Every standard, mapped to your industry.

Evaluation of mechanical vibration of machines by measurements on non-rotating parts. Relevant for plant maintenance and condition monitoring programmes.

Provides an overview of asset management and the ISO 55000 series including the concepts and terminology used.

Requirements for asset management systems. Relevant for clients using Equipment & Asset module including statutory inspection schedules and GMR2 appointments.

Provides guidance on the application of the requirements specified in ISO 55001.

International standard for information management using building information modelling (BIM) across the full project lifecycle from design through facility management.

Specifies requirements for information management during the delivery phase of assets using building information modelling.

Specifies requirements and guidance for security-minded information management in the context of BIM.

Provides guidance on programme management applicable to any organisation involved in programme management activities.

Specifies requirements for an organisation to establish, implement, maintain and continually improve a service management system.

Defines quality characteristics and sub-characteristics for software products and IT systems.

Provides guidelines for information security controls applicable to the provision and use of cloud services.

Specifies requirements for establishing, implementing, maintaining and continually improving an artificial intelligence management system.

Establishes control objectives, controls and guidelines for implementing measures to protect personally identifiable information in the public cloud.

Provides a privacy framework for information technology systems processing personally identifiable information.

Provides guidelines for privacy impact assessments specifying a framework and process for the identification, analysis and mitigation of privacy risks.

Framework for establishing energy management systems. Relevant for clients with energy monitoring or carbon reduction obligations under the Carbon Tax Act.

Specifies the process requirements for carrying out an energy audit in relation to energy performance.

Specifies requirements for bodies providing audit and certification of energy management systems.

Provides guidance on how to establish energy baselines and energy performance indicators.

Provides guidelines to energy service providers for the assessment of energy service delivery.

Specifies engineering requirements for cybersecurity risk management for electrical and electronic systems in road vehicles.

Defines vocabulary used in the ISO 26262 series for functional safety of electrical and/or electronic systems in road vehicles.

Specifies the requirements for the management of functional safety for road vehicles.

Describes criteria to be used for selecting the appropriate level of quality requirements for fusion welding of metallic materials.

Specifies comprehensive quality requirements for fusion welding of metallic materials in workshops and on site.

Specifies standard quality requirements for fusion welding of metallic materials in workshops and on site.

Specifies elementary quality requirements for fusion welding of metallic materials in workshops and on site.

International standard for environmental management systems.

Requires a documented environmental policy signed by top management, communicated to all persons and available to interested parties. Must include commitment to pollution prevention, compliance and continual improvement.

Provides general guidance for implementing, maintaining and improving an environmental management system.

Provides guidance for a phased implementation of an environmental management system.

Principles for environmental labelling of products and services.

Provides guidance on the design and use of environmental performance evaluation by an organisation.

Describes the principles and framework for life cycle assessment including goal and scope definition, inventory analysis, impact assessment and interpretation.

Requirements and guidelines for life cycle assessment — used in environmental product declarations and ESG reporting.

Principles, requirements and guidelines for water footprint assessment of products, processes and organisations.

Provides guidelines for environmental communication including principles, policy, strategy and activities.

Specification for quantification and reporting of greenhouse gas emissions and removals at the organisation level. Aligned with Carbon Tax Act reporting obligations.

Specifies principles and requirements for quantification, monitoring and reporting of activities intended to cause GHG emission reductions or removal enhancements.

Specifies principles and requirements for the validation and verification of greenhouse gas statements.

Quantification and communication of the carbon footprint of products across their lifecycle.

Specifies principles, requirements and guidelines for adapting to climate change.

Provides guidance on conducting vulnerability, impacts and risk assessments related to climate change.

Provides a framework to assess and report investments and financing activities related to climate change.

Provides guidance to organisations on integrating sustainability into procurement processes.

Specifies requirements for establishing, implementing, maintaining and improving a water efficiency management system.

Vocabulary for fire safety terms used across all fire protection standards and regulations.

Standard fire resistance tests for building elements including walls, floors, columns and beams.

International standard for food safety management systems. Integrates HACCP principles with ISO management system approach. Required for global supply chain compliance.

Specifies requirements for establishing, implementing and maintaining prerequisite programmes to assist in controlling food safety hazards in food manufacturing.

Specifies requirements for establishing, implementing and maintaining prerequisite programmes for catering.

Specifies requirements for establishing, implementing and maintaining prerequisite programmes related to food safety in farming.

Specifies requirements for establishing, implementing and maintaining prerequisite programmes for food packaging manufacturing.

Specifies requirements for establishing, implementing and maintaining prerequisite programmes for feed and animal food production.

Gives general principles and specifies the basic requirements for the design and implementation of a feed and food traceability system.

Sector-specific prerequisite programmes (PRPs) for food manufacturing. Covers infrastructure, cleaning, pest control, cross-contamination prevention and rework management. Required for ISO 22000 and FSSC 22000 certification.

Sector-specific prerequisite programme requirements for catering operations. Covers food procurement, storage, preparation, service and cleaning.

Prerequisite programme requirements for primary production including crop farming, animal husbandry and aquaculture. Covers pest management, water quality, animal health and traceability at farm level.

Prerequisite programme requirements for food packaging manufacturers. Governs material migration, contamination prevention and hygiene in packaging production environments.

Provides guidance on governance of organisations to enable them to achieve their purpose and create value for their stakeholders in an ethical and responsible manner.

Anti-bribery management systems. Relevant for clients operating in public procurement environments and those with CIDB registration obligations.

Provides guidelines for a whistleblowing management system based on the principles of trust, impartiality and protection.

Specifies requirements and provides guidelines for establishing, developing, implementing, evaluating, maintaining and improving an effective compliance management system.

Provides guiding principles for members of governing bodies on the effective, efficient and acceptable use of information technology.

Quality management systems standard based on ISO 9001 principles with health care service-specific requirements.

Specifies general requirements for basic safety and essential performance of medical electrical equipment.

Specifies a process for a manufacturer to analyse, specify, develop and evaluate the usability of a medical device.

Specifies a process for a manufacturer to identify the hazards associated with medical devices and to manage the associated risks.

Specifies general requirements for E/E/PE safety-related systems used to carry out safety functions.

Specifies requirements for E/E/PE safety-related systems used to carry out safety functions.

Specifies requirements for software used in E/E/PE safety-related systems.

Deals with the application of safety instrumented systems in the process industry sector.

Provides guidelines for the application of IEC 61511-1.

Specifies requirements for the design, integration and validation of functional safety of safety-related control systems for machinery.

Ergonomic recommendations for manual handling including lifting, lowering, carrying, pushing and pulling. Relevant for warehousing, construction and manufacturing clients.

Ergonomic limits for pushing and pulling tasks. Relevant for logistics, warehousing and manufacturing clients.

Specifies basic terminology, principles and a methodology for achieving safety in the design of machinery.

Measurement and evaluation of whole-body vibration including health effects. Relevant for plant and heavy equipment operators.

International standard for OH&S management systems. Replaces OHSAS 18001.

The accepted SA methodology for workplace hazard identification and risk assessment — aligned with ISO 45001 and SANS 31000. Uses a risk matrix (likelihood × severity). Controls selected per hierarchy. Residual risk calculated after controls.

Standard 5×5 risk matrix: Likelihood 1 (Rare) to 5 (Almost Certain), Severity 1 (Negligible) to 5 (Catastrophic/Fatal). Risk Rating = Likelihood × Severity. Low: 1–4, Medium: 5–9, High: 10–16, Extreme: 17–25.

ISO 45001 requires meaningful worker participation in hazard identification and risk assessment. OHS Act s19 entitles employees to be represented on H&S committees. Workers performing the task must be consulted — they have knowledge of task-specific hazards not visible to management.

Risk assessments must be reviewed when there is a change in activity, equipment, substances, personnel or legislation, after any incident, or at minimum annually. Review must be by a competent person. Both the reviewed and superseded RA must be retained with version numbers.

ISO 45001 requires organisations to establish processes for proactive hazard identification covering routine and non-routine activities, infrastructure, emergency situations, human factors and changes. Hazard identification must involve workers at all levels.

Risk assessments must cover non-routine activities — maintenance, shutdowns, emergencies, visiting contractors and changes to normal operations. A generic risk assessment does not cover non-routine work. A task-specific RA or JSA must be prepared before non-routine high-risk tasks commence.

Requires assessment of OHS risks from identified hazards taking into account existing controls. Risk level must be evaluated against defined risk criteria. Methodology must be systematic, reproducible and documented. Residual risk after controls must be acceptable before work commences.

ISO 45001 requires documented operational controls for all significant hazards — including safe work procedures, permit systems and contractor controls. Controls must be communicated, implemented and monitored to verify effectiveness.

JSA breaks a job into steps, identifies hazards at each step and determines controls. Auditors expect JSAs for high-risk tasks. JSA is the practical implementation of the risk assessment at task level — not a substitute for the formal risk assessment.

Hierarchy of controls applied in order: (1) Elimination, (2) Substitution, (3) Engineering controls, (4) Administrative controls, (5) PPE as last resort. PPE alone is never acceptable where higher controls are feasible.

Any change to processes, equipment, substances, personnel, legislation or the work environment must trigger a change management review including reassessment of affected risk assessments. Temporary and permanent changes both require assessment.

Provides general guidance for the implementation of ISO 45001.

Provides guidance for managing psychological health and safety within an occupational health and safety management system.

Measurement and evaluation of human exposure to hand-transmitted vibration. Relevant for clients using power tools, grinders and jackhammers.

Analytical determination of thermal stress in hot environments. Relevant for clients with outdoor worksites, foundries and industrial ovens.

Method for measurement of noise exposure in the workplace — referenced by the SA Noise Exposure Regulations 2024.

International standard for rope access systems. Defines rope access system components, minimum anchor requirements, twin-rope system rules and supervision requirements. Referenced by SANS 10333.

Covers planning, risk assessment, equipment selection, rope access method statement, technician competency and rescue planning. Required reading for all IWH-registered rope access supervisors.

International standard for information security management systems. Required by enterprise clients managing sensitive contractor and employee data under POPIA.

Extension to ISO 27001 and 27002 for privacy information management. Provides guidance on meeting POPIA obligations for personal information processing.

Specifies quality management system requirements for organisations in the aviation, space and defence industries.

Provides guidance on the process of complaints handling related to products and services within an organisation.

Provides guidance on the application of quality management in projects.

Provides guidance on configuration management as a management discipline applied to products and services.

Quality management systems for medical devices. Relevant for healthcare facility clients and medical equipment suppliers.

Specifies QMS requirements specific to organisations in the civil nuclear industry that supply safety-classified products and services.

Specifies requirements for a management system for educational organisations to enhance the satisfaction of learners, other beneficiaries and staff.

Guidance on project management principles and processes. Relevant for clients managing multiple concurrent construction and maintenance projects.

Specifies requirements for a quality management system for organisations in the railway sector.

Requirements for collaborative business relationship management. Relevant for principal contractor / subcontractor frameworks and Section 37(2) agreement governance.

Describes the fundamental concepts and principles of quality management universally applicable to organisations seeking sustained success.

International standard for quality management systems. Required for enterprise supply chain compliance.

ISO 9001 requires a documented quality policy consistent with the organisation's context and strategic direction. Must include commitment to meeting requirements and continual improvement. Must be communicated and available to relevant parties.

Provides guidance to organisations to support the achievement of sustained success by a quality management approach.

Requirements for the operation of various types of inspection bodies. Required for organisations performing statutory inspections under OHS Act (pressure vessels, lifts, cranes).

Specifies principles and requirements for the competence, consistency and impartiality of bodies providing audit and certification of management systems.

Requirements for competence of testing and calibration laboratories. Referenced for environmental monitoring, material testing and occupational hygiene measurement.

Provides guidance on selection and application of risk assessment techniques — HAZOP, FMEA, bowtie, fault tree, event tree and consequence analysis. Referenced alongside ISO 31000.

Requirements for business continuity management systems. Relevant for enterprise clients requiring BCP documentation and scenario-based continuity plans.

Provides guidance on the use of ISO 22301.

Provides guidance on organisational resilience and strengthening the ability of an organisation to anticipate, prepare for, respond and adapt to incremental change.

Provides guidance on the process of conducting a business impact analysis for business continuity.

Guidelines for risk management principles and framework. Underpins SiteActive GTI scoring methodology and risk register approach.

Supports ISO 31000 by providing guidance on the selection and application of techniques for assessing risk.

Provides guidelines for managing legal risk within the framework of ISO 31000.

Provides the vocabulary used in the ISO 31000 family of standards on risk management.

Defines the concepts and models for electronic security of industrial automation and control systems.

Defines the requirements for establishing an industrial automation and control system security management system.

Provides detailed technical security requirements associated with the seven foundational requirements for industrial control systems.

Specifies requirements for a security management system applicable to organisations in the supply chain.

Provides reference information and guidance for implementing information security controls including those specified in ISO/IEC 27001.

Provides guidelines for information security risk management in the context of ISO/IEC 27001.

Provides guidance for improving the state of cybersecurity including consistent activities relating to cyberspace.

Guidance on social responsibility including labour practices, human rights, community involvement and fair operating practices. Not certifiable but increasingly required in ESG reporting.

Provides guidelines for best practices for implementing supply chain security, assessments and plans.

Road traffic safety management systems for organisations with significant road use including fleet operators, construction sites with heavy haulage and logistics contractors.