hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

Sterling office · Japan

Sterling International Consulting Tokyo

Sterling's ISO consultants in Tokyo guide organisations in Japan through ISO certification, information security and personal information protection. Working from Pacific Century Place Marunouchi, your engagement team sets the scope with you, builds the management system alongside your teams and remains with the programme until an independent, accredited certification body issues the certificate.

  • Sterling office in Japan, working with our Asia-Pacific offices in Singapore, Shanghai, Manila and Sydney
  • Certification programmes planned alongside the APPI and its regulator, the Personal Information Protection Commission
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides

What we do here

Everything a Sterling engagement includes, delivered from Tokyo.

The Tokyo office runs the complete engagement for organisations in Japan, from the opening gap analysis to certification, using the method the group has refined since 2003. Workshops and reviews take place online, and your consultant comes to your sites when the auditor will expect to see processes in operation.

  • Scope, gap analysis and implementation plan

    With responsibilities, dates and decision owners, agreed before work starts.

  • Process development and documentation

    Tailored to your operations, on Sterling's own template sets, built with your process owners.

  • Effivity ISO & GRC software

    Your system runs in Effivity from day one, included with the engagement at no additional cost.

  • Training for everyone

    Internal auditor training for your audit team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Internal audit and management review

    Conducted or facilitated as agreed, with findings closed with evidence before the certification body arrives.

  • Certification readiness and support

    Preparation for Stage 1 and Stage 2, and support until the certificate is issued.

Certification decisions remain with the independent certification body.

Standards in demand

The standards organisations in Japan ask us about.

Quality and information security certification sit at the centre of most programmes. Personal information is governed by the Act on the Protection of Personal Information (APPI), which the Personal Information Protection Commission (PPC) supervises; there is no certificate under the law, so compliance is shown through your own controls and records. Japan takes part in APEC CBPR and in MDSAP, the single audit programme for medical device manufacturers built on ISO 13485, and the IAQG register lists JIS Q 9100 as the Japanese counterpart of AS9100.

Reaching the office

Visiting Tokyo.

The office is in Pacific Century Place Marunouchi, at 1-11-1 Marunouchi in Tokyo's Chiyoda-ku. Most of an engagement happens at your own premises and online, so meetings at the office are arranged ahead with your consultant.

  • Building: Pacific Century Place Marunouchi
  • Address for maps and navigation: 1-11-1 Marunouchi, Chiyoda-ku, Tokyo
  • To arrange a visit: japan@sterling-grc.com

Please e-mail before you travel so that your consultant can confirm the time and meeting place.

Client experience in Japan

Client letters on file, available on request.

Client feedback wall: letters on file

Signed client letters for engagements in Japan are available on request. The client feedback wall lists every letter by standard. Ask for references in your sector before you decide.

  • 60+countries where Sterling has delivered certification
  • 21countries with a Sterling office, eight regions, one coordinated team
  • 2003the year the group began implementing ISO management systems; the same method, refined, since
  • 8,100+client engagements across the group, from single-site SMEs to multinationals

FAQs

Questions clients in Japan ask before they engage us.

The specific answers for your organisation come from the discovery call. These are the general ones.

Do you have ISO consultants in Tokyo?

Yes. Sterling's Japan office is at Pacific Century Place Marunouchi, 1-11-1 Marunouchi, Chiyoda-ku, Tokyo, and the team is reached at japan@sterling-grc.com. No local telephone number is listed; for a call, the global headquarters answers on +1 201 263 4443. Your engagement team takes the engagement from the gap analysis through to certification.

Does Sterling issue ISO certificates in Japan?

No. Sterling does not certify or accredit. Our expert and experienced consultants prepare your organisation through gap analysis, consulting, training, internal audit and support during the audits. An independent, accredited certification body audits the system and decides on the certificate, so check the body's accreditation and the certificate scope before you appoint one.

Can we get certified to the APPI?

No. The APPI is a law, supervised by the Personal Information Protection Commission, and no certificate is issued under it. You meet it through your own policies, controls and records, including reporting leaks to the PPC where the law requires. PrivacyMark is a separate scheme run by JIPDEC and open only to Japanese companies, while ISO/IEC 27701 and APEC CBPR are certifications that can sit alongside an APPI programme.

We move personal data between Japan and the EU. Where do we start?

Japan and the EU have a mutual adequacy arrangement, and the joint statement on its first review was issued on 4 April 2023. Your obligations under the APPI and the GDPR still apply side by side, so the Tokyo team maps both in one register of processing, controls and evidence rather than running two separate projects.

How do I arrange a meeting with the Tokyo team?

E-mail japan@sterling-grc.com, or select a meeting at the Tokyo office in the enquiry form below. A consultant replies within one working day to agree a time and place. Many clients meet their consultant at their own premises first, because the discovery call and the gap analysis work best where the processes run.

Keep exploring

More places we work

Talk to a consultant

Plan your certification with the Tokyo team.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

japan@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice