Skip to content
İstanbul Sertifika Ofisi
Neatly connected network cables in a data centre

Services & IT

Information security and quality management system certification for service, software and IT companies.

In short

Information security and quality management system certification for service, software and IT companies.

  • The current information security standard is ISO/IEC 27001:2022; the 2013 version has been withdrawn
  • An ISO/IEC 27001 certificate does not mean that no data breach will ever occur
  • ISO 9001 can also be applied in software, technology, consultancy and professional services
  • ISO 9001:2026 was published on 16 September 2026

What to watch for in the services & IT sector

ISO/IEC 27001 can be applied in many different sectors where information security risks are important, such as software and IT companies, artificial intelligence and technology companies, e-commerce and digital platforms, data centre and cloud service providers, and call centre and outsourcing services. The current standard is ISO/IEC 27001:2022.

Holding an ISO/IEC 27001 certificate does not mean that an organisation will never experience a data breach or cyber security incident. The purpose of the standard is to ensure that information security risks are addressed with a systematic management approach.

ISO 9001 is not limited to a specific sector; it can also be applied in fields of activity such as software and technology, logistics and foreign trade, and consultancy and professional services. ISO 9001:2026 was published on 16 September 2026 and became the new and current version of the standard.

ISO 45001 can be applied in organisations of different sectors and sizes, including technical service and maintenance organisations and engineering and project companies.

How does the process work?

We plan our services in line with the product’s technical characteristics, the legislation of the target market and our customer’s commercial needs, and provide professional coordination from the start of the process to the end.

Target Market Regulatory Analysis Certification Audit Conformity Shipment

Certificates that may come up in this industry

Frequently asked questions

How do I find out which certificate my services & IT product needs?

It is sufficient to share the product name, HS code, technical characteristics, intended use and target country. On the basis of this information, the applicable technical regulation and conformity assessment method are determined.

How long does certification take?

It is not correct to give a single standard duration. It varies according to the scope, the tests required, whether the technical documentation is ready, whether a factory inspection is required and the procedures of the target country.

Last updated:

Other industries

Metal machining on a CNC machine

Machinery & equipment

Conformity with target-market technical regulations for machinery, equipment and spare parts, including machine safety, electrical and pressure equipment requirements.

Learn more
Food products being packed on a production line

Food & packaging

Hygiene, labelling and food safety management requirements for food products and food-contact packaging, handled in one file.

Learn more
Spinning machines in a textile factory

Textiles & consumer goods

Conformity certificates for apparel, home textiles and consumer goods. Textile exports to Russia and the EAEU also require specific labelling and digital marking (markirovka) besides the EAC certificate.

Learn more