SRA ISO Certification Now Spans 25 Standards, Including ISO/IEC 42001 for AI

Ten years ago, most of our certification conversations were about ISO 9001. Today a typical enquiry looks different: a contractor that needs quality, environment and safety certificates for a tender; a software company asked by a bank for ISO/IEC 27001; a hospital supplier preparing for ISO 13485; and, more and more, organisations asking how to show that their use of artificial intelligence is properly governed.

To meet that demand, SRA’s certification portfolio now spans 25 ISO standards, delivered from our offices in the United States, Saudi Arabia, Pakistan, Qatar and the United Arab Emirates.

The standards we certify

The 25 standards fall into six broad groups:

• Quality and sector quality: ISO 9001, ISO 29001 (oil and gas), ISO 13485 (medical devices), ISO 22716 (cosmetics GMP) and ISO 3834 (welding quality).
• Environment, energy and safety: ISO 14001, ISO 45001, ISO 50001, ISO 39001 (road traffic safety) and ISO 46001 (water efficiency).
• Food: ISO 22000.
• Information, technology and AI: ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 20000-1 and ISO/IEC 42001.
• Resilience, governance and compliance: ISO 22301, ISO 28000, ISO 37001 (anti-bribery) and ISO 37301 (compliance management).
• Assets, facilities, education and conformity: ISO 55001, ISO 41001, ISO 21001, ISO 29993, ISO/IEC 17025 and ISO/IEC 17020.

The full list, with details for each standard, is on our certification page.

Spotlight: ISO/IEC 42001 for artificial intelligence

ISO/IEC 42001 is the first international management system standard for artificial intelligence. It helps organisations that develop, provide or use AI systems to manage risks such as bias, lack of transparency, data misuse and unclear accountability, with the same plan-do-check-act structure as ISO 9001 and ISO/IEC 27001.

Demand is coming from two directions. Technology firms want to reassure clients and regulators that their AI products are governed responsibly. And organisations in finance, healthcare and government services across the Gulf are adopting AI tools quickly and want a recognised framework to manage them. Because ISO/IEC 42001 shares its structure with ISO/IEC 27001, many clients add it to an existing information security system rather than starting from scratch.

Learn more about ISO/IEC 42001 certification with SRA.

One audit programme, several standards

Most ISO management system standards now share a harmonised structure, so the same leadership, risk, internal audit and management review processes can serve several certificates at once. For clients, an integrated audit programme usually means:

1. Fewer audit days than certifying each standard separately
2. One set of internal audits and one management review
3. Less disruption for staff who would otherwise be interviewed several times
4. A single audit calendar and point of contact

Support for the 2026 transitions

2026 is a busy year for certified organisations. ISO 14001:2026 was published in April and ISO 9001:2026 in September, while ISO 45001 is in its final drafting stages. Our team supports clients with gap analysis, internal auditor training through our ISO courses, and transition audits planned around existing surveillance visits.

Why it matters in tenders

Across Saudi Arabia, the UAE, Qatar and Pakistan, ISO certificates have become a standard part of supplier prequalification. Large projects often ask for quality, environmental and safety certificates together, and a growing number of technology and financial clients now ask for information security or privacy certification as well. Planning these certificates as one programme, rather than reacting to each tender separately, saves time and gives your team a single system to maintain instead of several disconnected ones.

Certificates that can be checked

A certificate is only useful if your clients trust it. Every SRA certificate can be checked through our online certificate verification page, so procurement teams can confirm validity and scope in seconds.

Frequently asked questions

Can we combine ISO 9001, ISO 14001 and ISO 45001 in one audit?

Yes. Because they share a common structure, the three are commonly audited together as an integrated management system.

Who needs ISO/IEC 42001?

Any organisation that develops, provides or uses AI systems and wants to demonstrate responsible, well-governed use of AI.

Where does SRA provide certification?

Across the USA, the GCC and Pakistan, at client premises and project sites.

How do we start?

Share your scope, number of employees and sites, and the standards you need; we will prepare a proposal.

Talk to our certification team: request a quotation or read more about SRA. For background on the AI standard, see ISO/IEC 42001 on iso.org.