ISO standards are international agreements, published by the International Organization for Standardization in Geneva, that set out a proven way of doing something: making a product, running a process or managing a business. For manufacturers, the most important are the management system standards: ISO 9001 for quality, ISO 14001 for environment, ISO 45001 for occupational health and safety, and ISO 50001 for energy. ISO writes the standards but does not certify anyone. Certificates are issued by independent certification bodies, which in India are accredited by the National Accreditation Board for Certification Bodies (NABCB).
What is ISO?
The International Organization for Standardization (ISO) is an independent, non-governmental body founded in 1947 and based in Geneva, Switzerland. Its members are the national standards bodies of 177 countries, one per country; India’s member is the Bureau of Indian Standards (BIS). Standards are drafted by technical committees of experts and approved by member vote. ISO has published more than 26,500 International Standards and related documents, from screw threads and film speed to quality management.
“ISO” is not an acronym for the English name. It comes from the Greek isos, meaning equal, and was chosen so that the short name would be the same in every language.
Standard vs certification
- A standard is a document. Anyone can buy it and follow it, certified or not.
- Certification is an independent auditor confirming that your system meets the standard. It is done by a certification body, not by ISO.
- Accreditation is the check on the certification bodies themselves. In India, NABCB, part of the Quality Council of India, accredits them to ISO/IEC 17021-1. A certificate from an unaccredited body is worth little to a serious customer.
The ISO series manufacturers need
| Standard | Subject | Current edition | Who needs it |
|---|---|---|---|
| ISO 9001 | Quality management system (QMS) | ISO 9001:2026 (published September 2026, replacing 2015) | Almost every manufacturer and supplier; the base for most sector standards |
| ISO 14001 | Environmental management system (EMS) | ISO 14001:2026 (published April 2026) | Plants with significant emissions, effluent or waste; exporters to Europe |
| ISO 45001 | Occupational health and safety (OH&S) | ISO 45001:2018, amended 2024; a revision is in development | Plants with hazardous processes: foundries, chemicals, heavy engineering |
| ISO 50001 | Energy management system (EnMS) | ISO 50001:2018 | Energy-intensive units: steel, cement, textiles, forging |
| ISO/IEC 27001 | Information security management | ISO/IEC 27001:2022 | Firms handling customer designs and data, connected factories |
| ISO 13485 | Quality management for medical devices | ISO 13485:2016 | Medical device and component makers |
| IATF 16949 | Automotive quality management | IATF 16949:2016; a second edition is planned for 2027 | Suppliers to car and two-wheeler makers |
| AS9100 | Aerospace quality management | AS9100D (2016); being replaced by the IA9100 series | Aerospace and defence suppliers |
Two of these are not ISO standards. IATF 16949 is published by the International Automotive Task Force, a group of car makers and their trade associations, and AS9100 by the aerospace industry’s quality groups (SAE in the Americas). Both are built on ISO 9001 and add sector-specific requirements, so a company certified to them must also meet ISO 9001.
After a new edition is published, certified companies are given a transition period, typically about three years, to move to it. For ISO 9001:2026 and ISO 14001:2026, check the exact deadline with your certification body.
The Harmonized Structure: why ISO standards look alike
Since 2012, all ISO management system standards follow one common layout, first called Annex SL and now the Harmonized Structure. The same ten clauses, with much of the same core text, appear in ISO 9001, 14001, 45001, 50001 and 27001:
| Clause | Title | What it asks for |
|---|---|---|
| 1 to 3 | Scope, normative references, terms | Introductory; no requirements |
| 4 | Context of the organisation | Understand internal and external issues and interested parties; define the scope |
| 5 | Leadership | Top management commitment, policy, roles and responsibilities |
| 6 | Planning | Risks and opportunities, objectives and plans to achieve them |
| 7 | Support | Resources, competence, awareness, communication, documented information |
| 8 | Operation | Planning and control of the actual work; the subject-specific core |
| 9 | Performance evaluation | Monitoring, measurement, internal audit, management review |
| 10 | Improvement | Nonconformity, corrective action, continual improvement |
Because the structure is shared, a plant can run one integrated management system covering quality, environment and safety, with one set of audits and reviews, instead of three separate ones.
ISO certification process, step by step
- Decide the standard and scope: which sites, products and processes will be covered.
- Gap analysis: compare current practice with each clause of the standard and list what is missing.
- Build the system and documents: quality policy and objectives, process maps, procedures where needed, work instructions, forms and records. Train the people who will use them.
- Run it: operate the system for a few months so that records exist to prove it works.
- Internal audit: trained internal auditors check every clause and raise nonconformities.
- Management review: top management reviews audit results, customer feedback, process performance and objectives, and decides actions.
- Choose an accredited certification body and apply.
- Stage 1 audit: the auditor reviews documentation and readiness, and confirms the plant is ready for stage 2.
- Stage 2 audit: a full on-site audit of the system in operation. Major nonconformities must be corrected before a certificate is issued.
- Certification: the certificate is valid for three years.
- Surveillance audits: at least once a year, in years one and two, to confirm the system is maintained.
- Recertification audit: before the end of the third year, to start a new three-year cycle.
ISO standards in India: IS/ISO and BIS
BIS adopts many ISO standards as Indian Standards with dual numbering, such as IS/ISO 9001 and IS/ISO 14001, whose text is identical to the ISO standard. BIS also runs its own management system certification scheme under the BIS Act, which began with IS/ISO 9001 in 1991. Private certification bodies accredited by NABCB, or by foreign accreditation bodies, certify to the same standards.
For small firms, the Ministry of MSME’s ZED (Zero Defect Zero Effect) certification, run with the Quality Council of India, grades MSMEs at Bronze, Silver and Gold levels. The scheme subsidises the ZED certification cost (80% for micro, 60% for small and 50% for medium enterprises), and firms that have reached a ZED level can claim partial reimbursement of an ISO or other certification, capped at Rs 50,000 per level. Check current terms on the scheme portal before applying.
Benefits of ISO certification for manufacturers
- Market access: many OEMs, public-sector tenders and export customers require ISO 9001 or a sector standard before they will buy.
- Fewer defects and less rework: defined processes, inspection records and corrective action reduce repeat problems.
- Consistency: the same process gives the same result on every shift, which matters as a plant grows.
- Lower costs: ISO 50001 targets energy use, ISO 14001 targets waste and effluent.
- Safer workplace: ISO 45001 requires hazard identification and worker participation.
- Better decisions: management reviews use data rather than opinion.
ISO 9001 works well alongside improvement methods such as lean manufacturing and Six Sigma: the standard says a system must exist and improve, and these methods are ways to improve it.
Challenges, especially for Indian MSMEs
- Cost: consultant fees, certification body audit days, calibration of instruments and staff time. The certificate is not a one-off expense; surveillance audits recur every year.
- Documentation burden: small shops often find the record-keeping heavy. The standards now ask for “documented information” only where it is needed, so paperwork can be kept lean.
- Certificate without a system: some firms buy a certificate for a tender and never use the system. Customers and auditors increasingly spot this.
- Management commitment: the system fails if the owner sees it as the quality department’s job.
- Staff turnover and training: trained internal auditors leave and the system slips between audits.
- Unaccredited certificates: cheap certificates from bodies with no recognised accreditation may be rejected by customers.
References
- ISO – International Organization for Standardization, standards catalogue and edition status.
- ISO 31000, guidelines on risk management, useful for clause 6 of the management system standards.
- National Accreditation Board for Certification Bodies (NABCB), Quality Council of India.
FAQs
What are ISO standards?
ISO standards are internationally agreed documents published by the International Organization for Standardization that describe a good way to make a product, run a process or manage an organisation. Examples are ISO 9001 for quality management and ISO 14001 for environmental management.
Which ISO standards apply to manufacturing?
The core set is ISO 9001 (quality), ISO 14001 (environment), ISO 45001 (occupational health and safety) and ISO 50001 (energy). Sector standards add to them: IATF 16949 for automotive, ISO 13485 for medical devices and AS9100 for aerospace.
Does ISO issue ISO certificates?
No. ISO develops and publishes standards but does not certify organisations. Certification is done by independent certification bodies, which in India are accredited by NABCB under the Quality Council of India.
How long is an ISO certificate valid?
Three years, with surveillance audits at least once a year in between. A recertification audit before expiry starts a new three-year cycle.
What is the latest version of ISO 9001?
ISO 9001:2026, published in September 2026, which replaces ISO 9001:2015. Certified organisations move to the new edition within a transition period set through their certification body.