Organisations and sectors

ISO/UNDP 53001 by type of organisation and sector: frequently asked questions

The ten most common questions on this topic, each with a direct answer and a fuller explanation. The answers explain the standard and what the auditor checks; they do not replace the text of the standard, sold by ISO and national standards bodies. Topic 8 of 10.

Updated: November 4, 2026 · edition covered: ISO/UNDP 53001:2026

What this topic covers

This theme answers questions about who the standard applies to: companies of every size, public bodies, charities, suppliers asked by their customers to certify, and multi-site organisations. The page on who the standard is for gives the overall picture.

Frequently asked questions

Can an SME be certified to ISO/UNDP 53001?

Yes. ISO/UNDP 53001 applies to any organisation, whatever its size. For a small or medium-sized enterprise (SME), the auditor checks the same requirements as elsewhere but expects proportionate arrangements: lean governance, well-argued priority SDGs, simple indicators that are genuinely tracked. Audit duration, which depends on headcount, is shorter.

Proportionate does not mean lighter

The ISO/UNDP 53001 standard has no reduced version for small organisations. Every requirement in clauses 4 to 10 applies. What changes is the form the evidence takes. In an SME, the management review can sit within an existing committee, provided SDG topics are genuinely discussed and recorded. The internal audit can be carried out by anyone who is not auditing their own work.

The auditor does not hold the absence of a dedicated department against an SME. They check that responsibilities are assigned and understood.

Points examined closely

In a small business, the owner or managing director often makes most decisions. The auditor checks that those decisions reflect the SDG priorities and do not rely on one person's memory alone: documented information must make it possible to trace decisions and results.

The auditor also looks at whether the choice of SDGs fits the actual business. A small manufacturer that sets aside climate or working-conditions issues has to explain why, especially as, according to BSI, publisher of the British edition, SDGs 5, 8 and 13 are addressed by every organisation. See who the standard applies to.

How is an ISO/UNDP 53001 audit conducted in a large company?

In a large company, the ISO/UNDP 53001 audit involves a team of auditors over a longer period, with a plan covering executive management, central functions, operating units and a sample of sites. Above all, the auditor checks how SDG priorities cascade from the top down to operations and how results flow back up to governance.

Cascading: the central issue

In a large organisation, the SDG policy and priorities required by the ISO/UNDP 53001 standard are often well drafted at head office. The difficulty lies elsewhere: whether they influence decisions in business divisions, purchasing and investment. The auditor follows audit trails, for example an objective linked to a priority SDG, from the moment top management sets it to the actions at a site and the results reported back at review.

Several levels of management are interviewed and their answers compared. A gap between what head office says and what operational teams know is a common finding in large structures.

How the audit is organised

The audit plan is drawn up by a team leader who coordinates several auditors, sometimes supported by a technical expert from the sector. Cross-cutting topics such as governance, management review and internal audit are examined at head office; the sites visited are chosen according to sampling rules.

Large companies often hold other management system certifications or publish sustainability reports. The auditor does not treat these as evidence of conformity, but a combined audit remains possible. For sites, see auditing a multi-site organisation.

Can a local authority be certified to ISO/UNDP 53001?

Yes. A municipality, a grouping of municipalities or a regional authority can have its SDG management system certified to ISO/UNDP 53001. The auditor checks that the scope is clear, that SDG priorities are decided by elected officials and senior administrative management, and that their effects can be traced in decisions and budgets.

Defining what is certified

A local authority acts on two levels: its own operations (buildings, purchasing, human resources, vehicles) and its public policies across the territory it serves. The scope must say which is covered, or whether both are. The auditor checks that the certificate does not imply the whole territory is committed when only the administration is.

Interested parties are numerous: residents, local businesses, community groups, neighbouring authorities, central government services. The auditor seeks to establish that analysing them genuinely informed the choice of SDGs, rather than merely appearing in a document.

Political and administrative governance

The ISO/UNDP 53001 standard requires commitment from top management. In a local authority, that role is shared between the elected executive and the senior officials who run the administration. The auditor checks that SDG priorities are discussed where decisions are made: council resolutions, budget guidelines, investment programmes.

An election during the cycle is a change the system has to absorb. At the next surveillance audit, the auditor checks whether priorities were reconsidered, then confirmed or amended according to the system's own rules. For other public bodies, see the public sector.

Can a non-profit association or foundation be certified to ISO/UNDP 53001?

Yes. Non-profit associations and foundations can have their SDG management system certified to ISO/UNDP 53001. Their mission is often already tied to one or more SDGs; the auditor then checks that the system goes beyond describing that mission and also manages the effects of their internal operations and partnerships.

Statutory mission and management system

A foundation devoted to education or a charity working on employment integration contributes to certain SDGs by its very nature. From an audit perspective, the risk is to confuse the organisation's purpose with its management system. The auditor seeks to establish that the organisation has analysed all its impacts, including those unrelated to its cause: employment conditions for staff, the place of volunteers, travel, purchasing, management of funds.

They check that the objectives set are measurable and do not simply repeat the activity indicators reported to funders.

Non-profit governance

The board of directors, executive committee or supervisory board plays the role of top management within the meaning of the ISO/UNDP 53001 standard, together with salaried management where there is one. The auditor checks that SDG priorities are debated there and that decisions appear in the minutes.

Funders, donors and beneficiaries are interested parties whose expectations bear on the choice of priorities. Certification does not replace the specific controls that apply to organisations raising money from the public. See who the standard applies to and the case of SMEs.

Can a public body or government administration be certified to ISO/UNDP 53001?

Yes. A public body, a government department, a hospital or a university can have its SDG management system certified to ISO/UNDP 53001. The auditor applies the same requirements as to a company, while taking account of the supervising authority, budget rules and public procurement law that frame these organisations' decisions.

Specific points examined

In the public sector, part of the room for decision is set from outside: missions defined by law, objectives assigned by a supervising ministry, a budget voted by others. The auditor applies the ISO/UNDP 53001 standard without holding the organisation responsible for what is beyond its control. They check that these constraints appear in the context analysis and that the organisation makes full use of the margin it has.

Public procurement is often a significant lever. The auditor may examine a sample of contracts to check that criteria linked to the priority SDGs are applied, not just announced in a purchasing strategy.

Public service mission and SDGs

A public body's mission often overlaps with certain SDGs: health, education, research, access to services. The auditor checks that the system also covers internal operations: working conditions, gender equality at work, energy use, management of buildings and property.

Certification remains voluntary, including for public bodies. Local authorities, which combine internal management with local policy, are covered in a separate question.

Can an organisation outside Europe be certified to ISO/UNDP 53001?

Yes. ISO/UNDP 53001 is an international standard that applies in every country. An organisation outside Europe can be certified by the certification body of its choice, European or not. The auditor checks the same requirements while taking local context into account: legal framework, national development issues and the expectations of interested parties.

Local context in the audit

The ISO/UNDP 53001 standard asks the organisation to understand its context. Outside Europe as elsewhere, that includes national sustainable development priorities, local working conditions and climate risks specific to the region. The auditor seeks to establish that the choice of priority SDGs follows from this context rather than from a model imported from head office.

The auditor also checks awareness of the legal obligations that apply locally. An organisation may set itself stricter rules than local law, but it must at least comply with that law.

Practical questions

The audit is held in a language understood by the people interviewed, with an interpreter if necessary. Part of it can be done remotely, but stage 2 normally requires presence on site. Auditors' travel is reflected in the cost.

A certificate's standing abroad also depends on whether the body issuing it holds accreditation from a national accreditation body. Choosing a certification body is covered in a dedicated question, languages in audit languages.

Can a group certify several subsidiaries under a single ISO/UNDP 53001 certificate?

Yes, if the subsidiaries operate under the same SDG management system, run by a central function that sets priorities, conducts the internal audit and management review, and can require corrective action. Otherwise, each subsidiary is certified separately. The auditor checks that this shared control is real, beyond mere ownership links.

Ownership versus a common system

Owning subsidiaries is not enough to make a common management system. The auditor seeks to establish that the parent company actually exercises control over the topics covered by the ISO/UNDP 53001 standard: shared or cascaded SDG priorities, consolidated objectives, information reported and analysed at group level, authority to have a nonconformity corrected in a subsidiary.

Where subsidiaries keep full management autonomy, a single certificate would give a misleading picture. Each then has its own system and its own certificate, possibly audited under a coordinated programme.

What appears on the certificate

A group certificate names every legal entity covered. A subsidiary missing from the list cannot claim certification, even if it carries the group's brand. Acquisitions and disposals during the cycle are reported to the certification body, which adjusts the scope.

Priority SDGs may differ from one subsidiary to another depending on their activities, provided the differences are justified within the common system. For sampling sites within a single entity, see the multi-site audit.

Can a single site or activity be certified to ISO/UNDP 53001?

Yes. An organisation can limit its ISO/UNDP 53001 certification scope to one site, activity or entity. The auditor checks that the boundary is justified, that the unit covered really has the authority needed to manage its SDG priorities, and that communication does not present the certification as extending to the whole organisation.

The question of authority

Can an isolated site support, on its own, a system that meets the ISO/UNDP 53001 standard? It depends on which decisions are taken there. If choices on investment, purchasing or employment are made at head office, outside the scope, the site controls only some of the levers. The auditor then checks how the system handles that dependence: are head office decisions affecting the site known, discussed and reflected in its objectives?

A partial scope is acceptable when it matches a unit that genuinely decides and acts. It is far less so when it singles out the most favourable part of the organisation.

Communication and later changes

Any reference to the certification must state the scope. Announcing ISO 53001 certification on the website of a group in which only one plant is certified is misuse. The rules are explained in using the certificate and certification mark.

A limited scope can later be widened through an extension audit, without waiting for recertification.

Can a start-up be certified to ISO/UNDP 53001?

Yes, provided its SDG management system has been running long enough to produce evidence: indicator results, a completed internal audit, a management review held. The auditor does not demand a long track record, but expects at least one full management cycle before stage 2. Rapid changes in the business are then followed closely.

Little history, same requirements

The ISO/UNDP 53001 standard takes no account of an organisation's age. A start-up has to show that the requirements are applied, not merely planned. At stage 2, the auditor expects real records: a management review that examined SDG results, an internal audit and its follow-up, indicators recorded over a period long enough for a first analysis.

When the business model itself targets an SDG, such as an energy-efficiency solution, the auditor separates the product's promise from the company's management system. Certification covers the latter.

Change as an audit topic

A pivot, a funding round, rapid hiring, a new investor joining the shareholders: such events alter the context and sometimes the priorities. The standard deals with planning changes in clause 6. During surveillance audits, the auditor checks that these changes were analysed against the chosen SDGs and that the certificate's scope is still accurate.

A small young company is given a short audit duration, calculated on its headcount. See also certification for SMEs.

Can a supplier show its ISO/UNDP 53001 certification to its customers?

Yes. A supplier certified to ISO/UNDP 53001 can show its certificate to customers as third-party evidence that it manages its contribution to the SDGs through a management system. The certificate does not replace the data a customer asks for, but it attests that those data come from a system audited every year.

What a buyer can infer

A company assessing its suppliers often receives self-declared questionnaires. The certificate offers something else: assurance that an independent body has verified, within a defined scope and against the ISO/UNDP 53001 standard, that SDG priorities are set, monitored and built into decisions, and that it keeps verifying this.

On the other hand, it says nothing about the level of performance reached or compliance with a particular specification. A customer that needs a specific indicator still has to ask for it. It can also check the certificate's validity and scope with the body that issued it.

The auditor's view

At the supplier, customers are among the most important interested parties. The auditor checks that their sustainability expectations have been identified and taken into account in the choice of SDGs and objectives, without the system being reduced to answering one dominant customer.

On the value chain, the EU Omnibus I directive prevents a company subject to the Corporate Sustainability Reporting Directive (CSRD) from asking a partner with no more than 1,000 employees for more information than the voluntary standard based on the VSME provides. The link with that framework is covered in the question on the VSME.

Contact