Frequently asked questions

ISO certification confirms that your management system meets an internationally recognised standard. In Hong Kong it is most often required for tendering, client due diligence, licence conditions or supply chain approval.

Typically three to six months for a prepared organisation with one site, and six to twelve months where documentation or remediation needs significant work.

The certification fee is charged by the accredited certification body that audits you and issues the certificate. Our consultancy fee covers gap analysis, documentation, training, internal audit and audit support.

Yes. The standards apply to organisations of all sizes and the management system can be scaled to your operation. We will tell you honestly if a particular standard is not worth the cost for you.

A consultant helps you build and implement the management system. A certification body audits it independently and issues the certificate. The certification decision belongs to the certification body, and you are free to choose which one.

IT general controls cover access, program changes, program development and computer operations. External auditors rely on them to decide how much they can trust the systems producing your financial information.

If you use AI in a customer-facing process, or your clients send procurement questionnaires, probably yes. Hong Kong has no blanket AI statute, but PCPD guidance, HKMA and SFC expectations, and contract requirements are already driving the question.

Certificates issued against the 2019 edition run to 31 October 2028. The 2025 edition was published in October 2025.

Yes. We serve Hong Kong and Macau from Hong Kong, in Cantonese, English and Putonghua.

No. The certification decision belongs to the certification body. We offer a consultancy fee refund commitment: if your organisation is not recommended for certification at the first certification audit, we refund our consultancy fee in full, subject to the stated conditions.