Skip to content
ISO 9001:2026 published · transition until 30 Sep 2029

We use necessary technical cookies and measure only if you accept. Accept turns on our own measurement, Google Analytics, Google Ads and the Meta pixel; Reject keeps everything off, and you can change it at any time. See the details

Two standards, side by side, to decide with good judgement

What each one solves, who requires it, what the audit looks at and whether they should be integrated in one system. The comparison builds on screen; the team confirms the proposal in writing.

Compare two standardsCompare View catalogueCatalogue
Signing documents at a desk
Signing documents at a deskG-CERTI archive

Choose two and the table builds itself

Any pair from the catalogue. The ten published comparisons also include G-CERTI's technical reading.

Choose two standards to compare

The suggestions below are the most consulted pairs.

Most consulted pairs

When what they ask for is not a certifiable standard

They appear in tenders and supplier approvals alongside ISO standards. It is worth distinguishing what is certified from what guides.

NIST CSF

Voluntary cybersecurity reference framework: it organizes the internal programme into functions (govern, identify, protect, detect, respond and recover), but is not certified under accreditation.

Compared with ISO/IEC 27001The framework helps structure the programme; the standard makes it certifiable and demonstrable externally.

SOC 2

Attestation report on controls, predominant in the United States: the output is an auditor's report on an evaluated period.

Compared with ISO/IEC 27001A solid 27001 ISMS covers much of what SOC 2 evaluates; many organizations maintain both.

IATF 16949

Automotive supply chain quality standard: it incorporates ISO 9001 requirements and adds sector-specific tools (APQP, PPAP, FMEA, SPC, MSA).

Compared with ISO 9001Starting with 9001 sets the base before the leap to automotive.

UNE 19601

Spanish standard focused on managing the criminal risk of legal entities; its recognition is mainly national.

Compared with ISO 37001For groups operating in Spain and abroad, both can coexist depending on jurisdiction and risk.

G-CERTI does not certify these frameworks · they are named to locate what the market asks for

An organization's team with two certificates
Certificate deliveryG-CERTI archive

With both on the table, the scope is defined in writing

The request picks up the compared standards. It is sized on scope, sites and headcount, and the feasibility of an integrated audit is assessed technically.

Request a proposalRequest a proposal Ask for guidanceAsk for guidance
See how the process moves forward