Where we work · Sierra Leone
ISO and GRC certification consulting in Sierra Leone
Achieve ISO and GRC certification in Sierra Leone with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 20 standards, one team
- Accredited certification route
- Lagos office team
- Effivity and Academy included
Sectors that ask for certification in Sierra Leone
Clients include
ISO and GRC certification in Sierra Leone at a glance
Banks, exporters and miners set the pace for management-system demand in Sierra Leone. The Bank of Sierra Leone's Cyber Security and IT Risk Management Guidelines for Commercial Banks, gazetted on 31 December 2021, point banks to international standards such as ISO, COBIT and NIST and expect card-handling banks to be PCI-DSS certified. The Environment Protection Agency regulates companies holding environmental impact assessment licences, and the National Minerals Agency administers the Mines and Minerals Development Act (2023). Produce exports pass the Produce Monitoring Board, and fish for the EU market has its own Competent Authority under the Ministry of Health and Sanitation. The National Communications Authority licenses telecoms and ICT providers, while the Pharmacy Board regulates medicines and pharmaceutical premises. No Sierra Leone accreditation body is recorded, so check the accreditation behind any certificate you are offered. Accredited certification bodies issue certificates; Sterling does not. Sterling's Lagos office brings 8,100+ client engagements in 60+ countries and 20+ years, on site or remotely, with Effivity and Sterling Academy included.
ISO and GRC standards Sterling delivers in Sierra Leone
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Sierra Leone (7)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Bank of Sierra Leone Banks, payment systems and other financial institutions | Cyber Security and IT Risk Management Guidelines for Commercial Banks, Government Notice No. 429, printed in the Sierra Leone Gazette (Extraordinary) Vol. CXLXII No. 80 of 31 December 2021 and in force from publication in the Gazette. The Guidelines rest on Section 53(1) of the Banking Act 2019, apply to commercial banks licensed under Section 8 of that Act, call for a Chief Information Security Officer, a cyber-crisis management plan, business continuity plans and encryption of sensitive data, and tell banks to apply international standards such as ISO, COBIT and NIST, to handle security events in line with NIST, ISO 27001 and COBIT, and to be PCI-DSS certified where they handle card data. The Bank's legislation page also lists the Banking Act 2019, the Payments System Act 2009, the Credit Reference Act 2011 and the Anti-Money Laundering and Combating of Financing of Terrorism Act 2012. | ISO/IEC 27001, PCI DSS, ISO 22301 |
| National Communications Authority (NatCA) Telecommunications and ICT service providers | National Communications Authority Act 2022, which NatCA's site gives as its founding statute alongside the Telecommunications Act 2006 as amended in 2009. NatCA says it licenses and regulates telecom and ICT providers, monitors service standards and licence conditions, manages spectrum and numbering, promotes cybersecurity and CSIRT development, and enforces SIM registration. Its regulations page lists the Telecommunications Quality of Service Regulations 2020, the Communication Quality of Service Regulation 2025 and the Subscribers Identification and Registration Management Regulations 2020. Its cyber security page ties consumer awareness work, including data privacy, to the National Cybersecurity Strategy (2021–2025). | ISO/IEC 27001, ISO/IEC 20000-1, ISO 22301 |
| Pharmacy Board of Sierra Leone Medicines, medical devices, cosmetics and pharmaceutical premises | The Board's site says it regulates factories and pharmacies, pharmacists, medicines and cosmetics, and the advertising of medicines, cosmetics and pharmacies, takes applications to register a medicinal product or conduct a clinical trial, and tests drugs and other products. Its guidelines page lists registration of allopathic products, medical devices, cosmetics and household chemicals and nutritional agents, packaging and labelling, stability testing and inspection of clinical trials, and it publishes a Quality Manual. | ISO 13485, ISO/IEC 17025 |
| Environment Protection Agency Sierra Leone (EPA-SL) Environmental licensing and compliance | The Agency's laws page lists the Environment Protection Agency Sierra Leone act, 2022 and an Ozone Depleting Substances Regulation. Its mandate is to protect and manage the environment, monitor and regulate companies holding environmental impact assessment licences and illegal operations with an environmental impact, advise the Minister of Environment, and ensure compliance and enforcement of environmental impact assessment procedures; its functions include licensing and permitting, enforcement and compliance, and pollution prevention, and it runs an online portal to apply for licences. | ISO 14001, ISO 45001 |
| National Minerals Agency (NMA) Mining and minerals | The Agency says it was established by the National Minerals Agency Act (2012) and is responsible for the day-to-day implementation of the Mines and Minerals Development Act (2023) and related regulations, including mineral rights management, geological information and the regulation of precious minerals trading; the Ministry of Mines and Mineral Resources handles legislation and policy. The Agency's Geological Survey laboratory offers sample preparation, XRF analysis, environmental chemistry, mineralogy and tamper-proof sealing of mineral samples for export. | ISO 14001, ISO 45001, ISO/IEC 17025 |
| Ministry of Trade and Industry and the Produce Monitoring Board Agricultural produce exports (coffee, cocoa, palm kernel products, ginger, piassava) | SLIEPA's export procedures page says exports of coffee, cocoa, palm kernel oil, palm kernel cake, ginger and piassava require a permit or export licence from the Ministry of Trade and Industry, with the Produce Monitoring Board examining the exporter's premises and advising on quality; its standards page describes the Board as an agency of the Ministry that regulates the produce sector and monitors the quality of all produce before shipment. | ISO 22000, HACCP, ISO 9001 |
| Competent Authority under the Food Unit of the Ministry of Health and Sanitation Fish and fishery products for the EU market | SLIEPA's standards page describes a Competent Authority, established under the Food Unit of the Ministry of Health and Sanitation, responsible for EU market certification of fish products, processing plants and fishing vessels; its marine fisheries page lists fishery, aquaculture, fish processing, fishery infrastructure and FishTech as investment segments. | HACCP, ISO 22000, FSSC 22000 |
Accreditation and recognition
- No national accreditation body for management system or laboratory conformity assessment identified: Sierra Leone does not appear among the signatory or non-signatory accreditation bodies or regional groups in the international arrangement's member list dated 31 December 2025, and SLIEPA's standards page names the Sierra Leone Standards Bureau and the Produce Monitoring Board, not an accreditation body, among the agencies to consult on standards.
- Sierra Leone Standards Bureau (SLSB): SLIEPA describes it as an agency of the Ministry of Trade and Industry responsible for the management of national standards and the quality of goods in the country.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Public procurement under the Public Procurement Act and the National Public Procurement Authority (NPPA) (National Public Procurement Authority): NPPA says it was established under the Public Procurement Act of 2004 to oversee public procurement and advise the Government. Its Acts and regulations page lists the Public Procurement Act 2016 and the Public Procurement Regulation 2020, and it publishes standard bidding documents, a Public Procurement Manual, tenders, contract awards and an e-GP portal. Each bidding document sets its own qualification and evaluation criteria, and no general rule requiring an ISO certificate is recorded.
Sterling in Sierra Leone
Sterling delivers in Sierra Leone from its Lagos office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Sierra Leone clients ask
Does Sierra Leone have a national accreditation body?
No national body is recorded. Sierra Leone does not appear among the signatory or non-signatory accreditation bodies or regional groups in the international arrangement's member list dated 31 December 2025, so certificates used here usually carry accreditation from a body in another economy. Ask the certification body for its accreditation certificate and scope, and check what your buyer or regulator accepts.
Which cyber security rules apply to banks in Sierra Leone?
Commercial banks follow the Bank of Sierra Leone's Cyber Security and IT Risk Management Guidelines, gazetted on 31 December 2021 under Section 53(1) of the Banking Act 2019. They call for a Chief Information Security Officer and a cyber-crisis plan, point to standards such as ISO, COBIT and NIST, and say card-handling banks must be PCI-DSS certified. Ask the Bank how it assesses compliance.
Who regulates medicines and medical devices in Sierra Leone?
The Pharmacy Board of Sierra Leone. Its site says it regulates factories and pharmacies, pharmacists, medicines and cosmetics, and their advertising, and it takes applications to register a medicinal product or run a clinical trial. Its published guidelines include registration of medical devices and packaging and labelling, so read the current guideline for your product before choosing a route.
What does exporting cocoa, coffee or fish from Sierra Leone involve?
Cocoa, coffee, palm kernel products, ginger and piassava need a permit or export licence from the Ministry of Trade and Industry, and the Produce Monitoring Board examines the exporter's premises and monitors produce quality before shipment. Fish for the EU market is handled by a separate Competent Authority under the Ministry of Health and Sanitation. Confirm current procedures with both.
Who oversees mining and environmental licences in Sierra Leone?
Two agencies. The National Minerals Agency carries out the Mines and Minerals Development Act (2023), including mineral rights and precious minerals trading, while the Environment Protection Agency monitors and regulates companies holding environmental impact assessment licences. A mining or processing project may therefore deal with both, so ask each which approvals your site needs.
Where are Sierra Leone clients served from?
Sterling's Lagos office does the work, travelling to Sierra Leone sites when an audit, workshop or gap review needs people in the room and running the rest remotely. Effivity and Sterling Academy come with the engagement. Accredited certification bodies issue certificates, not Sterling, and your buyer or regulator decides what it accepts.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Cyber Security and IT Risk Management Guidelines for Commercial Banks, Government Notice No. 429, printed in the Sierra Leone Gazette (Extraordinary) Vol. CXLXII No. 80 of 31 December 2021 and in force from publication in the Gazette. The Guidelines rest on Section 53(1) of the Banking Act 2019, apply to commercial banks licensed under Section 8 of that Act, call for a Chief Information Security Officer, a cyber-crisis management plan, business continuity plans and encryption of sensitive data, and tell banks to apply international standards such as ISO, COBIT and NIST, to handle security events in line with NIST, ISO 27001 and COBIT, and to be PCI-DSS certified where they handle card data. The Bank's legislation page also lists the Banking Act 2019, the Payments System Act 2009, the Credit Reference Act 2011 and the Anti-Money Laundering and Combating of Financing of Terrorism Act 2012 — bsl.gov.sl (accessed 18 Oct 2026)
- National Communications Authority Act 2022, which NatCA's site gives as its founding statute alongside the Telecommunications Act 2006 as amended in 2009. NatCA says it licenses and regulates telecom and ICT providers, monitors service standards and licence conditions, manages spectrum and numbering, promotes cybersecurity and CSIRT development, and enforces SIM registration. Its regulations page lists the Telecommunications Quality of Service Regulations 2020, the Communication Quality of Service Regulation 2025 and the Subscribers Identification and Registration Management Regulations 2020. Its cyber security page ties consumer awareness work, including data privacy, to the National Cybersecurity Strategy (2021–2025) — natca.gov.sl (accessed 18 Oct 2026)
- The Board's site says it regulates factories and pharmacies, pharmacists, medicines and cosmetics, and the advertising of medicines, cosmetics and pharmacies, takes applications to register a medicinal product or conduct a clinical trial, and tests drugs and other products. Its guidelines page lists registration of allopathic products, medical devices, cosmetics and household chemicals and nutritional agents, packaging and labelling, stability testing and inspection of clinical trials, and it publishes a Quality Manual — pharmacyboard.gov.sl (accessed 18 Oct 2026)
- The Agency's laws page lists the Environment Protection Agency Sierra Leone act, 2022 and an Ozone Depleting Substances Regulation. Its mandate is to protect and manage the environment, monitor and regulate companies holding environmental impact assessment licences and illegal operations with an environmental impact, advise the Minister of Environment, and ensure compliance and enforcement of environmental impact assessment procedures; its functions include licensing and permitting, enforcement and compliance, and pollution prevention, and it runs an online portal to apply for licences — epa.gov.sl (accessed 18 Oct 2026)
- The Agency says it was established by the National Minerals Agency Act (2012) and is responsible for the day-to-day implementation of the Mines and Minerals Development Act (2023) and related regulations, including mineral rights management, geological information and the regulation of precious minerals trading; the Ministry of Mines and Mineral Resources handles legislation and policy. The Agency's Geological Survey laboratory offers sample preparation, XRF analysis, environmental chemistry, mineralogy and tamper-proof sealing of mineral samples for export — nma.gov.sl (accessed 18 Oct 2026)
- SLIEPA's export procedures page says exports of coffee, cocoa, palm kernel oil, palm kernel cake, ginger and piassava require a permit or export licence from the Ministry of Trade and Industry, with the Produce Monitoring Board examining the exporter's premises and advising on quality; its standards page describes the Board as an agency of the Ministry that regulates the produce sector and monitors the quality of all produce before shipment — sliepa.gov.sl (accessed 18 Oct 2026)
- SLIEPA's standards page describes a Competent Authority, established under the Food Unit of the Ministry of Health and Sanitation, responsible for EU market certification of fish products, processing plants and fishing vessels; its marine fisheries page lists fishery, aquaculture, fish processing, fishery infrastructure and FishTech as investment segments — sliepa.gov.sl (accessed 18 Oct 2026)
- No national accreditation body for management system or laboratory conformity assessment identified — iaf.nu; sliepa.gov.sl (accessed 18 Oct 2026)
- Sierra Leone Standards Bureau (SLSB) — sliepa.gov.sl (accessed 18 Oct 2026)
- Public procurement under the Public Procurement Act and the National Public Procurement Authority (NPPA) — nppa.gov.sl (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Lagos team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
southafrica@sterling-grc.com+1 201 263 4443 (global headquarters) · the Lagos office replies by e-mail within one working day
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice