Which ISO standard does my company need?

The right ISO standard is the one that matches what you or your customers need to see managed. No standard is "the best" for every company. Pick by goal first, then check the sector, then confirm with the buyer and the certification body that the standard is what is actually being asked for.

Step 1: name your goal

Write one sentence that begins "We want a standard because...". The reason usually falls into one of these groups.

Consistent work and fewer errors. Quality management points to ISO 9001.
Environmental impact and obligations. Environmental management points to ISO 14001.
Safety of staff and contractors. Occupational health and safety points to ISO 45001.
Protecting information and customer data. Information security points to ISO/IEC 27001.
Controlling food safety hazards. Food safety points to ISO 22000.
Staying operational through disruption. Business continuity points to ISO 22301.

If your reason is "a tender asked for it" or "a customer asked for it", find out which standard they name and in what wording. See certification for tenders.

Step 2: look at your sector

Sectors tend to have a few standards that come up again and again. These are common starting points, not rules.

A contractor often looks at quality, safety and environment together. See construction.
A food producer often starts with food safety. See food and beverage.
A software or managed service provider often looks at information security. See IT and SaaS.
Logistics firms may look at quality, safety and supply-chain security. See logistics.

Other pages cover manufacturing, healthcare, facilities management, financial services, education, hospitality and government suppliers. The full list is on the industries page.

Step 3: check what kind of standard it is

Not every ISO standard leads to a certificate.

Management-system certification. An independent certification body audits you and may issue a certificate. ISO 9001 is an example.
Specialist accreditation pathway. Laboratories show competence to ISO/IEC 17025 through accreditation, not ordinary certification.
Guidance only. ISO 26000 and ISO 31000 give guidance and are not intended for certification. If someone offers you a "certificate" for them, ask questions.

Each page in the standards catalogue carries one of these labels.

Step 4: decide how many, and in what order

Many organizations start with one standard, usually the one a customer asked for or the one closest to their biggest risk, and add others later. Several standards share a common structure, so they can often be run in one system and audited together. That is covered in integrated management systems. You do not need to take on everything at once.

Step 5: check the edition

Standards are revised. ISO 9001:2026 was published on 16 September 2026 and replaces the 2015 edition. When a new edition appears, questions about transition arrangements go to the certification body, not to us. Our article on ISO 9001:2026 questions for your certification body lists what to ask.

Comparing the three most common management standards

If you are choosing between quality, environment and safety, the article ISO 9001 vs ISO 14001 vs ISO 45001 sets them side by side.

Common mistakes

Choosing by number or popularity instead of by need.
Assuming a standard applies to your products when it applies to your management system.
Taking on a standard because a competitor mentions it, without asking whether customers care.
Not confirming the scope. A standard may fit your main activity but not a smaller one.

What happens next

Once you have a short list of one or two standards, gather the information a certification body will ask for, then request a quote. Our team can connect your inquiry with relevant independent certification bodies. They, not MIYAAR CONNECT, audit and decide on certification.