ISO 21500:2021 and ISO 21502:2020
ISO 21500 — project management in practice
ISO 21500 and ISO 21502 are a family of guidelines for managing projects, programmes and portfolios. They are not certified, but they give a common language and order to work that is usually run by e-mail and agreements made on the fly.
What is ISO 21500?
ISO 21500:2021 provides the context and concepts: what a project is, what a programme is, what a portfolio is, and how all of that ties into strategy and the way the organisation is run. Practical guidance for managing an individual project moved into ISO 21502:2020 — that is where you find roles, planning, control, risk and change management, reporting and closure.
Until 2021, ISO 21500 was "guidance on project management", which is why older texts and the occasional tender still refer to it that way. Hence the confusion — people ask for ISO 21500 but mean what is now ISO 21502. They are accompanied by ISO 21503 (programmes), ISO 21504 (portfolios), ISO 21505 (governance), ISO 21508 (earned value management) and ISO 21511 (work breakdown structures).
What implementation looks like
With guidelines there is no audit at the end, so the goal is different: projects are run the same way regardless of who runs them. This is how it looks in practice:
Project life cycle
ISO 21502 follows the logic every project has anyway — it just requires each step to have an owner and a record:
Initiating
Project charter: why it is being done, what the result is, who the sponsor and project manager are, and what the scope boundaries are.
Planning
Work breakdown, sequence and deadlines, resources, budget, communication plan and the first risk register.
Executing
Work on deliverables, managing the team, suppliers and what has been agreed with the sponsor.
Controlling
Comparing actual against planned, managing changes and risks, reporting and decisions at control points.
Closing
Handover, final accounts, evaluation of results and lessons learned for future projects.
What you really get
ISO 21500 is not certified, but its application is visible and can be demonstrated:
An internal way of running projects aligned with ISO 21502 — a short document people actually open, not a hundred-page manual.
Charter, plan, risk register, change log and reports, filled in on your own projects.
Project managers and sponsors who know their role — and can show it with a training certificate.
The same records cover planning, design and development, and change management at the certification audit.
Records from project closure that are actually used when planning the next job.
Benefits
Regardless of who runs a project, the documents, decision points and reports look the same — so you can see the status without a meeting.
Risks and changes are caught while they are cheap, not once the deadline has been missed.
The sponsor decides, the project manager manages, the team delivers — with no debate about who was supposed to do what.
A proper charter, plan and reports are what distinguish a trusted contractor from one who sends promises.
Planning, design and development, and change management in ISO 9001 require exactly these records.
Lessons learned and templates stay in the company when people move on to another project.
An illustrative, typical scenario we often hear from clients — it does not represent a specific, named client.
“We used to run projects from memory and e-mail — while one person was in charge, it somehow worked. Now every project has a charter, one sponsor who decides on scope, and a short report every week. Changes still come, but we know how much they cost and who approves them, so the deadline doesn't quietly slip.”
— a common scenario among our clients
Training for project managers, team members and sponsors — the project charter, planning and estimating, the risk register, change management and reporting under ISO 21502. Delivered at your premises, online or as a combination of both.
ISO 21500 — frequently asked questions
Can a company be certified to ISO 21500?
No. ISO 21500 and ISO 21502 are written as guidelines — they contain no requirements an auditor could assess, so no accredited certification body issues certificates to organisations against them. What does get certified are people, through training and exams in private schemes, and that confirms a person's knowledge, not the company's system.
What is the difference between ISO 21500 and ISO 21502?
ISO 21500:2021 provides context and concepts — project, programme, portfolio and their link to strategy. ISO 21502:2020 provides guidance for running a specific project: roles, planning, control, risks, changes and closure. In practice you work to ISO 21502, while ISO 21500 explains where that sits in the organisation.
Does ISO 21500 replace methodologies such as PMBOK or PRINCE2?
No. ISO provides a neutral framework and a common vocabulary, while methodologies provide detailed guidance and certification schemes for individuals. If you already work to one of them, ISO 21502 is used as a check that nothing important has been missed, not as a replacement.
We work to ISO 9001 — do we still need this?
ISO 9001 requires you to plan, manage changes and keep design and development records, but it does not say how a project should be run. ISO 21502 fills exactly that gap, so the two work well together: one asks for evidence, the other provides a way of working that produces it.
How much do implementation and training cost?
It depends on the number of projects and people to be trained, and on how much existing documentation you already have. Send a short description of how you run projects now for an indicative quote.
📋 Check the exact price for your organisation →Related standards
ISO 9001 requires records that this way of working produces anyway, ISO 31000 provides the methodology for the risk register, and ISO 20000-1 and ISO 27001 are introduced in IT projects precisely through a project approach.
Industries where this approach is most often required:
More about the integrated management system
An integrated management system (IMS) combines two or more ISO standards — for example ISO 21500 with ISO 9001 or ISO 14001 — into one shared framework of documentation, objectives and internal audits, instead of each standard living in its own parallel procedure.
A single structure (the high-level structure — HLS) shared by all modern ISO standards. Thanks to it, the quality policy, risk management, internal audits and management review can be shared across several standards at once.
Each standard on its own addresses one part of the business — quality, environment, safety, information. When an organisation implements several of them, separate systems quickly duplicate the same documentation and the same audits.
Less duplication of procedures, simpler management, stronger oversight of processes, more efficient use of resources and easier preparation for a combined certification audit.
ISO 21500 can be implemented on its own or as part of an integrated system — the decision depends on how many standards you are aiming for and whether you introduce them at the same time or gradually.
The EU, the US and other markets
ISO 21500 is the same standard wherever you certify it — what differs is the designation, the accreditation behind the certificate and what your customers ask for.
In the European Union the standard is adopted with an EN prefix, and what your buyer in the Netherlands, Germany or France looks at is not the prefix but the accreditation behind the certificate: a body accredited by a signatory of the international recognition arrangement (Global Accreditation Cooperation, formerly IAF) is recognised in other markets too. What EU partners and EU regulation expect is on the page about the EU market.
For companies with customers in the United States — supplier audits, security questionnaires and how ISO sits alongside SOC 2 — see the page about the US market.
Wherever your customer is, we run the project remotely in English — over Teams, WhatsApp or Viber, with documentation and records in English — and on site when that is easier.
Montenegro and the region
When someone asks for an ISO 21500 certificate, they are asking for something that does not exist as accredited certification. The standard is written as guidance: there are no requirements ("the organisation shall…"), so there is nothing an auditor could assess as met or not met.
What does exist: certificates of completed training and examination that participants receive — confirmation of a person's knowledge, not of the organisation's system. And an ISO 9001 certificate, whose scope shows that planning, design and development, and change management really work. If a client explicitly asks for "ISO 21500", the bid states that the project management methodology is aligned with ISO 21502, with the templates and certificates of the people running the project attached.
Our business is putting standards into practice and training people: we set up the way projects are run and train those who run them. What certification actually means and how it works for standards that are certified, read on the page Certification / ISO certificate, and about designations in tenders on the page ISO standards in tenders.
Montenegro is where we work from: our consultants are based in Podgorica, Budva and Bijelo Polje, documentation and training come in Montenegrin or in English, and the certificate itself is issued by an independent accredited certification body — not by us. We work on site in Serbia, Bosnia and Herzegovina, Croatia, North Macedonia, Albania and Kosovo as well — more about what we do in Montenegro.
Some of our references
More than 400 organisations in Montenegro and the region have gone through implementation with us — from banks and public bodies to manufacturing, IT, laboratories and hospitality.
These are only some of our clients. More about us →
Request a free consultation
We will assess the scope of work and propose a realistic plan and budget for your organisation. Call us or send an inquiry — we reply within 24 hours.