Frameworks

Specifies requirements for a quality management system, helping organizations consistently deliver products and services that meet customer and regulatory expectations.

Quality management requirements tailored to the medical devices industry, from design and development through to production and post-market activities.

A management system standard for educational organizations, focused on enhancing learning outcomes and the satisfaction of students and other beneficiaries.

Integrates food safety management across the entire supply chain using HACCP principles, prerequisite programs, and a systematic process approach.

Specifies requirements for an effective facility management system that supports organizational strategy and delivers value to people, assets, and the environment.

A framework for developing, managing, and sustaining effective collaborative business relationships and joint working arrangements between organizations.

Establishes the elements of an innovation management system to enable organizations to achieve sustained value creation, resilience, and competitive growth.

Sets requirements for an occupational health and safety management system to eliminate hazards and minimize risks to worker safety and well-being.

Enables organizations to plan, establish, and maintain business continuity capabilities for responding to and recovering from disruptive incidents.

Guidance for organizations on operating responsibly across human rights, labour practices, environmental stewardship, and community involvement.

Provides universal principles and guidelines for integrating risk management into organizational governance and strategic decision-making processes.

Supplements ISO 31000 with a comprehensive catalogue of risk assessment techniques applicable across sectors and organizational levels.

Helps organizations establish, implement, and maintain anti-bribery controls to prevent, detect, and respond to bribery at all levels of the organization.

Specifies requirements for building a robust compliance management program within any organization, regardless of type, size, or sector.

A framework for managing environmental responsibilities, reducing environmental impact, and continually improving an organization's environmental performance.

Defines requirements and principles for organizations to achieve and credibly demonstrate carbon neutrality across activities, products, and value chains.

Supports systematic improvement of energy performance — including efficiency, use, and consumption — through a structured management system approach.

Specifies requirements for establishing and maintaining an information security management system (ISMS) to protect data assets from security threats.

Provides additional information security controls and implementation guidance specifically designed for cloud service providers and cloud service customers.

Establishes privacy requirements for cloud service providers processing personally identifiable information (PII) on behalf of their clients.

Extends ISO 27001 to include a privacy information management system (PIMS), supporting compliance with GDPR and similar data privacy regulations.

Provides guidance for information security management in health informatics environments and the protection of healthcare data and patient records.

Specifies requirements for establishing, implementing, maintaining, and continually improving an IT service management system (ITSM) within an organization.

Provides requirements for organizations to responsibly develop, deploy, use, and govern artificial intelligence systems with appropriate oversight and accountability.