Introduction

When a buyer evaluates a manufacturer, one of the first questions is often: “Which certifications do you have?” Supermarket chains, export importers, multinational brands and government buyers increasingly use certifications as a basic filter. A factory without the right certificates may never reach the shortlist, however good its products are.

The world of certifications can be confusing. There are international management system standards, industry-specific schemes, product marks, social compliance audits and market-specific requirements. Some are essential for certain buyers, others are useful, and some may be unnecessary for a particular business.

This article explains the most common certifications for manufacturers in Sri Lanka, what each one covers, which buyers expect them and how factories can prepare. It also explains how Dsigngo Group and Raiden (Pvt) Ltd support factories with the documentation, systems and presentation that certification requires.

Why certifications matter

Certifications help manufacturers:

• Meet buyer requirements and qualify for tenders and listings.
• Demonstrate quality, safety and reliability with independent evidence.
• Improve internal processes, reduce errors and waste.
• Reduce the number of separate audits demanded by different buyers.
• Access export markets with strict requirements.
• Strengthen their reputation and brand.

The process of preparing for certification often improves the business as much as the certificate itself. Clearer responsibilities, better records and regular reviews tend to reduce mistakes, complaints and waste long after the audit is over.

Management system standards

Management system standards describe how an organisation should manage a particular area, such as quality or safety. They focus on processes, responsibilities, records and continual improvement.

ISO 9001: quality management

ISO 9001 is the world’s most widely used management system standard. According to the ISO Survey, around 1.47 million ISO 9001 certificates were reported worldwide in 2024. The standard was revised in 2026: ISO 9001:2026 was published on 16 September 2026, and organisations certified to the 2015 edition have a transition period of about three years.

ISO 9001 covers customer focus, leadership, planning, process control, supplier management, monitoring, internal audits and continual improvement. It applies to any type of organisation and is often a basic requirement for B2B suppliers.

ISO 14001: environmental management

ISO 14001 helps organisations manage their environmental impacts, such as energy use, waste, emissions and water. It is increasingly requested by export buyers and large corporate customers with sustainability commitments.

ISO 45001: occupational health and safety

ISO 45001 provides a framework for managing workplace health and safety risks. It demonstrates that a factory takes the safety of its workers seriously, which matters to buyers concerned about responsible sourcing.

ISO 50001: energy management

ISO 50001 helps organisations manage and reduce energy use. For energy-intensive manufacturers, it can deliver significant cost savings.

ISO/IEC 27001: information security

ISO/IEC 27001 covers information security management. It is increasingly relevant for manufacturers that handle confidential designs, customer data or connected systems. The 2022 edition is now the only valid version, after the transition from the 2013 edition ended on 31 October 2025.

Food safety certifications

HACCP

HACCP (Hazard Analysis and Critical Control Points) is a systematic approach to identifying, evaluating and controlling food safety hazards. It forms the basis of most food safety systems and is expected by many buyers.

Good Manufacturing Practice (GMP)

GMP covers the basic conditions and practices needed for safe production: hygiene, premises, equipment, pest control, staff practices and documentation. GMP is a foundation for food, cosmetic and pharmaceutical manufacturing.

ISO 22000

ISO 22000 is an international standard for food safety management systems. It combines HACCP principles with a management system framework similar to ISO 9001.

FSSC 22000

FSSC 22000 is a certification scheme based on ISO 22000, with additional requirements. It is recognised by the Global Food Safety Initiative (GFSI), which many large retailers and food companies require. The Foundation FSSC reports that more than 40,000 organisations worldwide are certified. Version 6 of the scheme became mandatory for audits from 1 April 2024.

Other GFSI-recognised schemes

Other schemes, such as BRCGS and IFS, are widely used by retailers in Europe and elsewhere. The right scheme depends on the buyers a manufacturer wants to serve.

Product certifications and marks

SLS mark

The Sri Lanka Standards Institution operates the SLS mark product certification scheme. The mark shows that a product meets the relevant Sri Lanka Standard. It is voluntary for most products but mandatory for certain listed products. Manufacturers should check whether their products are on the compulsory list.

Halal certification

Halal certification is important for many food, beverage and cosmetic products sold in the UAE and other Muslim-majority markets. Requirements vary by importing country, so manufacturers should confirm which certification bodies are recognised in each target market.

Organic certification

Organic certification confirms that products meet the organic standards of a particular market, such as the European Union or the United States. Each market has its own rules and recognised certifiers.

Origin marks

Some Sri Lankan products have formal origin marks. The Ceylon Tea lion logo may be used only on 100% pure Ceylon tea packed in Sri Lanka by licensed packers. Ceylon Cinnamon is protected as a Protected Geographical Indication in the European Union, with licences issued through the Export Development Board.

Social and ethical compliance

Many international buyers, especially in apparel, footwear and consumer goods, require social compliance audits. These assess working conditions, wages, working hours, health and safety, and environmental practices. Common programmes include WRAP, amfori BSCI and Sedex SMETA audits.

Textile products may also need certifications such as OEKO-TEX, which tests for harmful substances, or GOTS, for organic textiles.

Sri Lanka’s apparel industry has built a strong reputation for ethical manufacturing, which supports its exports, valued at about US$5.02 billion in 2025 according to the Joint Apparel Association Forum.

Cosmetics and Ayurvedic products

Cosmetics manufacturers often follow GMP guidelines such as ISO 22716. Ayurvedic and herbal products may require registration or licensing with the relevant Sri Lankan authorities, and products sold abroad must meet the cosmetic or herbal product rules of each market.

Choosing the right certifications

Not every factory needs every certification. Choose based on:

1. What your current and target buyers require.
2. The products you make and the risks involved.
3. The markets you sell to.
4. The resources and time available to prepare.
5. Which certifications can be combined efficiently.

Many management system standards share a common structure, so factories can integrate quality, environment and safety systems rather than running them separately.

The certification process

Most certifications follow a similar path:

1. Gap analysis. Compare current practices with the standard’s requirements.
2. Planning. Decide responsibilities, timelines and resources.
3. Documentation. Prepare policies, procedures, forms and records.
4. Implementation. Put the procedures into daily practice and train staff.
5. Internal audit. Check that the system works as intended.
6. Management review. Senior managers review results and decide improvements.
7. Certification audit. An accredited certification body audits the system, usually in two stages.
8. Surveillance and recertification. Regular audits maintain the certificate.

Timelines vary, but many factories need several months to prepare for their first certification.

Integrated management systems

Factories that need several certifications can save time by integrating them. ISO 9001, ISO 14001, ISO 45001 and other modern ISO management standards share a common high-level structure, with similar clauses on context, leadership, planning, support, operation, performance evaluation and improvement.

An integrated management system uses one set of core procedures, such as document control, internal audits, management review and corrective action, for all standards. Benefits include:

• Less duplication of documents and records.
• Combined internal audits and, often, combined certification audits.
• A clearer system for staff, who follow one way of working rather than several.
• Lower overall costs.

What certification costs

The cost of certification includes several elements:

• Preparation, which may involve consultants, training and staff time.
• Improvements to premises, equipment or processes identified in the gap analysis.
• Documentation and record systems.
• Certification body fees for the initial audit.
• Annual surveillance audits and recertification.
• Ongoing staff time to maintain the system.

Costs vary widely by standard, factory size and starting point. Factories with good existing practices and records usually need less preparation.

Keeping certification alive between audits

A certificate is not a one-time achievement. Systems must work every day, not only in audit week. Good practice includes:

• Regular internal audits throughout the year.
• Monthly reviews of key quality, safety and environmental measures.
• Prompt investigation and correction of problems.
• Training new staff before they start work.
• Keeping records complete and up to date.
• Management involvement and visible support.

Factories that maintain their systems well find surveillance audits straightforward, while those that let systems slip often face difficult findings.

Changing requirements in export markets

Buyer requirements and market rules continue to evolve. Exporters to the European Union, for example, should watch the EU’s revised Generalised Scheme of Preferences, which links trade preferences more closely to labour, human rights and environmental standards, and the Packaging and Packaging Waste Regulation, which generally applies from 12 August 2026. Staying informed helps factories prepare before new requirements become urgent.

Choosing a certification body

Certificates are only as credible as the body that issues them. Look for certification bodies accredited by a recognised accreditation body, such as the Sri Lanka Accreditation Board or an equivalent member of the International Accreditation Forum. Buyers can verify many accredited certificates through IAF CertSearch.

Ask buyers which certification bodies they accept before choosing one. Be cautious of offers of quick certificates with minimal audits. Unaccredited certificates may not be accepted by buyers and can damage a factory’s reputation.

Documentation and records: where most effort goes

Certification depends heavily on documentation and records. Auditors want to see evidence that procedures are followed consistently. Common challenges include:

• Paper records that are incomplete or hard to find.
• Procedures that do not match what actually happens.
• Training records that are not kept up to date.
• Calibration and maintenance records that are missing.

Digital record-keeping makes audits easier and records more reliable.

How Dsigngo Group and Raiden support certification

We do not issue certificates or act as auditors, but we help factories prepare and present their systems professionally:

• Design of clear procedure documents, work instructions, forms and checklists.
• Visual work instructions and safety signage for the factory floor.
• Training materials, posters and induction guides for staff.
• Digital record systems, document storage and backups through Raiden’s IT services.
• Information security systems that support ISO/IEC 27001 requirements.
• Correct use of certification marks and logos on packaging, labels and marketing materials.
• Company profiles, websites and catalogues that present certifications to buyers.

Preparing staff for audits

Auditors talk to staff on the factory floor, not only to managers. They ask operators how they do their work, what they would do if something went wrong and where to find procedures. Staff who understand the system answer confidently.

Effective preparation includes:

• Short, practical training sessions in the languages staff use, such as Sinhala and Tamil.
• Visual work instructions at workstations, showing key steps and checks.
• Clear explanations of why each procedure matters, not just what to do.
• Practice sessions where supervisors ask typical audit questions.
• Recognition for teams that maintain high standards.

Well-designed visual materials, such as illustrated work instructions, safety signs and process charts, make procedures easier to follow every day, not just during audits.

Presenting certifications to buyers

Once certified, factories should make sure buyers know. Effective presentation includes:

• A certifications section on the website and company profile, with certificate numbers and validity dates.
• Copies of current certificates ready to share.
• Certification marks used correctly on packaging, where rules allow.
• Updates whenever certificates are renewed or new ones are achieved.

Marks should only be used as permitted by the certification body. Misusing a mark can lead to the certificate being withdrawn.

A certification readiness checklist

Before booking a certification audit, check that:

1. You know exactly which standard and scope you are seeking.
2. A gap analysis has been completed and gaps have been closed.
3. Procedures reflect real practice and are available to staff.
4. Records have been kept for long enough to show the system working.
5. Staff have been trained and can explain their roles.
6. At least one full internal audit has been completed.
7. Management has reviewed results and approved actions.
8. The certification body is accredited and acceptable to your buyers.

An illustrative example

Here is an illustrative example. It does not describe a specific client.

A spice processor in central Sri Lanka wants to supply a supermarket chain and a UAE importer.

• Requirements. The supermarket asks for recognised food safety certification, and the importer asks for halal certification.
• Gap analysis. A consultant identifies gaps in hygiene zoning, pest control records and traceability.
• Documentation. Clear procedures, forms and visual work instructions are prepared, and training posters are displayed in production areas.
• Digital records. Raiden sets up a secure document system and backups, so records are easy to retrieve during audits.
• Certification. After several months of implementation and internal audits, the factory passes its certification audits.
• Presentation. Certificates are added to the website, company profile and product sheets, and marks are used correctly on packaging.

Common mistakes

• Choosing certifications buyers do not value.
• Treating certification as paperwork instead of a way of working.
• Writing procedures that do not reflect real practice.
• Using unaccredited certification bodies.
• Letting systems slip between audits.
• Misusing certification marks on packaging.
• Copying another company’s procedures without adapting them to the factory.
• Leaving certification to one person, so knowledge disappears when they leave.

Frequently asked questions

Which certification should a small manufacturer start with?

It depends on buyers and products. Many start with ISO 9001 or a food safety system such as HACCP, then add others as buyers require.

How long does certification take?

Most factories need several months to prepare for a first certification, depending on their starting point and the standard.

Do certifications need to be renewed?

Yes. Most certificates require regular surveillance audits and full recertification, often every three years.

What happens to our ISO 9001:2015 certificate now that ISO 9001:2026 is published?

Existing certificates remain valid during the transition period. Certified organisations should plan their move to the new edition with their certification body well before the transition deadline.

Can we use the certification logo on our products?

Only as permitted by the certification body and the scheme rules. Some marks may be used on products, while others may only be used in company materials.

Conclusion

Certifications open doors to demanding buyers and markets, and preparing for them often makes factories more efficient and reliable. Choosing the right certifications, preparing properly, working with accredited bodies and presenting achievements clearly all make a difference.

Dsigngo Group and Raiden (Pvt) Ltd support manufacturers with documentation design, digital records, information security and professional presentation, helping certified quality become a competitive advantage.

Preparing for a certification? Ask us how we can help with documentation and systems.

Discuss Certification Support

Sources

• ISO Survey 2024 (ISO 9001 certificates) and reporting on ISO 9001:2026 publication and transition (NSF and certification bodies).
• Certification bodies’ notices on the ISO/IEC 27001:2022 transition deadline (31 October 2025).
• Foundation FSSC, Annual Report 2025, and FSSC 22000 Version 6 notices.
• Sri Lanka Standards Institution, SLS mark product certification.
• Sri Lanka Tea Board, Lion Logo rules; EU Regulation 2022/144 (Ceylon Cinnamon PGI).
• Joint Apparel Association Forum, 2025 apparel exports.
• International Accreditation Forum, IAF CertSearch.

Check each standard and figure against the original source before publishing.