Find an ISO consultant in Singapore

In short: An ISO consultant builds and documents your management system; an independent certification body audits it and issues the certificate, so expect two separate bills. If a customer or tender needs a recognised certificate, confirm the certification body's SAC accreditation for your standard.

An ISO consultant in Singapore helps your business build and document a management system that meets an ISO standard, then prepares you for the audit that leads to certification. The most requested standards are ISO 9001 for quality, ISO 14001 for environmental management, ISO 45001 for occupational health and safety, and ISO 27001 for information security. The consultant does not issue the certificate. An independent certification body does that, and if a customer or tender needs a recognised certificate, that body should be accredited by the Singapore Accreditation Council (SAC) or an accreditation body recognised under the same international arrangements.

What an ISO consultant does

Scope varies a lot between consultants, so compare proposals stage by stage rather than on the total.

Typical project stages

• Gap analysis against the standard and your current way of working
• Defining the scope of the system: which sites, activities and products it covers
• Drafting the required policies, procedures, records and risk registers
• Staff awareness training and, often, internal auditor training
• Running the first internal audit and management review
• Support during the certification body’s Stage 1 and Stage 2 audits, and help closing any findings

The common standards

• ISO 9001 (quality management). Often asked for by corporate customers and in tenders.
• ISO 14001 (environmental management). Covers environmental aspects, legal compliance and improvement targets.
• ISO 45001 (occupational health and safety). Relevant to construction, manufacturing, facilities and logistics, and linked to bizSAFE STAR.
• ISO 27001 (information security). Covers risk assessment and security controls, often requested by clients who share data with you.

Many SMEs combine two or three of these into one integrated management system. Ask whether a consultant can do that, since shared procedures can reduce the documentation you maintain.

Ongoing support

Certification is not a one-off. Certification bodies run surveillance audits during the certificate cycle and a recertification audit at the end. Some consultants offer a retainer for internal audits and management reviews between these visits; others hand over and leave.

What it costs in Singapore

There are two separate bills: the consultant’s fee and the certification body’s audit fee. From pages we checked in October 2026:

• One Singapore consultancy’s budgeting guide, published in August 2025, estimates consultancy fees for a single standard at S$3,000 to S$7,000 for a micro SME, S$6,000 to S$12,000 for a small SME of 11 to 50 staff, and S$10,000 to S$20,000 for a medium SME of 51 to 200 staff. It puts certification body fees for initial certification at S$4,000 to S$6,000, S$5,000 to S$10,000 and S$8,000 to S$15,000 respectively, and day rates for consultants at about S$500 to S$1,500.
• Another Singapore consultancy’s ISO 9001 fee page lists implementation packages from $2,288 and estimates a typical SME’s first-year spend, consultant plus certification audits, at $4,500 to $9,000, then $1,000 to $2,000 a year for surveillance audits. It does not say whether these figures include GST.

The gap between these estimates shows why a written scope matters. The main cost drivers are:

• Headcount and sites. Audit days, and so audit fees, rise with the number of staff and locations in scope.
• Number of standards. An integrated system costs more than one standard but usually less than separate projects.
• Your starting point. Existing procedures and records shorten the project.
• Who does the writing. Template-based packages are cheaper; consultant-written documentation and on-site training cost more.
• Industry risk. ISO 45001 for a construction site or ISO 27001 for a software firm usually takes more work than ISO 9001 for a small office.
• GST. Check whether each quote includes the 9% GST.

Grants

Government support for standards adoption exists, but eligibility and covered costs change, and not every certification project qualifies. Check the current terms on Enterprise Singapore’s Enterprise Development Grant FAQ, which lists standards adoption under the Market Access pillar, or search GoBusiness before you sign. Do not rely on a consultant’s estimate of what a grant will cover.

Singapore rules and checks buyers should know

SAC accreditation of certification bodies

The Singapore Accreditation Council accredits management system certification bodies, with programmes covering quality, environmental, occupational health and safety, and information security management systems among others. SAC is a member of the APAC and IAF Multilateral Recognition Arrangements for quality management systems. You can check whether a certification body is accredited, and for which scope, in SAC’s accredited organisation search. Ask your consultant which certification bodies they suggest, then confirm the scope yourself.

bizSAFE and ISO 45001

For bizSAFE STAR, the WSH Council requires a risk management audit report together with an accepted certification, which includes ISO 45001 from a certification body accredited by SAC or recognised under a Mutual Recognition Arrangement. The Council has said it will not accept OHSAS 18001 or non-accredited ISO 45001 certification approved after 31 March 2021. If bizSAFE STAR is your goal, tell consultants at the start.

Consultant and certifier independence

Accredited certification bodies work to rules that keep auditing separate from consulting on the same system. Be cautious of any offer that bundles “consultancy plus guaranteed certificate” from one organisation.

How to choose an ISO consultant

Look for a consultant who explains how the system will work in your business, not only what documents you will receive.

Questions to ask:

1. Have you taken similar businesses, in our industry and size, through this standard?
2. What exactly is included: gap analysis, documents, training, internal audit, audit-day support?
3. How many days will you spend on site, and how much time will our staff need to give?
4. Will the documents be written for our processes or adapted from templates?
5. Which accredited certification bodies have your clients used, and is the certification fee in your quote?
6. What happens if the audit raises major findings? Is follow-up support included?
7. Can you build one integrated system if we need ISO 9001 and ISO 45001 together?
8. What support do you offer after certification, and at what cost?

If you are setting up a company or reorganising your HR policies at the same time, you can also request help through HR consultancy matching or corporate secretarial matching.

Red flags

• A guaranteed certificate or a fixed pass date before any gap analysis
• A certification body you cannot find in SAC’s accredited search for your standard
• A very low package price with no written list of what is excluded
• Generic manuals with your company name added and no review of how you work
• Promises about grant amounts before you have checked eligibility yourself
• No clear answer on who supports you during the Stage 2 audit
• Pressure to sign a long retainer before the first certification

How FYAdvisers matching works

1. Describe your need. Tell us the standard, your headcount and sites, your deadline and why you need it.
2. Free concierge consultation. A concierge contacts you to confirm your needs, budget and timing.
3. We introduce one to five providers. With your consent, we introduce you to the number of ISO consultants you choose, up to five.
4. Meet and decide. Consultants reach out directly with questions and quotes. You choose whether to work with any of them.

Matching is free for you. Providers pay FYAdvisers to receive introductions. FYAdvisers does not provide ISO consultancy or certification, and we only share your details with your consent.