Home › ISO Knowledge Hub › Understanding ISO Standards
Understanding ISO Standards
Build a confident foundation before selecting a standard, starting implementation work or discussing certification. This guide explains what ISO does, how standards are developed, how to read a standard, and how requirements, guidance and certification fit together in practice.
Use it as an orientation page for leadership teams, project owners, consultants and auditors who need a clear decision framework before turning requirements into procedures, records or audit criteria.
Start here: What this guide helps you do
Use this page as an executive and implementation primer before writing procedures, choosing templates or preparing for an audit. It is designed to reduce common misconceptions at the start of an ISO project.
- Clarify roles: Separate the role of ISO, the organization, the certification body and the accreditation body.
- Read with intent: Identify scope, terms, applicable clauses and evidence expectations in a practical sequence.
- Classify the document: Distinguish requirement based standards from guidance only documents.
- Decide proportionately: Select a standard based on purpose, applicability, stakeholder need and desired assurance.
Practical decision setting: A standard creates value only when it is translated into scope, ownership, controls, records and improvement actions.
01. What Is ISO?
Start with what ISO is responsible for and what lies outside its role.
The International Organization for Standardization (ISO) is an independent, non governmental international organization that brings experts together to develop internationally agreed standards. ISO standards provide a shared reference for products, services, processes and management practices.
Standardization can help organizations establish consistent expectations, improve interoperability, manage risks and support stakeholder confidence. The actual benefit depends on the standard selected and how effectively it is applied.
Important distinction: ISO is a standards developer. It does not operate an organization’s management system, issue certificates or certify companies.
01 International agreement
Documents are developed through input from technical experts and participation by ISO member bodies.
02 Practical consistency
Standards offer a common basis for understanding performance, compatibility, safety and effective management.
03 Voluntary use: With exceptions
ISO standards are generally voluntary, but laws, contracts, procurement or other obligations can make particular requirements binding.
02. How International Standards Are Developed
ISO develops standards using structured technical work and broad international participation rather than decisions made by an individual consultant or certification body.
Typical progression: Proposal → Drafting → Consultation → consensus and approval → publication. Actual ISO project stages, voting and deliverables depend on the applicable ISO/IEC Directives; the diagram below is an educational summary, not a procedural reproduction.
Need 01 · Identify a need
Stakeholders identify an international standardization need and assess the case for new or revised work.
Draft 02 · Organize expertise
An ISO technical committee or working group develops proposals with participating experts.
Review 03 · Review and comment
Successive drafts undergo committee review, consultations and technical refinement.
Agree 04 · Build agreement
Participants work toward international consensus and complete the applicable approval steps.
Publish 05 · Publish and maintain
The international standard is issued; it can later be reviewed, amended, revised or withdrawn.
Source: ISO Standards and the ISO/IEC Directives. A publication date does not by itself indicate that certification to a new edition is already required.
03. Types of ISO Standards and MSS
A management system standard is one category of ISO standard, not a synonym for every ISO publication.
MSS Management system standards (MSS)
Set requirements or provide guidance for the way an organization governs its activities and achieves objectives. Examples include quality, environment, occupational health and safety, and information security.
Technical Product, service & technical standards
Describe specifications, test methods, compatibility, terminology or other technical characteristics for defined applications.
Guide Supporting guidance & related documents
Help users interpret, audit, implement or improve particular systems or practices. Not every guidance document is intended for certification.
Type A MSS: Requirements
- Defines requirements against which conformity can be assessed.
- Examples: ISO 9001 (quality), ISO/IEC 27001 (information security), ISO 45001 (occupational health and safety).
- Certification may be available through independent third party certification bodies.
Type B MSS: Guidance
- Offers recommendations and supporting guidance rather than a stand alone certifiable set of requirements.
- Examples of supporting guidance include ISO 19011 (management system auditing) and ISO 14004 (environmental management guidance).
- Use it to strengthen interpretation and implementation alongside applicable requirements.
Generic versus sector specific: A generic MSS applies across different industries. A sector specific MSS addresses additional or adapted expectations for a particular field, such as ISO 13485 for medical devices. A harmonized structure helps many MSS work together but does not erase discipline specific requirements.
For current editions, document classification and Type A/Type B explanations, consult ISO Management System Standards.
04. How to Read an ISO Standard
Do not read a standard as a template to copy. Read it as a structured source of applicability, terminology, requirements and evidence expectations.
| Read this part | What to look for | What to do in practice |
|---|---|---|
| Publication identity | Number, full title, edition, publication date and status. | Confirm the applicable, current document before planning or auditing. |
| Scope | What the document applies to and any stated boundaries. | Determine whether its subject matches your activities and objectives. |
| Normative references | Other documents that are indispensable for application when referenced normatively. | Check whether additional documents are needed and which editions apply. |
| Terms & definitions | Defined vocabulary used to interpret the document consistently. | Clarify technical terms before assigning tasks or writing procedures. |
| Core clauses / requirements | Subject specific requirements, recommendations or methods. | Separate obligations from optional approaches and map each applicable requirement to a process. |
| Annexes / bibliography | Supporting explanations, examples or normative content depending on designation. | Check whether each annex is normative or informative; do not assume all annexes are optional. |
Practical reading method: The 5-question check
- Applicability: What activities, locations, products or services does the clause address?
- Requirement: Which action or outcome is expected, and what is the exact normative wording?
- Ownership: Who is responsible for implementation and evidence?
- Control: What operational process will meet the requirement in daily work?
- Verification: How will you verify conformity and effectiveness through actual records and observations?
Clause 4 to 10 labels are common to many management system standards that use ISO’s harmonized approach; not every ISO standard follows that structure. Always consult the licensed publication and check the edition.
05. Requirements vs Guidance
Two documents can address the same management topic while serving very different purposes.
Requirements: What must be fulfilled
- Often expressed using normative language such as “shall”.
- Establish conditions against which conformity may be evaluated.
- Should be translated into controls, responsibilities and evidence appropriate to the organization.
- Certification to a requirements based MSS, where offered, assesses conformity to that standard.
Guidance: How users may approach a topic
- Frequently uses wording such as “should” for recommendations or “may” for permission.
- Can describe good practices, examples or methods.
- Helps with interpretation but is not automatically a mandatory criterion.
- A guidance only standard is not itself normally a certifiable management system requirements standard.
Be careful: The classification depends on the entire document and the provisions that apply, not only a single verb. An organization may also have binding contractual, regulatory or industry obligations alongside the standard.
06. Standards, Conformity Assessment and Certification
Using ISO standards does not automatically mean a company is certified, nor does the publication of a standard mean ISO itself will certify the organization.
ISO publishes standards; organizations implement them; external conformity assessment bodies may assess them. Certification is a form of independent assurance that specified requirements have been met, and accreditation is formal recognition of a certification body’s competence and impartiality.
ISO 01 · ISO / standard developer
Develops and publishes the relevant international standard. ISO does not itself issue ISO management system certificates.
Use 02 · Organization / implementer
Defines scope, establishes controls, maintains records and evaluates management system performance.
Assess 03 · Certification body
An independent certification body evaluates conformity and, where appropriate, issues the certificate.
Verify 04 · Accreditation body
An accreditation body may recognize a certification body’s competence and impartiality under relevant frameworks.
Verify a certification claim
- Request the certificate number, exact organization name, sites, scope, standard and expiry/status.
- Identify the certification body and verify validity with the issuer.
- Where applicable, check accreditation and the relevant accreditation body or IAF CertSearch.
- Do not treat the ISO logo as proof of organizational certification.
Source: ISO: Certification. An ISO standard may be used without third party certification; certification can also be required by a contract or regulator in specific contexts.
07. Essential ISO Terms
A small shared glossary prevents confusion between the standard, the system implementing it, and evidence of conformity.
Term Standard
A published agreed document that may set out requirements, specifications, guidance or characteristics.
MSS Management system
A connected set of organizational elements for establishing policies, objectives and processes to achieve them.
Check Conformity
Fulfilment of a specified requirement; evidence is needed to support a claim of conformity.
Assure Certification
Third party written assurance that specified requirements are fulfilled.
Accredit Accreditation
Independent formal recognition of a conformity assessment body’s competence.
Align Harmonized Structure
Common clause structure and terminology used across many management system standards, enabling easier alignment.
Terms are summarized for learning purposes. Refer to the actual ISO standard and the ISO Glossary for authoritative usage in context.
08. Decision Guide: Learn → Select → Implement → Verify
A standards decision should start with the organization’s purpose, not with a certificate or a pre made form.
| Decision stage | Key question | Practical output |
|---|---|---|
| 1. Define the purpose | Learning, buyer requirement, compliance, process improvement or certification? | A written problem statement and success criteria |
| 2. Select relevant standards | Which activity, sector, scope and stakeholder requirements are relevant? | A candidate list with title, edition and applicability |
| 3. Read and compare | Does the standard contain requirements, guidance or both? How does it interact with existing systems? | Clause to process map and initial gap findings |
| 4. Implement proportionately | What controls, resources, competence, documentation and evidence are needed? | Action plan, accountable owners and operating controls |
| 5. Decide on assurance | Is self assessment sufficient or is accredited third party certification necessary? | Assurance plan and verification approach |
09. Frequently Asked Questions
Answers to recurring questions from organizations beginning their ISO journey.
Is ISO a certification body?
No. ISO develops and publishes International Standards. External certification bodies perform third party certification and issue certificates where applicable.
Are ISO standards mandatory?
They are generally voluntary. Particular requirements can become binding through legislation, regulations, contracts, tenders or other commitments.
Can we implement an ISO management system without certification?
Yes. An organization can use a management system standard to improve its practices without pursuing external certification.
Does every ISO standard support certification?
No. Some set requirements against which conformity can be evaluated, others provide guidance, methods, terminology or technical specifications. Check the purpose and conformity assessment context of each document.
What is a management system standard (MSS)?
An MSS sets out requirements or guidance for managing organizational processes and responsibilities to achieve defined objectives. Many MSS share a harmonized structure.
What is the difference between “shall” and “should”?
In ISO/IEC drafting conventions, “shall” ordinarily expresses a requirement, while “should” ordinarily expresses a recommendation. Always read the provision and its context.
What does accreditation mean?
Accreditation is independent formal recognition that a conformity assessment body, such as a certification body, has demonstrated relevant competence and impartiality.
Where can I check the latest ISO standard edition?
Use the official ISO standards catalogue, or the relevant national standards body. Validate the title, edition, amendments and current status before relying on a document.
Can ISO Toolkits replace the actual ISO standard?
No. ISO Toolkits provides independent editable implementation resources; the organization still needs to confirm and apply the applicable official requirements and licensing conditions.
10. Official Sources and Further Reading
Use primary ISO references when checking a standard’s purpose, status, edition or certification context, and use ISO Toolkits guides as separate implementation support.
Official ISO references
- ISO: Standards Official introduction to International Standards and their purposes.
- ISO: Management System Standards MSS types, harmonized approach and implementation benefits.
- ISO: Certification Certifications, accreditation, third party responsibilities and verification.
- ISO: Glossary Terms and language used within the standardization system.
- ISO/IEC Directives The formal framework for developing international standards and MSS.
Continue in the ISO Knowledge Hub
Explore Editions & Transition Guidance →
Understand how amendments, revisions and transition decisions affect existing management systems.
Explore Scope & Applicability →
Translate a standard’s intended purpose into a defensible organizational scope.
Explore Harmonized Structure & Annex SL →
Learn how shared MSS structure facilitates multi standard integration.