Guardian Middle East LLC

Tier 2 — UAF / IAS Accredited

What Tier 2 Means

The Tier 2 Position

Tier 2 covers four management system standards under UAF and IAS accreditation. These standards extend beyond the foundational QHSE coverage of Tier 1 (ISO 9001, 14001, 45001) into specialised governance, security, education, and continuity domains. Tier 2 carries full IAF MLA international recognition and public verification on IAF CertSearch — but it does NOT include QS Recognition, because QS recognition under RB066-26 covers only ISO 9001, 14001, and 45001.

Two Disclosure Variants Within Tier 2

Tier 2 contains two distinct accreditation chains:

  1. Standard Tier 2 chain — ISO 21001, ISO/IEC 27001, ISO 37001 — issued by Guardian Assessment Pvt Ltd under UAF and IAS accreditation.
  2. ISO 22301 chain — issued by a Third-Party Certification Body accredited by IAS under MSCB 154, with Guardian Middle East LLC acting as the local representative in Qatar.

Both chains carry IAF MLA recognition and public verification on IAF CertSearch. The structural difference is disclosed transparently on this page and on the individual ISO 22301 standard page.

Why Choose Tier 2

Reason 1 — UAF + IAS Dual Accreditation

Tier 2 is delivered under both UAF (United Accreditation Foundation, USA) and IAS (International Accreditation Service, USA) accreditation for ISO 21001, 27001, and 37001. Both bodies are signatories of the IAF Multilateral Recognition Arrangement, ensuring international recognition under IAF MLA.

Reason 2 — Specialised Standards

Tier 2 covers four standards that address specific governance, security, education, and continuity needs:

  • ISO 21001 — for educational organisations seeking to improve learner satisfaction and educational outcomes.
  • ISO/IEC 27001 — the global benchmark for information security management, increasingly required by data-handling organisations and clients of regulated entities.
  • ISO 37001 — anti-bribery management, particularly relevant for organisations operating in higher corruption-risk environments or seeking to demonstrate strong governance.
  • ISO 22301 — business continuity management, critical for financial services, healthcare, energy, telecommunications, and other sectors with high availability requirements.

Reason 3 — IAF MLA International Recognition

All Tier 2 certificates — including ISO 22301 issued through the Third-Party CB — are recognised under the IAF Multilateral Recognition Arrangement and listed on IAF CertSearch.

Reason 4 — Sector-Specific Auditor Competence

Audit team appointment under IAF MD 11 (Sector-Specific Application of ISO/IEC 17021-1) ensures auditors hold sectoral competence for the client’s industry, particularly important for ISO/IEC 27001 (technology, financial services) and ISO 22301 (regulated industries with availability requirements).

Reason 5 — Local QFC-Licensed Delivery

Through Guardian Middle East LLC’s QFC Licence 03870, Tier 2 certification is delivered locally in Qatar — including ISO 22301 where Guardian Middle East LLC acts as the local representative in Qatar for the Third-Party CB.

Mandatory Disclosure (Tier 2)

Tier 2 carries TWO disclosure variants. Both must appear verbatim — one for ISO 21001, 27001, 37001, and the other specifically for ISO 22301.

Variant A — Standard Tier 2 (ISO 21001, 27001, 37001)

Issued by Guardian Assessment Pvt Ltd · UAF / IAS Accredited · IAF MLA Recognized · Listed on IAF CertSearch.

Variant B — ISO 22301 Special Disclosure

Issued by [Third-Party CB], IAS-Accredited (MSCB 154). Local representation in Qatar by Guardian Middle East LLC.

Why ISO 22301 has a different disclosure: ISO 22301 (Business Continuity Management Systems) certification is delivered through a Third-Party Certification Body whose accreditation chain is structurally different from the UAF/IAS chain held by Guardian Assessment Pvt Ltd. The Third-Party CB is accredited by IAS under registration MSCB 154. Guardian Middle East LLC acts as the local representative in Qatar for this scope only. This transparent disclosure ensures clients, regulators, and supply-chain partners know precisely who issued the certificate and how to verify it.

Standards in Tier 2

ISO 21001

Educational Organisation Management Systems

ISO 21001 establishes the requirements for an Educational Organisation Management System (EOMS), focused on improving learner satisfaction and the achievement of educational outcomes. The standard applies to all educational organisations, including schools, universities, training providers, vocational institutes, and corporate learning functions. ISO 21001 is delivered under standard Tier 2 disclosure (Variant A).

Standard Page
ISO/IEC 27001

Information Security Management Systems

ISO/IEC 27001 is the global benchmark for Information Security Management Systems (ISMS). It establishes the requirements for protecting confidentiality, integrity, and availability of information through a risk-based approach. ISO/IEC 27001 certification is increasingly required by clients, regulators, and supply-chain partners, particularly in financial services, healthcare, technology, and government. ISO/IEC 27001 is delivered under standard Tier 2 disclosure (Variant A).

Standard Page
ISO 37001

Anti-Bribery Management Systems

ISO 37001 establishes the requirements for an Anti-Bribery Management System (ABMS), focused on preventing, detecting, and responding to bribery. The standard is widely adopted by organisations operating in higher corruption-risk environments, public-sector contractors, and multinational firms seeking to demonstrate strong anti-bribery governance to stakeholders, regulators, and supply-chain partners. ISO 37001 is delivered under standard Tier 2 disclosure (Variant A).

Standard Page
ISO 22301

Business Continuity Management Systems

ISO 22301 establishes the requirements for a Business Continuity Management System (BCMS), focused on ensuring an organisation can continue to deliver products and services at acceptable predefined levels following disruptive incidents. ISO 22301 certification is critical for financial services, healthcare, energy, telecommunications, government, and other sectors with high availability requirements.

Special wording for ISO 22301 only: Issued by [Third-Party CB], IAS-Accredited (MSCB 154). Local representation in Qatar by Guardian Middle East LLC.

Standard Page

Tier 2 Benefits — Summary

  • UAF and IAS dual accreditation for ISO 21001, 27001, 37001 — IAF MLA recognised.
  • IAS MSCB 154 accreditation for ISO 22301 via Third-Party CB — IAF MLA recognised.
  • IAF CertSearch listing for all Tier 2 accredited certificates.
  • Specialised technical scope across education, information security, anti-bribery, and business continuity.
  • Sector-specific auditor competence under IAF MD 11.
  • Local QFC-licensed delivery through Guardian Middle East LLC.
  • Bilingual Arabic / English delivery, certificates, and reports.
  • Transparent multi-chain disclosure — clients always know who issued the certificate and how to verify.

Who Tier 2 Is For

Tier 2 is the appropriate choice for organisations whose stakeholder, regulatory, or contractual requirements include any of the following:

  • Educational institutions (schools, universities, training providers) seeking ISO 21001.
  • Banks, fintechs, and financial services firms seeking ISO/IEC 27001 information security or ISO 22301 business continuity certification.
  • IT service providers, MSPs, and SaaS operators seeking ISO/IEC 27001.
  • Healthcare providers seeking ISO/IEC 27001 (data protection) or ISO 22301 (continuity of care).
  • Government and semi-government entities seeking ISO 37001 anti-bribery certification or ISO 22301 continuity.
  • Multinational firms and corporate-governance leaders seeking ISO 37001 anti-bribery.
  • Critical-infrastructure operators (energy, telecoms, transport, water) seeking ISO 22301.

Tier 2 is not appropriate where QS Recognition (RB066-26) is specifically required — in which case Tier 1 (ISO 9001, 14001, 45001 only) is the correct choice. Tier 2 is also not appropriate for specialised standards covered by Tier 3 (medical devices, privacy, IT service management, energy, asset management, facilities, AI) — see /certifications/tnv-partnership/ for those.

Documentation Required

For application processing, Tier 2 typically requires:

  • Commercial registration / trade licence and articles of association.
  • Organisational chart and headcount.
  • Sites in scope (with addresses) and activities to be certified.
  • Management system documentation specific to the standard (ISMS for 27001, ABMS for 37001, EOMS for 21001, BCMS for 22301).
  • Beneficial ownership declaration aligned with QFC General Rule 8A and QFC AML/CFTR 2019.
  • For ISO/IEC 27001 — Statement of Applicability (SoA) and risk treatment plan.
  • For ISO 37001 — Bribery risk assessment and key anti-bribery procedures.
  • For ISO 22301 — Business Impact Analysis (BIA) and recovery time objectives.
  • For ISO 21001 — Educational outcomes framework and learner satisfaction measurement methodology.

Specific document lists for each standard are provided on the standard pages.

Timeline & Validity

  • Initial certification timeline — typically 10 to 18 weeks from contract signature to certificate issuance, given the additional risk-assessment artefacts required for ISO/IEC 27001, ISO 37001, and ISO 22301.
  • Certificate validity — 3 years from the date of certification decision.
  • Surveillance audits — annually (Years 1 and 2 of the cycle).
  • Recertification audit — Year 3 of the cycle, typically conducted in the final 4 months.
  • Audit duration — calculated under IAF MD 5 (QMS, EMS, OHSMS, FSMS) and IAF MD 22 (Application of IAF Mandatory Documents to ISO/IEC 27001) where applicable.

ISO 22301 certificates issued through the Third-Party CB follow IAS MSCB 154’s certification cycle, which aligns with ISO/IEC 17021-1 standard practice (3-year cycle, annual surveillance, recertification at Year 3).

GET STARTED — CONTACT GUARDIAN

Guardian Middle East LLC | Serving the Middle East
QFC Licence 03870 · Doha, Qatar

Location: Abo Hamour Area, Doha, Qatar
P.O. Box: 23277, Doha, Qatar
Mobile: +974 7770 2602 | +974 7213 7770
Email:  info@guardian.qa 
Website: www.guardian.qa

Or submit an enquiry: → Contact

Compliance notes

Tier 2 certificates for ISO 21001, ISO/IEC 27001, and ISO 37001 are issued by Guardian Assessment Pvt Ltd under UAF (United Accreditation Foundation, USA) and IAS (International Accreditation Service, USA) accreditation. ISO 22301 (Business Continuity Management Systems) certification is delivered through a Third-Party Certification Body accredited by IAS under MSCB 154, with Guardian Middle East LLC acting as the local representative in Qatar. All UAF, IAS, and IAS MSCB 154 are signatories of (or covered under) the IAF Multilateral Recognition Arrangement; Tier 2 certificates are listed on IAF CertSearch at https://www.iafcertsearch.org. Guardian Middle East LLC operates under QFC Licence 03870.

Frequently Asked Questions

Let’s discuss your Iso Certification needs—reach out today