Other Standards
Other Standards and Services
Not everything fits in a menu — through our network of consultants we cover practically every management system. For specific needs, we prepare a dedicated proposal.
Standards and services beyond the core list
Alongside the standards presented on their own pages, through our network of experienced consultants from Montenegro, Serbia and the wider region we also implement many other systems and schemes, including: ISO 37001 (anti-bribery), ISO 29001 (petroleum and gas industry), ISO 22716 (good manufacturing practice for cosmetics), ISO 28000 (supply-chain security), ISO 39001 (road-traffic safety), ISO 41001 (facility management), ISO 55001 (asset management), SA 8000 (social responsibility and working conditions), FSSC 22000, BRCGS, GlobalG.A.P., and Halal and Kosher certification.
We also offer related consulting services: internal audits as an outsourced service, maintenance of existing systems, preparation for surveillance audits, drafting tender documentation for the standards-related sections, gap analyses before certification, and transitions to new editions of standards.
If the standard you need isn't listed — get in touch. We prepare a dedicated proposal for your organisation's specific needs, and through our network of partner consulting firms we cover practically every management system and certification scheme.
New services under Montenegro’s 2026 legislation
Two acts passed in September 2026 call for documents that were not previously on anyone’s list, so we have set them out as separate services.
Critical infrastructure resilience. The Critical Infrastructure Resilience Act (Official Gazette of Montenegro 150/26, in force since 20 October 2026), which transposes the EU’s CER Directive, introduces for designated entities in eleven sectors: a risk assessment aligned with the national and sector assessments, a resilience plan approved by the Ministry within nine months, a business continuity plan, procedures for early detection and reporting of incidents within 24 hours, acts governing critical infrastructure management, physical and technical protection measures and an annual stress test. The act also expressly requires certificates — in practice, demonstrated conformity — with MEST ISO 31000 and MEST ISO 22301 — the absence of either is a separate offence punishable by EUR 3,000 to 20,000. The act also allows the drafting of the resilience plan to be contracted out to a legal entity that employs a person with the prescribed qualifications.
Data protection officer. The new Personal Data Protection Act makes a data protection officer (DPO) a statutory obligation for public authorities and for organisations that monitor people or process special categories of data on a large scale. We provide both an external officer under contract and training for your own employee, together with the records, procedures and impact assessments the officer must find in place.
Related standards
The most common starting points if you're just getting into standards:
ISO standards training — from a basic understanding of the standard to internal auditor training. Delivered at your premises, online or as a combination of both.
The EU, the US and other markets
these standards is the same standard wherever you certify it — what differs is the designation, the accreditation behind the certificate and what your customers ask for.
In the European Union the standard is adopted with an EN prefix, and what your buyer in the Netherlands, Germany or France looks at is not the prefix but the accreditation behind the certificate: a body accredited by a signatory of the international recognition arrangement (Global Accreditation Cooperation, formerly IAF) is recognised in other markets too. What EU partners and EU regulation expect is on the page about the EU market.
For companies with customers in the United States — supplier audits, security questionnaires and how ISO sits alongside SOC 2 — see the page about the US market.
Wherever your customer is, we run the project remotely in English — over Teams, WhatsApp or Viber, with documentation and records in English — and on site when that is easier.
Some of our references
More than 400 organisations in Montenegro and the region have gone through implementation with us — from banks and public bodies to manufacturing, IT, laboratories and hospitality.
These are only some of our clients. More about us →
Tell us what you need
Describe your sector and requirement (tender, customer, regulation) — we will recommend a standard and prepare a proposal. Call us or send an inquiry — we reply within 24 hours.