ISO Certifications

Brief description

ISO 14001 specifies the general requirements for an Environmental Management System in an organization. ISO 14001 focuses on recognition of the environmental impacts of the organization’s operations, in order to minimize them and enhance its environmental performance. ISO 14001 Environmental Management System can be applied to all categories of organizations, regardless their sector or the product or service they provide.

Detailed description

ISO 14001 is the most is the most widely used Environmental standard in the world. The standard’s fundamental principles are:

• Customer Focus
• Engagement of top management
• Active participation of personnel
• Commitment to continuous improvement and compliance with the applicable regulations and legislation
• Management of relationships with interested parties

Following the ANNEX SL structure, ISO 14001 can be combined during application or certification with other standards that follow the same structure, such as ISO 9001, ISO 45001, ISO 2200, ISO 27001.

Certification is addressed to all organizations, regardless of their size or the sector in which they operate.

 What are the benefits of certification?

Environmental management systems based on ISO 14001 enable an organization to identify, assess and manage environmental issues with the aim of:

• protecting the environment,
• continual improvement,
• compliance with legal requirements and avoidance of fines,
• conserving natural resources and reducing costs,
• improving an organization’s public image,
• improving communication with public authorities.

Brief Description

ISO 27001 is the international standard for the security and protection of an organization’s information. The purpose of the standard is to ensure that the company maintains the confidentiality, integrity and availability of its information, for all parties concerned, both internally and externally.

Detailed Description

ISO 27001 ensures that all information can be taken into account, in its various forms, as well as the risks associated with its disclosure.

ISO/IEC 27001 requires that management:

• Systematically examine the organization’s information security risks, taking account of the threats, vulnerabilities, and impacts;
• Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that are deemed unacceptable; and
• Adopt an overarching management process to ensure that the information security controls continue to meet the organization’s information security needs on an ongoing basis.

Note that ISO/IEC 27001 is designed to cover much more than just IT.

What controls will be tested as part of certification to ISO/IEC 27001 is dependent on the certification auditor. This can include any controls that the organization has deemed to be within the scope of the ISMS and this testing can be to any depth or extent as assessed by the auditor as needed to test that the control has been implemented and is operating effectively.

Management determines the scope of the ISMS for certification purposes and may limit it to, say, a single business unit or location. The ISO/IEC 27001 certificate does not necessarily mean the remainder of the organization, outside the scoped area, has an adequate approach to information security management.

Who Is it Addressed To?

In accordance with the requirements of ISO 27001, the information security management system can be implemented by all types of businesses, irrespective of the sector they are active in, that wish to eliminate threats that may compromise the availability, integrity and confidentiality of their information. 

We are providing audits and assessment as well as gap analysis services to a wide range of companies, such as banks, accountants, financial services, data centers, hospitals and health centers, call centers, graphics and printing companies, IT companies, etc.

What Are the Certification Benefits?

• The company becoming aware of the risks that the information related to them is exposed to;
• Information security and reduction of the risk of the information being compromised through appropriate checks;
• A feeling of trust throughout the business due to its commitment to manage information security;
• Obtaining an objective, independent and expert opinion on the system’s adequacy and compliance;
• Objective proof of the organization’s commitment regarding the management of information security;

Brief Description

ISO 37001 aims to help an organization implement an effective anti-bribery management system. It provides organizations with guidance on implementing anti-bribery measures, depending on the type and size of the organization, and the nature and extent of the bribery risk the organization faces.

Detailed Description

Certification and implementation of ISO 37001 does not eliminate the risk of bribery, but it is certainly a major step in combating it.

Some of the main points the standard focuses on are:

• Application of the appropriate vetting of the organization’s personnel, with the aim of compliance with the anti-bribery policy and the ABMS.
• Training of personnel in accordance with the anti-bribery policy and the ABMS.
• Application of appropriate security fail-safes for reducing the risk of bribery.
• Implementation of the appropriate measures for auditing procurements, commercial and other non-financial transactions in order to reduce the risk of bribery.
• Controls of gifts, hospitality, donations and other benefits, with the aim of averting their use for bribery purposes.

Following the ANNEX SL structure, ISO 37001 can be combined during application or certification with other standards that follow the same structure, such as ISO 14001, ISO 45001, ISO 9001, ISO 27001.

 The standard is applicable to small, medium-sized and large public, private and volunteer organizations.

What Are the Certification Benefits?

ISO 37001 application and certification adds value to an organization through:

• Ensuring for stakeholders, management, employees and business associates that the organization takes measures to prevent bribery.
• Adding value to an organization’s reputation
• Ensuring documentation within an organization in case of an investigation of a bribery case.
• The existence of an independently certified ISO 37001 system proves to a public prosecutor or judge that the organization has taken steps and implemented the appropriate procedures for preventing bribery.

Brief description

EN ISO 39001 specifies the requirements for a road traffic safety (RTS) management system, in order to reduce/eliminate road accidents. Application of EN ISO 39001 is for organizations that interact with the road traffic system (manage fleets of vehicles for their daily operations, operators of road networks etc)

The aim of EN ISO 39001 is the development and implementation of processes that help an organization control all of its activities that impact or are impacted by road safety (transport of personnel, products, etc.).

Application of the standard does not exempt organizations from the obligation to comply with the Traffic Rules and the relevant legislation but supports and encourages compliance.

Detailed description

The standard’s fundamental principles are:

• Customer Focus
• Engagement of top management
• Active participation of personnel
• Commitment to continuous improvement and compliance with the applicable regulations and legislation
• Management of relationships with interested parties

Following the ANNEX SL structure, ISO 39001 can be combined during application or certification with other standards that follow the same structure, such as ISO 9001, ISO 14001, ISO 45001, ISO 2200, ISO 27001.

Certification is addressed to all organizations, regardless of their size or the sector in which they operate.

What are the benefits of certification?

Application and certification of the Road Traffic Safety Management System contributes to

• recognition, assessment and management of all potential risks associated with use of the road network, in the application of programmes and measures for reducing risk.
• overall reduction in road accidents associated with the operations of the organization.
• systematic monitoring and implementation of the legislation on Road Traffic Safety Management
• reduced costs from accidents (e.g. compensation, hospital care).

Brief description

ISO 9001 specifies the general requirements for development, implement and improvement of a organization’s operation, with the aim of satisfying customer requirements. It can be applied by any organization to improve its performance, regardless of size or the field of activity.

Detailed Description

The management quality standard is the most widely used standard in the world.  The standard’s fundamental principles are:

• Customer focus
• Leadership
• People engagement
• A process approach
• Improvement
• Evidence-based decision making
• Relationship management with interested parties

Following the ANNEX SL structure, ISO 9001 introduces new concepts, such as risk assessment and satisfaction of the needs and expectations of the interested parties, and it can be combined during its application or certification with other standards that follow the same structure, such as ISO 14001, ISO 45001, ISO 22000, ISO 27001.

Certification is addressed to all businesses, regardless of their size or the field of activity.

What Are the Certification Benefits?

ISO 9001 application and certification adds value to an organization through:

• Enhancing customer confidence that the product and/or service provided satisfies the mutually agreed requirements as well as the applicable laws and regulations.
• Increasing satisfaction of current and future needs of both customers and interested parties (employees, stakeholders and social environment).
• The implementation of continual improvement, with the aim of continually improving the organization’s activities.
• Reducing operating costs through efficient operation and increased productivity.
• Creating a competitive advantage and attracting new customers and investors in international markets.

Brief description

ISO 22000 specifies the general requirements for development, application and improvement of a company’s Food Safety Management System. ISO 22000 is addressed to all companies that participate directly or indirectly in the food supply chain, and it can be applied by all companies, regardless of their size or complexity.

Detailed description

ISO 22000 is the top Food Safety Management Systems certification standard. The standard’s fundamental principles are:

• Effective control throughout the food supply chain
• Effective communication among all the interested parties of the food supply chain (businesses, suppliers, clients, authorities)
• Systemic management
• The required programmes
• The principles of hazard analysis and critical control points (HACCP)

The standard is also based on the principles that are common to management system standards. The management principles are:

• Focus on the customer
• Engagement of top management
• Active participation of personnel
• A process approach
• Continual improvement
• Documentation-based decision making
• Management of relationships with interested parties

Following the ANNEX SL structure, the new edition ISO 22000:2018 can be combined during application or certification with other standards that follow the same structure, such as ISO 9001, ISO 14001, ISO 45001, ISO 27001.

What are the benefits of certification?

ISO 22000 application and certification can add value to an organization through:

• Ensuring the confidence of customers, consumers and other interested parties in an organization’s ability to consistently provide food-related products and services that are safe and meet legal and regulatory requirements
• Enabling business to document compliance with all of the specified requirements of the Food Safety Management System
• Ensuring client confidence that the product and/or service provided satisfies the mutually agreed requirements as well as the applicable legal and regulatory provisions on food safety.
• Application of measures for ongoing improvement, with the aim of continually improving the business’s operations
• Creating a comparative advantage and attracting new clients and investors in international markets

Brief description

ISO 22301 is the leading international standard for. Through an holistic management process, it describes and determines the requirements for the design, implementation, monitoring, review, maintenance and continuous improvement of a Business Continuity management system, in order to ensure continuous provision of services to the organization’s customers following a possible disruption of its operation.

Detailed Description

When an organization’s operation is disrupted due to an unexpected event or a sudden disaster, its ability to react rapidly and efficiently is the key to its survival. The ISO 22301 standard assists an organization to adopt and establish the core principles of a Business Continuity Management (BCM) system. Its goal is to protect the personnel, safeguard the interests of the parties concerned, as well as the reputation and commercial value of an organization, by increasing its resilience against risks or business threats that may affect the organization’s operation.

Who Is it Addressed To?

The requirements set out in ISO 22301 may be implemented by any organization, regardless of its type, nature or size. Organizations facing natural or environmental disasters, as well as events of technological failure or human negligence, can create Business Continuity mechanisms, plans and processes which they will be able to implement, if needed, in order to ensure their unhindered operation.

We are able to provide certification for financial institutions, service providers, industrial, commercial and other companies for which the provision of continuous operation is necessary.

 What Are the Certification Benefits?

• Establishment of a system of resilience that focuses primarily on the health and safety of the personnel and, additionally, on safeguarding the organization’s reputation and assets.
• Ensuring the organization’s Business Continuity and operation, for the seamless provision of services to its customers following a disruption to its operation.
• Identification of the organization’s critical business activities and the impact of a potential disruption, in order to limit the consequences if an unexpected event occurs.

Brief description

ISO 45001 standard specifies the requirements for the implementation of an Occupational Health and Safety Management System. It focuses on effective control of all occupational risks for all interested parties (employees, visitors, suppliers, local community etc), and on achieving improvements in overall Health and Safety performance in the workplace. ISO 45001 is designed to cover occupational health and safety, and not the safety of products or processes.

ISO 45001 has replaced the old OHSAS 18001 standard. 

Detailed description

The standard’s fundamental principles are:

• Customer Focus
• Engagement of top management
• Active participation of personnel
• Commitment to continuous improvement and compliance with the applicable regulations and legislation
• Management of relationships with interested parties

Following the ANNEX SL structure, ISO 45001 can be combined during application or certification with other standards that follow the same structure, such as ISO 9001, ISO 14001, ISO 22000, ISO 27001.

Certification is addressed to all the organizations, regardless of their size or the sector in which they operate.

What are the benefits of certification?

Application and certification of the Occupational Health & Safety System by a company contributes to:

• recognition, assessment and management of all potential risks through the implementation of programs for reducing risk (to acceptable levels) and minimizing risks in the workplace.
• reduction of the number of accidents that happen at a company
• continual improvement of performance on issues of occupational health and safety
• systematic monitoring and implementation of the legislation on occupational health and safety
• reduced costs from accidents (e.g. compensation, hospital care).