ESG & Sustainability

Is ISO 26000 certifiable?

ISO 26000:2010 is guidance on social responsibility, not a management system standard. It contains no requirements, so no organization can be certified against it and no audit can find it compliant.

Why there is nothing to certify against

ISO 26000:2010, "Guidance on social responsibility", was published in 2010. A management system standard states requirements — the "shall" statements a certification body audits you against — and ISO 26000 states none. It gives guidance on how an organization can act responsibly, and it says of itself, under the heading "Not for certification", that it is not a management system standard and is not intended or appropriate for certification purposes. With no requirements there is nothing for an auditor to test and nothing a certificate could attest to. ISO's own catalogue entry adds the same point from the other side: a certification against ISO 26000 would not demonstrate conformity with it, because it contains no requirements to conform to.

Where this comes from

Two sources, both from ISO member bodies, so this is not an interpretation. S1. ISO, "Discovering ISO 26000" (the standard's own free brochure), section "Not for certification" (https://www.nsai.ie/images/uploads/social-responsibility/discovering_iso_26000.pdf), retrieved 2026-08-13. Hosted by NSAI, Ireland's ISO member body; iso.org's own copy of this PDF was unreachable from CI on the retrieval date (bot challenge). This is also the source for the clause/issue index below - the brochure prints the full core-subjects-and-issues table with sub-clause numbers. S2. ANSI Webstore product record for ISO 26000:2010, reproducing ISO's catalogue abstract (https://webstore.ansi.org/standards/iso/iso260002010), retrieved 2026-08-13. ANSI is the US ISO member body. Independent confirmation of the same fact, including that a certification against ISO 26000 would not demonstrate conformity because the standard contains no requirements.

So what can you actually do?

If you arrived here wanting a credible social-responsibility programme, run a programme rather than chase a certificate. Keel ships ESG Essentials, Keel-authored content with 49 scored requirements, and every one of them ships with at least one starter control. Its social-responsibility coverage was checked against the seven core subjects of ISO 26000:2010: the standard was used as a checklist for what a responsible-business baseline should think about, not as a source of text, and every ESG Essentials requirement is Keel's own wording. It is scored the way any other Keel framework is, because it has requirements of its own — which is precisely what ISO 26000 does not.

The seven core subjects, and where ESG Essentials speaks to each

All seven core subjects ISO 26000 defines have at least one ESG Essentials requirement mapped to them. 6.2 Organizational governance — eight ESG Essentials requirements (G.1, G.2, G.4, G.5, G.6, G.8, G.10, G.14); 6.3 Human rights — seven ESG Essentials requirements (S.2, S.3, S.6, S.9, S.10, S.11, S.14), speaking to six of the eight issues ISO 26000 lists under it; 6.4 Labour practices — seven ESG Essentials requirements (S.1, S.3, S.4, S.5, S.12, S.13, S.14), speaking to all five issues ISO 26000 lists under it; 6.5 The environment — twelve ESG Essentials requirements (E.1, E.2, E.3, E.4, E.5, E.6, E.7, E.8, E.9, E.10, E.11, E.12), speaking to all four issues ISO 26000 lists under it; 6.6 Fair operating practices — nine ESG Essentials requirements (E.7, G.3, G.4, G.5, G.7, G.11, G.12, G.13, S.6), speaking to all five issues ISO 26000 lists under it; 6.7 Consumer issues — nine ESG Essentials requirements (E.11, G.9, S.7, S.8, S.15, S.16, S.17, S.18, S.19), speaking to all seven issues ISO 26000 lists under it; 6.8 Community involvement and development — five ESG Essentials requirements (S.7, S.20, S.21, S.22, S.23), speaking to four of the seven issues ISO 26000 lists under it. Read that in one direction only: a Keel requirement addresses the same subject matter ISO 26000 discusses at that clause. It is not a conformity mapping and cannot be, because there is nothing to conform to.

The issues Keel deliberately does not model

A statement about subjects invites the reader to assume completeness at the level below, which would be false — so here are the gaps. Five of the issues ISO 26000 lists are deliberately not modelled in ESG Essentials, and there is no obligation to close them: ISO 26000 is not this framework's source standard, and "completing" against a guidance document with no requirements is not a coherent goal. 6.3.8 — Civil and political rights. ISO addresses this mainly at states and at organizations whose operations bear on them; Keel has no baseline expectation an SMB could evidence, and inventing one would be padding. 6.3.9 — Economic, social and cultural rights. Same reason - the concrete SMB-facing parts (pay, conditions, non-discrimination, access to services) are already asked for at S.3, S.13, S.2 and S.18, and a separate leaf would double-count. 6.8.4 — Education and culture in the community. Real, but discretionary programme work rather than a baseline expectation; S.23 covers community investment generally without prescribing this form of it. 6.8.6 — Technology development and access. Applies to organizations whose technology or IP affects development outcomes; not a baseline every SMB can act on. 6.8.8 — Community health. S.1 covers worker health and safety and S.16 product safety; community health programmes are sector-specific and not part of this baseline.

What Keel does not do

Keel ships no ISO 26000 framework, authors no ISO 26000 requirements, and scores no workspace against ISO 26000. There is no ISO 26000 readiness percentage in the product and there will not be one, because a readiness score against a document containing no requirements would be a number with nothing behind it. If a consultant, registrar, or platform offers to certify you against ISO 26000, or tells you it already has, that misrepresents the standard — and you need not take Keel's word for it, because ISO states it itself in the brochure cited above.

The certifiable neighbours people usually want

Most people searching for ISO 26000 certification want an ISO management system standard they can actually be audited against. For environmental management that is ISO 14001:2015, which does state requirements and is certifiable — Keel lists it as coming soon rather than authored today, so do not pick Keel for it yet. For quality management it is ISO 9001:2015, which Keel authors and scores, and which is the standard behind the Keel Quality module. Neither is a substitute for a social-responsibility programme; they are the answer when what you needed all along was a certificate.

FAQ