Services
Standards, schemes and training in one place.
Cybersecurity, IT and Data Protection
- SS 712
CSA Cyber Trust mark (SS 712)
The CSA Cyber Trust mark (SS 712) certifies that an organisation manages cyber risk in proportion to its exposure. It uses five preparedness tiers and four pillars, is valid for three years with yearly audits, and is issued by CSA-appointed certification bodies. ICFC helps you choose the right tier, prepare, and train your team.
- Audit
- Consultation
- Training
- CSA
CSA Cyber Essentials mark
The CSA Cyber Essentials mark shows that an organisation has basic cyber hygiene controls in place, such as asset management, secure configuration, access control, malware protection and backups. It is valid for two years and is issued by CSA-appointed certification bodies. ICFC prepares you, closes gaps, and trains your staff.
- Audit
- Consultation
- Training
- SS 714
Data Protection Trustmark (DPTM) SS 714
The Data Protection Trustmark (DPTM), now Singapore Standard SS 714:2025, certifies that an organisation manages personal data accountably, from governance to individual rights. Certification is by IMDA-appointed bodies with yearly surveillance audits. EDGE support of up to 50% for SMEs may apply.
- Audit
- Consultation
- Training
- IMDA
Data Protection Essentials (DPE)
Data Protection Essentials (DPE) is an IMDA programme that helps SMEs put basic data protection and security practices in place. The one-stop service and DPE logo come through IMDA-listed DPE service providers. ICFC offers training and consultation to help you prepare and to build toward the Data Protection Trustmark.
- Audit
- Consultation
- Training
- CBPR
Global and APEC Cross-Border Privacy Rules (CBPR) System
The Global and APEC Cross-Border Privacy Rules (CBPR) certification shows that a data controller protects personal data when it moves across borders. In Singapore, IMDA is the Accountability Agent and certifies organisations after an assessment by an appointed body. ICFC prepares you for that assessment.
- Audit
- Consultation
- Training
- PRP
Global and APEC Privacy Recognition for Processors (PRP)
The Global and APEC Privacy Recognition for Processors (PRP) certifies that a service provider processing personal data for clients has the security safeguards and accountability to protect it. IMDA certifies Singapore processors after an assessment by an appointed body. ICFC prepares you and trains your team.
- Audit
- Consultation
- Training
- ISO/IEC 27701
ISO/IEC 27701 Privacy Information Management System (PIMS)
ISO/IEC 27701 is the international standard for a Privacy Information Management System (PIMS). It helps controllers and processors manage personal data consistently across jurisdictions. Certification is by accredited certification bodies, and it is listed under Singapore's EDGE Grant.
- Audit
- Consultation
- Training
- ISO/IEC 27001
ISO/IEC 27001 Information Security Management System (ISMS)
ISO/IEC 27001 is the international standard for information security management systems (ISMS). It helps organisations identify and treat information security risks through a managed set of controls. Certification is by accredited bodies, and Enterprise Singapore lists it under EDGE with up to 50% support for SMEs and 30% for non-SMEs.
- Audit
- Consultation
- Training
- ISO/IEC 27017
ISO/IEC 27017 Information security controls for cloud services
ISO/IEC 27017 provides cloud-specific information security controls for cloud service providers and customers. It is usually certified alongside an information security management system. Enterprise Singapore lists it under EDGE with up to 50% support for SMEs.
- Audit
- Consultation
- Training
- ISO/IEC 27018
ISO/IEC 27018 Protection of personal data in public clouds
ISO/IEC 27018 is the code of practice for protecting personal data in public cloud services. It helps cloud providers acting as processors show customers how personal data is handled. It is commonly certified with an information security management system and is listed under EDGE.
- Audit
- Consultation
- Training
- ISO/IEC 42001
ISO/IEC 42001 Artificial Intelligence Management System (AIMS)
ISO/IEC 42001 is the international management system standard for artificial intelligence (AIMS). It helps organisations govern AI responsibly through risk and impact assessment, controls and continual improvement. Certification is by accredited bodies, and it is listed under Singapore's EDGE Grant.
- Audit
- Consultation
- Training
- TISAX
TISAX label (training and consultation)
TISAX is the automotive industry's information security assessment scheme, run by the ENX Association. Assessments are carried out only by ENX-approved audit providers. ICFC offers TISAX training and consultation to help you scope the assessment, close gaps and prepare evidence.
- Audit
- Consultation
- Training
- SOC 1 and SOC 2
SOC 1 and SOC 2 attestation readiness (Type I and Type II)
SOC 1 and SOC 2 reports give clients independent assurance on a service organisation's controls. Type I covers control design at a point in time; Type II also tests operation over a period. Reports are issued only by licensed CPA firms. ICFC prepares you through readiness assessments, control design, evidence preparation and training, and supports you during the CPA firm's examination.
- Audit
- Consultation
- Training
- HIPAA
HIPAA compliance (consulting and training)
HIPAA protects health information in the United States and reaches overseas vendors that handle it as business associates. There is no official HIPAA certification, and HHS does not endorse private certificates. ICFC helps you confirm your obligations, run a Security Rule risk analysis, build policies and safeguards, and train your workforce.
- Audit
- Consultation
- Training
- GDPR
GDPR compliance (consulting and training)
The GDPR protects the personal data of people in the EU and can apply to Singapore organisations that serve or monitor them, or that process data for EU clients. ICFC maps your obligations, builds records of processing, impact assessments, transfer safeguards and breach procedures, and trains your team. There is no general GDPR certificate.
- Audit
- Consultation
- Training
- CMMI
CMMI compliance (consulting and training)
CMMI is ISACA's capability maturity model for software, services and related disciplines. Maturity levels are awarded only through appraisals led by CMMI Certified Lead Appraisers working with ISACA-licensed partners. ICFC helps you choose the right scope and target level, close practice gaps, prepare evidence and train your teams before the appraisal.
- Audit
- Consultation
- Training
ISO Management Systems
- ISO 9001
ISO 9001 Quality Management System (QMS)
ISO 9001 is the world's most widely used quality management system standard. It helps organisations deliver consistently and improve continually. The 2026 edition starts a transition period expected to last about three years. ICFC supports implementation, transition, audits and training.
- Audit
- Consultation
- Training
- ISO 14001
ISO 14001 Environmental Management System (EMS)
ISO 14001 is the international standard for environmental management systems (EMS). It helps organisations manage environmental impacts, meet legal obligations and improve performance. Certification is by accredited bodies, and it is listed under EDGE Sustainability Standards.
- Audit
- Consultation
- Training
- ISO 45001
ISO 45001 Occupational Health and Safety Management System (OHSMS)
ISO 45001 is the international standard for occupational health and safety management systems. It helps organisations prevent injury and ill health through hazard control and worker participation. Accredited ISO 45001 certification also supports Singapore's bizSAFE STAR recognition.
- Audit
- Consultation
- Training
- ISO/PAS 45005
ISO/PAS 45005 Safe working during the COVID-19 pandemic (guidance)
ISO/PAS 45005 is a guidance document for managing workplace health and safety risks during the COVID-19 pandemic. It is not intended for certification. ICFC uses it to assess and strengthen infectious disease preparedness within your ISO 45001 or bizSAFE system.
- Audit
- Consultation
- Training
- ISO 22301
ISO 22301 Business Continuity Management System (BCMS)
ISO 22301 is the international standard for business continuity management systems (BCMS). It helps organisations keep critical operations running and recover quickly after disruptions. Enterprise Singapore lists it under EDGE with up to 50% support for SMEs and 30% for non-SMEs.
- Audit
- Consultation
- Training
- ISO 37001
ISO 37001 Anti-Bribery Management System (ABMS)
ISO 37001 is the international standard for anti-bribery management systems (ABMS). It helps organisations prevent, detect and respond to bribery through policy, risk assessment, due diligence and controls. It is certifiable and listed under Singapore's EDGE Grant.
- Audit
- Consultation
- Training
- ISO 41001
ISO 41001 Facility Management System
ISO 41001 is the international standard for facility management systems. It helps facility managers align services with organisational objectives and stakeholder needs. Enterprise Singapore lists it under EDGE with up to 50% support for SMEs and 30% for non-SMEs.
- Audit
- Consultation
- Training
- ISO 55001
ISO 55001 Asset Management System
ISO 55001 is the international standard for asset management systems. It helps organisations balance cost, risk and performance across the asset life cycle. It is certifiable and listed under Singapore's EDGE Grant.
- Audit
- Consultation
- Training
- ISO 50001
ISO 50001 Energy Management System (EnMS)
ISO 50001 is the international standard for energy management systems (EnMS). It helps organisations measure, manage and reduce energy use and cost. It is listed under Singapore's EDGE Grant, and supports wider decarbonisation and sustainability reporting.
- Audit
- Consultation
- Training
- ISO 21001
ISO 21001 Management systems for educational organisations (EOMS)
ISO 21001 is the international management system standard for educational organisations (EOMS). It helps schools and training providers meet learner needs and improve the quality of education. ICFC supports implementation, internal audits and training.
- Audit
- Consultation
- Training
- ISO 28000
ISO 28000 Security and resilience management system
ISO 28000 is the international standard for security and resilience management systems, with a strong supply chain focus. It helps organisations identify security threats and protect people, goods and operations. ICFC supports implementation, audits and training.
- Audit
- Consultation
- Training
- ISO 20121
ISO 20121 Event sustainability management system
ISO 20121 is the international standard for event sustainability management systems. It helps organisers and venues reduce environmental and social impacts while delivering successful events. ICFC supports implementation, audits and training.
- Audit
- Consultation
- Training
Singapore Standards and Schemes
- SS 564
SS 564 Green data centres
SS 564 is the Singapore Standard for green data centres. It provides an energy and environmental management system tailored to data centre operations. ICFC helps operators implement it, prepare for certification and train their teams.
- Audit
- Consultation
- Training
- SS 587:2022
SS 587:2022 Management of end-of-life ICT equipment
SS 587 is the Singapore Standard for managing end-of-life ICT equipment through a certifiable management system. It helps organisations recycle ICT equipment responsibly. Enterprise Singapore lists it under EDGE Sustainability Standards with up to 70% support for SMEs.
- Audit
- Consultation
- Training
- SS 584
SS 584 Multi-Tiered Cloud Computing Security (MTCS)
SS 584, the Multi-Tiered Cloud Computing Security (MTCS) standard, sets tiered security requirements for cloud service providers. Higher tiers suit more sensitive data. Enterprise Singapore lists it under EDGE with up to 50% support for SMEs and 30% for non-SMEs.
- Audit
- Consultation
- Training
- SS 620
SS 620 Good Distribution Practice for Medical Devices (GDPMDS)
SS 620 is the Singapore Standard for Good Distribution Practice for Medical Devices (GDPMDS). It ensures devices keep their quality and safety through storage, handling, delivery and traceability. Medical device dealers commonly need it for their licensing.
- Audit
- Consultation
- Training
- SS 668
SS 668 Cold chain management of chilled and frozen foods
SS 668 is the Singapore Standard for cold chain management of chilled and frozen foods. It protects food safety, freshness and quality from storage to retail. Enterprise Singapore lists it under EDGE with up to 50% support for SMEs and 30% for non-SMEs.
- Audit
- Consultation
- Training
- SS 507
SS 507 Business continuity and disaster recovery (BCDR) service providers
SS 507 is the Singapore Standard for business continuity and disaster recovery (BCDR) service providers. It assures clients that recovery services, facilities and processes are reliable. ICFC supports providers with implementation, audits and training.
- Audit
- Consultation
- Training
- bizSAFE
bizSAFE (Levels 1 to 4 and STAR)
bizSAFE is Singapore's WSH Council programme for building workplace safety capability in five levels, from Level 1 to bizSAFE STAR. Levels 3 and above need a risk management audit, and STAR needs an accredited safety and health management system such as ISO 45001. ICFC guides you level by level.
- Audit
- Consultation
- Training
Sustainability and Supply Chain
- WRAP
Worldwide Responsible Accredited Production (WRAP)
WRAP (Worldwide Responsible Accredited Production) certifies that factories operate lawfully, humanely and ethically, mainly in apparel and footwear. Audits are carried out by WRAP-accredited monitoring firms. ICFC helps facilities prepare with gap assessments, corrective action support and training.
- Audit
- Consultation
- Training
- ISO 20400
ISO 20400 Sustainable procurement (guidance)
ISO 20400 is the international guidance standard for sustainable procurement. It helps organisations build environmental, social and economic considerations into how they buy. It is not certifiable; ICFC assesses your alignment and helps you put it into practice.
- Audit
- Consultation
- Training
- ISO 26000
ISO 26000 Guidance on social responsibility
ISO 26000 is the international guidance on social responsibility. It covers seven core subjects from governance and human rights to community involvement. It is not certifiable; ICFC uses it to assess your current practices and build a practical social responsibility roadmap.
- Audit
- Consultation
- Training
- Training
Sustainability reporting assessment (training only)
ICFC's sustainability reporting assessment training teaches teams how to assess and prepare sustainability and climate-related disclosures, from materiality to data quality. It is offered as training only, in classroom and online formats through the ICFC Digital LMS.
- Audit
- Consultation
- Training
Premium Services
We offer specialized compliance and management system solutions extracted directly from our expert training modules.
Audit & Certification
Independent verification for global recognition.
- ISO 9001:2015 Quality Management
- ISO 14001:2015 Environmental
- ISO 45001:2018 Health & Safety
- ISO 13485:2016 Medical Devices
- ISO 50001:2018 Energy Audit
- ISO 41001:2018 Facility Management
Specialist Consulting
Strategic advisory for regulatory landscapes.
- bizSAFE Level 1,2,3 & Star
- GDPMD Singapore Consultancy
- ISO 42001 AI Management
- Cybersecurity & Data Privacy
- ISO 37001 Anti-Bribery Path
- ISO 27701 Privacy Information
Professional Training
Empowering workforces with knowledge.
- ISO 9001 Training Excellence
- ISO 14001 Essential Courses
- DPTM Training & Certification
- GDPMD Internal Auditor
- ISO 45001 Safety Awareness
- Mastery ISO 42001 / 27001