ISO Certifications
At Spritzmonkey, we can help with a variety of ISO (International Organisation for Standardisation) standards.
Our experienced team can help with initial implementation before certification, ongoing management or just advice (coach and mentor).
We work with a variety of different UKAS-accredited audit bodies.
Need help?
Please contact us to arrange a telephone or face-to-face appointment to discuss your needs.
ISO 9001 (Quality Management)
ISO 9001 sets out the criteria for a quality management system and is the only standard in the family that can be certified to (although this is not a requirement). It can be used by any organisation, large or small, regardless of its field of activity. In fact, there are over one million companies and organisations in over 170 countries certified to ISO 9001.
This standard is based on a number of quality management principles including a strong customer focus, the motivation and implication of top management, the process approach and continual improvement. These principles are explained in more detail in ISO’s quality management principles. Using ISO 9001 helps ensure that customers get consistent, good-quality products and services, which in turn brings many business benefits. ISO 9001 ▸
ISO 14001 (Environmental Management)
ISO 14001 sets out the criteria for an environmental management system and can be certified to. It maps out a framework that a company or organisation can follow to set up an effective environmental management system. Designed for any type of organisation, regardless of its activity or sector, it can provide assurance to company management and employees as well as external stakeholders that environmental impact is being measured and improved. ISO 14001 ▸
ISO 22301 (Business Continuity)
ISO 22301 is a management system standard that specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually improve a documented management system to protect against, reduce the likelihood of occurrence, prepare for, respond to, and recover from disruptive incidents when they arise. It is intended to be applicable to all organisations, or parts thereof, regardless of type, size and nature of the organisation. ISO 22301 ▸
ISO/IEC 27001 (Information Security)
ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS). It defines requirements an ISMS must meet. The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.
Conformity with ISO/IEC 27001 means that an organisation or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.
ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence. ISO 27001 ▸
ISO 27701 (Privacy Management)
ISO 27701 is a privacy extension to ISO/IEC 27001. The design goal is to enhance the existing Information Security Management System (ISMS) with additional requirements in order to establish, implement, maintain, and continually improve a Privacy Information Management System (PIMS). The standard outlines a framework for Personally data controllers and processors to manage privacy controls to reduce the risk to the privacy rights of individuals.
ISO 20000-1 (IT Service Management)
ISO 20000-1 is a service management system (SMS) standard. It specifies requirements for the service provider to plan, establish, implement, operate, monitor, review, maintain and improve an SMS. The requirements include the planning, design, transition, delivery and improvement of services to meet the service requirements and deliver value. It is beneficial in a number of ways including: a customer seeking services and requiring assurance regarding the quality of those services; a customer requiring a consistent approach to the service lifecycle by all its service providers, including those in a supply chain; an organisation to demonstrate its capability for the planning, design, transition, delivery and improvement of services. ISO 20000-1 ▸
ISO 45001 (Occupational Health and Safety)
For organisations that are serious about improving employee safety, reducing workplace risks and creating better, safer working conditions, there’s ISO 45001. ISO 45001 is an international standard for health and safety at work developed by national and international standards committees independent of government. Implementing ISO 45001 may help your organisation demonstrate compliance with health and safety law. But, in some respects, it goes beyond what the law requires, so consider carefully whether to adopt it. ISO 45001 ▸
Other standards
If its not listed above, we may still be able to help. Through our extensive list of partner organisations we can refer you to some one else with the right skills to support your ISO needs.