Guardian Middle East LLC

Guardian logo
+974 7770 2602

Tier 2 — UAF / IAS Accredited

Accredited · Recognised · Verified UAF logo UAF United Accreditation Foundation USA · Management Systems IAS logo IAS International Accreditation Service USA · Management Systems IAF MLA logo IAF MLA IAF Multilateral Recognition International · MLA Signatory QS logo QS Qatar Standards RB066-26 · ISO 9001/14001/45001

Tier 2 covers ISO 21001 (Education), ISO/IEC 27001 (Information Security), ISO 37001 (Anti-Bribery), and ISO 22301 (Business Continuity). ISO 21001, 27001, and 37001 are issued by Guardian Assessment Pvt Ltd under UAF and IAS accreditation. ISO 22301 is delivered through a Third-Party Certification Body (IAS MSCB 154) with Guardian Middle East LLC as the local representative in Qatar. All Tier 2 certificates are IAF MLA recognised and listed on IAF CertSearch.

What Tier 2 Means

The Tier 2 Position

Tier 2 covers four management system standards under UAF and IAS accreditation. These standards extend beyond the foundational QHSE coverage of Tier 1 (ISO 9001, 14001, 45001) into specialised governance, security, education, and continuity domains. Tier 2 carries full IAF MLA international recognition and public verification on IAF CertSearch — but it does NOT include QS Recognition, because QS recognition under RB066-26 covers only ISO 9001, 14001, and 45001.

Two Disclosure Variants Within Tier 2

Tier 2 contains two distinct accreditation chains:

  1. Standard Tier 2 chain — ISO 21001, ISO/IEC 27001, ISO 37001 — issued by Guardian Assessment Pvt Ltd under UAF and IAS accreditation.
  2. ISO 22301 chain — issued by a Third-Party Certification Body accredited by IAS under MSCB 154, with Guardian Middle East LLC acting as the local representative in Qatar.

Both chains carry IAF MLA recognition and public verification on IAF CertSearch. The structural difference is disclosed transparently on this page and on the individual ISO 22301 standard page.

Why Choose Tier 2

Reason 1 — UAF + IAS Dual Accreditation

Tier 2 is delivered under both UAF (United Accreditation Foundation, USA) and IAS (International Accreditation Service, USA) accreditation for ISO 21001, 27001, and 37001. Both bodies are signatories of the IAF Multilateral Recognition Arrangement, ensuring international recognition under IAF MLA.

Reason 2 — Specialized Standards

Tier 2 covers four standards that address specific governance, security, education, and continuity needs:

  • ISO 21001 — for educational organizations seeking to improve learner satisfaction and educational outcomes.
  • ISO/IEC 27001 — the global benchmark for information security management, increasingly required by data-handling organisations and clients of regulated entities.
  • ISO 37001 — anti-bribery management, particularly relevant for organizations operating in higher corruption-risk environments or seeking to demonstrate strong governance.
  • ISO 22301 — business continuity management, critical for financial services, healthcare, energy, telecommunications, and other sectors with high availability requirements.

Reason 3 — IAF MLA International Recognition

All Tier 2 certificates — including ISO 22301 issued through the Third-Party CB — are recognized under the IAF Multilateral Recognition Arrangement and listed on IAF CertSearch.

Reason 4 — Sector-Specific Auditor Competence

Audit team appointment under IAF MD 11 (Sector-Specific Application of ISO/IEC 17021-1) ensures auditors hold sectoral competence for the client’s industry, particularly important for ISO/IEC 27001 (technology, financial services) and ISO 22301 (regulated industries with availability requirements).

Reason 5 — Local QFC-Licensed Delivery

Through Guardian Middle East LLC’s QFC Licence 03870, Tier 2 certification is delivered locally in Qatar — including ISO 22301 where Guardian Middle East LLC acts as the local representative in Qatar for the Third-Party CB.

Mandatory Disclosure (Tier 2)

Tier 2 carries TWO disclosure variants. Both must appear verbatim — one for ISO 21001, 27001, 37001, and the other specifically for ISO 22301.

Variant A — Standard Tier 2 (ISO 21001, 27001, 37001)

Issued by Guardian Assessment Pvt Ltd · UAF / IAS Accredited · IAF MLA Recognized · Listed on IAF CertSearch.

Variant B — ISO 22301 Special Disclosure

Issued by [Third-Party CB], IAS-Accredited (MSCB 154). Local representation in Qatar by Guardian Middle East LLC.

Why ISO 22301 has a different disclosure: ISO 22301 (Business Continuity Management Systems) certification is delivered through a Third-Party Certification Body whose accreditation chain is structurally different from the UAF/IAS chain held by Guardian Assessment Pvt Ltd. The Third-Party CB is accredited by IAS under registration MSCB 154. Guardian Middle East LLC acts as the local representative in Qatar for this scope only. This transparent disclosure ensures clients, regulators, and supply-chain partners know precisely who issued the certificate and how to verify it.

Standards in Tier 2

ISO 21001

Educational Organisation Management Systems

ISO 21001 establishes the requirements for an Educational Organisation Management System (EOMS), focused on improving learner satisfaction and the achievement of educational outcomes. The standard applies to all educational organisations, including schools, universities, training providers, vocational institutes, and corporate learning functions. ISO 21001 is delivered under standard Tier 2 disclosure (Variant A).

Standard Page ›
ISO/IEC 27001

Information Security Management Systems

ISO/IEC 27001 is the global benchmark for Information Security Management Systems (ISMS). It establishes the requirements for protecting confidentiality, integrity, and availability of information through a risk-based approach. ISO/IEC 27001 certification is increasingly required by clients, regulators, and supply-chain partners, particularly in financial services, healthcare, technology, and government. ISO/IEC 27001 is delivered under standard Tier 2 disclosure (Variant A).

Standard Page ›
ISO 37001

Anti-Bribery Management Systems

ISO 37001 establishes the requirements for an Anti-Bribery Management System (ABMS), focused on preventing, detecting, and responding to bribery. The standard is widely adopted by organisations operating in higher corruption-risk environments, public-sector contractors, and multinational firms seeking to demonstrate strong anti-bribery governance to stakeholders, regulators, and supply-chain partners. ISO 37001 is delivered under standard Tier 2 disclosure (Variant A).

Standard Page ›
ISO 22301

Business Continuity Management Systems

ISO 22301 establishes the requirements for a Business Continuity Management System (BCMS), focused on ensuring an organisation can continue to deliver products and services at acceptable predefined levels following disruptive incidents. ISO 22301 certification is critical for financial services, healthcare, energy, telecommunications, government, and other sectors with high availability requirements.

Special wording for ISO 22301 only: Issued by [Third-Party CB], IAS-Accredited (MSCB 154). Local representation in Qatar by Guardian Middle East LLC.

Standard Page ›

Tier 2 Benefits — Summary

  • UAF and IAS dual accreditation for ISO 21001, 27001, 37001 — IAF MLA recognised.
  • IAS MSCB 154 accreditation for ISO 22301 via Third-Party CB — IAF MLA recognised.
  • IAF CertSearch listing for all Tier 2 accredited certificates.
  • Specialised technical scope across education, information security, anti-bribery, and business continuity.
  • Sector-specific auditor competence under IAF MD 11.
  • Local QFC-licensed delivery through Guardian Middle East LLC.
  • Bilingual Arabic / English delivery, certificates, and reports.
  • Transparent multi-chain disclosure — clients always know who issued the certificate and how to verify.

Who Tier 2 Is For

Tier 2 is the appropriate choice for organisations whose stakeholder, regulatory, or contractual requirements include any of the following:

  • Educational institutions (schools, universities, training providers) seeking ISO 21001.
  • Banks, fintechs, and financial services firms seeking ISO/IEC 27001 information security or ISO 22301 business continuity certification.
  • IT service providers, MSPs, and SaaS operators seeking ISO/IEC 27001.
  • Healthcare providers seeking ISO/IEC 27001 (data protection) or ISO 22301 (continuity of care).
  • Government and semi-government entities seeking ISO 37001 anti-bribery certification or ISO 22301 continuity.
  • Multinational firms and corporate-governance leaders seeking ISO 37001 anti-bribery.
  • Critical-infrastructure operators (energy, telecoms, transport, water) seeking ISO 22301.

Tier 2 is not appropriate where QS Recognition (RB066-26) is specifically required — in which case Tier 1 (ISO 9001, 14001, 45001 only) is the correct choice. Tier 2 is also not appropriate for specialized standards covered by Tier 3 (medical devices, privacy, IT service management, energy, asset management, facilities, AI) — see certifications tnv-partnership for those.

Documentation Required

For application processing, Tier 2 typically requires:

  • Commercial registration / trade licence and articles of association.
  • Organisational chart and headcount.
  • Sites in scope (with addresses) and activities to be certified.
  • Management system documentation specific to the standard (ISMS for 27001, ABMS for 37001, EOMS for 21001, BCMS for 22301).
  • Beneficial ownership declaration aligned with QFC General Rule 8A and QFC AML/CFTR 2019.
  • For ISO/IEC 27001 — Statement of Applicability (SoA) and risk treatment plan.
  • For ISO 37001 — Bribery risk assessment and key anti-bribery procedures.
  • For ISO 22301 — Business Impact Analysis (BIA) and recovery time objectives.
  • For ISO 21001 — Educational outcomes framework and learner satisfaction measurement methodology.

Specific document lists for each standard are provided on the standard pages.

Timeline & Validity

  • Initial certification timeline — typically 10 to 18 weeks from contract signature to certificate issuance, given the additional risk-assessment artefacts required for ISO/IEC 27001, ISO 37001, and ISO 22301.
  • Certificate validity — 3 years from the date of certification decision.
  • Surveillance audits — annually (Years 1 and 2 of the cycle).
  • Recertification audit — Year 3 of the cycle, typically conducted in the final 4 months.
  • Audit duration — calculated under IAF MD 5 (QMS, EMS, OHSMS, FSMS) and IAF MD 22 (Application of IAF Mandatory Documents to ISO/IEC 27001) where applicable.

ISO 22301 certificates issued through the Third-Party CB follow IAS MSCB 154’s certification cycle, which aligns with ISO/IEC 17021-1 standard practice (3-year cycle, annual surveillance, recertification at Year 3).

GET STARTED — CONTACT GUARDIAN

Guardian Middle East LLC | Serving the Middle East
QFC Licence 03870 · Doha, Qatar

Location: Abo Hamour Area, Doha, Qatar
P.O. Box: 23277, Doha, Qatar
Mobile: +974 7770 2602 | +974 7213 7770
Email:  info@guardian.qa 
Website: www.guardian.qa

Or submit an enquiry: → Contact

Frequently Asked Questions

RB066-26 is the registration number assigned by the Qatar General Organization for Standardization (QS) recognising Guardian Assessment Pvt Ltd as a certification body for ISO 9001, 14001, and 45001. Guardian Middle East LLC is the represented entity in Qatar. The recognition was issued on 02 April 2026 under Ministerial Decree No. 363 of 2018 and is valid until 01 April 2027.

No. QS is the National Recognition Body of the State of Qatar — it provides national-level acceptance for in-country regulatory and tender purposes. International accreditation is provided by Accreditation Bodies (UAF and IAS in Guardian's case). Tier 1 includes both: QS Recognition for Qatari tenders, plus UAF and IAS accreditation for international recognition under IAF MLA.

Many Qatari public-sector tenders, government procurement frameworks, and large-infrastructure project pre-qualifications specify QS-recognised certification as an eligibility condition. The specific requirement depends on the tender — common references are 'QS-recognised', 'QGOSM-recognised', or 'recognised by the Qatar General Organization for Standardization'. Tier 1 satisfies all such requirements for ISO 9001, 14001, and 45001.

Tier 1 covers ISO 9001, 14001, and 45001 with QS Recognition (RB066-26) plus UAF and IAS accreditation. Tier 2 covers ISO 21001, 27001, 37001, and 22301 with UAF and IAS accreditation but WITHOUT QS Recognition (these standards are not within the QS RB066-26 scope). Both tiers carry IAF MLA recognition. The distinction is the QS Recognition: Tier 1 has it, Tier 2 does not.

Yes. Where the client operates an integrated management system covering all three standards, Guardian conducts integrated audit programmes — single audit team, single audit visit, integrated audit findings, integrated certification decision. Audit duration is calculated under IAF MD 11 (Sector-Specific Application) with appropriate reductions for genuinely integrated systems. Three separate certificates may be issued, or a single integrated certificate where applicable.

Typical timeline from contract signature to certificate issuance is 8 to 16 weeks for organisations with mature management systems. Stage 1 audit (documentation/readiness review) is followed by Stage 2 audit (full assessment) at intervals required by ISO/IEC 17021-1. The certification decision follows within approximately 6 weeks of Stage 2 audit closure for routine cases without major nonconformities.

Audit duration is calculated using IAF MD 5 (Audit Duration of QMS, EMS, OHSMS, FSMS) and IAF MD 11 (Sector-Specific Application). Inputs include effective headcount, complexity, sites, sectoral risk, and integration of management systems. The result is a defined number of audit days for each cycle (initial, surveillance Years 1 and 2, and recertification). Specific durations are provided in the audit-team appointment notification before each audit.

Where appropriate and aligned with IAF MD 4 (Use of ICT for Auditing/Assessment Purposes), Guardian may conduct portions of an audit remotely. Determination of remote audit applicability is made on a case-by-case basis considering risk, sector, complexity, and the client's information security posture. On-site audit components are typically required for full effectiveness assessment.

Tier 1 certificates have a 3-year validity. The cycle comprises: Year 1 — initial certification (Stage 1 + Stage 2 + decision); Year 2 — surveillance audit; Year 3 — surveillance OR recertification audit. The recertification audit is typically conducted in the final 4 months of the 3-year period, with successful recertification triggering issuance of a new 3-year certificate.

Visit https://www.iafcertsearch.org and search by certificate number, accreditation body, or organisation name. Tier 1 certificates are listed on IAF CertSearch in alignment with IAF MD 22 transparency requirements. Listings are maintained for the validity period and updated for surveillance, recertification, suspension, and withdrawal events.

Yes. QS recognition under RB066-26 is renewable annually. Current validity is 02 April 2026 to 01 April 2027. Renewal is managed in advance of expiry to maintain uninterrupted recognition. Clients holding Tier 1 certificates issued during the validity period are unaffected by the renewal cycle — the certificate's validity is independent of the recognition renewal.

The use of the QS Mark on certificates and in marketing materials is governed by QS's Use of Marks Policy. Guardian's clients holding Tier 1 certificates may use the QS Mark in accordance with the QS policy and Guardian's own Use of Marks Policy at /legal/use-of-marks-policy/. Material misuse of the QS Mark may trigger a referral to QS and corrective action including suspension.

No. ISO 22000 (Food Safety Management Systems / FSMS) is QS-recognised under various recognition numbers but is not currently within Guardian Middle East LLC's offered scope. ISO 22000 is permanently excluded from Guardian's V1 portfolio. Clients seeking ISO 22000 certification are advised to engage another QS-recognised certification body for that scope.

No — and Guardian cannot provide it. Under ISO/IEC 17021-1 §5.2 and applicable IAF Mandatory Documents, certification bodies must be impartial. Guardian does not provide consultancy, advisory, training, gap-analysis, internal audits, or implementation services to clients seeking certification. Free, generic Implementation Kits are available at /resources/implementation-kits/ — these are not consultancy.

Compliance notes

Tier 2 certificates for ISO 21001, ISO/IEC 27001, and ISO 37001 are issued by Guardian Assessment Pvt Ltd under UAF (United Accreditation Foundation, USA) and IAS (International Accreditation Service, USA) accreditation. ISO 22301 (Business Continuity Management Systems) certification is delivered through a Third-Party Certification Body accredited by IAS under MSCB 154, with Guardian Middle East LLC acting as the local representative in Qatar. All UAF, IAS, and IAS MSCB 154 are signatories of (or covered under) the IAF Multilateral Recognition Arrangement; Tier 2 certificates are listed on IAF CertSearch at https://www.iafcertsearch.org. Guardian Middle East LLC operates under QFC Licence 03870.

Let’s discuss your Iso Certification needs—reach out today