Who is ISO 53001 for? Organisations in scope

Who is ISO 53001 for: a standard without eligibility criteria

Who is ISO 53001 for? The short answer is any organisation. Like other standards built on the harmonized structure, it is generic: according to BSI, publisher of the British edition (BS ISO/UNDP 53001:2026), the organisation sets its own scope, priorities and level of ambition, whatever its type, size or sector. No headcount threshold, legal form or activity determines access to certification, which remains voluntary.

The standard does not designate a population that must comply. It is a tool whose value depends on each organisation's situation. The rest of this page looks at who finds it useful, and why. The guide to the ISO/UNDP 53001 standard presents its full content.

Types of organisation and points of attention at audit

Type of organisation	Why the standard is relevant	What draws the auditor's attention
Large company or group	To structure SDG commitments already made public and submit them to independent verification	Consistency between the certified scope and the scope of published commitments
Small or medium-sized enterprise	To hold internationally recognised evidence without building a heavy reporting apparatus	Proportionality: objectives and indicators matched to resources, but genuinely monitored
Micro-enterprise	To stand out with demanding customers through an identified framework	Whether responsibilities are real when they rest on a handful of people
Local authority or public body	To connect local public policy with the SDGs in a verifiable framework	Where the SDGs sit in executive decisions and budget monitoring
Association, foundation or NGO	To report to funders and partners on the SDG contribution	How the statutory mission and the selected SDGs fit together

Size changes the audit, not the requirements

A small organisation is not subject to a lighter version of the standard. It meets the same requirements as a large group; only the form of the evidence differs. The auditor may accept a simple register or the dated minutes of a management meeting, provided they establish that the requirement is met.

What varies with size and complexity is the audit itself. ISO/IEC 17021-1 requires the certification body to determine audit duration according to the organisation, its scope and its sites. A multi-site organisation or a diversified group calls for wider sampling than a single-site structure. The detailed arrangements are set out when a quote is requested.

Public bodies and non-profits

Local authorities and associations often have a mission that already overlaps certain SDGs. The risk for them is to assume that the mission alone demonstrates their contribution. The auditor does not stop at the statutory purpose: the auditor looks for objectives and indicators belonging to the system, which distinguish what the organisation manages from what it merely states.

Suppliers to large buyers

For suppliers operating in or selling into the European Union, the reporting landscape changed in 2026. Directive (EU) 2026/470, known as Omnibus I, was published in the Official Journal of the European Union on 26 February 2026 and has applied since 18 March 2026. The Corporate Sustainability Reporting Directive (CSRD) now covers only companies that exceed both 1,000 employees and €450 million in turnover. The directive also protects smaller partners: a company within scope cannot ask a partner with no more than 1,000 employees for more information than the voluntary standard based on the VSME provides. Member States have until 19 March 2027 to transpose it.

For a supplier, this limit changes the nature of the relationship. A buyer can no longer pile up questionnaires beyond the VSME framework. The supplier remains free, for its part, to present voluntary evidence verified by a third party on its own initiative. An ISO 53001 certificate is not a required answer and does not replace the information covered by the VSME framework; it shows that a system for managing the SDG contribution exists and has been audited. Outside the European Union these rules do not apply as such, but the certificate keeps the same meaning: a voluntary, independently verified attestation.

Situations where the standard is most readily understood

An organisation already publishes SDG commitments and wants them checked by a third party rather than self-declared.
An organisation already applies ISO 9001, ISO 14001 or ISO 45001 and wants to extend its integrated system to the SDGs.
A supplier serves customers who give weight to independent evidence of sustainability.
A public body or non-profit must report to funders on its contribution to the 2030 Agenda.

Frequently asked questions

Can an SME be certified to ISO 53001?

Yes. The standard sets no threshold for headcount or turnover. An SME meets the same requirements as a large group, with resources proportionate to its size. The certification body determines audit duration according to the organisation and its scope, in line with ISO/IEC 17021-1, which adjusts the audit effort without lowering the requirements.

Can a local authority or a charity apply ISO 53001?

Yes. The standard is aimed at any organisation, whatever its legal status. For a public body or non-profit, the key is the distinction between its mission, which may already overlap certain SDGs, and its management system, which must set its own objectives and indicators. The auditor examines the latter, not the statutory purpose alone.

Can a buyer require ISO 53001 certification from its suppliers?

Since the Omnibus I directive, a company subject to the CSRD cannot ask a partner with no more than 1,000 employees for information going beyond the voluntary standard based on the VSME. Available sources do not settle whether certification can be required by contract. The supplier remains free to present a certificate on its own initiative.

Contact

Who is ISO 53001 for: the organisations the standard concerns (ISO/UNDP 53001)