Implementing ISO 53001: A Practical Guide to Requirements & Certification
ISO/UNDP 53001 was published on 28 September 2026. What the standard actually requires, why accredited certification is not yet available, and how to build a credible SDG management system in 90 days.
- ISO/UNDP 53001:2026 was published on 28 September 2026 – the world's first certifiable management system standard for the UN Sustainable Development Goals (SDGs). It was launched at the ISO Annual Meeting in Paris.
- The standard follows the Harmonized Structure (clauses 4 to 10) and PDCA logic. If you already run ISO 9001 or ISO 14001, you know the scaffolding and can integrate instead of rebuild.
- Certifiable is not the same as accredited-certifiable. UKAS started developing accreditation in June 2026 and is running a pilot programme. Anyone selling you an "ISO 53001 certificate" today is selling a non-accredited attestation.
- For Germany, DAkkS decides as the sole national accreditation body. It has not announced that ISO 53001 will be added to its programme. For ISO 37001 and ISO 55001, that step took eleven months and almost four years respectively.
- The standard does not require you to cover all 17 SDGs. It requires a justified prioritisation along your business model and value chain – plus stakeholder engagement, objectives, data and impact evaluation.
- The fastest route in runs through work you probably already have: your materiality assessment, ESG governance and reporting metrics. Budget 12 to 24 months to certification readiness, not one quarter.
We explained what ISO 53001 is and how it relates to reporting obligations in ISO 53001: How the standard supports CSRD & VS reports. This article goes one level deeper: requirements, the certification reality, and a concrete roadmap.
On 28 September 2026, the International Organization for Standardization (ISO) and the United Nations Development Programme (UNDP) published ISO/UNDP 53001 at the ISO Annual Meeting in Paris: "Management systems for United Nations Sustainable Development Goals (SDGs) – Requirements" (UNDP press release, ISO standard page).
Since then, a lot of ESG managers' phones have been ringing. Certification bodies are advertising audits, consultancies are offering "ISO 53001 readiness checks", and someone on the board has read that there is now "an ISO standard for sustainability". The question that lands on your desk is: do we need this – and if so, what does it actually mean?
That is what this article is about. No standards jargon, and honest answers where they are uncomfortable.
1. What happened on 28 September 2026 – and what did not
Briefly and factually, because it matters for how you triage this:
- What happened: The standard was published as a requirements standard. It is therefore auditable and, in principle, certifiable – unlike pure guidance documents such as ISO 26000.
- What happened: It was developed from 2023 onwards in the dedicated ISO project committee ISO/PC 343. Jens Heiede, CEO of Danish Standards, stresses that this took extensive collaboration between experts around the world to write requirements that work for organisations of any size and sector.
- What happened: ISO Secretary-General Sergio Mujica places the standard in the tradition of International Standards that provide a common language and a shared framework for action on complex global challenges. Marcos Neto, UN Assistant Secretary-General and Director of UNDP's Bureau for Policy and Programme Support, emphasises that the point is to make sustainability part of everyday decision-making.
- What did not happen: No new obligation. ISO 53001 is voluntary. It appears in no law, no EU regulation and no delegated act.
- What did not happen: A functioning market for accredited certificates. More on this below – it is the most important point in this article.
- What did not happen: A German translation. The standard is available in English; according to the German Society for Quality (DGQ), a German translation was initially not planned.
For your prioritisation this means: ISO 53001 is not a compliance topic with a deadline attached. It is a leadership and structure topic. Treating it like the CSRD – a duty with a cut-off date – mobilises the wrong resources.
2. What ISO 53001 actually requires
The standard uses the Harmonized Structure (HS), the shared scaffolding of all modern ISO management system standards. If your company already runs ISO 9001 (quality), ISO 14001 (environment) or ISO 45001 (occupational health and safety), you will recognise the clause numbers immediately – and you can share documented information, internal audits and management review.
Here are the clauses in plain language, with the question you have to answer for each:
| Clause | Topic | The question you have to answer |
|---|---|---|
| 4 | Context of the organisation | Which SDGs are actually relevant to our business model and value chain – and which positive and adverse impacts do we have there? Who are the affected stakeholders? |
| 5 | Leadership | Is executive management demonstrably behind it, with a policy, roles and responsibilities? Or is sustainability still an appendix to communications? |
| 6 | Planning | Which concrete SDG objectives are we setting, at what level of ambition, by when, with which resources? How do we handle trade-offs and synergies? |
| 7 | Support | Do the people expected to deliver this have competence, time and data? How do we communicate internally and externally? |
| 8 | Operation | How do we embed this in day-to-day business – procurement, product development, investment decisions, supplier management? |
| 9 | Performance evaluation | How do we measure progress? Not by the number of measures, but by actual impact. Internal audits, management review. |
| 10 | Improvement | What do we do when a target is missed? How do we close the PDCA loop? |
Three requirements deserve particular attention, because they are the ones most often underestimated in practice.
2.1 Prioritise instead of covering everything
The standard explicitly does not expect you to work on all 17 Sustainable Development Goals equally. It expects a traceable selection of the goals where your organisation genuinely has impact. That is the good news – and simultaneously the hardest exercise. A prioritisation an auditor can follow needs method, not gut feeling.
2.2 Name the adverse impacts
The standard requires the identification of beneficial and adverse impacts. This is exactly where SDG communication traditionally dodges: colourful icons on the website, but not a word about where the business model does damage. Doing this properly gets you halfway to credibility – and leaves you far better prepared for questions from the value chain.
2.3 Measure impact, not activity
Clause 9 is the litmus test. "We implemented 14 measures" is not a result. "We reduced water consumption per unit produced in region X by 22 percent and thereby measurably improved our contribution to SDG 6" is.
Clause 4 of ISO 53001 overlaps substantially with the double materiality assessment. If you have already done one for CSRD or the VS, you have systematically captured impacts, stakeholders and value chain. More on this: Create a materiality analysis according to CSRD in 4 steps.
3. The certification question: "certifiable" is not "accredited-certifiable"
This is the section worth remembering, because it can save you an expensive mistake.
Certifiable means the standard is written so a third party can verify conformity. Accredited-certifiable means a national accreditation body has assessed certification bodies against ISO/IEC 17021-1 for this specific standard. Only in the second case is a certificate internationally robust – and recognised by customers, investors and tenders.
As of today, ISO 53001 is in the first state. The UK accreditation body UKAS began building accreditation to ISO/IEC 17021-1 for ISO/UNDP 53001 with a project initiation meeting on 11 June 2026, followed by a pilot programme. UKAS itself notes that accredited certification is not yet available (UKAS notice).
And in Germany? What DAkkS has to do with it
For German companies the route necessarily runs through DAkkS (Deutsche Akkreditierungsstelle). Under EU Regulation (EC) 765/2008 and the German Accreditation Body Act, it is the only national accreditation body in Germany. There will never be a second German body for ISO 53001. The only relevant question is whether DAkkS adds the standard as an accreditable programme.
As of 30 September 2026, we are not aware of any DAkkS announcement on this. ISO 53001 appears neither in its news nor in the responsible department 3.6 for cross-sector management systems, which names ISO 9001, ISO 14001 and ISO 45001 as its focus. The International Accreditation Forum (IAF) has likewise not published a scheme or mandatory document for the standard.
How open the situation is shows in the wording a German certification body uses itself. GUTcert writes that as soon as DAkkS "possibly" permits accredited certification to ISO 53001, it will evaluate the audit requirements and inform its clients (GUTcert). That "possibly" is the most honest status report currently available.
The path there typically runs as follows: ISO publishes the standard, IAF and the European umbrella body EA clarify whether it enters the scope of the multilateral recognition arrangement (MLA), DAkkS runs a conformity assessment programme review (a formal prerequisite for any programme addition), assessors are trained, and only then can certification bodies apply for accreditation.
Two precedents help calibrate the timing: DAkkS added ISO 37001 (anti-bribery) and ISO 55001 (asset management) to its portfolio in September 2017. For ISO 37001 that was roughly eleven months after publication; for ISO 55001 it took almost four years. DAkkS explicitly cites market demand as its criterion, so how fast ISO 53001 moves depends on how many German companies actually ask for it.
Once the standard falls within the scope of the EA and IAF MLA, mutual recognition applies: a certificate issued under accreditation abroad is then recognised here too. That step has not happened yet. Until it does, certifying means buying a document that nobody can guarantee will be recognised in two years rather than requiring a fresh audit.
One honest caveat on our research: the absence of an announcement is not the same as a denial by DAkkS. If a concrete investment decision hinges on this, asking DAkkS directly is the clean route.
Ask exactly three questions:
- Is your certification for ISO/UNDP 53001 accredited – by which accreditation body, and since when?
- If not: is this a non-accredited attestation, or participation in a pilot programme? What exactly does the document say, word for word?
- Will the certificate be transferred automatically once accreditation is complete – or does it require a new (and separately billed) audit?
Reputable providers answer this without hesitation. Evasive answers are the answer.
Our recommendation: if you find ISO 53001 compelling, build the management system now and treat certification as a later, optional step. Eighty percent of the value sits in the structure, not the paper. And when the accreditation market matures in 12 to 24 months, you will be audit-ready in four weeks instead of a year.
4. Is it worth it for your company? Four starting positions
We have been asked this almost daily since the launch. The honest answer is that it depends on what else you already have. Four typical constellations:
| Starting position | Verdict | Why |
|---|---|---|
| ISO 9001 and/or 14001 in place, ESG has grown organically | Clearly worth it | You have audit culture, documented processes and a management review cycle. ISO 53001 supplements rather than rebuilds. Modest effort, high structural gain. |
| In scope for CSRD, report under way | Worth it, but after the report | The standard delivers exactly what auditors want to see on governance and strategy. But do not build a second system alongside your first ESRS cycle. Sequence: stabilise the report, then the management system. |
| SME reporting voluntarily under the VS, pressure from customers | Partly – basics first | If the real driver is customer questionnaires, EcoVadis and a cleaner VS report get you there faster and cheaper. Individual ISO 53001 elements (objectives, metrics, ownership) still make sense. |
| Sustainability is still mostly communications | Not yet | The standard presumes management maturity. Without a data basis, clear ownership and executive backing, this becomes a paper project that dies after the first internal audit. Start with ESG governance. |
One framing point that matters to us: ISO 53001 is not a substitute for a sustainability strategy. It is the mechanism by which you implement and track one. Without a strategy, the standard certifies a well-managed nothing. We covered the strategy part here: Developing a sustainability strategy – the practical guide.
5. A credible foundation in 90 days: 5 steps
You will not be certification-ready in 90 days. But you can get far enough that the "certify or not" decision rests on facts rather than assumptions. This is how we approach it with clients:
Step 1 (weeks 1 to 2): take stock, build nothing new
Collect what already exists: materiality assessment, ESG metrics, carbon footprint, supplier code, compliance policies, existing ISO systems, the last two years of reports. In our experience, 40 to 60 percent of the requirements in clauses 4 to 7 already exist in fragments – they are simply not linked as a management system.
Step 2 (weeks 3 to 5): prioritise SDGs methodically, not by workshop instinct
Take the material topics from your double materiality assessment and map them onto the 17 SDGs. Important: include the adverse impacts. The output is a list of typically four to seven SDGs with a rationale a third party can follow. Document that rationale – it is exactly what an audit will later ask for.
Step 3 (weeks 5 to 8): one objective with a counter per prioritised SDG
Per SDG: one objective, one metric, a base year, a target year, one accountable person. No more. Five robust objectives beat twenty non-committal declarations of intent – and clause 9 asks about impact, not volume. Where metrics are missing, the structure of the ESRS data points often helps, because you need that data anyway.
Step 4 (weeks 8 to 11): set ownership and rhythm
Who reports to whom, how often, to which body? The standard requires leadership accountability (clause 5) and management review (clause 9). In practice: a quarterly rhythm, a fixed committee, a one-page dashboard. If you already run a management review for ISO 9001, attach the SDG topics there – a second committee is the surest way to lose both.
Step 5 (weeks 11 to 13): assess gaps and decide
Now – and only now – run a gap assessment against clauses 4 to 10. That produces honest answers to three questions: what do we genuinely lack, what does closing it cost, and does the market benefit justify a certificate once accreditation is available?
This Excel template guides you step by step through the double materiality assessment and builds your materiality matrix automatically – the basis for step 2.
6. Where ISO 53001 meets CSRD, VS and EcoVadis
ISO 53001 replaces none of these frameworks. It sits one level below them, addressing how you steer, while the others govern what you disclose.
| Framework | What it governs | Relationship to ISO 53001 |
|---|---|---|
| CSRD / ESRS | Mandatory disclosure, from financial year 2027 for companies with more than 1,000 employees and more than EUR 450m turnover | ISO 53001 supplies evidence for the governance and strategy disclosures, plus a robust data trail |
| VS (formerly VSME) | Voluntary standard for companies outside the CSRD scope, in force since 24 September 2026 | ISO 53001 is considerably more demanding. For SMEs it is a next step, not an entry point |
| EcoVadis | Supplier rating with a scorecard | A management system that is actually lived scores directly on policies, actions and reporting |
| ISO 9001 / 14001 / 45001 | Quality, environment, occupational health and safety | Same Harmonized Structure: shared documentation, audits and management review are possible |
One note on the numbering, because it confuses people: PAS 53002:2024 is the guidance document published by ISO and UNDP on SDG integration and served as the substantive precursor. It is not an audit benchmark. Audits are against ISO/UNDP 53001. How other ISO certifications feed into CSRD work is covered here: How ISO certifications facilitate compliance with the ESRS and CSRD.
7. Five mistakes we are already seeing
- Trying to cover all 17 SDGs. The standard does not ask for it – and an organisation that delivers a little everywhere can demonstrate impact nowhere.
- Putting certification before the system. A certificate without a lived system survives until the first surveillance audit. And right now there is no accredited certificate to be had anyway.
- Building a second management system next to ISO 9001. Double documentation, double audits, half the buy-in. Integrate, do not parallelise.
- Writing down only the beneficial impacts. The standard explicitly asks about adverse impacts too. Omitting them produces an audit finding – and hands greenwashing critics their material. See our green claims checklist.
- Counting measures instead of measuring impact. Clause 9 asks for results. A list of activities without a metric is worthless in an audit.
8. Conclusion: an offer, not an obligation – but a good offer
ISO/UNDP 53001 is the first standard that turns the SDG poster into a management topic. It is voluntary, it is demanding, and it connects cleanly to everything you have already built for CSRD or the VS.
Your take-aways in three sentences:
- No time pressure, but a window of opportunity. While accreditation is still being built, you can work calmly and thoroughly instead of chasing an audit date.
- Build the system, not the certificate. Eighty percent of the value sits in prioritised SDGs, clear objectives and a rhythm that makes progress visible.
- Use what you have. Materiality assessment, ESG metrics and existing ISO systems are the cheapest route to clauses 4 to 7.
And if the answer for your company turns out to be "not now": that is a legitimate, well-founded result – as long as you can justify it. That is exactly what the 90-day roadmap is for.
A VS-compliant sustainability report template in Word format to fill in yourself, including a step-by-step guide.
Frequently asked questions about implementing ISO 53001
Can you get certified to ISO 53001 now that it has been published?
In principle yes, in practice with one important caveat: ISO/UNDP 53001 is a requirements standard and therefore auditable. But accredited certification to ISO/IEC 17021-1 is not yet available. The UK accreditation body UKAS began development in June 2026 and is running a pilot programme. Anyone certified today receives a non-accredited attestation – clarify in writing beforehand whether and how it will later be converted into an accredited certificate.
Will there be a German accreditation for ISO 53001?
The responsible body is already fixed: under EU Regulation (EC) 765/2008, DAkkS is the only national accreditation body in Germany, and there will not be a second one. The open question is solely whether DAkkS adds ISO 53001 as an accreditable programme. As of 30 September 2026 no announcement is known, and the IAF has not published a scheme for the standard either. DAkkS cites market demand as its criterion for adding a programme. For comparison: ISO 37001 was added roughly eleven months after publication, ISO 55001 only after almost four years.
How long does it take to implement an SDG management system to ISO 53001?
Realistically 12 to 24 months to audit readiness, depending on what already exists. Companies with an established ISO 9001 or ISO 14001 and a completed materiality assessment sit at the lower end, because audit culture, document control and management review are already in place. A solid foundation including prioritised SDGs, objectives and metrics can be laid in roughly 90 days.
How many SDGs does a company have to address under ISO 53001?
There is no prescribed number. The standard explicitly does not require equal treatment of all 17 goals, but a traceably justified prioritisation along business model and value chain. In practice most organisations end up with four to seven SDGs. What matters is not the count but that the selection is documented, methodically derived and verifiable by a third party.
Can ISO 53001 be combined with ISO 9001 and ISO 14001?
Yes, and it is the most economical route. ISO 53001 follows the Harmonized Structure with clauses 4 to 10 that also underpins ISO 9001, ISO 14001 and ISO 45001. Documented information, internal audits, management review and corrective actions can be run jointly. Building a separate second system means paying twice and risking that both lose buy-in.
Does ISO 53001 replace the CSRD report or the VS report?
No. ISO 53001 governs internal management; CSRD and the VS govern disclosure. A management system to ISO 53001 produces the governance evidence and the data trail that feed into reports – but it replaces neither the reporting obligation nor the assurance. The detailed positioning is in ISO 53001: How the standard supports CSRD & VS reports.
