Insights from the data · ISO Survey 2025
ISO Survey 2025 records over 3.28 million valid management system certificates worldwide. In Vietnam, ISO 9001 and ISO 14001 continue to lead by certificate count, while ISO 22000 for food safety and ISO/IEC 27001 for information security show notable results.
Total across 18 standards
Total across 18 standards, without deduplication
Total across the 18 standards surveyed
By certificate count in the 2025 country/territory table
According to the report released in early October 2026, ISO Survey 2025 reports valid management system certificates and the sites covered by certification as at 31/12/2025. The results are available on IAF CertSearch. Data is provided by certification bodies accredited by members of Global ACI (the successor to IAF and ILAC), together with the supplementary sources described in the report. [1]
Comparing the 2025 results with the 2021–2024 editions helps identify the scale, composition and changes in certification figures. However, an important distinction is needed: certificate counts are not equivalent to the number of certified businesses; changes between editions are also affected by data coverage and sources, so they cannot be interpreted directly as actual market growth or decline.
The three leading standards account for almost 90% of certificates
In 2025, ISO 9001 leads with 1,611,729 certificates, followed by ISO 14001 with 739,390 and ISO 45001 with 599,532. These three standards for quality, environmental, and occupational health and safety management account for 89.7% of all certificates across the 18 standards surveyed, maintaining their dominant position in global management system certification. [2]
Source: ISO Survey 2025. [2]
Compared with 2024, the total number of recorded certificates increased by 324,055, equivalent to 10.9%. Considering only the 16 standards covered in both editions, the certificate count increased by 322,766, also equivalent to 10.9% after rounding. The two standards added to the 2025 survey, ISO/IEC 42001 and ISO 37301, account for a combined 1,289 certificates.
These increases reflect differences in the figures between the two editions; the effects of changes in data sources and completeness have not been isolated.
ISO/IEC 27001: information security
The certificate count increased from 96,709 to 125,622, an additional 28,913 certificates. The percentage increase exceeds those for ISO 9001, ISO 14001 and ISO 45001, making information security a highlight of the 2025 survey results.
ISO 37001: anti-bribery
The certificate count increased from 9,952 to 18,449, an additional 8,497 certificates. This is a notable percentage increase, although the certificate count remains much smaller than those for the leading standards.
ISO 50001 for energy management recorded 47,394 certificates, up 23.2% compared with 2024; ISO 22301 for business continuity management reached 6,282 certificates, up 36.7%.
Two standards were included in the survey for the first time: ISO/IEC 42001 for artificial intelligence management, with 271 certificates, and ISO 37301 for compliance management, with 1,018 certificates. As the survey dataset contains no 2024 figures for these standards, no percentage change is calculated for either.
| Standard / management area | Certificates 2024 | Certificates 2025 | Sites 2025 | Change 2025/2024 |
|---|---|---|---|---|
| ISO 9001Quality management | 1,474,118 | 1,611,729 | 2,419,972 | +9.3% |
| ISO 14001Environmental management | 676,232 | 739,390 | 1,246,566 | +9.3% |
| ISO 45001Occupational health and safety management | 542,527 | 599,532 | 1,011,191 | +10.5% |
| ISO/IEC 27001Information security management | 96,709 | 125,622 | 226,262 | +29.9% |
| ISO 22000Food safety management | 59,521 | 68,271 | 86,028 | +14.7% |
| ISO 13485Quality management for medical devices | 31,215 | 36,522 | 50,393 | +17.0% |
| ISO 50001Energy management | 38,482 | 47,394 | 109,501 | +23.2% |
| ISO/IEC 20000-1IT service management | 27,332 | 29,629 | 47,099 | +8.4% |
| ISO 37001Anti-bribery management | 9,952 | 18,449 | 29,506 | +85.4% |
| ISO 22301Business continuity management | 4,595 | 6,282 | 15,466 | +36.7% |
| ISO 39001Road traffic safety management | 1,880 | 2,149 | 3,615 | +14.3% |
| ISO 55001Asset management | 687 | 761 | 2,174 | +10.8% |
| ISO 28000Security management | 322 | 556 | 734 | +72.7% |
| ISO 29001Quality management in the petroleum and natural gas industry | 26 | 38 | 45 | +46.2% |
| ISO 44001Collaborative business relationship management | 110 | 130 | 313 | +18.2% |
| ISO 20121Event sustainability management | 154 | 174 | 238 | +13.0% |
| ISO/IEC 42001Artificial intelligence management | — | 271 | 572 | Newly included |
| ISO 37301Compliance management | — | 1,018 | 1,468 | Newly included |
| Total across standards | 2,963,862 | 3,287,917 | 5,251,143 | +10.9% |
Sources: ISO Survey 2024 and ISO Survey 2025. “—” indicates a standard not covered in the 2024 edition. [2][4]
Distinguishing certificates from sites
One certificate may cover multiple sites, and an organisation or site may be certified to multiple standards. Therefore:
-
3,287,917 is the total number of certificates across the standards surveyed, not the number of distinct businesses.
-
5,251,143 is the sum of site counts for individual standards, without deduplication across standards.
-
The certificate count in the survey represents certificates valid at the reporting date, not certificates newly issued during the year.
Five-year comparisons must account for changes in data sources
For all seven standards in Table 2, the certificate counts recorded in 2025 exceed those in 2021. However, the figures fluctuate considerably between editions. For ISO 9001 alone, the counts were 1.08 million, 1.27 million, 0.84 million, 1.47 million and 1.61 million certificates in 2021–2025, respectively.
This series should not simply be interpreted as a cycle of “decline followed by recovery”, because data sources and survey participation changed between years.
Gold bars: reporting coverage changed in 2023. From the 2024 edition, IAF CertSearch is the primary data source.
Source: Excel File No. 1 for 2021–2025. There was a major change in data contribution coverage in 2023. [2]
| Standard | 2021 | 2022 | 2023 | 2024 | 2025 |
|---|---|---|---|---|---|
| ISO 9001 | 1,077,884 | 1,265,216 | 837,052 | 1,474,118 | 1,611,729 |
| ISO 14001 | 420,433 | 528,903 | 300,410 | 676,232 | 739,390 |
| ISO 45001 | 294,420 | 397,339 | 185,166 | 542,527 | 599,532 |
| ISO/IEC 27001 | 58,687 | 71,549 | 48,671 | 96,709 | 125,622 |
| ISO 22000 | 36,124 | 45,459 | 30,011 | 59,521 | 68,271 |
| ISO 13485 | 27,229 | 29,543 | 32,963 | 31,215 | 36,522 |
| ISO 50001 | 22,575 | 27,631 | 24,924 | 38,482 | 47,394 |
Figures from Excel File No. 1 are used consistently. Some figures in the 2021–2022 explanatory PDFs differ from those in the Excel files; see the reconciliation table in the sources section. [Reconciliation]
Key changes to consider
2021–2022 · Expanding data sources
Participation by data providers varied, and the 2022 edition incorporated additional data from IAF CertSearch. Some of the increase in recorded certificate counts is therefore associated with expanded data collection coverage.
2023 · Missing contribution from China’s accreditation body
The explanatory report identifies this as a major factor affecting the global results. A decrease in the figures therefore cannot be used to infer the number of certificates withdrawn or businesses that stopped applying management systems.
2024 · Shift to IAF CertSearch as the primary data source
China resumed its data contribution, while data from certification bodies accredited by Germany’s accreditation body, DAkkS, remained incomplete. The 2024 comparison file also notes that the two editions are not strictly comparable in terms of their data collection basis.
2025 · Further supplementary data
IAF CertSearch reports participation by 80 of the 81 accreditation bodies within the survey’s scope and 2,574 certification bodies. The results are supplemented with data from UKAS CertCheck, providing a more complete picture of certification across a range of countries, particularly the United Kingdom.
Data from DAkkS-accredited certification bodies remains incomplete. China’s accreditation body, CNAS, provides certificate statistics and estimated site counts for selected standards. [1]
An example of how comparison coverage affects results
For ISO 9001, the total certificate count published for 2023 is approximately 33.8% lower than in 2022. However, the comparison table based only on data from providers participating in both editions records a decrease of approximately 0.95%. [4]
This difference shows that comparison results depend substantially on the coverage of the data used. Using providers participating in both editions helps limit some effects of changes in the reporting population, but this approach still has collection limitations and does not constitute a fixed sample across all five years.
17,991 certificates: ISO 9001 leads, ISO 22000 stands out
As at 31/12/2025, Vietnam recorded 17,991 certificates and an aggregate of 23,758 sites, summed across the 18 standards surveyed. Compared with 14,624 certificates in 2024, the count increased by 3,367, equivalent to 23.0%. Considering only the 16 standards covered in both editions, the 2025 total is 17,989 certificates, also an increase of 23.0% after rounding. This is a change in recorded certificate counts, not the growth rate in the number of certified businesses.
ISO 9001 reached 9,415 certificates, accounting for approximately 52.3% of Vietnam’s total certificate count in the survey; ISO 14001 reached 4,323, accounting for approximately 24.0%. Calculated from the original figures, the two standards together account for 76.4%, showing that quality and environmental management continue to dominate Vietnam’s certification mix.
| Standard | 2021 | 2022 | 2023 | 2024 | 2025 | Change 2025/2024 |
|---|---|---|---|---|---|---|
| ISO 9001 | 6,258 | 6,066 | 5,638 | 7,762 | 9,415 | +21.3% |
| ISO 14001 | 2,390 | 2,526 | 2,524 | 3,465 | 4,323 | +24.8% |
| ISO 45001 | 828 | 1,064 | 1,082 | 1,560 | 1,785 | +14.4% |
| ISO/IEC 27001 | 375 | 293 | 293 | 430 | 555 | +29.1% |
| ISO 22000 | 854 | 1,001 | 748 | 991 | 1,410 | +42.3% |
| ISO 13485 | 334 | 261 | 133 | 196 | 264 | +34.7% |
| ISO 50001 | 120 | 103 | 124 | 190 | 206 | +8.4% |
Sources: ISO Survey 2021, ISO Survey 2022, ISO Survey 2023, ISO Survey 2024 and ISO Survey 2025. [2]
Three notable findings
First, ISO 22000 stands out in international comparisons.
Vietnam recorded 1,410 ISO 22000 certificates, an increase of 419 certificates, equivalent to 42.3% compared with 2024. This places Vietnam 8th by ISO 22000 certificate count in the survey’s country/territory table, accounting for approximately 2.07% of the global total. This share is substantially higher than Vietnam’s shares for ISO 9001 and ISO 14001, both approximately 0.58%.
Second, environmental management and information security show notable increases.
ISO 14001 recorded an additional 858 certificates, equivalent to 24.8%. ISO/IEC 27001 increased from 430 to 555 certificates, equivalent to 29.1%, with 1,020 sites covered by certification. Meanwhile, ISO 45001 reached 1,785 certificates, up 14.4% compared with 2024.
These figures reflect changes in the recorded scale of certification; they do not directly measure improvements in businesses’ environmental, occupational health and safety, or information security performance.
Third, certificate counts develop differently across standards.
ISO 13485 reached 264 certificates, up 34.7% compared with 2024, but still below the 334 certificates recorded in 2021. ISO 50001 reached 206 certificates, up 8.4% compared with 2024. Each standard and period therefore needs to be considered separately, rather than assuming uniform increases across all management areas.
Source: calculated from Excel File No. 1 for 2024–2025. [2]
Among standards with smaller recorded certificate counts, Vietnam has 17 ISO 22301 certificates, 11 ISO/IEC 20000-1 certificates, 2 ISO 37001 certificates and 1 ISO 55001 certificate.
The two standards included in the survey for the first time, ISO/IEC 42001 and ISO 37301, each recorded 1 certificate in Vietnam. The ISO/IEC 42001 certificate covers 9 sites; this site count does not mean that 9 organisations are certified.
View details for all 18 standards in Vietnam in 2025
| Standard | Certificates 2025 | Sites 2025 | Rank¹ | Share of global certificates² |
|---|---|---|---|---|
| ISO 9001 | 9,415 | 12,047 | 26 | 0.58% |
| ISO 14001 | 4,323 | 5,614 | 24 | 0.58% |
| ISO 45001 | 1,785 | 2,610 | 34 | 0.30% |
| ISO/IEC 27001 | 555 | 1,020 | 36 | 0.44% |
| ISO 22000 | 1,410 | 1,705 | 8 | 2.07% |
| ISO 13485 | 264 | 354 | 28 | 0.72% |
| ISO 50001 | 206 | 319 | 21 | 0.43% |
| ISO/IEC 20000-1 | 11 | 23 | 44 | 0.04% |
| ISO 37001 | 2 | 15 | 74 | 0.01% |
| ISO 22301 | 17 | 40 | 51 | 0.27% |
| ISO 39001 | 0 | 0 | — | 0.00% |
| ISO 55001 | 1 | 1 | 40 | 0.13% |
| ISO 28000 | 0 | 0 | — | 0.00% |
| ISO 29001 | 0 | 0 | — | 0.00% |
| ISO 44001 | 0 | 0 | — | 0.00% |
| ISO 20121 | 0 | 0 | — | 0.00% |
| ISO/IEC 42001 | 1 | 9 | 23 | 0.37% |
| ISO 37301 | 1 | 1 | 26 | 0.10% |
Source: ISO Survey 2025, Excel File No. 1, the Viet Nam row in the relevant worksheets. Rankings and shares are calculated for this article. [2]
¹ Rankings are determined by certificate counts in descending order in each standard’s country/territory table. Countries/territories with equal counts share the same rank; entries with 0 certificates are not ranked. This compares certificate quantities, not management quality.
² Share of global certificates is calculated by dividing Vietnam’s certificate count by the global total for the same standard, rounded to two decimal places.
Note: A value of 0 means that the dataset records no certificates or sites for the corresponding entry; it does not establish that such certification does not exist in practice. Total certificates are not the number of distinct businesses; total sites are summed across standards without deduplication between standards.
Vietnam among six Southeast Asian economies
In the comparison group comprising Malaysia, Indonesia, Thailand, Vietnam, Singapore and the Philippines, Vietnam ranks fourth by ISO 9001 certificate count, third for ISO 14001 and first for ISO 22000. For both ISO 45001 and ISO/IEC 27001, Vietnam ranks fifth.
These rankings reflect results only among the six selected economies, not across Southeast Asia as a whole.
| Country | ISO 9001 | ISO 14001 | ISO 45001 | ISO/IEC 27001 | ISO 22000 |
|---|---|---|---|---|---|
| Malaysia | 16,943 | 3,875 | 2,194 | 764 | 669 |
| Indonesia | 14,484 | 5,672 | 5,118 | 2,119 | 854 |
| Thailand | 14,401 | 5,249 | 2,097 | 624 | 877 |
| Vietnam | 9,415 | 4,323 | 1,785 | 555 | 1,410 |
| Singapore | 7,520 | 2,875 | 5,885 | 961 | 533 |
| Philippines | 4,921 | 1,040 | 593 | 234 | 33 |
Source: Excel File No. 1 for 2025. Rows are ordered by ISO 9001 certificate count in descending order; figures are not normalised for population, number of businesses, GDP or sector composition. [2]
The results show that ISO 22000 is a notable feature of Vietnam’s results within the comparison group. However, certificate counts do not directly reflect a country’s food safety levels or management quality. Comparisons should take account of differences in economic scale, sector composition and data completeness.
Manufacturing sectors stand out in the classified data
Within Vietnam’s 2025 ISO 9001 data classified by sector, the three groups with the highest numbers of sector entries are basic metals and fabricated metal products: 311 entries, electrical and optical equipment: 281 entries, rubber and plastic products: 254 entries. These results show the prominence of manufacturing in the data for which sector information is available.
Source: Excel File No. 2 for 2025, ISO 9001 worksheet, Viet Nam row. ¹ Abbreviated label for sector 29: wholesale and retail trade; repair of motor vehicles, motorcycles, and personal and household goods. [3]
For ISO 14001, electrical and optical equipment leads the classified data with 185 entries, followed by basic metals and fabricated metal products with 146 entries, and rubber and plastic products with 132 entries.
For ISO/IEC 27001, information technology records 52 entries, while transport, storage and communication records 45 entries. These results provide a reference point for further investigation of certification by sector and supply chain. [3]
Caution when using sector data
Vietnam’s ISO 9001 data records 1,942 sector entries, while the country table records 9,415 certificates. These two figures cannot be compared directly to determine how many certificates lack sector classification, because sector information may be incomplete and one certificate may be recorded under multiple sectors.
The 1,942 entries should therefore not be treated as a representative sample of all certificates in Vietnam, nor should the difference between the two totals be used to determine the number of certificates without sector information. This analysis describes only the classified data for 2025; it should not be extrapolated to the composition of the entire market or to certification growth rates by sector over five years.
From certificate counts to management priorities
The survey results provide a reference for Vietnamese businesses when considering management priorities. The suggestions below are the article’s analysis, not official recommendations or market forecasts from the ISO Survey.
01 · Strengthen foundations and integration
Manufacturers may consider integrating quality, environmental, and occupational health and safety management into a unified system. The choice of standards and scope should reflect their operations, risks and customer requirements, rather than being based solely on the prevalence of certification.
02 · Strengthen capabilities in the food chain
For businesses in the food chain, priorities include maintaining food safety practices, developing staff competence and strengthening supplier coordination. The value of certification should be demonstrated through operational effectiveness and verifiable improvements.
03 · Link digital transformation with information security
Organisations that depend on data and digital services should focus on the Confidentiality, Integrity and Availability of information. Controls should be selected based on risk assessment and the organisation’s actual needs; ISO/IEC 27001 certificate counts serve only as a reference.
04 · Select standards according to actual needs
Artificial intelligence, compliance, anti-bribery, energy and business continuity management address different management needs. Businesses should define their objectives, scope and required resources before deciding to implement a standard or seek certification. Low certificate counts alone do not demonstrate weak demand or substantial market potential.
Data sources and analytical methodology
This article uses a set of 20 PDF and Excel files from ISO Survey 2021-2025, comprising:
-
Explanatory reports (PDF): Define the scope, data sources and comparison limitations. The 2025 edition reports valid certificates and the sites covered by certification as at 31/12/2025.
-
Excel File No. 1 – Certificates and sites: The consistent source for certificate counts, sites and related calculations in this article. Global figures are taken from the Overview worksheet; Vietnam’s figures are taken from the Viet Nam row in each standard’s worksheet.
-
Excel File No. 2 – Sector distribution: The sector analysis uses 2025 data classified into 39 sectors. Sector entries are not converted into numbers of businesses or treated as fully representative of the certification mix.
-
Excel File No. 3 – Comparisons between editions: Used to cross-check changes and comparison coverage. It is not assumed that data for different years comes from the same group of providers, particularly following the change in data sources from the 2024 edition.
Analytical approach: Percentage changes, shares and rankings are calculated from the original figures. Differences between editions may be affected by data completeness and coverage and should not be interpreted directly as actual market growth. Discrepancies between source files are documented in the reconciliation section.
Access the data: IAF CertSearch - ISO Survey and ISO - The ISO Survey.
Source reconciliation and calculation conventions
Principle for selecting figures
The article consistently uses Excel File No. 1 for each year to build the data series. Global certificate totals in the Overview worksheet match the sums of certificate counts by country/territory in the worksheets used. This choice ensures consistency; the causes of discrepancies between source files have not been established.
| Item | Explanatory PDF | Excel File No. 1 used here |
|---|---|---|
| ISO 50001 – 2021 | 21,907 | 22,575 |
| ISO 14001 – 2022 | 529,853 | 528,903 |
| ISO 13485 – 2022 | 29,741 | 29,543 |
| ISO 50001 – 2022 | 28,164 | 27,631 |
| ISO 37001 – 2022 | 5,969 | 5,901 |
Discrepancies in 2023 certificate counts between the comparison file and the original results
| Item | 2024 Excel File No. 3 | 2023 Excel File No. 1 used in this article |
|---|---|---|
| ISO 9001 – global | 837,978 | 837,052 |
| ISO/IEC 27001 – global | 47,291 | 48,671 |
| ISO 50001 – Vietnam | 131 | 124 |
For ISO 50001 in Vietnam, the original 2023 file records 124 certificates and 131 sites. Some 2021 site totals also differ between the PDF and Excel files; the article does not use these historical site totals to analyse trends.
Calculation conventions
-
Change (%) = (2025 certificate count / 2024 certificate count − 1) × 100. Not calculated when comparison data is missing or the base-year count is 0.
-
Share (%) = certificate count for the group / corresponding total certificate count × 100.
-
Vietnam’s ranking = 1 + the number of countries/territories with more certificates than Vietnam, calculated separately for each standard. Equal values share the same rank; values of 0 are not ranked.
-
Percentage changes are rounded to 1 decimal place, except for the example comparing providers participating in both editions (0.95%). Vietnam’s shares of global certificate counts are rounded to 2 decimal places; other shares are rounded to 1 decimal place.
Scope and editions of standards
Data is aggregated across the editions of each standard included in a given survey. Abbreviated standard names in this article do not imply that the same edition was counted in every year. The aggregation of ISO/IEC 27001:2013 and 2022 in the 2025 source is not used to draw conclusions about the validity of either edition individually.
The survey dataset contains no 2024 figures for ISO/IEC 42001 or ISO 37301; “newly included” does not mean newly published or that no certification existed previously. ISO 28000 data was not collected in the 2023 edition; missing data is not replaced with 0.
Analytical limitations
The article does not calculate compound annual growth rates (CAGR) or forecast demand from a data series with inconsistent coverage; it does not convert total certificates into numbers of businesses or total site counts into numbers of distinct sites; and it does not infer management quality or operational effectiveness from certificate counts alone.