Implementation areas and typical requirements
Quality and processes: ISO 9001 and IATF 16949
An ISO 9001:2015 certificate is the document most often required in public tenders and supplier qualification. I run ISO 9001 implementations as process clean-up - from a responsibility map to indicators that are actually measured. For automotive suppliers, IATF 16949 additionally covers OEM customer requirements, the PPAP process and FMEA analysis.
ISO 9001:2015›IATF 16949›
Information security: ISO 27001, NIS-2 and TISAX
ISO 27001 structures information security: asset inventory, risk analysis, Annex A controls and a continuity plan. Companies covered by the NIS-2 directive usually start with a NIS-2 compliance audit showing the gap between the current state and statutory duties. TISAX certification consulting supports automotive suppliers processing customer data.
ISO 27001›NIS-2›TISAX›RODO›
Environment and energy: ISO 14001 and ISO 50001
ISO 14001 environmental management covers identification of environmental aspects, waste management and readiness for inspections. ISO 50001 addresses energy consumption optimisation: the energy review, a baseline and indicators that let savings be evidenced rather than merely declared.
ISO 14001:2015›ISO 50001›PPWR & EUDR›
Food and feed: HACCP, BRC and IFS
HACCP is mandatory for every food business and starts with hazard analysis and defining critical control points. BRC and IFS certification is the next step - required by retail chains and export customers, with an audit far more detailed than HACCP alone.
HACCP / GMP / GHP›ISO 22000›BRC / IFS›GMP+›
ISO 45001:2018 occupational health and safety
ISO 45001:2018 replaced OHSAS 18001 and emphasises prevention over reaction. Implementation covers workstation hazard identification, occupational risk assessment, worker consultation and emergency preparedness.
ISO 45001:2018›
Medical devices and AI: ISO 13485 and ISO 42001
ISO 13485 applies to manufacturers and distributors of medical devices - design controls, process validation and batch traceability. ISO 42001 is the newest standard: AI management system certification covers oversight of AI systems, impact assessment and accountability for automated decisions.
ISO 13485›ISO 42001›