Consulting · Montenegro
ISO certification in Montenegro
This is where we work from. We implement ISO standards and HACCP on site — in Podgorica, Budva and Bijelo Polje — prepare you for the certification audit, and run the project in Montenegrin or in English. The certificate itself is issued by an independent accredited certification body, not by us.
What we do in Montenegro
We have been implementing standards since 2014, with consultants in Podgorica, Budva and Bijelo Polje and clients across the country.
A project starts with a gap analysis — where you are against the requirements of the standard — and ends with a certification audit by an independent body. In between we write the documentation around your processes (not a template), train the people who will run the system, carry out the internal audit and the management review, and stay with you through the audit itself. What each phase involves is on the page about ISO standards implementation.
Training is delivered in Montenegrin or in English, on your premises or online — from understanding the standard to internal auditor training. See the training page.
MEST designations — the same standard under a local name
In tenders in Montenegro you will see MEST designations. They are not different standards.
The Institute for Standardization of Montenegro (ISME) adopts international standards into the national catalogue and adds the MEST prefix — so ISO 9001:2015 appears as MEST EN ISO 9001:2016, and ISO/IEC 27001:2022 as MEST ISO/IEC 27001:2023. The content, the clauses and every requirement an auditor checks are identical, and a certificate issued under one designation covers the other. The full table of designations by market is in our FAQ, and what this means for bids is on the page about ISO standards in tenders.
What Montenegrin law requires
Some standards are a legal obligation here, not a customer request. The dates below are the state of play when this page was written — check the current text with the competent authority before you act on it.
Information security. The Law on Information Security (Official Gazette of Montenegro, No. 113/2024) took effect on 5 December 2024 and aligns Montenegro with the EU NIS2 directive. Key entities must hold a MEST ISO/IEC 27001 certificate within 30 months — by June 2027; important entities apply the prescribed measures without a mandatory certificate. See ISO 27001 and NIS2.
Food safety. Food-business operators must establish and apply procedures based on HACCP principles under the Food Safety Law. See HACCP and ISO 22000.
Personal data. The new Law on Personal Data Protection, adopted in September 2026, is aligned with the GDPR and sets out essentially the same obligations for domestic organisations. See GDPR.
Money laundering. Obliged entities need a risk analysis, internal procedures, an appointed compliance officer and staff training — see AML.
Working from Montenegro, across the region and abroad
The same team covers the neighbouring markets and clients further afield.
We work on site in Serbia, Bosnia and Herzegovina, Croatia, North Macedonia, Albania and Kosovo, and remotely in English for clients elsewhere. If your customers are in the European Union, see what changes on the page about the EU market; for US customers — supplier audits, security questionnaires, SOC 2 alongside ISO 27001 — see the US market page. The region we cover is described on the region page.
Starting a project in Montenegro?
Tell us which standard you need and the size of your company — we reply within 24 hours with a realistic implementation plan and budget. WhatsApp is the fastest way to reach us.