ISO 26000 is an international guidance standard on social responsibility, published by the International Organization for Standardization in 2010 to help organizations operate in a socially responsible way (International Organization for Standardization, 2010). No organization is certified to ISO 26000, and any claim of "ISO 26000 certification" for an organization is inaccurate, because the standard provides guidance only.
The standard states in its scope, Clause 1, that it "is not a management system standard" and "is not intended or appropriate for certification purposes" (International Organization for Standardization, 2010). That single clause determines how the document is used: as a reference for building a social responsibility programme and for informing sustainability reporting. It also determines what training in the standard attests. A PECB credential attests the competence of a person who has studied and been examined on the standard; it confers no status on an organization.
Standards Academy teaches ISO 26000 from the governance end. ISO 37000, written in ISO/TC 309/WG 1 under the convenorship of Standards Academy's director, makes social responsibility a governing-body principle: the governing body ensures that decisions are transparent and aligned with broader societal expectations, and the standard points to ISO 26000 for the detailed guidance (ISO, 2021, Clause 6.10). The organizational governance core subject of ISO 26000 and the governance principles of ISO 37000 are therefore read together.
Scope and purpose of ISO 26000
ISO 26000:2010, Guidance on social responsibility, applies to organizations of all types and sizes, in developed and developing countries: businesses, public bodies, charities and non-governmental organizations (International Organization for Standardization, 2010). The standard is held by the ISO Technical Management Board group ISO/TMBG (ISO, no date a). According to ISO's own ISO 26000 page, the document was developed over five years by approximately 500 experts, and the working group that produced it was disbanded at publication, leaving the text as a stable reference (ISO, no date b).
ISO reviewed and confirmed the 2010 text in 2025, so it remains the current edition (International Organization for Standardization, 2010).
The standard provides guidance on the concepts, terms and definitions related to social responsibility; the background, trends and characteristics of social responsibility; principles and practices; the core subjects and issues of social responsibility; integrating, implementing and promoting socially responsible behaviour throughout an organization and within its sphere of influence; identifying and engaging with stakeholders; and communicating commitments and performance (International Organization for Standardization, 2010).
Two methods run throughout the document. Due diligence is the process by which an organization identifies the actual and potential negative impacts of its decisions and activities, with the aim of avoiding and mitigating them. Stakeholder engagement is the activity undertaken to create opportunities for dialogue between an organization and one or more of its stakeholders, with the aim of providing an informed basis for the organization's decisions (International Organization for Standardization, 2010). Both methods appear across the principles, the core subjects and the integration guidance.
Because Clause 1 excludes certification, the standard functions as a reference against which a social responsibility programme is designed and reviewed. Organizations that cite it in reports describe alignment with its guidance, never conformity to requirements.
PECB credentials and training routes for social responsibility
PECB credentials in ISO 26000 attest the competence of individuals. Because the standard itself is not certifiable, personal certification is the only form of certification connected to it. The Foundation route introduces the fundamental concepts and principles of the social responsibility standard and leads to the PECB Certified ISO 26000 Foundation credential. The Lead Manager route covers the principles, the core subjects, integration throughout an organization and continual improvement, and leads to the PECB Certified ISO 26000 Lead Manager credential.
| Role | Credential | Course | Formats |
|---|---|---|---|
| Analysts, coordinators and staff new to the social responsibility standard | PECB Certified ISO 26000 Foundation | ISO 26000 Foundation | Self-Study and eLearning |
| Managers responsible for designing and leading a social responsibility programme | PECB Certified ISO 26000 Lead Manager | ISO 26000 Lead Manager | Self-Study and eLearning |
The Foundation credential suits a professional who needs working knowledge of the seven principles and seven core subjects, the two methods, and the standard's position among related documents. The ISO 26000 Lead Manager credential suits a professional accountable for a programme: setting priorities among the core subjects, assigning responsibilities, integrating actions into policy and operations, and reporting on performance.
Organizations and roles within scope
The guidance in ISO 26000 is relevant to any organization, regardless of sector, ownership or size (International Organization for Standardization, 2010). A multinational manufacturer, a municipal authority, a hospital trust and a small charity all fall within its scope, because each makes decisions and carries out activities that affect society and the environment.
Within an organization, several roles draw on the standard. Senior leadership and governance bodies use it to set direction, since organizational governance is itself one of the seven core subjects. Sustainability and corporate social responsibility teams use the core subjects as a checklist of issues and the integration guidance as a programme structure; CSR training built on the standard gives these teams a shared vocabulary. Procurement professionals apply the sphere-of-influence guidance to supply chains, a connection formalized in ISO 20400. Human resources staff work with the labour practices subject. Auditors and consultants assess programmes against the guidance, and stakeholder representatives, including worker and community representatives, participate in the engagement processes the standard describes.
The decision between credentials follows the role. A professional who contributes to a programme needs the Foundation level. A professional who designs, leads or reviews a programme needs the Lead Manager level.
The seven principles and seven core subjects of social responsibility
ISO 26000 names seven principles of social responsibility: accountability; transparency; ethical behaviour; respect for stakeholder interests; respect for the rule of law; respect for international norms of behaviour; and respect for human rights (International Organization for Standardization, 2010). The principles apply to every organization and every decision. Accountability means answering for impacts on society, the economy and the environment. Transparency means openness about decisions and activities that affect others. Respect for international norms of behaviour addresses situations where national law conflicts with international expectations, directing organizations to honour the higher reference point where the law provides inadequate safeguards.
The standard then sets out seven core subjects: organizational governance; human rights; labour practices; the environment; fair operating practices; consumer issues; and community involvement and development (International Organization for Standardization, 2010). Together these 14 named elements, the seven principles and the seven ISO 26000 core subjects, form the analytical structure of the document.
Each core subject contains specific issues. Human rights covers due diligence, human rights risk situations, avoidance of complicity, resolving grievances, discrimination and vulnerable groups, civil and political rights, economic, social and cultural rights, and fundamental principles and rights at work. Labour practices covers employment relationships, conditions of work and social protection, social dialogue, health and safety at work, and human development and training in the workplace. Fair operating practices covers anti-corruption, responsible political involvement, fair competition, promoting social responsibility in the value chain, and respect for property rights (International Organization for Standardization, 2010).
Organizational governance holds a distinct position among the subjects: it is both a subject in its own right and the means by which an organization acts on the other six.
ISO 26000 gives organizational governance one clause (6.2); ISO 37000, published in 2021, gives it a full standard. The drafters of ISO 37000 built on the ISO 26000 position that governance is the means by which an organization acts on its responsibilities, and wrote purpose, accountability and social responsibility into the governing body's principles (ISO, 2021, Clauses 6.1, 6.5 and 6.10).
Integration of social responsibility throughout an organization
Clause 7 of ISO 26000 provides guidance on integrating social responsibility throughout an organization (International Organization for Standardization, 2010). The sequence begins with understanding the organization's own social responsibility: determining relevance and significance of the core subjects and issues to the organization's decisions and activities, and establishing its sphere of influence. Due diligence supplies the method here, identifying actual and potential negative impacts across operations, supply chains and relationships.
Stakeholder engagement supplies the second method. The organization identifies those affected by its decisions, assesses their expectations, and creates structured dialogue to inform priorities. Priorities then translate into action: responsibilities assigned, objectives set, and social responsibility built into existing policies, organizational culture, strategies, structures and procedures.
Measurement and review follow. The standard advises monitoring activities, reviewing performance at appropriate intervals, improving the reliability of data and information collected, and enhancing performance over time. Communication is treated as a distinct element: the standard describes the characteristics of information relating to social responsibility, the roles of communication, the types of communication, and the handling of conflicts or disagreements with stakeholders about communicated claims (International Organization for Standardization, 2010). Clause 7 also addresses reviewing and improving an organization's actions and practices, which makes the sequence cyclical.
Integration touches governance, risk management, procurement, human resources, operations and reporting. A programme built on the standard assigns each core subject an owner, maps each issue to existing controls or gaps, and schedules review. This programme-design work is the territory of the Lead Manager role, and the reason ISO 26000 training at that level extends beyond the content of the standard into prioritization and performance measurement.
Relationship with ISO 20400, sustainability reporting and management system standards
ISO 20400, Sustainable procurement, Guidance, applies the principles and core subjects of ISO 26000 to the procurement function. ISO 20400 depends on ISO 26000 for its definition of social responsibility and its subject structure; a procurement team applying ISO 20400 works from the seven core subjects when assessing suppliers and setting sourcing criteria. Procurement professionals who study ISO 26000 hence hold the conceptual basis for ISO 20400.
For sustainability reporting, ISO 26000 is a source of content and no reporting standard. The core subjects and their issues help an organization identify relevant impacts and disclosures, and the standard's guidance on communication addresses the credibility of reported claims (International Organization for Standardization, 2010). Frameworks such as the GRI Standards define disclosure formats; ISO 26000 informs what an organization discloses by structuring its analysis of impacts. An organization preparing its first sustainability report can use the seven core subjects as its initial materiality map.
ISO 9001 and ISO 14001 state requirements, use the word "shall", and support third-party certification of organizations. ISO 26000 states guidance, uses the word "should", and supports no organizational certification (International Organization for Standardization, 2010). An organization can hold ISO 14001 certification for its environmental management system while using ISO 26000 to frame its wider social responsibility programme. Where a certifiable discipline is required, the organization selects the management system standard for that discipline and keeps ISO 26000 as the overarching reference for responsible behaviour.
Standards Academy teaches ISO 26000 in that position: as the reference for responsible behaviour, read with the governance principles of ISO 37000 that its drafters carried forward.
Frequently asked questions
Can an organization be certified to ISO 26000?
No. The standard states in Clause 1 that it is not a management system standard and is not intended or appropriate for certification purposes (International Organization for Standardization, 2010). Any claim that an organization holds ISO 26000 certification is inaccurate. Certification connected to the standard exists only for individuals.
What is ISO 26000?
ISO 26000 is an international guidance standard on social responsibility, published by the International Organization for Standardization in 2010 to help organizations operate in a socially responsible way (International Organization for Standardization, 2010). No organization is certified to ISO 26000, and any claim of "ISO 26000 certification" for an organization is inaccurate, because the standard provides guidance only.
Which credential suits a sustainability or CSR manager?
The Lead Manager credential. It covers the principles, the seven core subjects, integration of social responsibility throughout an organization and continual improvement, which matches the responsibilities of a manager who designs, leads and reviews a programme. The Foundation credential suits staff who contribute to a programme without leading it.
How does ISO 20400 use ISO 26000?
ISO 20400 applies the principles and core subjects of ISO 26000 to procurement. It depends on ISO 26000 for its definition of social responsibility and its subject structure. A procurement team applying ISO 20400 assesses suppliers and sourcing decisions against the seven core subjects of ISO 26000.
How does ISO 26000 relate to sustainability reporting?
ISO 26000 is not a reporting standard. It helps an organization identify its impacts, stakeholders and relevant disclosures, and it gives guidance on communicating social responsibility commitments and performance. Disclosure formats come from reporting frameworks such as the GRI Standards. ISO 26000 structures the analysis that a report then presents.
What are the seven core subjects?
ISO 26000 identifies seven core subjects: organizational governance, human rights, labour practices, the environment, fair operating practices, consumer issues, and community involvement and development. These structure how organizations analyse and address their social and environmental impacts.
References
International Organization for Standardization (2010) ISO 26000:2010 Guidance on social responsibility. Geneva: ISO. Available at: https://www.iso.org/standard/42546.html (Accessed: 23 October 2026).
International Organization for Standardization (2021) ISO 37000:2021 Governance of organizations. Guidance. Geneva: ISO. Available at: https://www.iso.org/standard/65036.html (Accessed: 23 October 2026).
International Organization for Standardization (no date a) ISO/TMBG Technical Management Board – groups. Available at: https://www.iso.org/committee/54996.html (Accessed: 23 October 2026).
International Organization for Standardization (no date b) ISO 26000 Social responsibility. Available at: https://www.iso.org/iso-26000-social-responsibility.html (Accessed: 23 October 2026).
