Optimising Performance. Strengthening Governance. Creating Sustainable Value.

It is an IBIS certificate, based on our own curriculum and our own assessment. For Auditor and Lead Implementer courses it is issued only when your quizzes, exercises, case studies, project work and final exam together reach at least 70%, and it states ‘successfully completed’. Awareness courses end with a certificate of completion. Each certificate carries a unique number, and is recorded in our certificate register. It is always digital and costs nothing extra.

We are an independent training provider. The certificate evidences assessed competence in the subject. It is not issued under licence from, or on behalf of, any certification or membership scheme.

Only the latest editions in force. The register was verified against the ISO catalogue in September 2026, which is why you will see ISO 9001:2026, ISO 14001:2026, ISO 19011:2026 (which replaced and withdrew the 2018 edition with no transition period), ISO 37001:2025, ISO/IEC 27701:2025, ISO/IEC 27031:2025, ISO/IEC 27017:2026 and the restructured ISO 14021 / 14024 / 14025:2026 environmental statements family. ISO 45001 remains at 2018 while its revision is at DIS.

Yes. E-Learning courses are open to anyone: individuals, students, consultants and organisations. Pick a standard under Find and buy, watch the free preview lessons, then buy at the checkout. Your access starts straight away. Certificates are issued when your answer sheets are submitted to us for evaluation. Organisations enrolling their staff are billed for a minimum of 12 participants per course.

Complete the course within 90 days of subscribing. The course and its downloads stay available for six months. If you need more time, write to us and we will renew or reinstate your access.

Not once you have opened a course beyond its free previews, or downloaded a file. That is why every course has free preview lessons: check them before you buy. You are always refunded if you paid twice, if we cannot give you the access you paid for, or if the product is not as described. The full rule is at Legal, item 5.

A revised course or kit, whether the change is to a standard, a law, a scheme or its context, is a new product and a new purchase. If you bought the earlier version within the past year, you get the revised version at 20% off. Write to us with your order details.

Yes. Buy a course for each named employee on the portal, or ask us for an invoice covering the whole group. For a programme led by a tutor, delivered in-house, or rebuilt around your processes, send your scope of work and we will quote.

Yes. We custom-build documentation for each client, around that client's own processes, quoted against the scope of work. You can also join the partner programme and earn commission when your clients buy from IBIS.

Our courses and documents are written in English. Choose a language from the menu at the top of this page to read the site in translation, or use the translate feature built into Chrome, Edge or Safari on the E-Learning portal. Machine translation helps you understand the content, but the English version is the authoritative one. A tutor-led programme in another language can be quoted on request.

Prices are shown in Indian rupees and US dollars. On the E-Learning portal you pay at its checkout, which offers the methods available in your country. Organisations can pay against our invoice by bank transfer or UPI, or through a secure payment link. Overseas clients can pay in US dollars.

Yes, and that is the usual arrangement. A typical engagement runs gap analysis, system design, documentation, staff training at the right levels, internal audit, then support through the certification audit. If independence matters, for instance if you want a genuinely arm's-length internal audit, tell us and we will structure the team accordingly.

Send us a scope of work and a request for quote. Tell us the standard or standards, the sites and headcount in scope, the certification or accreditation you are working towards, the target date and what is already in place. You will have a written proposal within two to three working days. Several standards implemented as one integrated system usually cost less than treating them separately, and we price them that way.

Only the standards we are actively offering appear in the register. Send us the standard number and the audience, and within two to three working days we will confirm whether it is available off the shelf or needs to be built. A new course typically takes three to four weeks.

Buying a standard. Our courses and documentation explain and apply the standards; they do not reproduce them. Every participant and client needs a licensed copy of the standard itself. Buy it from the publisher or an authorised seller below — in India the BIS adoption sold through BSB Edge is usually the least expensive route to the same text.

WHERE TO BUY — OFFICIAL STORES AND AUTHORISED SELLERS

INTERNATIONAL STANDARDS

INDIA — STANDARDS AND LAW

ASSURANCE AND ETHICS

IAF ceased operations on 1 January 2026. IAF and ILAC are now a single body, Global Accreditation Cooperation (Global ACI). The old IAF and ILAC sites remain live for legacy documents only.

GLOBAL

INDIA — QCI AND ITS BOARDS

NATIONAL ACCREDITATION BODIES

CREDITING PROGRAMMES AND THEIR VVBS

REGISTRIES

MARKET INTEGRITY, THE CONVENTION AND THE SCIENCE

INDIA

EUROPEAN UNION

UNITED KINGDOM

AMERICAS

ASIA-PACIFIC

INTERNATIONAL AND AVIATION

FRAMEWORKS AND STANDARDS

TARGETS, RATINGS AND DISCLOSURE

INDIA

STANDARDS AND THEIR OWNERS

AUDIT AND MEMBERSHIP SCHEMES

COMMODITY AND PRODUCT SCHEMES

FOOD SAFETY

HEALTH AND MEDICAL DEVICES

INFORMATION SECURITY AND PRIVACY

ENVIRONMENT

ENERGY

IBIS MANAGEMENT SYSTEMS

Scope. IBIS Management Systems provides management consultancy and professional services in ISO management systems, compliance readiness, documentation, auditing, assessment and training, against a scope of work agreed in writing and conducted in line with ISO 20700:2017, Guidelines for management consultancy services. IBIS advises, designs, documents, assesses and develops capability, so that organisations build evidence-based systems that fit their own processes and can be maintained by their own people.

Classification. Principal activity: NIC-2008 70200, Management consultancy activities. Additional activity: NIC-2008 85499, Other education n.e.c.

What IBIS is responsible for. The deliverables within the agreed scope: assigning competent personnel, meeting the agreed acceptance criteria and timetable, review of every deliverable by a named qualified person before issue, truthful reporting of findings, and confidentiality. How that is done in practice is set out at item 13.

What the client is responsible for. The accuracy of the information it supplies, and implementing, operating and maintaining its system — including legal and regulatory compliance, operational controls, records, management decisions, corrective actions and continual improvement. IBIS does not assume these responsibilities unless specifically agreed in writing.

Third-party decisions. Certification, accreditation, validation, verification, ESG rating, and CBAM, CCTS and other regulatory decisions rest solely with the competent independent body applying its own criteria. IBIS is not a certification, accreditation, or validation and verification body, and does not issue accredited certification of management systems. It neither takes those decisions nor guarantees their outcome.

How this item sits with the rest. Nothing here overrides your statutory rights or the limits on our liability, which are at item 15. Where an engagement letter has been signed, item 22 governs which document prevails.

By using this website you agree to these Terms of Use. If you do not accept them, please do not use the site.

The site tells you about our services, lists our courses and documentation services with their prices, and links to the IBIS E-Learning portal at jacobcherian.graphy.com, where purchases are made. The portal is run on a third-party learning platform, whose own terms and privacy notice also apply when you use it.

You agree not to use the site or the portal to transmit unlawful, infringing or malicious material; not to attempt unauthorised access to any part of either; not to scrape or bulk-extract content by automated means; not to share your portal login or course access with anyone else; and not to misrepresent your identity or your authority to act for an organisation.

Translation. The site can be read in other languages through a machine-translation service run by a third party. Translations are provided for convenience and may contain errors. The English version is the authoritative one.

We may modify, suspend or withdraw any part of the site at any time and do not guarantee uninterrupted availability. We provide links to third-party sites, including the bodies listed under Useful links, for convenience only. We are not responsible for their content or their privacy practices.

Who can buy. Individuals, students, consultants, educational institutions and organisations may all buy e-learning courses. An organisation may buy for named employees.

Self-study e-learning. You buy a course on the IBIS E-Learning portal and your access starts on purchase. The course is to be completed within 90 days of subscribing. The course and its downloads remain available for six months, after which access may be renewed or reinstated on request, on the terms then in force. Each course is for one named learner, and access may not be shared.

Structure. Every course has an introduction, a full index, free preview lessons, modules of no more than 20 minutes, a multiple-choice quiz after each clause, exercises and case studies, project work at Lead Implementer level, and a final exam with multiple-choice and descriptive questions. Quiz answers are released once the final exam has been submitted for evaluation.

Assessment and certificates. For Auditor and Lead Implementer courses, a certificate stating ‘successfully completed’ is issued when the quizzes, exercises, case studies, project work and final exam together reach at least 70%. Awareness courses end with a certificate of completion once every module and quiz is finished; no pass mark applies. Every certificate is issued digitally at no extra cost and carries a unique number recorded in our certificate register. We may withhold or withdraw a certificate where an assessment was not the learner's own work.

Revisions. When a standard, law, scheme or its context changes, the revised course is a new product and a new purchase. Anyone who bought the earlier version within the preceding twelve months receives the revised version at 20% off.

Tutor-led, in-house and bespoke programmes. These are quoted against a written scope of work. The quote depends on the complexity of the work, the number of participants and the number of standards involved. A programme is agreed when we confirm the scope, participants and dates in writing. For in-house programmes, the client provides the training facility and reimburses printing; the travel, accommodation and incidental expenses of visiting consultants are reimbursed at actuals.

Prices. The prices in the rate card apply. Rupee prices apply in India. US dollar prices apply outside India. The price shown at checkout, or in our written quotation, is the price you pay.

Online purchases. Courses are paid for at the checkout on the IBIS E-Learning portal, through its payment service providers. No card or bank details are collected or stored on this website. The platform or the payment provider may convert the price into your local currency; any conversion or card fees are set by them and your bank.

Invoiced work. Consulting, audit, bespoke documentation, tutor-led and in-house programmes are invoiced against your written confirmation or purchase order. They are payable within the period stated on the invoice, by bank transfer, UPI or a secure online payment link. Overseas clients may pay in US dollars. Consulting, audit and documentation engagements are governed by their engagement letter, which prevails over these terms if the two conflict.

Expenses. For site-based work, the client arranges or reimburses travel, accommodation, local conveyance and other out-of-pocket expenses at actuals against receipts. They are estimated and agreed in the proposal before the work begins.

Taxes. IBIS is not registered for GST, as its turnover is below the registration threshold, so no GST is charged. If that changes, GST will be shown separately at the applicable rate. Bank charges, and any withholding tax or deduction imposed in your country, are for your account. Where tax is deducted at source, please send us the certificate of deduction.

This item is published here so that you can read it before you buy. Nothing in it takes away a right the law gives you.

The rule: no refund once a course has been accessed or a file downloaded. Our courses and course materials are digital. Once opened or downloaded, they cannot be returned, and they can be copied. So no refund applies once you have opened any part of a course beyond its free previews, or downloaded any file. This protects the learners and clients who pay for their own copies, and keeps our prices low.

Check before you buy. Every course has an introduction, a full index and one or two free preview lessons. Every kit has a free sample and a full contents list. Please use them to decide whether a product meets your need before you pay.

When you are always refunded in full:

• you were charged more than once for the same product;
• you paid but did not receive access or the download, and we cannot provide it within three working days of your telling us;
• the product is materially different from its description, for example in its standard or edition, its level, its content or its certificate. This right comes from the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020, and nothing on this page limits it;
• we withdraw a product before you have accessed it.

Tutor-led and in-house programmes. An order cancelled before course material is issued or the programme begins is refunded in full. Once material has been issued or delivery has begun, no refund applies. If we cancel or postpone a programme and no alternative date suits you, you receive a full refund of everything you paid.

Misuse. Where a course, document or login has been shared, resold or used beyond its licence (item 9), no refund is due. We may withdraw access and withhold or withdraw any certificate.

How to ask. Write to jc@ibismanagementsystems.com with your order details. We acknowledge within 48 hours and give our decision within seven working days. An approved refund is initiated within three working days of the decision, to the original payment method. Your bank or card issuer then normally credits it within five to ten working days. For payments in another currency, the exchange rate and bank charges on the date of refund are set by the banks.

Your statutory rights. Nothing here excludes any right you have under the Consumer Protection Act, 2019 or any other law. If you are a consumer in India, you may contact the National Consumer Helpline (1915, consumerhelpline.gov.in) or file before the District Consumer Disputes Redressal Commission where you live or work.

IBIS Management Systems is the data controller (a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025) for personal data collected through this site and in the course of our work.

What we collect. Identity and contact details you give us (name, organisation, role, email, telephone). Enquiry and engagement details. Learning records: enrolments, quiz and exam attempts, answer sheets, scores and certificates issued. Order and payment records, but never card numbers. Partner records: agreement, PAN and bank details for paying commission, and the clients referred. Basic technical data, such as IP address and browser type, in our host's server logs.

Visitor counter. To show the number of visitors, our server counts one visit per device per day. It does this by storing a one-way hash of the IP address and browser type, made with a random key that changes every day. Each day's hashes are deleted the next day. No cookie is used, and only the running total is kept.

Certificate register. We keep a register of every certificate issued. To confirm a certificate, write to us and we will check the register.

Why we use it, and on what basis. To answer enquiries and send quotations (your request, or our legitimate interests). To sell and deliver courses and documentation, evaluate assessments and issue certificates (performance of a contract). To keep the certificate register verifiable, and our accounts and tax records (legal obligation and legitimate interests). To run the partner programme (performance of the partner agreement). And, only if you ask, to send occasional updates about standards and courses (consent, which you can withdraw at any time).

Who we share it with. Our website host (GoDaddy). The operator of the IBIS E-Learning portal (Graphy) and the payment providers that process your payment at its checkout. Our professional advisers. Where a programme is sponsored, the sponsoring organisation, which receives attendance, results and completion status for its own participants. Where a client was referred by a partner, that partner, who receives the order value and payments on which commission is due, but not the client's learning records. We do not sell personal data and we do not share it with advertisers.

How long we keep it. Enquiry records for three years from last contact. Training and certificate records for at least ten years, so that certificates remain verifiable. Accounting and partner records for eight years, as Indian tax law requires. Server logs for twelve months.

Your rights. Depending on where you are, you may have the right to access your personal data, correct it, have it erased, restrict or object to its processing, receive it in portable form, withdraw consent, nominate someone to exercise your rights on your behalf (DPDP Act), and complain to a supervisory authority. To exercise any of these, write to jc@ibismanagementsystems.com. We respond within thirty days.

Children. Our courses are meant for adults: working professionals and students in higher education. We do not knowingly process the personal data of anyone under 18 without verifiable consent from a parent or guardian.

We apply reasonable technical and organisational measures to protect personal data, including access control on a need-to-know basis, encrypted transmission, and confidentiality obligations on everyone who works with us. No transmission over the internet can be guaranteed completely secure, and you send information to us at your own risk.

Where data is processed. We are established in India and our records are held in India. Our platform, hosting and email providers may process data in other countries. Where personal data of individuals in the European Economic Area or the United Kingdom is transferred outside those territories, we rely on Standard Contractual Clauses or another lawful transfer mechanism. Personal data of individuals elsewhere is transferred in accordance with the applicable local law.

Breach. Where a personal data breach is likely to result in risk to affected individuals, we will notify the individuals and the competent authority within the period the applicable law requires.

Client information. Documents, records and observations obtained during a consulting, documentation or audit engagement are treated as client confidential information under item 10 below, separately from and in addition to this privacy policy.

Last updated 28 September 2026.

What cookies are. Cookies are small text files that a website puts on your device, to make the site work, to remember a choice, or to measure use. Local storage does a similar job, but it is never sent back to the server.

This website, www.ibismanagementsystems.com, sets no cookies of its own. The visitor counter works without cookies (item 6). The only thing kept in your browser is the local-storage note below.

Other services connected to this site set their own cookies, under their own policies:

Stored by this site.

Clear what this site kept

Managing cookies. Every major browser lets you block or delete cookies and site data, for one site or all sites, usually under Settings, then Privacy and security. Blocking cookies on the E-Learning portal may stop you signing in there. If we ever add analytics or any other non-essential storage to this site, we will update this item first and ask for your consent, as the DPDP Act, 2023, the IT Act, 2000 and, for visitors in the EEA and UK, the ePrivacy rules and the GDPR require. Questions go to jc@ibismanagementsystems.com.

All content on this site, on the E-Learning portal and in our courses and products is the intellectual property of IBIS Management Systems or its licensors. That includes lessons, videos, slides, quizzes, exams, case studies, manuals, procedures, work instructions, formats, checklists, audit checklists and training decks.

Course licence. Each course is licensed to one named learner, for their own learning, for the access period. Logins and course access may not be shared.

Documentation licence. Documents, checklists and decks we prepare are licensed to the one organisation they are prepared for, for use within that organisation at all its sites. They may not be resold, published or shared outside it, or reused for another organisation. Every file carries the client's name and a document ID.

What is not permitted. Reselling, publishing, uploading to file-sharing services, sharing outside the licence, removing licence marks, or using our material to train or advise third parties without our written permission. So is recording, screen-capturing or redistributing lessons or live sessions.

What happens if the licence is broken. We may suspend or end access without refund, withhold or withdraw certificates, decline further orders, and recover the licence fee for every unauthorised user.

Standards are separately copyrighted. ISO, IEC, BIS, SAI, FSSC, GRI, SEDEX and other standards bodies own the copyright in their documents. Our courses and documents explain and apply those standards; they do not reproduce them. You must buy your own copies of the standards you need. Trade marks, scheme names and logos mentioned on this site belong to their owners and are used only for identification. Their use implies no endorsement or affiliation.

What is confidential. Everything obtained in the course of an engagement or a training programme — documents, drawings, records, processes, formulations, pricing, audit findings, nonconformities, personnel information, and anything a reasonable person would treat as confidential, whether or not it is marked as such — is held in confidence and used only for the purpose for which it was provided.

Our undertaking. We do not disclose client confidential information to any third party without the client's written agreement, except where disclosure is required by law, by a court or by a regulator — in which case we notify the client in advance unless we are prohibited from doing so. Access within IBIS is limited to those who need it for the engagement, each of whom is bound by the same obligation. Consultants and associates working with us sign written confidentiality undertakings before they are given access.

Exclusions. The obligation does not apply to information that is or becomes public without breach of this clause, that we already held free of any duty of confidence, that we receive from a third party lawfully entitled to disclose it, or that we develop independently.

Non-disclosure agreements. We sign a mutual NDA on request, before any information is exchanged, and we are content to work under your form of agreement rather than ours. Where an engagement involves a validation or verification body, a certification body or a laboratory, an NDA is signed as a matter of course.

Case material. Case studies used in course material are drawn from live files but are anonymised first — client names, site names, document references and format numbers are removed — so that no participant can identify the organisation concerned.

Duration, return and destruction. Confidentiality obligations survive the end of an engagement indefinitely for trade secrets, and for five years for other confidential information. On written request at the end of an engagement we return or securely destroy client material, retaining only the minimum record required by law or by our own quality procedures, which stays subject to this clause.

What we are, and are not, is set out at item 1. Because we consult as well as audit, impartiality has to be managed deliberately rather than assumed.

We identify and manage conflicts of interest before accepting work. Where a client requires genuinely independent internal auditing, we structure the team so that no person audits a system, document or control that they themselves designed or wrote. Where we have consulted for an organisation, we will say so plainly to any party relying on our audit work.

Our fees do not depend on the outcome of an audit, an assessment or a certification decision. No participant, client or third party can purchase a favourable finding, an assessment result or a certificate.

We do not offer, give, solicit or accept any bribe, facilitation payment or improper advantage, whether directly or through a third party, and whether in the public or the private sector. This applies in every country in which we work, and it applies regardless of local custom or commercial pressure.

Gifts and hospitality are neither offered nor accepted where they could reasonably be seen to influence a professional judgement. Anyone acting on our behalf is bound by the same standard.

Concerns about improper conduct by anyone associated with IBIS may be reported in confidence to jc@ibismanagementsystems.com. Reports are investigated, and no one who raises a concern in good faith will be disadvantaged for having done so.

Item 1 commits us to ISO 20700:2017. This item is what that means in practice, engagement by engagement. We hold ourselves to it because we ask our clients to hold themselves to standards, and the same discipline should apply to us.

Contracting. Before work begins we agree the scope, the deliverables, the acceptance criteria, the timetable, the responsibilities on both sides, the people who will do the work, the fees and payment terms, and how changes will be handled — in writing.

Executing. We keep the client informed of progress against the agreed plan, raise issues and risks as they arise rather than at the end, manage change to scope through written variation, and transfer knowledge to your people as we go so that capability stays with you.

Closing. We confirm the deliverables against the acceptance criteria agreed at the outset, hand over documents in editable form, review the engagement with you, and agree what continuing support — if any — is required.

Training programmes follow the same principle at the level of competence: stated learning outcomes, contact hours, assessment criteria and pass marks are agreed before the programme begins, not decided afterwards.

Delivery continuity. Where an engagement or a live programme depends on a named consultant or tutor who becomes unavailable, we provide a substitute of equivalent competence or reschedule at no cost to you. Assessment marking is not delayed beyond fifteen working days by the absence of any one person.

Records and access. Training records, assessment results and certificate registers are backed up and retained for a minimum of ten years, so that a certificate issued today remains verifiable long after the course has closed. Client deliverables are held in editable form for the retention period agreed in the engagement, and a further copy is always in the client's own hands.

Platform availability. Course access is delivered through a third-party learning platform, the IBIS E-Learning portal. Planned maintenance is notified in advance where practicable. If access is interrupted for a material period, the access period is extended by at least the length of the interruption (item 23).

Succession. IBIS Management Systems maintains arrangements so that, in the event of the long-term unavailability of its principal, enrolled participants can complete their programmes, certificates already issued remain verifiable, and clients receive their deliverables and their confidential material back. Confidentiality obligations under item 10 bind any successor.

Business continuity for you. Continuity is also a subject we teach and implement: ISO 22301 and the ISO 22300 series appear in the register above.

No guarantee of certification. Our training, consulting and documentation improve an organisation's readiness. The decisions reserved to independent bodies at item 1, and their outcome, remain outside our control and outside anything we undertake.

Independent training provider. Our certificates evidence training completed and assessed against our own curriculum. They are not issued under licence from, or on behalf of, any certification, accreditation or membership scheme, and they are not a licence to audit for a certification body.

Not legal or professional advice. Content on this site and in our courses is general guidance on standards and their application. It is not legal, financial or regulatory advice, and it does not create a professional adviser relationship. Take your own advice on your specific obligations.

Liability. Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for gross negligence or wilful default, or for anything else that cannot lawfully be limited — and nothing in them excludes or limits any right or remedy you have under the Consumer Protection Act, 2019. Subject to that, our total aggregate liability arising out of or in connection with any course or engagement is limited to the fees paid for that course or engagement; and where we are at fault, the remedy is never less than a full refund of those fees. We are not liable for indirect or consequential loss, loss of profit, loss of business, loss of certification, or regulatory penalties.

Grievance officer. Jacob Cherian, Principal Consultant, IBIS Management Systems. Write to jc@ibismanagementsystems.com or telephone +91 96459 36102.

If you are dissatisfied with a course, a product, a deliverable, an assessment result or any conduct on our part, tell us. Use the buttons under Feedback, appeals, complaints and grievances, or write to jc@ibismanagementsystems.com with enough detail for us to investigate. Feedback and suggestions are equally welcome.

We acknowledge every complaint within forty-eight hours and give a substantive response within fifteen working days, and in no case later than one month from receipt — the period set by rule 4(5) of the Consumer Protection (E-Commerce) Rules, 2020. An assessment result may be appealed within thirty days of issue; the appeal is reviewed by someone other than the person who marked the original.

Data protection grievances. The officer named above is also the grievance officer for the purposes of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them. If a data protection grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India or, if you are in the EEA or UK, to your local supervisory authority.

We aim to make this site and our course materials usable by everyone, and we work towards the WCAG 2.2 Level AA guidelines. We have not completed a formal conformance audit, and some material — particularly older documents and third-party embedded content — may not yet meet that standard.

If any part of this site or any course material is difficult for you to use, tell us at jc@ibismanagementsystems.com and we will supply the content in an accessible format and fix the underlying problem where we can. Reasonable adjustments to assessment arrangements are made on request.

These terms and any dispute arising out of them or out of any course or engagement are governed by the laws of India. Subject to the paragraphs below, the courts at Kottayam, Keralam, India have exclusive jurisdiction.

Before commencing proceedings, the parties will attempt in good faith to resolve the dispute by discussion. A dispute not resolved within thirty days may be referred to arbitration by a sole arbitrator under the Arbitration and Conciliation Act, 1996, seated in Keralam, India, conducted in English.

Consumers in India. The two paragraphs above do not bind you if you are a consumer within the meaning of the Consumer Protection Act, 2019. You may bring your complaint before the Consumer Disputes Redressal Commission having jurisdiction — including the District Commission where you reside or personally work for gain, under section 34(2)(d) of that Act — and you cannot be required to arbitrate. Arbitration is open to you only if you choose it. We will not plead the exclusive-jurisdiction or arbitration paragraphs against a consumer.

If you are a consumer resident outside India, this clause does not deprive you of the protection of any mandatory consumer law of your country of residence, or of the right to bring proceedings in your local courts where that law gives you that right.

We may update these policies as our services, the standards landscape or the law changes. The version published here is the version in force. Material changes affecting a programme already commissioned are notified by email. Continued use of the site after a change takes effect constitutes acceptance of the revised terms; the terms in force when a programme was commissioned continue to govern it.

Legal notices should be sent to jc@ibismanagementsystems.com and, in hard copy, to the registered office address in item 22.

We work in governance, risk and compliance. A firm that helps others build integrity into their systems has to be able to show its own. This code binds the principal, every associate, tutor and subcontractor who works under the IBIS name, and it applies in every country in which we operate. It is not marketing copy: you may hold us to it, and you may complain if we fall short. It forms part of these terms, and a breach of it is a breach of them.

Integrity comes before the engagement

We tell a client what we have found, not what they hoped we would find. A finding is never softened, deferred or reworded because a fee, a renewal or a relationship depends on it. If the honest answer costs us the work, it still gets said.

Objectivity and independence

Nobody audits a system, a document or a control that they themselves designed or wrote. Where we have consulted for an organisation, we disclose it to anyone relying on our audit work. Our fees never depend on the outcome of an audit, an assessment or a certification decision.

Competence and due care

We accept only work we are competent to perform, and we say plainly when something sits outside our reach rather than learning it at a client's expense. Every consultant maintains current knowledge of the standards they work on, and every deliverable is reviewed by a qualified person before it leaves us.

Truthful reporting — and no greenwashing

We do not prepare, sign or support a statement we believe to be materially misstated, whether it is an audit finding, a GHG assertion, a BRSR disclosure or a sustainability report. Nor will we help construct a claim that is technically defensible but designed to mislead. Where data is uncertain, the deliverable says so.

Confidentiality, without exception

What we see inside a client stays inside. Information is used only for the purpose it was given, shared only with those who need it for the work, and never for our own advantage. This obligation outlives the engagement and outlives the relationship.

Inside information

ESG, BRSR and assurance work brings us into contact with price-sensitive information about listed companies before it is public. No one at IBIS trades on it, passes it on, or recommends action on the basis of it — directly, indirectly, or through family.

No bribery, no facilitation payments

We neither offer nor accept a bribe, a kickback or a facilitation payment, in any country, at any level, regardless of local custom or commercial pressure. Losing a contract is an acceptable outcome. Paying for one is not.

Gifts, hospitality and influence

Gifts and hospitality are neither offered nor accepted where a reasonable observer could see them as influencing a professional judgement. Modest, transparent business courtesy is acceptable; anything that would embarrass either party if it were published is not.

Conflicts declared before acceptance

Conflicts of interest are identified and declared before work is accepted, not after they surface. Where two clients compete, or where a personal or financial interest touches an engagement, we disclose it and let the client decide. Some work we decline outright.

Client acceptance and continuance

We decline work whose purpose is to disguise non-compliance, manufacture evidence, or obtain a certificate a system does not deserve. We check for sanctions and money-laundering concerns before accepting international work, and we resign from an engagement where a client insists on a course we consider dishonest.

Respect, dignity and non-discrimination

We treat every client employee, participant, associate and supplier with courtesy and respect, without regard to sex, gender, religion, caste, ethnicity, nationality, disability, age or any other personal characteristic. Harassment of any kind — including in a classroom or an online session — ends the relationship.

Safety on site

On a client's premises we follow their safety rules as their own people must, wear what is required, stop work that is unsafe, and never ask a client's employee to take a risk to demonstrate something to us. An auditor who ignores a site rule has no standing to write a finding about it.

Honest marketing, fair competition

We describe our credentials accurately, claim no accreditation or affiliation we do not hold, and never imply that a standards body endorses us. We compete on the quality of the work and do not disparage other firms. Client names are used as references only with written permission.

Respect for intellectual property

Standards are copyrighted documents. We explain and apply them; we do not reproduce or redistribute them, and we require participants to hold their own licensed copies. We do not reuse one client's proprietary material for another, and we anonymise every case study drawn from live work.

Data protection and information security

Personal data is collected for a stated purpose, kept no longer than needed, and protected by access control and encryption in transit. We do not sell data, and we do not use client records for anything the client did not agree to.

Responsible use of AI and digital tools

IBIS Management Systems is committed to using AI to enhance human capability, professional quality and productivity — while protecting confidentiality, maintaining professional judgement and preserving accountability.

Artificial intelligence may assist in drafting, analysis and research, but a named qualified person reviews, verifies and takes responsibility for every deliverable that leaves us. Client confidential information is never entered into a tool that would retain or train on it, and no audit finding or assessment result is generated without human judgement behind it.

We apply to ourselves what we ask of clients

Our own working practices — document control, records, competence, continual improvement — follow the disciplines we teach. Consulting engagements are conducted in line with ISO 20700:2017. It would be difficult to argue for management systems while running the firm without one.

Associates carry the same obligation

Every associate consultant, tutor, translator and subcontractor working under the IBIS name accepts this code in writing before they are engaged, and the same confidentiality, impartiality and anti-bribery obligations bind them. Their conduct is our responsibility.

Speak up — and no retaliation

Anyone — a client, a participant, an associate, an employee of a client — may raise a concern about conduct at IBIS in confidence, to jc@ibismanagementsystems.com. Concerns raised in good faith are investigated and answered, and no one is disadvantaged for having raised one, even if it turns out to be unfounded.

Breach, and keeping this code alive

A breach of this code ends an associate's engagement and may end a client relationship. The code is reviewed at least annually and whenever the law, the standards landscape or our services change materially; the version published here is the one in force.

Neither party is liable for any failure or delay in performing an obligation under these terms where the failure or delay results from an event beyond that party's reasonable control. Such events include an act of God, flood, cyclone, earthquake, landslide or fire; epidemic or pandemic, and any measure taken by a government or public authority in response to one; war, civil unrest, terrorism or riot; a hartal, bandh or curfew; strike or industrial action other than by the affected party's own personnel; failure of power, telecommunications or internet services not caused by that party; any order, restriction or direction of a government, court or statutory authority; and any other event of a similar nature.

Notice. The affected party tells the other in writing as soon as it reasonably can, saying what has happened and what effect it expects, and both parties do what is reasonable to limit the disruption and to resume performance.

Rescheduling and refund. Where a programme or an engagement cannot proceed on the agreed dates, we agree a new date with you in writing. Where no new date suits you, the fee for the affected work is refunded in full, with no deduction. No fee is payable for work not done.

If it continues. Where the event continues for more than sixty days, either party may end the affected programme or engagement on written notice, and you pay only for work properly performed up to that date.

This item does not limit your rights under item 5, nor any right you have under the Consumer Protection Act, 2019 or any other law.

Who you are contracting with. IBIS Management Systems, a micro enterprise registered under the Udyam scheme of the Government of India, registration number UDYAM-KL-07-0004765, having its registered office at WN 13, Bldg 170-A, Aylumavu Estate, Chelakombu, Kottayam District, Keralam, India 686540. Jacob Cherian, Principal Consultant, is answerable for the firm and is the grievance officer named at item 16. Write to jc@ibismanagementsystems.com or telephone +91 96459 36102. In these terms "we", "us" and "our" mean IBIS Management Systems, and "you" means the person or organisation buying a course or product, commissioning a programme or an engagement, or joining the partner programme.

Documents that make up these terms. Every item published above, including the Code of Conduct and the force majeure clause, and — for a consulting, audit or documentation engagement — the engagement letter for that work. Where an engagement letter conflicts with these items, the engagement letter prevails for that engagement. The items in force when a programme is commissioned continue to govern it.

Legal notices. Notices should be sent to jc@ibismanagementsystems.com and, in hard copy, to the registered office above. Notices are effective on receipt.

Severability and waiver. If any item is held unenforceable, the remainder continues in force. A failure to enforce an item on one occasion is not a waiver of it.

Unique IDs. Every product has a unique ID: a letter for its type followed by a number. E is an e-learning course, M a Level 1 manual, P a procedure, W a work instruction, F a format, C a checklist, A an audit checklist, T a training deck and K a complete kit or package. The first three digits are the standard's entry number in our register, and the last two are the item's serial number. Orders, invoices, licences and certificates quote this ID.

Delivery. Portal products are available as soon as payment succeeds. For products ordered by email, we confirm availability and the delivery date within two working days, and nothing is payable until we do.

Validity. Courses are to be completed within 90 days of subscribing. Access to courses and downloads lasts six months from purchase. After that, access may be renewed or reinstated on request, on the terms then in force.

Revisions. A revised course or product, whether revised for a change in a standard, law, scheme or context, is a new purchase. Anyone who bought the earlier version within the preceding twelve months gets the revised version at 20% off, on request, quoting the original order.

Integrated packages. Courses carry the same fee at each level, whether for one standard or an integrated programme. Documentation kits, single documents and integrated kits are priced on request.

Platform. The E-Learning portal runs on a third-party platform. If access is interrupted for a material period through no fault of yours, your access period is extended by at least the length of the interruption.

Who may join. Associates, consultants, trainers, agents and institutions, individuals or firms, who sign the referral partner agreement or the channel partner agreement published under Partners. Partnership is non-exclusive, and either side may end it on thirty days' written notice.

Referral partners earn 10% of the fees IBIS receives from a client they introduce, on that client's orders placed within twelve months of the introduction.

Channel partners earn a recurring commission on every payment their clients make, for as long as each client keeps paying. The rate depends on the total revenue received from the partner's clients in the financial year (April to March): 10% up to ₹5,00,000; 15% above that, up to ₹15,00,000; 20% above that, up to ₹30,00,000; and 25% above ₹30,00,000. The higher rate applies to payments received after the threshold is crossed, until 31 March.

How commission is worked out. On fees actually received, excluding taxes, payment-gateway charges and refunded amounts. Nothing is paid on a partner's own purchases or those of the partner's own organisation. Commission is paid monthly, by the 15th of the following month, with tax deducted at source where the law requires it. It is recovered if the underlying payment is later refunded.

Conduct. Partners quote published prices only, describe IBIS truthfully, make no promise of certification or results, and follow our Code of Conduct (item 20) and our confidentiality obligations (item 10). The client's contract is with IBIS. Commission is not payable on any business obtained in breach of these terms, and a breach ends the partnership. Where the signed agreement differs from this summary, the agreement prevails.