ISO 26000:2010

International

v2010

15 domains

60 controls

ISO 26000 provides guidance on social responsibility for all types of organizations. It covers the seven core subjects of social responsibility: organizational governance, human rights, labour practices, the environment, fair operating practices, consumer issues, and community involvement and development. It is a guidance standard, not certifiable.

Unverified

ISO 26000:2010 is a compliance framework from International with 15 domains and 60 controls that map to 183 other frameworks. The largest domains are Clause 4: Principles of Social Responsibility (8 controls), Clause 7: Guidance on Integrating Social Responsibility Throughout an Organization (6 controls), Clause 6: Core Subject - Human Rights (6.3) (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (15)

Clause 4: Principles of Social Responsibility

8 controls

Controls in the Clause 4: Principles of Social Responsibility domain of ISO 26000:2010 — 8 controls
Code	Title	Description
ISO-26000-4.1	General	Introduces the seven principles of social responsibility that organizations should adopt.
ISO-26000-4.2	Accountability	Organizations should be accountable for their impacts on society, the economy, and the environment.
ISO-26000-4.3	Transparency	Organizations should be transparent in decisions and activities that impact society and the environment.
ISO-26000-4.4	Ethical behaviour	Organizations should behave ethically, basing behaviour on values of honesty, equity, and integrity.
ISO-26000-4.5	Respect for stakeholder interests	Organizations should respect, consider, and respond to the interests of their stakeholders.
ISO-26000-4.6	Respect for the rule of law	Organizations should accept that respect for the rule of law is mandatory in all jurisdictions.
ISO-26000-4.7	Respect for international norms of behaviour	Organizations should respect international norms of behaviour while adhering to the rule of law.
ISO-26000-4.8	Respect for human rights	Organizations should respect human rights and recognize their importance and universality.

Clause 5: Recognizing Social Responsibility and Engaging Stakeholders

3 controls

Controls in the Clause 5: Recognizing Social Responsibility and Engaging Stakeholders domain of ISO 26000:2010 — 3 controls
Code	Title	Description
ISO-26000-5.1	General	Provides guidance on recognizing social responsibility and identifying and engaging with stakeholders.
ISO-26000-5.2	Recognizing social responsibility	Guidance on how organizations can recognize their social responsibility through identifying issues and impacts.
ISO-26000-5.3	Stakeholder identification and engagement	Guidance on identifying stakeholders, understanding their expectations, and engaging them meaningfully.

Clause 6: Core Subject - Human Rights (6.3)

5 controls

Controls in the Clause 6: Core Subject - Human Rights (6.3) domain of ISO 26000:2010 — 5 controls
Code	Title	Description
ISO-26000-6.3.1	Due diligence	Requires organizations to conduct human rights due diligence to identify, prevent, and address human rights impacts.
ISO-26000-6.3.2	Human rights risk situations	Guidance on identifying and addressing situations where human rights may be at risk due to organizational activities.
ISO-26000-6.3.3	Avoidance of complicity	Organizations should avoid being complicit in human rights abuses including direct, beneficial, and silent complicity.
ISO-26000-6.3.4	Resolving grievances	Organizations should establish mechanisms for addressing and resolving human rights grievances.
ISO-26000-6.3.5	Discrimination and vulnerable groups	Organizations should ensure non-discrimination and give special attention to vulnerable groups.

Clause 6: Core Subject - Labour Practices (6.4)

5 controls

Controls in the Clause 6: Core Subject - Labour Practices (6.4) domain of ISO 26000:2010 — 5 controls
Code	Title	Description
ISO-26000-6.4.1	Employment and employment relationships	Guidance on ensuring fair employment practices and responsible management of employment relationships.
ISO-26000-6.4.2	Conditions of work and social protection	Guidance on ensuring fair wages, reasonable working hours, rest periods, and social protection for workers.
ISO-26000-6.4.3	Social dialogue	Guidance on engaging workers in dialogue and recognizing their right to freedom of association and collective bargaining...
ISO-26000-6.4.4	Health and safety at work	Guidance on ensuring a safe and healthy working environment and preventing occupational illness and injury.
ISO-26000-6.4.5	Human development and training in the workplace	Guidance on promoting human development through training, career development, and skill enhancement.

Clause 6: Core Subject - Organizational Governance (6.2)

1 controls

Controls in the Clause 6: Core Subject - Organizational Governance (6.2) domain of ISO 26000:2010 — 1 controls
Code	Title	Description
ISO-26000-6.2	Organizational governance	Decision-making frameworks and processes that enable the organization to pursue its objectives for social responsibility...

Clause 6: Core Subject - The Environment (6.5)

4 controls

Controls in the Clause 6: Core Subject - The Environment (6.5) domain of ISO 26000:2010 — 4 controls
Code	Title	Description
ISO-26000-6.5.1	Prevention of pollution	Guidance on minimizing pollution by implementing sustainable practices in emissions, effluent discharge, and waste manag...
ISO-26000-6.5.2	Sustainable resource use	Guidance on sustainable use of energy, water, and materials including resource efficiency and conservation.
ISO-26000-6.5.3	Climate change mitigation and adaptation	Guidance on reducing greenhouse gas emissions and adapting to the impacts of climate change.
ISO-26000-6.5.4	Protection of the environment and biodiversity	Guidance on protecting and restoring natural habitats and ecosystems and valuing biodiversity.

Clause 6: Core Subjects - Fair Operating Practices, Consumer Issues, Community Involvement (6.6-6.8)

3 controls

Controls in the Clause 6: Core Subjects - Fair Operating Practices, Consumer Issues, Community Involvement (6.6-6.8) domain of ISO 26000:2010 — 3 controls
Code	Title	Description
ISO-26000-6.6	Fair operating practices	Guidance on ethical conduct including anti-corruption, responsible political involvement, fair competition, and responsi...
ISO-26000-6.7	Consumer issues	Guidance on fair marketing, product safety, sustainable consumption, consumer data protection, and access to essential s...
ISO-26000-6.8	Community involvement and development	Guidance on community engagement, education, employment creation, technology development, wealth creation, and social in...

Clause 7: Guidance on Integrating Social Responsibility Throughout an Organization

6 controls

Controls in the Clause 7: Guidance on Integrating Social Responsibility Throughout an Organization domain of ISO 26000:2010 — 6 controls
Code	Title	Description
ISO-26000-7.1	General	Provides guidance on integrating social responsibility throughout the organization.
ISO-26000-7.2	Understanding the social responsibility of the organization	Guidance on the relationship between the organization's characteristics and social responsibility.
ISO-26000-7.3	Integrating social responsibility throughout an organization	Guidance on embedding social responsibility into governance, systems, policies, and practices.
ISO-26000-7.4	Communication on social responsibility	Guidance on communicating social responsibility activities and performance to stakeholders.
ISO-26000-7.5	Enhancing credibility regarding social responsibility	Guidance on building stakeholder trust through transparency, verification, and engagement.
ISO-26000-7.6	Reviewing and improving social responsibility actions	Guidance on reviewing progress, evaluating performance, and improving social responsibility practices.

Core Subject 1

1 controls

Controls in the Core Subject 1 domain of ISO 26000:2010 — 1 controls
Code	Title	Description
ISO26000-6.2	Organizational Governance	Implement decision making structures and processes that apply principles of accountability, transparency, ethical behavi...

Core Subject 2

5 controls

Controls in the Core Subject 2 domain of ISO 26000:2010 — 5 controls
Code	Title	Description
ISO26000-6.3.3	Human Rights Due Diligence	Conduct due diligence to identify, prevent, and address actual and potential human rights impacts arising from the organ...
ISO26000-6.3.4	Human Rights Risk Situations	Identify situations of elevated human rights risk and apply enhanced safeguards in conflict affected or high risk operat...
ISO26000-6.3.5	Avoidance of Complicity	Avoid complicity in human rights abuses by third parties through screening, contractual safeguards, and remedial action.
ISO26000-6.3.6	Resolving Grievances	Provide accessible grievance mechanisms enabling affected parties to raise concerns and receive timely remedy.
ISO26000-6.3.7	Discrimination and Vulnerable Groups	Identify and address discrimination, with attention to vulnerable groups including women, persons with disabilities, ind...

Core Subject 3

5 controls

Controls in the Core Subject 3 domain of ISO 26000:2010 — 5 controls
Code	Title	Description
ISO26000-6.4.3	Employment and Employment Relationships	Provide stable, lawful employment relationships, avoiding disguised employment and ensuring decent terms of work.
ISO26000-6.4.4	Conditions of Work and Social Protection	Provide wages, hours, leave, and benefits that meet or exceed legal and industry norms and contribute to workers wellbei...
ISO26000-6.4.5	Social Dialogue	Recognize and support freedom of association and the right to collective bargaining, fostering constructive worker repre...
ISO26000-6.4.6	Health and Safety at Work	Provide a safe and healthy workplace, with hazard identification, control, and worker participation in safety arrangemen...
ISO26000-6.4.7	Human Development and Training	Invest in worker development through training, education access, and career progression opportunities.

Core Subject 4

4 controls

Controls in the Core Subject 4 domain of ISO 26000:2010 — 4 controls
Code	Title	Description
ISO26000-6.5.3	Prevention of Pollution	Prevent and reduce pollution to air, water, and land arising from organizational activities, products, and services.
ISO26000-6.5.4	Sustainable Resource Use	Use materials, energy, and water efficiently, prioritizing renewable and circular alternatives.
ISO26000-6.5.5	Climate Change Mitigation and Adaptation	Measure greenhouse gas emissions, set reduction commitments, and prepare for climate adaptation.
ISO26000-6.5.6	Protection of the Environment and Biodiversity	Protect natural habitats and biodiversity through impact assessment and restoration where feasible.

Core Subject 5

4 controls

Controls in the Core Subject 5 domain of ISO 26000:2010 — 4 controls
Code	Title	Description
ISO26000-6.6.3	Anti Corruption	Establish and enforce anti corruption policies, training, and reporting channels covering all forms of bribery.
ISO26000-6.6.4	Responsible Political Involvement	Engage in political activity transparently, avoiding undue influence and disclosing contributions and lobbying.
ISO26000-6.6.5	Fair Competition	Conduct business in a manner consistent with fair competition law and avoid anti competitive practices.
ISO26000-6.6.6	Promoting Social Responsibility in the Value Chain	Extend social responsibility expectations to suppliers and partners through procurement, contracts, and monitoring.

Core Subject 6

4 controls

Controls in the Core Subject 6 domain of ISO 26000:2010 — 4 controls
Code	Title	Description
ISO26000-6.7.3	Fair Marketing and Contractual Practices	Provide truthful information, fair contracts, and honest marketing communications to consumers.
ISO26000-6.7.4	Protecting Consumers Health and Safety	Provide products and services that are safe to use under reasonable conditions and respond promptly to safety issues.
ISO26000-6.7.6	Consumer Service, Support, and Complaint Resolution	Provide accessible support and complaint resolution mechanisms for consumers.
ISO26000-6.7.7	Consumer Data Protection and Privacy	Protect consumer personal data through lawful collection, secure storage, and respect for privacy rights.

Core Subject 7

2 controls

Controls in the Core Subject 7 domain of ISO 26000:2010 — 2 controls
Code	Title	Description
ISO26000-6.8.3	Community Involvement	Engage with communities affected by operations, including indigenous and vulnerable groups, in a respectful and continuo...
ISO26000-6.8.9	Social Investment	Make social investments that address community priorities and contribute to long term local development.

Your Compliance Coverage

If you comply with ISO 26000:2010, you already cover:

SASB Standards

13%

8 controls mapped

Compare →

OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)

12%

7 controls mapped

Compare →

UNESCO Recommendation on the Ethics of AI

10%

6 controls mapped

Compare →

+ 180 more: OECD AI Principles (10%), ISO 20400:2017 - Sustainable Procurement (10%)

See all 183 mapped frameworks ↓

Maps to 183 other frameworks

60 total controls

SASB Standards

8 source controls mapped|9 target controls covered

13%

OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)

7 source controls mapped|3 target controls covered

12%

UNESCO Recommendation on the Ethics of AI

6 source controls mapped|5 target controls covered

10%

OECD AI Principles

6 source controls mapped|2 target controls covered

10%

ISO 20400:2017 - Sustainable Procurement

6 source controls mapped|6 target controls covered

10%

OECD Recommendation on Artificial Intelligence (2024 Update)

5 source controls mapped|2 target controls covered

ISO/IEC 23894:2023

4 source controls mapped|3 target controls covered

ISO 13485:2016

4 source controls mapped|2 target controls covered

ISO 14004:2016

4 source controls mapped|2 target controls covered

German Supply Chain Due Diligence Act (LkSG)

4 source controls mapped|4 target controls covered

BREEAM - Building Research Establishment Environmental Assessment Method

4 source controls mapped|7 target controls covered

ISO 31000:2018

3 source controls mapped|1 target controls covered

ISO/IEC TR 24028:2020

3 source controls mapped|1 target controls covered

NIST AI 600-1: Generative AI Profile

3 source controls mapped|1 target controls covered

NIST SP 800-53 Rev 5 LOW

3 source controls mapped|1 target controls covered

NIST SP 800-53 Rev 5 MODERATE

3 source controls mapped|1 target controls covered

FedRAMP Moderate

3 source controls mapped|1 target controls covered

NIST SP 800-53 Revision 5.1 HIGH

3 source controls mapped|1 target controls covered

FedRAMP High

3 source controls mapped|1 target controls covered

Illinois Biometric Information Privacy Act (BIPA)

3 source controls mapped|2 target controls covered

South Africa Promotion of Access to Information Act (PAIA)

3 source controls mapped|1 target controls covered

ISO 37001:2016

2 source controls mapped|2 target controls covered

ISO 50001:2018 - Energy Management Systems

2 source controls mapped|2 target controls covered

TISAX - Trusted Information Security Assessment Exchange

2 source controls mapped|4 target controls covered

PIC/S Guide to Good Manufacturing Practice for Medicinal Products

2 source controls mapped|2 target controls covered

NIST Privacy Framework

2 source controls mapped|4 target controls covered

AS9100D - Aerospace Quality Management System

2 source controls mapped|4 target controls covered

Singapore Government Instruction Manual on ICT&SS Management (IM8)

2 source controls mapped|3 target controls covered

ISO/IEC 27011:2024

2 source controls mapped|4 target controls covered

AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence

2 source controls mapped|2 target controls covered

ISO/IEC 27003:2017

2 source controls mapped|3 target controls covered

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0

2 source controls mapped|3 target controls covered

SQF Code Edition 9 - Safe Quality Food

2 source controls mapped|2 target controls covered

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices

2 source controls mapped|2 target controls covered

SA8000:2014 - Social Accountability Standard

2 source controls mapped|2 target controls covered

Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process

2 source controls mapped|4 target controls covered

IEC 60601-1 - Medical Electrical Equipment Safety

2 source controls mapped|1 target controls covered

TCFD Recommendations

2 source controls mapped|2 target controls covered

LEED v4.1 - Green Building Rating System (US Green Building Council)

2 source controls mapped|1 target controls covered

ITU Radio Regulations and Space Security Standards

2 source controls mapped|1 target controls covered

ISSB Standards

2 source controls mapped|2 target controls covered

Science Based Targets Initiative (SBTi) - Net-Zero Standard

2 source controls mapped|3 target controls covered

ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)

2 source controls mapped|3 target controls covered

ISO/IEC 38500:2024 - Governance of IT

2 source controls mapped|1 target controls covered

ISO 37000:2021 - Governance of Organizations

2 source controls mapped|2 target controls covered

TNFD Recommendations

2 source controls mapped|1 target controls covered

ISO 14001

2 source controls mapped|3 target controls covered

ISO 45001:2018

1 source controls mapped|1 target controls covered

ISO 22301:2019

1 source controls mapped|1 target controls covered

ISO 22000:2018

1 source controls mapped|1 target controls covered

ISO 55001:2014

1 source controls mapped|1 target controls covered

ISO 37301:2021

1 source controls mapped|1 target controls covered

ISO 27701:2019

1 source controls mapped|1 target controls covered

ISO 14001:2015

1 source controls mapped|1 target controls covered

ISO 9001:2015

1 source controls mapped|1 target controls covered

Uruguay DPL

1 source controls mapped|2 target controls covered

Virginia CDPA

1 source controls mapped|1 target controls covered

Vietnam PDPD

1 source controls mapped|1 target controls covered

UNICEF Policy Guidance on AI for Children (2021)

1 source controls mapped|1 target controls covered

UK GDPR (UK General Data Protection Regulation)

1 source controls mapped|2 target controls covered

Regional Comprehensive Economic Partnership (RCEP) - E-Commerce Chapter

1 source controls mapped|1 target controls covered

UK AI Regulation Framework

1 source controls mapped|1 target controls covered

Turkey KVKK

1 source controls mapped|1 target controls covered

Trinidad and Tobago Data Protection Act 2011

1 source controls mapped|3 target controls covered

Texas Data Privacy Act

1 source controls mapped|1 target controls covered

Tanzania Personal Data Protection Act (Draft)

1 source controls mapped|1 target controls covered

Taiwan PDPA

1 source controls mapped|1 target controls covered

Student Privacy Pledge 2020

1 source controls mapped|1 target controls covered

Qatar DPL

1 source controls mapped|1 target controls covered

Privacy Act 2020

1 source controls mapped|2 target controls covered

POPIA

1 source controls mapped|2 target controls covered

Peru DPL

1 source controls mapped|1 target controls covered

Personal Data Act (personopplysningsloven)

1 source controls mapped|2 target controls covered

PDPA Thailand

1 source controls mapped|2 target controls covered

PDPA Singapore

1 source controls mapped|2 target controls covered

Paraguay Law on Protection of Personal Data (Law No. 6534/2020)

1 source controls mapped|1 target controls covered

Papua New Guinea National Cybersecurity Policy & Cybercrime Act (2016)

1 source controls mapped|1 target controls covered

Oregon Consumer Privacy Act

1 source controls mapped|2 target controls covered

Oman National Cybersecurity Framework

1 source controls mapped|1 target controls covered

NRF Cybersecurity and Data Privacy Framework (National Retail Federation)

1 source controls mapped|1 target controls covered

NIST SP 800-66

1 source controls mapped|1 target controls covered

NIST SP 800-146

1 source controls mapped|2 target controls covered

NIST SP 800-145

1 source controls mapped|2 target controls covered

NIST SP 800-144

1 source controls mapped|2 target controls covered

NIST SP 800-122

1 source controls mapped|1 target controls covered

NIS2 Directive Implementing Acts

1 source controls mapped|1 target controls covered

Nigeria Data Protection Regulation (NDPR)

1 source controls mapped|2 target controls covered

Nigeria Data Protection Act 2023 (NDPA)

1 source controls mapped|4 target controls covered

Nebraska Data Privacy Act

1 source controls mapped|4 target controls covered

New Jersey Data Privacy Act

1 source controls mapped|2 target controls covered

New Hampshire Data Privacy Act

1 source controls mapped|2 target controls covered

Nevada Gaming Control Board Cybersecurity Requirements

1 source controls mapped|1 target controls covered

MTCS (Singapore)

1 source controls mapped|2 target controls covered

Montana Consumer Data Privacy Act

1 source controls mapped|1 target controls covered

Minnesota Consumer Data Privacy Act

1 source controls mapped|1 target controls covered

Mexico LFPDPPP

1 source controls mapped|2 target controls covered

MDS2 (Medical Device)

1 source controls mapped|2 target controls covered

Mauritius DPA

1 source controls mapped|2 target controls covered

Maryland Online Data Privacy Act of 2024

1 source controls mapped|2 target controls covered

MARS-E

1 source controls mapped|2 target controls covered

Malaysia PDPA 2010

1 source controls mapped|1 target controls covered

Liechtenstein DPA

1 source controls mapped|1 target controls covered

LGPD

1 source controls mapped|1 target controls covered

Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)

1 source controls mapped|1 target controls covered

South Korea PIPA

1 source controls mapped|1 target controls covered

Kentucky Consumer Data Protection Act

1 source controls mapped|2 target controls covered

Jordan Draft Personal Data Protection Law (2022)

1 source controls mapped|2 target controls covered

Japan AI Guidelines

1 source controls mapped|1 target controls covered

Jamaica Data Protection Act 2020

1 source controls mapped|2 target controls covered

FTC GLBA Safeguards Rule (16 CFR Part 314)

1 source controls mapped|1 target controls covered

Florida Digital Bill of Rights (FDBR)

1 source controls mapped|3 target controls covered

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)

1 source controls mapped|2 target controls covered

Barbados Data Protection Act 2019

1 source controls mapped|2 target controls covered

Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)

1 source controls mapped|3 target controls covered

Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)

1 source controls mapped|5 target controls covered

Azerbaijan Law on Personal Data (2010)

1 source controls mapped|2 target controls covered

ISO/IEC 27400:2022

1 source controls mapped|2 target controls covered

ISO 27005

1 source controls mapped|1 target controls covered

ISO 13485

1 source controls mapped|4 target controls covered

US Consumer Product Safety Commission (CPSC) - Connected Product Safety

1 source controls mapped|3 target controls covered

Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)

1 source controls mapped|1 target controls covered

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)

1 source controls mapped|1 target controls covered

GDPR

1 source controls mapped|3 target controls covered

Bahrain PDPL

1 source controls mapped|2 target controls covered

UK Defence Standard 05-138 - Cyber Security for Defence Suppliers

1 source controls mapped|1 target controls covered

ASD Strategies to Mitigate Cyber Security Incidents

1 source controls mapped|1 target controls covered

Uganda Data Protection and Privacy Act (2019)

1 source controls mapped|3 target controls covered

ISO 27018

1 source controls mapped|3 target controls covered

ISO 27799

1 source controls mapped|3 target controls covered

NIST SP 800-190

1 source controls mapped|3 target controls covered

ISO 27017

1 source controls mapped|3 target controls covered

US ITAR and EAR - Export Control and Data Security

1 source controls mapped|1 target controls covered

TEFCA - Trusted Exchange Framework and Common Agreement

1 source controls mapped|1 target controls covered

Sweden Data Protection Act (Dataskyddslag, 2018:218)

1 source controls mapped|2 target controls covered

Saudi Arabia PDPL

1 source controls mapped|2 target controls covered

UK Age Appropriate Design Code (Children's Code)

1 source controls mapped|2 target controls covered

South Korea Korea Internet Self-Governance Organisation (KISO) Code of Ethics

1 source controls mapped|1 target controls covered

Telecommunications Sector Security Reforms (TSSR)

1 source controls mapped|1 target controls covered

SOC for Cybersecurity - Cybersecurity Risk Management Examination

1 source controls mapped|1 target controls covered

UK Gambling Commission - Cyber Resilience Requirements

1 source controls mapped|1 target controls covered

UK FCA/PRA Operational Resilience Framework

1 source controls mapped|1 target controls covered

PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments

1 source controls mapped|1 target controls covered

OWASP Top 10 for LLM Applications 2025

1 source controls mapped|1 target controls covered

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security

1 source controls mapped|1 target controls covered

NERC CIP

1 source controls mapped|1 target controls covered

Modern Slavery Act 2018 (Australia)

1 source controls mapped|2 target controls covered

ICH Q10 - Pharmaceutical Quality System

1 source controls mapped|1 target controls covered

ICAO Annex 17 - Aviation Security (AVSEC)

1 source controls mapped|1 target controls covered

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)

1 source controls mapped|1 target controls covered

French Sapin II Law (Law No. 2016-1691)

1 source controls mapped|1 target controls covered

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements

1 source controls mapped|3 target controls covered

BRCGS Global Standard for Food Safety Issue 9

1 source controls mapped|1 target controls covered

API 1164

1 source controls mapped|3 target controls covered

Annex 11 to EU GMP - Computerised Systems

1 source controls mapped|1 target controls covered

South Korea ISMS-P

1 source controls mapped|1 target controls covered

Space ISAC (Information Sharing and Analysis Center) - Threat Framework

1 source controls mapped|1 target controls covered

Authorised Economic Operator (AEO) Programmes - Global Standards

1 source controls mapped|3 target controls covered

IEC 62443

1 source controls mapped|3 target controls covered

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence

1 source controls mapped|2 target controls covered

21 CFR Part 211 - Current Good Manufacturing Practice

1 source controls mapped|1 target controls covered

APRA CPS 230 Operational Risk Management

1 source controls mapped|2 target controls covered

ISO/IEC 27010:2015

1 source controls mapped|1 target controls covered

FBI CJIS Security Policy

1 source controls mapped|1 target controls covered

Automotive SPICE (ASPICE) v4.0 - Process Assessment Model

1 source controls mapped|1 target controls covered

NIST SP 1800-32

1 source controls mapped|3 target controls covered

Solvency II

1 source controls mapped|3 target controls covered

ISO 28001:2007 Supply Chain Security Management

1 source controls mapped|2 target controls covered

ISO 41001:2018 - Facility Management Systems

1 source controls mapped|1 target controls covered

ISO 22317

1 source controls mapped|1 target controls covered

Sigstore - Software Artifact Signing and Verification

1 source controls mapped|1 target controls covered

NIST SP 800-53 Rev 5

1 source controls mapped|3 target controls covered

ISO 22318

1 source controls mapped|1 target controls covered

ISO 27019

1 source controls mapped|3 target controls covered

UK Telecommunications (Security) Act 2021

1 source controls mapped|1 target controls covered

Security of Critical Infrastructure Act 2018 (SOCI)

1 source controls mapped|1 target controls covered

UK Security and Emergency Measures Direction (SEMD) - Water Industry

1 source controls mapped|1 target controls covered

NIST Cybersecurity Framework 2.0

1 source controls mapped|3 target controls covered

ISO 22316

1 source controls mapped|1 target controls covered

Protective Security Policy Framework (PSPF) Release 2024

1 source controls mapped|1 target controls covered

ISO 22000

1 source controls mapped|1 target controls covered

NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management

1 source controls mapped|1 target controls covered

ISO 45001

1 source controls mapped|1 target controls covered

ISO/IEC 38500:2024

1 source controls mapped|1 target controls covered

Compare ISO 26000:2010 with SASB Standards

What is ISO 26000:2010 and who does it apply to?

ISO 26000:2010 is a compliance framework from International with 15 domains and 60 controls. ISO 26000 provides guidance on social responsibility for all types of organizations. It covers the seven core subjects of social responsibility: organizational governance, human rights, labour practices, the environment, fair operating practices, consumer issues, and community involvement and development. It is a guidance standard, not certifiable. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 26000:2010 actually require?

ISO 26000:2010 has 60 controls organised across 15 domains. The largest domains are Clause 4: Principles of Social Responsibility (8 controls), Clause 7: Guidance on Integrating Social Responsibility Throughout an Organization (6 controls), Clause 6: Core Subject - Human Rights (6.3) (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 26000:2010 do I already cover?

ISO 26000:2010 maps to 183 other compliance frameworks. The top mapping partners are SASB Standards (13% coverage), OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update) (12% coverage), UNESCO Recommendation on the Ethics of AI (10% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement ISO 26000:2010?

Start your ISO 26000:2010 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 26000:2010 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 60 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required