideline on Risk Management Practices of Banks, dated 20 November 2020, asks each bank for a Board-approved business continuity plan with arrangements for a back-up site or outsourced provider and regular testing, a comprehensive strategy for IT risk including cyber-resilience and outsourced IT services, a Board-approved framework of controls over IT and data security with access and password controls, an incident response plan for material cyber incidents, and a chief information security officer. CBM's payment pages also publish a merchant acquiring service order, an e-card instruction, business continuity guidelines for participants in its CBM-NET payment system and lists of licensed payment card issuers and merchant acquiring providers. None of these names an ISO standard. — cbm.gov.mm (accessed 18 Oct 2026)
Electronic Transactions Law, Law No. 5 of 30 April 2004. It recognises the authenticity and integrity of electronic records and data messages, and a person that wants to act as a certification authority for electronic signatures needs a licence from the Control Board. The Law asks a certification authority to use a trustworthy system so as not to cause intrusion or misuse of its computers, software and procedures, and to keep electronic signatures secret and private under security procedures. It names no ISO standard. — myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Myanmar Investment Law, Pyidaungsu Hluttaw Law No. 40 of 18 October 2016 (the English copy on the Myanmar Trade Portal is headed as an unofficial translation). An investor must follow applicable laws and the best standards practised internationally so as not to cause damage or pollution to the natural and social environment, must respect labour laws and pay compensation for work-related injury, and, where the environmental law requires prior approval, reports the environmental and social impact assessment to the Commission. The Industrial Zone Law, Pyidaungsu Hluttaw Law No. 7 of 26 May 2020, sets up committees to run industrial zones, and the Small and Medium Enterprises Development Law, Pyidaungsu Hluttaw Law No. 23 of 9 April 2015, states an aim of helping small and medium enterprises compete in foreign markets with internationally standardised quality products and services. Confirm current texts and any amendments with DICA. — myanmartradeportal.gov.mm; moi.gov.mm (accessed 18 Oct 2026)
Competition Law, Pyidaungsu Hluttaw Law No. 9 of 24 February 2015, which forms the Myanmar Competition Commission, and Consumer Protection Law, Pyidaungsu Hluttaw Law No. 9 of 15 March 2019, which defines consumer protection as protecting consumers' rights and interests in goods and services. The Myanmar Trade Portal lists a Consumer Affairs Department. Neither law names an ISO standard. — myanmartradeportal.gov.mm; moi.gov.mm (accessed 18 Oct 2026)
Anti-Corruption Law, Pyidaungsu Hluttaw Law No. 23 of 7 August 2013, which defines bribery as giving, receiving or promising a gift or advantage for an improper purpose and which the Ministry of Information's law database lists with later amendments, the fourth being Law No. 20 of 2018. The Myanmar Companies Law, Pyidaungsu Hluttaw Law No. 29 of 2017, is administered by DICA according to the Trade Portal's legal listing. Confirm the current texts and the competent body with counsel. — moi.gov.mm; myanmartradeportal.gov.mm (accessed 18 Oct 2026)
The Myanmar Trade Portal's export guide says export licences are issued by the Department of Trade on the recommendation of the relevant line ministry, for example the Department of Agriculture for seeds, plants and pesticides, the Department of Fisheries for fish products and the Department of Food and Drug Administration for medicines, medical appliances and foodstuffs. It names the Department of Agriculture, the Livestock Breeding and Veterinary Department, the Department of Fisheries and the FDA as responsible for sanitary and phytosanitary measures that follow Codex, ASEAN and OIE standards, and it says DRI administers technical regulations. On garments, it says almost all production is done as cut, make and package for customers abroad. — myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Myanmar Accreditation Body (MAB) — apac-accreditation.org; myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Special economic zones named on the Myanmar Trade Portal — myanmartradeportal.gov.mm (accessed 18 Oct 2026)
Industrial zones under the Industrial Zone Law — moi.gov.mm (accessed 18 Oct 2026)
Special Economic Zone Law (2014) and the designation of zone areas — myanmartradeportal.gov.mm (accessed 23 Oct 2026)

Talk to a consultant

Plan your certification with the Singapore team.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

singapore@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Get certified to a standard for the first timeUnderstand cost, scope and timingAdd a standard, or integrate the systems we haveArrange a meeting at the Singapore office

Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice

Request a call Call Singapore

End to end, from one team

On every engagement, in every country

Multi-country programmes

100% success guarantee · 8,100+ client engagements in 60+ countries · since 2003

ISO and GRC certification consulting in Myanmar

ISO and GRC certification in Myanmar at a glance

ISO and GRC standards Sterling delivers in Myanmar

Quality & operational excellence

Information security, cyber & cloud

Privacy & data protection

AI governance & digital trust

Environment, energy & climate

Health & safety

Governance, risk & resilience

Financial services, payments & AML

Food safety & agriculture

Healthcare, medical devices & life sciences

Laboratories, inspection & accreditation

Automotive, aerospace, rail & defence

Construction, energy, oil & gas