Certifiable at every stage, not just at the end.
Customers in banking, government and cloud often need several of these before they sign. 1Watt runs readiness, gap closure and audit support alongside design, build and operations. Accredited certification bodies issue the certificates.
The eight standards buyers ask for most.
| Standard | Covers | Typically asked for by |
|---|---|---|
| ISO/IEC 27001 | Information security management | All enterprise and cloud customers |
| ISO 9001 | Quality management | Enterprise and government |
| ISO 14001 | Environmental management | ESG-focused investors and hyperscalers |
| ISO 45001 | Occupational health and safety | Hyperscalers and lenders |
| ISO 50001 | Energy management | Hyperscalers and ESG reporting |
| ISO 22301 | Business continuity | BFSI and government |
| ISO/IEC 20000-1 | IT service management | Managed-services customers |
| ISO/IEC 27017, 27018, 27701 | Cloud security, cloud privacy and privacy management | Cloud and SaaS customers |
Resilience, controls and green building.
| Certification | Covers | Typically asked for by |
|---|---|---|
| Uptime Institute Tier | Infrastructure resilience: design, constructed facility and operations | Almost every customer and lender |
| ANSI/TIA-942 | Data centre infrastructure standard | An alternative to Uptime Tier |
| SOC 1 and SOC 2 Type II | Controls over financial reporting and security | US-linked and global customers |
| PCI DSS | Card data security | Payments and BFSI customers |
| LEED, IGBC or equivalent | Green building | ESG investors and hyperscalers |
Where the rules change by country.
Government and regulated buyers in each country work to their own cybersecurity, cloud and data rules.
Government cloud and regulated sectors
- MeitY empanelment
- CERT-In directions and compliance
- DPDP Act readiness
- RBI, SEBI and IRDAI audit support
Asked for by government and BFSI.
National cybersecurity and cloud rules
- UAE Information Assurance standards
- Dubai DESC ISR
- Saudi NCA ECC and CCC, CST cloud registration
- SAMA framework
- Qatar NIA
Asked for by government and regulated sectors in each country.
The paperwork an auditor reads first.
Information security
Information security, data protection and acceptable use.
Physical security
Physical security and access control.
Continuity
Business continuity, disaster recovery and crisis management.
Service management
Change, incident and problem management, ITIL-aligned.
EHS
Environment, health and safety, and permit-to-work.
Procurement
Procurement, vendor management and anti-bribery.
People
HR, code of conduct, whistleblowing and training.
ESG
Energy, water and sustainability reporting.
Customer-facing
SLA, acceptable use, remote-hands and access policies.
Country-specific rules change often. Each one is confirmed with local counsel before a client commits.
Built in from the brief, not bolted on before the audit.
- Design →Tier design certification, fire and security design, sustainability rating and the controls each standard expects, set in the basis of design.
- Delivery →Commissioning levels 1 to 5, handover packs and Tier constructed-facility certification.
- Operations →SOPs, SOC, energy reporting and the evidence trail that keeps ISO, SOC 2 and PCI certificates current.
Need a certificate before a customer will sign?
Tell us which one and where you are with it. We'll tell you the gap and how long it takes to close.
Talk to 1Watt →