Sterling office · Australia
Sterling International Consulting Sydney
Sterling's ISO consultants in Sydney lead ISO certification, cyber security and privacy programmes for organisations across Australia and New Zealand. From Darling Park Tower 2 on Sussex Street, one engagement team plans the scope, builds the system with your people and stays with you until an independent, accredited body issues the certificate. We ensure successful certification for our clients.
- Sterling's office for Australia and New Zealand, with Manila as the nearest of our regional headquarters for programmes that reach into Asia
- Programmes shaped around JASANZ accredited certification, APRA CPS 234, the Essential Eight and the Privacy Act 1988
- The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides
What we do here
Everything a Sterling engagement includes, delivered from Sydney.
The Sydney team runs the whole engagement for Australian and New Zealand organisations, from the first gap analysis to the day the certificate arrives, with the method the group has refined since 2003. Your engagement team runs workshops and reviews online and visits your sites where an auditor will want to see the work being done.
Scope, gap analysis and implementation plan
With responsibilities, dates and decision owners, agreed before work starts.
Process development and documentation
Tailored to your operations, on Sterling's own template sets, built with your process owners.
Effivity ISO & GRC software
Your system runs in Effivity from day one, included with the engagement at no additional cost.
Training for everyone
Internal auditor training for your audit team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.
Internal audit and management review
Conducted or facilitated as agreed, with findings closed with evidence before the certification body arrives.
Certification readiness and support
Preparation for Stage 1 and Stage 2, and support until the certificate is issued.
Certification decisions remain with the independent certification body.
Standards in demand
The standards Australian buyers ask for.
Quality, information security, environmental and health and safety certificates are the ones tenders and supplier questionnaires most often ask to see, and buyers check who issued them: NSW Government construction work calls for a quality system certified by a body registered with JAS-ANZ. Banks, insurers and super funds work to APRA CPS 234, Commonwealth entities to the Essential Eight, and organisations covered by the Privacy Act 1988 to the Australian Privacy Principles, which the OAIC regulates. Testing and calibration laboratories seek ISO/IEC 17025 accreditation from NATA.
- ISO 9001Quality management
- ISO/IEC 27001Information security
- ISO 14001Environmental management
- ISO 45001Health and safety
- Essential EightAustralian cyber baseline
- APRA CPS 234 and CPS 230Prudential security
- Privacy Act 1988 (Australia)Australian Privacy Principles
- ISO/IEC 17025Laboratory competence
- All standards & frameworksThe full catalogue, with sector schemes
Reaching the office
Visiting Sydney.
The office is in Darling Park Tower 2, at 201 Sussex Street, Sydney. Most of an engagement takes place at your own sites and online, so visits to the office are arranged in advance with your consultant.
- Building: Darling Park Tower 2
- Street address: 201 Sussex Street, Sydney
- To arrange a visit: australia@sterling-grc.com
Please e-mail before you travel, so that your consultant can confirm the time and place of the meeting.
The region
Sydney and the other Sterling offices in Australia and New Zealand.
Sydney leads Sterling's work in Australia and New Zealand. For groups whose sites also reach into Asia, the Manila regional headquarters works alongside the Sydney team, so the group keeps one engagement team, one Effivity workspace and one certification programme.
All Sterling offices · ISO and GRC consulting in Australia and New Zealand
Standards
Most requested in Sydney
- ISO/IEC 27001ISO/IEC 27001 certification consulting: an ISMS built with your people, evidence prepared, and support through Stage 1, Stage 2 and surveillance audits.
- ISO 9001ISO 9001 certification consulting: a quality management system built with your people, evidence prepared and support until an accredited body certifies you.
- ISO 45001ISO 45001 certification consulting to prevent work-related injury and ill health, with an OH&S system built with your people and audit-ready, in 60+ countries.
- ISO 14001ISO 14001 certification consulting: aspects, impacts and compliance obligations controlled, with support until an accredited body certifies you.
- Essential EightEssential Eight compliance and requirements explained: the eight ASD strategies, Maturity Levels Zero to Three, assessment, cost factors and an all-inclusive plan.
- ISO 22301ISO 22301 certification consulting to keep delivering through disruption: impact analysis, continuity plans and exercises, prepared for an accredited audit.
- SOC 2SOC 2 Readiness and compliance consulting: controls mapped to the Trust Services Criteria and evidence prepared for the CPA firm's SOC 2 attestation report.
- Privacy Act 1988 (Australia)Australian Privacy Act compliance for APP entities: the 13 Australian Privacy Principles, data breach readiness and the 2024 amendments, in one all-inclusive proposal.
Client experience in Australia
Client letters on file, available on request.
Signed client letters for engagements in Australia are available on request. The client feedback wall lists every letter by standard. Ask for references in your sector before you decide.
- 60+countries where Sterling has delivered certification
- 21countries with a Sterling office, eight regions, one coordinated team
- 2003the year the group began implementing ISO management systems; the same method, refined, since
- 8,100+client engagements across the group, from single-site SMEs to multinationals
FAQs
Questions clients in Australia ask before they engage us.
The specific answers for your organisation come from the discovery call. These are the general ones.
Do you have ISO consultants in Sydney?
Yes. Sterling's office for Australia and New Zealand is in Darling Park Tower 2, 201 Sussex Street, Sydney, and the team answers on australia@sterling-grc.com. Your engagement team agrees the scope with you, runs workshops and reviews online and visits your sites where an auditor will want to see the work in progress, from the gap analysis to certification.
Does Sterling issue ISO certificates in Australia?
No. Sterling does not certify or accredit. Our expert and experienced consultants prepare you through gap analysis, consulting, training, internal audit and support during the audits. An independent certification body audits your system and decides whether to issue the certificate. JASANZ accredits the bodies that certify and does not certify organisations itself; its Register of certified organisations lets buyers check a certificate.
Can we get certified to the Essential Eight?
No. There is no Essential Eight certificate. The ASD maturity model is assessed by self-assessment or by an independent assessor, and organisations implement each maturity level progressively until they reach their target. For non-corporate Commonwealth entities under the PSPF, Maturity Level Two is the mandatory baseline. Many clients pair it with ISO/IEC 27001, which can be certified, and the Sydney team plans both together.
Who has to meet APRA CPS 234?
Authorised deposit-taking institutions, general insurers, life companies, private health insurers and RSE licensees, since 1 July 2019. The Board is ultimately responsible for information security, controls must extend to third parties, testing must be functionally independent and material incidents must be notified to APRA within 72 hours. CPS 234 is a prudential standard, not a certification; we help you build the controls and the evidence APRA expects.
How do I arrange a meeting with the Sydney team?
E-mail australia@sterling-grc.com, or choose a meeting at the Sydney office in the enquiry form below. A consultant replies within one working day to agree the time and place. Many clients meet their consultant at their own premises first, because the discovery call and the gap analysis work best where the processes run.
Keep exploring
More places we work
Offices and regions
Talk to a consultant
Plan your certification with the Sydney team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
australia@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice