Types of accredited ISO certificates: which one does your organisation need?

Short answer: CAS's EGAC accreditation covers six ISO management system standards: ISO 9001 (quality), ISO 14001 (environment), ISO 45001 (occupational health and safety), ISO 22000 (food safety), ISO 50001 (energy) and ISO 22301 (business continuity). Which one your organisation needs depends on what it has to demonstrate, and to whom.

The six standards, one line each

• ISO 9001 — requirements for a Quality Management System (QMS) that demonstrates an organisation's ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements.
• ISO 14001 — the international Environmental Management System standard.
• ISO 45001 — the international standard for Occupational Health and Safety Management Systems.
• ISO 22000 — food safety management across the entire food chain.
• ISO 50001 — a framework to establish systems and processes to improve energy performance, including energy efficiency, energy use and energy consumption.
• ISO 22301 — requirements for a Business Continuity Management System (BCMS) to protect against, reduce the likelihood of, and ensure recovery from disruptive incidents.

Who usually needs which

• ISO 9001 — any organisation of any size or sector that wants to demonstrate quality, improve customer satisfaction and compete in domestic and international markets.
• ISO 14001 — organisations that wish to enhance environmental performance, meet compliance obligations and demonstrate environmental responsibility; particularly relevant for manufacturing, construction, mining, chemicals, transport and energy.
• ISO 45001 — sectors where worker safety is a concern, such as construction, manufacturing, mining, oil & gas, healthcare, chemicals and food processing.
• ISO 22000 — any organisation in the food chain, from primary producers and processors to distributors, retailers, catering services, transport providers and packaging manufacturers.
• ISO 50001 — manufacturing facilities, commercial buildings, hospitality, data centres, hospitals and any energy-intensive organisation seeking to reduce consumption.
• ISO 22301 — critical infrastructure operators, financial institutions, IT service providers, healthcare organisations, utilities, logistics companies and any organisation where disruption would have serious consequences.

More than one standard

CAS conducts integrated audits covering multiple ISO management system standards simultaneously, in accordance with Global ACI TECH-3-008 (formerly IAF MD 11). Combined audits reduce total audit time by up to 20% and suit organisations running ISO 9001, ISO 14001 and ISO 45001 as an Integrated Management System (IMS). You receive separate certificates for each standard.

All six standards are within CAS's EGAC accreditation. IAF MLA recognition covers ISO 9001, 14001, 45001, 22000 and 50001; ISO 22301 is EGAC-accredited but outside IAF MLA coverage, so an ISO 22301 certificate carries no IAF mark.

Two standards in transition

ISO 9001:2026 and ISO 14001:2026 have been published. CAS continues to issue EGAC-accredited certificates to the 2015 editions until EGAC records its transition decision on CAS. Existing ISO 9001:2015 certificates remain valid at the latest until 30 September 2029, and ISO 14001:2015 certificates until 30 April 2029 (Global ACI-TECH-3-TR 2029-09-30 (M) and 2029-04-30 (M)).

Before you choose

Ask your customer, or the tender, which standard it names. You can verify any CAS certificate on our verification page. Audit time, and with it the cost, follows each standard's own rules: see what determines the cost of ISO certification.

CAS Conformity Assessment Services — EGAC-accredited certification body, CAB No. 012418. EGAC accreditation covers ISO 9001, 14001, 45001, 22000, 50001 and 22301 only, and IAF MLA recognition covers the same list except ISO 22301.