ISO 26000:2010
Applying ISO 26000 Social-Responsibility Guidance
ISO 26000 provides internationally agreed guidance on social responsibility: how an organisation operates ethically and transparently, contributes to sustainable development, and considers the interests of employees, the community and the environment.
What is ISO 26000:2010?
ISO 26000 is not a certifiable standard — it's a framework built around seven core subjects: organisational governance, human rights, labour practices, the environment, fair operating practices, consumer issues and community involvement. Organisations use it to organise and credibly present their social responsibility, increasingly as part of ESG reporting.
We help you turn the guidance into a concrete programme: assessing the topics that matter most for your sector, policies and practices, measurable objectives, and a sustainability report that partners and banks recognise.
Implementation phases
The real phases we guide every ISO 26000 project through — from preparation to application you can demonstrate:
Monitoring and Reporting
Application follows the logic of the standard: Not sure whether you already meet these requirements? Check with the short self-assessment at the bottom of this page.
Assessing the significance of core subjects
We establish which of the seven core subjects are most relevant to your sector and interested parties.
Assessing existing practice
We catalogue what the organisation is already doing — often more than what's documented.
Policies and objectives
We adopt a social-responsibility policy and measurable objectives per subject.
Integration into processes
Responsibility is built into procurement, hiring, community relations and the value chain.
Monitoring and reporting
Indicators, an annual review and a sustainability / ESG report.
The path to certification
ISO 26000 is not certified, but its application is confirmed through:
The prerequisite for everything: the system is implemented and applied in practice — every requirement of the standard met, the internal audit carried out and the management review completed.
Checking how practices align with the guidance, with a report and recommendations.
Preparing a report aligned with the expectations of banks, investors and EU partners.
SA 8000 (working conditions) and ISO 37001 provide certifiable confirmation of specific subjects.
Updating objectives and the report year over year.
Benefits of Adopting the Standard
Documented responsibility is an increasingly common requirement of major customers and EU supply chains.
Employees choose responsible employers — especially younger generations.
ESG criteria increasingly factor into bank and fund decisions.
A systematic contribution to the community builds long-term brand reputation.
An illustrative, typical scenario we often hear from clients — it does not represent a specific, named client.
“We were doing plenty of good things for the community and for our staff, but nobody was tracking or measuring any of it. ISO 26000 forced us to map our stakeholders and formalise our social responsibility priorities — now we can show partners a concrete report rather than just a story.”
— a common scenario among our clients
Related standards
ISO 14001 covers the environmental dimension and ISO 45001 the labour dimension of responsibility; ISO 37301 governs ethics and compliance. ISO 26000 ties them together into a complete sustainability picture.
ISO 26000 training — from a basic understanding of the standard to internal auditor training. Delivered at your premises, online or as a combination of both.
FAQ about ISO 26000:2010
Can ISO 26000 be certified?
No — the standard is written as guidance. Application is demonstrated through reports, independent assessments and certification of related standards.
What's the connection to ESG reporting?
ISO 26000's core subjects cover the E, S and G dimensions — the standard is an excellent basis for a structured ESG report.
How long does setting up the programme take?
Usually 2 to 4 months to adopt policies and a first set of objectives. For large systems — over 500 employees, multiple locations or an integrated system of several standards — a project realistically runs beyond a year; we handle those clients too.
Is this only for large companies?
No — the guidance scales; even a small company can clearly organise and present its responsibility.
How much does ISO 26000 implementation cost?
There is no fixed price that applies to everyone — the cost depends on the organisation's field of activity, its size and number of employees, the chosen standard and the current state of the system. Send us a short description of your organisation and we will prepare a free, tailored estimate.
Standards that fit together like a honeycomb
Each standard keeps its own shape, but together they form a single solid, integrated management system (IMS) — with no gaps or overlaps. Click a hexagon to open that standard.
More about the integrated management system
An integrated management system (IMS) combines two or more ISO standards — for example ISO 26000 with ISO 9001 or ISO 14001 — into one shared framework of documentation, objectives and internal reviews, instead of each standard living in its own parallel procedure.
A single structure (the High-Level Structure — HLS) shared by every modern ISO standard. Thanks to it, the quality policy, risk management, internal audits and management review can be common to several standards at once.
Each standard on its own addresses one part of the business — quality, environment, safety, information. When an organisation introduces several of them, separate systems quickly duplicate the same documentation and the same auditors.
Less duplicated procedure work, simpler management, stronger process oversight, more efficient use of resources and easier preparation for a combined certification audit.
ISO 26000 can be implemented on its own or as part of an integrated system — the decision depends on how many standards you're targeting and whether you're introducing them at once or gradually.
Check your organization's readiness
Answer a few questions and receive an indicative assessment of your organization's current level of readiness for ISO 26000.
This self-assessment provides an indicative readiness result only. It does not constitute certification, an official audit, or formal confirmation of compliance.
The EU, the US and other markets
ISO 26000 is the same standard wherever you certify it — what differs is the designation, the accreditation behind the certificate and what your customers ask for.
In the European Union the standard is adopted with an EN prefix, and what your buyer in the Netherlands, Germany or France looks at is not the prefix but the accreditation behind the certificate: a body accredited by a signatory of the international recognition arrangement (Global Accreditation Cooperation, formerly IAF) is recognised in other markets too. What EU partners and EU regulation expect is on the page about the EU market.
For companies with customers in the United States — supplier audits, security questionnaires and how ISO sits alongside SOC 2 — see the page about the US market.
Wherever your customer is, we run the project remotely in English — over Teams, WhatsApp or Viber, with documentation and records in English — and on site when that is easier.
Montenegro and the region: MEST ISO 26000:2010
When someone asks for a MEST ISO 26000 certificate (or an “ISO 26000:2010 certificate”), they are asking for something that does not exist. ISO 26000 is written as guidance on social responsibility: it holds no requirements an auditor could assess, so no accredited certification body issues an organisation a certificate against this standard.
Why do the designations differ if the standard is the same?
Every country in the European and international standardisation system adopts the same standard into its own national catalogue and adds a national prefix — in Montenegro that is MEST. The content, structure and clauses stay completely identical no matter which designation is printed on the document. “ISO 26000” and “MEST ISO 26000” are therefore one and the same document under two names.
What can actually be shown: certificates of standards that cover individual social responsibility topics — ISO 45001, ISO 14001, ISO 37001, ISO 37301 — and a sustainability report with figures a buyer can check.
Private schemes also issue certificates of completed training and examination — evidence of a participant’s knowledge, not of the organisation’s system. That is proof of a person’s knowledge, not of an organisation’s system, and it does not replace a company certificate.
Montenegro is where we work from: our consultants are based in Podgorica, Budva and Bijelo Polje, documentation and training come in Montenegrin or in English, and the certificate itself is issued by an independent accredited certification body — not by us. We work on site in Serbia, Bosnia and Herzegovina, Croatia, North Macedonia, Albania and Kosovo as well — more about what we do in Montenegro.
Some of our references
More than 400 organisations in Montenegro and the region have gone through implementation with us — from banks and public bodies to manufacturing, IT, laboratories and hospitality.
These are only some of our clients. More about us →
Request a free consultation
We will assess the scope of work and propose a realistic plan and budget for your organisation. Call us or send an inquiry — we reply within 24 hours.