Industries · Energy & Utilities
ISO certification for energy & utilities
ISO 14001, 45001, 50001, 9001 and ISO/IEC 27001 certification for energy, water and utility organisations and their UK supply chains.
- ISO 14001 environmental
- ISO 45001 occupational health and safety
- ISO 50001 energy
- ISO 9001 quality
Overview
Certification for energy, water and utility suppliers
Energy and utilities organisations operate critical infrastructure under close regulatory oversight. Network operators, generators, water companies and their contractors face demanding expectations on safety, environmental performance, resilience and information security, and certified management systems are commonly requested throughout the supply chain. Contractors working on networks, plant and assets are often asked for ISO 9001, ISO 14001 and ISO 45001 before they can be considered for work, and information security is becoming a more frequent requirement.
Suppliers to UK utilities frequently register on Achilles UVDB, the supplier qualification system used by many utility buyers, where questions about quality, environmental and safety management are common. Utilities procurement has also moved under the Procurement Act 2023, in force since February 2025. ISO certificates provide recognised evidence for supplier assessments, although each buyer decides how they are used. Requirements vary between buyers and contracts.
Energy management is a particular focus. Large undertakings must comply with the Energy Savings Opportunity Scheme, and ISO 50001 certification covering all energy use is a recognised compliance route. Operators of essential services may also be subject to the Network and Information Systems Regulations 2018, where ISO/IEC 27001 can support, but not replace, regulatory requirements. ISO 22301 may also help where continuity of supply is critical.
Recommended
- ISO 14001
- ISO 45001
- ISO 50001
Sector challenges
Where certification makes the difference
The pressures organisations in energy & utilities face most often, and how a certified management system helps answer them.
Supply chain qualification
Utility buyers often use Achilles UVDB and their own assessments, which commonly ask about quality, environmental and safety management.
High-hazard operations
Work at height, electrical systems, confined spaces and offshore activities demand rigorous occupational health and safety management.
Environmental performance
Emissions, discharges, land use and biodiversity are closely regulated, making ISO 14001 relevant across generation, networks and water.
Energy efficiency obligations
ESOS and customer expectations drive interest in ISO 50001 as a structured way to manage and improve energy performance.
Critical infrastructure security
Operational and information technology systems must be protected against cyber threats, with resilience planning for disruption.
Recommended standards
Standards most requested in energy & utilities
Choose a standard to see what it covers. Several can be combined into one integrated audit.
Environment & Energy
ISO 14001:2026Environmental Management
ISO 14001:2026, published in April 2026 to replace the 2015 edition, specifies the requirements for an environmental management system. It helps an organisation identify the environmental aspects of its activities, products and services, understand its compliance obligations, and manage significant impacts through planning, operational control and evaluation. The standard takes a life cycle perspective, so organisations consider stages they can control or influence, such as purchasing, transport, use and end-of-life treatment, as well as their own sites.
- Supply chain and tender credibility
- Structured legal compliance
- Control of significant impacts
- Resource and waste efficiency
Health & Safety
ISO 45001:2018Occupational Health and Safety Management
ISO 45001:2018 sets out requirements for an occupational health and safety management system. Its aim is to prevent work-related injury and ill health and to provide safe and healthy workplaces. The standard places strong emphasis on leadership, the consultation and participation of workers, hazard identification and the hierarchy of controls. It replaced OHSAS 18001 and follows the Harmonized Structure, so it integrates readily with ISO 9001 and ISO 14001.
- Prequalification and tenders
- Worker involvement
- Systematic hazard control
- Clear legal oversight
Environment & Energy
ISO 50001:2018Energy Management
ISO 50001:2018 specifies requirements for an energy management system (EnMS). It requires an organisation to understand how it uses and consumes energy, identify significant energy uses, set an energy baseline and energy performance indicators, and plan actions to improve energy performance. Unlike some other management system standards, ISO 50001 requires an organisation to demonstrate continual improvement in energy performance itself, not only in the management system.
- ESOS compliance route
- Measured energy performance
- Focus on significant uses
- Cost control
Quality
ISO 9001:2026Quality Management
ISO 9001:2026 sets out the requirements for a quality management system. Published in September 2026, it replaces ISO 9001:2015 and keeps the same core approach. It asks an organisation to understand its context and interested parties, plan its processes around risks and opportunities, and show that it consistently provides products and services that meet customer and applicable statutory and regulatory requirements. It is the most widely used management system standard and applies to organisations of any size or sector, from sole manufacturers to national service providers.
- Meet tender and supplier requirements
- Consistent processes
- Fewer errors and complaints
- Risk-based planning
Information & Technology
ISO/IEC 27001:2022Information Security Management
ISO/IEC 27001:2022 specifies requirements for an information security management system (ISMS). It requires an organisation to assess information security risks to the confidentiality, integrity and availability of information, select controls to treat them and manage those controls through a continual cycle of monitoring and review. Annex A lists 93 reference controls in four themes: organisational, people, physical and technological. Each organisation compares its chosen controls against Annex A and records the outcome in a Statement of Applicability.
- Answer security questionnaires
- Risk-based security
- Supports data protection duties
- Management oversight
How it works
Your route to certification
- 1
Application and quotation
You tell us your scope, sites, headcount and standards. We calculate audit duration using the accreditation rules and send a fixed quotation for the full three-year cycle.
- 2
Stage 1 audit
Your auditor reviews your documented information, scope, legal and regulatory awareness, internal audit and management review, and confirms you are ready for Stage 2.
- 3
Stage 2 audit
An on-site evaluation of how your management system works in practice. The auditor interviews people, observes activities and samples records against every requirement.
- 4
Certification decision
Any nonconformities are closed with evidence. A qualified reviewer who did not take part in the audit makes the certification decision and your certificate is issued.
- 5
Surveillance and recertification
Surveillance audits take place at least once a year to confirm continued conformity. A recertification audit before the third anniversary renews your certificate.
Certificate verification
Check a Hexa certificate
Need to know whether a supplier's certificate is current? Customers, buyers and other interested parties can ask us to confirm the details held in our records.
We confirm the organisation name, certificate number, ISO standard, certified scope, status, and issue and expiry dates.
FAQs
Energy & Utilities: certification questions
Does ISO certification help with Achilles UVDB?
Achilles UVDB is a supplier qualification system used by many UK utility buyers. Its questionnaires typically ask about quality, environmental and health and safety management, and ISO certificates can be provided as evidence. The way certificates are scored is set by Achilles and the buyers, not by the certification body.
Is ISO 50001 a route to ESOS compliance?
Yes. Under the Energy Savings Opportunity Scheme, a large undertaking can comply by holding ISO 50001 certification that covers all of its energy use, subject to the conditions in current guidance. The Environment Agency administers ESOS across the UK, and organisations should check the latest guidance for each compliance phase.
Does ISO 14001 cover environmental permits?
ISO 14001 requires you to identify and meet your compliance obligations, which will include permits issued by the Environment Agency, Natural Resources Wales, SEPA or NIEA. Auditors will check how you manage these obligations. Certification is not a regulatory compliance verdict, and enforcement remains with the regulators.
Does ISO/IEC 27001 satisfy the NIS Regulations?
No single certificate guarantees compliance with the Network and Information Systems Regulations 2018. ISO/IEC 27001 provides a recognised framework for managing information security risks and can support evidence for regulators and assessments such as the NCSC Cyber Assessment Framework, but the operator remains responsible for meeting its legal duties.
Can offshore and remote sites be audited?
Yes. Audit plans can include offshore, remote or temporary sites where work within the scope takes place, subject to access, safety induction and logistics. Where a visit is impractical, some activities may be assessed remotely in line with IAF guidance, with on-site sampling planned across the certification cycle.
Are you able to certify contractors working for Ofgem-regulated companies?
Yes. Contractors and service providers to energy networks and suppliers can be certified to the ISO standards we offer. Ofgem regulates the energy companies themselves rather than their contractors, but those companies often pass requirements down their supply chains, including expectations for certified management systems.
Which standards are most common in energy supply chains?
ISO 9001, ISO 14001 and ISO 45001 are the standards most commonly requested from contractors and suppliers in the energy and utilities sector. ISO 50001 is relevant where energy use is significant, and ISO/IEC 27001 is increasingly requested where suppliers access operational or customer systems.
Can a renewable energy developer be certified?
Yes. Developers, owners and operators of wind, solar, storage and other renewable assets can be certified, with a scope covering development, construction management or operations as appropriate. ISO 14001 and ISO 45001 are commonly held, and audits may include operational sites as well as head office.
Other industries we audit
All industries
Start your certification
Get a fixed, three-year certification quote
Tell us about your organisation and the standards you need. We will confirm audit days, scope and dates in writing, with no obligation.
