Where we work · Papua New Guinea
ISO and GRC certification consulting in Papua New Guinea
Achieve ISO and GRC certification in Papua New Guinea with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Sydney office team
- Effivity and Academy included
Sectors that ask for certification in Papua New Guinea
Clients include
ISO and GRC certification in Papua New Guinea at a glance
Seafood leaves Papua New Guinea under the National Fisheries Authority, which is named as Competent Authority on the fishery-products health certificate on its export page and whose Fish Quality Control (Export) Standards make a HACCP programme mandatory for canneries. Mines answer to the Mineral Resources Authority, whose Mines Inspectorate works under the Mining (Safety) Act 1977, while medicines and medical devices fall under the Pharmaceutical Services Standards Branch and the Medicines and Cosmetics Act 1999. The Department of Information and Communications Technology has published draft government standards that point suppliers and hosting providers to ISO 9001, ISO/IEC 27001 and related standards. Accreditation is thin: the Papua New Guinea Laboratory Accreditation Scheme, within the National Institute of Standards and Industrial Technology, runs ISO/IEC 17025 for testing laboratories, so management system certificates usually carry accreditation from another economy. Sterling's Sydney office serves Papua New Guinea with 20+ years of practice and 8,100+ client engagements in 60+ countries, with Effivity and Sterling Academy included with the engagement. Certificates come from accredited certification bodies, never from Sterling.
ISO and GRC standards Sterling delivers in Papua New Guinea
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Papua New Guinea (9)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Mineral Resources Authority (MRA): its Regulatory Services arm administers the mining legislation and its Mines Inspectorate branch inspects mines Mining and mine safety | Mineral Resources Authority Act 2018, Mining Act 1992 and Mining (Safety) Act 1977. The Mines Inspectorate aims to see every mine operate safely under the Mining (Safety) Act 1977 and global reputable standards and industry best practices, publishes safety alerts and accident trends, and the MRA compliance function reviews mine closure plans. | |
| National Fisheries Authority (NFA), a statutory authority established under the Fisheries Management Act 1998 and named as Competent Authority on the fishery-products health certificate template on its export requirements page Fish processors and exporters | Fish Quality Control (Export) Standards (cover page dated 4 April 2002): a licensed Fish Export Facility operates under a HACCP approved programme, and canneries must operate a HACCP programme, which is mandatory. The NFA also publishes a generic HACCP compliance manual for chilled and frozen whole tuna as its recommended format, revised export procedures and a certificate form for uncooked prawns. | HACCP |
| Pharmaceutical Services Standards Branch (PSSB) of the National Department of Health Medicines and medical devices | Medicines and Cosmetics Act 1999 and its regulations. The Branch's functions include medicinal product registration, laboratory testing of medicines, inspection and enforcement and pharmacovigilance for medicinal products and medical devices; its pages list product registration, compliance licensing and inspecting, and a Medicine Quality Control Laboratory. | |
| Civil Aviation Safety Authority of Papua New Guinea (CASA PNG) Civil aviation and aircraft maintenance | Civil Aviation Act and Civil Aviation Rules, which the Authority lists as its legislation. Its regulatory services include airworthiness, the PNG Air Operator Certificate, aircraft maintenance engineer licensing and safety and quality assurance. | |
| Department of Information and Communications Technology (DICT) Government ICT suppliers, data centres and e-payments | Digital government standards published by the Department: Government Data Centre Standards, Guidelines and Specifications 2025 (Draft 3), Government ICT Procurement Standards and Guidelines and Best Practices 2025 (2nd Draft), Government Data Standards, Specifications and Guidelines 2025 (Draft 4) and Government E-Payment Standards (Draft 2). Each is published as a draft, with approval and effective dates blank in its document control table. Between them they name ISO/IEC 27001, SOC 2, ISO 9001, ISO/IEC 20000, ISO/IEC 22301, ISO 50001 and PCI DSS. | ISO/IEC 27001, SOC 2, ISO 9001, ISO/IEC 20000-1, ISO 22301, ISO 50001, PCI DSS |
| National Agriculture Quarantine and Inspection Authority (NAQIA) Agricultural exports and quarantine | As NAQIA's own site describes its work: quarantine operations to safeguard people, animals and plants from pests and disease, and support services that facilitate international trade. The home page names no Act or standard. | |
| Investment Promotion Authority (IPA), through its Companies Office Company registration, investment and licensing | Investment Promotion Act 1992 (with the Investment Promotion (Amendment) Act 2023), Companies Act 2014 and the business names, business groups and associations legislation it administers. The IPA tells investors to comply with licences and permits in areas such as mining, fisheries, agriculture and industrial activities, which other agencies issue. | |
| Bank of Papua New Guinea Banks and payments | The Bank describes itself as the custodian of the monetary and financial system and the Government's bank, and its site lists financial system regulation and supervision, banks and financial institutions, and payments system oversight. Ask the Bank which prudential standards and directives apply to your institution. | |
| National Institute of Standards and Industrial Technology (NISIT), established by the NISIT Amended Act of 2018 (formerly the NISIT Act 1993) National standards and metrology | NISIT's Standards Development Division prepares and publishes PNG Standards, many of them adoptions of Australian, New Zealand, ISO, IEC, Codex and ASTM standards, through technical committees that include food, building and construction. NISIT also provides calibration services and licenses radiation sources. |
Accreditation and recognition
- Papua New Guinea Laboratory Accreditation Scheme (PNGLAS), within the National Institute of Standards and Industrial Technology (NISIT): National accreditation body, as NISIT's accreditation page describes it.
- Asia Pacific Accreditation Cooperation (APAC): Regional cooperation of accreditation bodies whose members page lists PNGLAS.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Government ICT Procurement Standards and Guidelines and Best Practices 2025 (2nd Draft) (PNG Digital Government Services, Department of Information and Communications Technology): Standard 1.2 says suppliers must provide evidence of quality certifications such as ISO 9001, ISO 27001 or other recognised industry standards, and Standard 1.5 asks for clear ethical requirements such as anti-bribery and anti-corruption policies. The document is published as a draft; approval and effective dates are blank.
Sterling in Papua New Guinea
Sterling delivers in Papua New Guinea from its Sydney office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Papua New Guinea clients ask
Does Papua New Guinea have its own accreditation body?
Yes, in part. The Papua New Guinea Laboratory Accreditation Scheme, run within NISIT, is described as the national accreditation body, but its current scheme covers ISO/IEC 17025 for testing laboratories only. Certificates for management systems therefore usually carry accreditation from another economy within the international arrangements. Ask your certification body for its accreditation certificate and scope.
Is HACCP compulsory for fish exporters in Papua New Guinea?
For canneries, yes: the National Fisheries Authority's Fish Quality Control (Export) Standards say a cannery must operate a HACCP programme and that this is mandatory. More broadly, a licensed Fish Export Facility operates under a HACCP approved programme. The Authority also supplies a generic HACCP manual for whole tuna. Confirm the current edition of the standards with the Authority.
Who regulates mine safety in Papua New Guinea?
The Mines Inspectorate of the Mineral Resources Authority does. Its stated aim is for every mine to operate safely under the Mining (Safety) Act 1977 and global reputable standards and industry best practices. It issues safety alerts and tracks accident trends. The Act does not name ISO 45001, so ask the Inspectorate what evidence it expects.
Which government documents ask suppliers for ISO 27001?
The Department of Information and Communications Technology's draft ICT procurement standards ask suppliers for evidence of quality certifications such as ISO 9001 or ISO 27001, and its draft data standards refer to ISO/IEC 27001 for hosting infrastructure. All are published as drafts without approval dates, so confirm the status of each with the Department before bidding.
Who regulates medicines and medical devices in Papua New Guinea?
The Pharmaceutical Services Standards Branch of the National Department of Health administers the Medicines and Cosmetics Act 1999 and its regulations for medicinal products and medical devices. Its work covers product registration, laboratory testing of medicines, inspection and enforcement, and pharmacovigilance. A device maker should ask the Branch which registration route applies before planning ISO 13485.
Which public holidays should an audit calendar allow for?
The Investment Promotion Authority's business calendar lists Good Friday, Easter Monday, the King's Birthday, National Remembrance Day, the National Day of Repentance, Independence Day on 16 September, Christmas Day and Boxing Day, in addition to New Year's Day. Use the calendar for the year concerned and agree flights and site hours with each site.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Mineral Resources Authority Act 2018, Mining Act 1992 and Mining (Safety) Act 1977. The Mines Inspectorate aims to see every mine operate safely under the Mining (Safety) Act 1977 and global reputable standards and industry best practices, publishes safety alerts and accident trends, and the MRA compliance function reviews mine closure plans. — mra.gov.pg (accessed 18 Oct 2026)
- Fish Quality Control (Export) Standards (cover page dated 4 April 2002): a licensed Fish Export Facility operates under a HACCP approved programme, and canneries must operate a HACCP programme, which is mandatory. The NFA also publishes a generic HACCP compliance manual for chilled and frozen whole tuna as its recommended format, revised export procedures and a certificate form for uncooked prawns. — fisheries.gov.pg (accessed 18 Oct 2026)
- Medicines and Cosmetics Act 1999 and its regulations. The Branch's functions include medicinal product registration, laboratory testing of medicines, inspection and enforcement and pharmacovigilance for medicinal products and medical devices; its pages list product registration, compliance licensing and inspecting, and a Medicine Quality Control Laboratory. — health.gov.pg (accessed 18 Oct 2026)
- Civil Aviation Act and Civil Aviation Rules, which the Authority lists as its legislation. Its regulatory services include airworthiness, the PNG Air Operator Certificate, aircraft maintenance engineer licensing and safety and quality assurance. — casapng.gov.pg (accessed 18 Oct 2026)
- Digital government standards published by the Department: Government Data Centre Standards, Guidelines and Specifications 2025 (Draft 3), Government ICT Procurement Standards and Guidelines and Best Practices 2025 (2nd Draft), Government Data Standards, Specifications and Guidelines 2025 (Draft 4) and Government E-Payment Standards (Draft 2). Each is published as a draft, with approval and effective dates blank in its document control table. Between them they name ISO/IEC 27001, SOC 2, ISO 9001, ISO/IEC 20000, ISO/IEC 22301, ISO 50001 and PCI DSS. — ict.gov.pg (accessed 18 Oct 2026)
- As NAQIA's own site describes its work: quarantine operations to safeguard people, animals and plants from pests and disease, and support services that facilitate international trade. The home page names no Act or standard. — naqia.gov.pg (accessed 18 Oct 2026)
- Investment Promotion Act 1992 (with the Investment Promotion (Amendment) Act 2023), Companies Act 2014 and the business names, business groups and associations legislation it administers. The IPA tells investors to comply with licences and permits in areas such as mining, fisheries, agriculture and industrial activities, which other agencies issue. — ipa.gov.pg (accessed 18 Oct 2026)
- The Bank describes itself as the custodian of the monetary and financial system and the Government's bank, and its site lists financial system regulation and supervision, banks and financial institutions, and payments system oversight. Ask the Bank which prudential standards and directives apply to your institution. — bankpng.gov.pg (accessed 18 Oct 2026)
- NISIT's Standards Development Division prepares and publishes PNG Standards, many of them adoptions of Australian, New Zealand, ISO, IEC, Codex and ASTM standards, through technical committees that include food, building and construction. NISIT also provides calibration services and licenses radiation sources. — nisit.gov.pg (accessed 18 Oct 2026)
- Papua New Guinea Laboratory Accreditation Scheme (PNGLAS), within the National Institute of Standards and Industrial Technology (NISIT) — nisit.gov.pg (accessed 18 Oct 2026)
- Asia Pacific Accreditation Cooperation (APAC) — apac-accreditation.org (accessed 18 Oct 2026)
- Government ICT Procurement Standards and Guidelines and Best Practices 2025 (2nd Draft) — ict.gov.pg (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Sydney team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
australia@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice