PECB ISO 26000 Lead Manager cheat sheet

ISO 26000 is a guidance standard (published 2010); it contains no requirements and is therefore not certifiable - an organization cannot be "ISO 26000 certified," only compliant or aligned.

Definition: social responsibility is the responsibility of an organization for the impacts of its decisions and activities on society and the environment, through transparent and ethical behaviour that contributes to sustainable development, health and welfare of society, takes stakeholder expectations into account, complies with law and is consistent with international norms, and is integrated throughout the organization.

Seven principles underpin the concept: accountability, transparency, ethical behaviour, respect for stakeholder interests, respect for the rule of law, respect for international norms of behaviour, and respect for human rights.

Two foundational practices frame the concept: identifying and engaging stakeholders, and recognizing the organization's sphere of influence - the range of relationships through which it can affect decisions or activities.

The standard distinguishes social responsibility from legal compliance: law is a baseline duty; social responsibility requires going beyond minimum legal compliance where impacts warrant it.

Sustainable development is defined as development that meets the needs of the present without compromising the ability of future generations to meet their own needs; social responsibility contributes to it across economic, social and environmental dimensions.

The triple bottom line (people, planet, profit) is the practical lens for the three dimensions; ISO 26000 does not prescribe indicators or a reporting framework.

Applicability: ISO 26000 applies to all organizations regardless of size, sector, location or legal form, including public, private and non-profit entities.

Normative references: the standard is voluntary guidance, not a management system standard; it does not include requirements for audits, certification or contractual conformity assessment.

Stakeholder identification criterion: a stakeholder is any individual or group that has an interest in any decision or activity of the organization; engagement is required for those affected by impacts, not only for those with power over the organization.

Sphere of influence is assessed by considering the degree of control, the ability to influence, and the proximity of the relationship; influence does not equal responsibility for every actor in the value chain.

Seven-step integration logic: (1) review context, (2) identify stakeholders, (3) determine core subjects and issues, (4) assess significance, (5) define scope and priorities, (6) implement, (7) evaluate and improve.

Materiality rule: an issue is significant when it is relevant to the organization's decisions and activities AND important to stakeholders; both tests must be met to prioritize.

Transparency principle requires timely, accurate, clear and complete disclosure of policies, decisions and activities for which the organization is accountable - subject only to legitimate confidentiality, privacy and legal limits.

Accountability principle requires the organization to answer for its impacts and to accept responsibility for harm caused, including correcting or compensating where appropriate.

Ethical behaviour means acting in accordance with accepted principles of right conduct in the context of the situation, and includes actively preventing conflicts of interest and avoiding complicity.

Respect for international norms of behaviour: where law or its implementation is inadequate, the organization should strive to respect international norms; where law conflicts with such norms, it should review the nature of the conflict and its involvement.

Complicity means being implicated in wrongdoing by others; it can be direct, beneficial (knowingly benefiting from wrongdoing), or silent (failing to raise the issue when there is a duty to do so).

Six core subjects: organizational governance; human rights; labour practices; the environment; fair operating practices; consumer issues; and community involvement and development - governance is the seventh, cross-cutting subject that enables action on the others.

Organizational governance issues include decision-making processes and structures, leadership commitment, and the integration of social responsibility into strategy, systems and culture.

Human rights issues cover due diligence, risk situations for human rights, avoidance of complicity, resolution of grievances, discrimination and vulnerable groups, civil and political rights, and economic, social and cultural rights.

Labour practices issues: employment and employment relationships, conditions of work and social protection, social dialogue, health and safety at work, and human development and training in the workplace.

Environment issues: prevention of pollution, sustainable resource use, climate change mitigation and adaptation, protection of the environment and biodiversity, and restoration of natural habitats.

Fair operating practices issues: anti-corruption, responsible political involvement, fair competition, promoting social responsibility in the value chain, and respect for property rights.

Consumer issues: fair marketing and factual information, consumer health and safety, sustainable consumption, dispute resolution and redress, protection of consumer data and privacy, and access to essential services.

Community involvement and development issues: community involvement, education and culture, employment creation and skills development, technology development and access, wealth and income creation, health, and social investment.

Each core subject is analyzed through its issues, related actions and expectations; the standard does not rank the subjects - significance is organization-specific.

Integration is organization-wide: it requires embedding social responsibility into policies, culture, strategy, objectives, processes, practices and decision-making at all levels, not a standalone programme.

The standard's integration guidance covers: due diligence, determining relevance and significance, sphere of influence, establishing priorities, and reviewing and improving.

Due diligence is a process to identify, prevent, mitigate and account for actual and potential negative impacts; it should be proportionate to risk and applied across the value chain.

Relevance determination: consider the organization's activities, products and services, its value chain, and the interests of stakeholders; significance adds the degree of impact and likelihood of harm.

Communication on social responsibility should be accurate, verifiable and not misleading; claims should be substantiated and consistent with the organization's actual performance.

Integration mechanisms include governance structures, performance indicators, training, internal reporting lines, and grievance mechanisms that are legitimate, accessible, predictable, equitable, transparent and rights-compatible.

Review and improvement cycle: monitor, measure, evaluate performance against priorities, and update priorities when context, stakeholders or impacts change.

Voluntary initiatives and tools (codes, labels, standards, partnerships) may be used, but the organization remains accountable for the credibility and outcomes of any initiative it joins.

Improvement is continuous: the standard expects organizations to review and improve their social responsibility performance over time, based on evaluation results and changing context.

Enhancement of credibility is achieved through transparency, stakeholder engagement, credible verification, and addressing grievances openly.

Evaluation should compare performance against priorities, objectives and stakeholder expectations, using qualitative and quantitative indicators where appropriate.

Grievance mechanisms should be accessible, legitimate, predictable, equitable, transparent, rights-compatible, and based on dialogue and mediation where possible.

Review of progress should consider changes in the organization's context, its sphere of influence, and the significance of issues; priorities may be revised accordingly.

Reporting is a key credibility tool; reports should be accurate, balanced, comparable, and cover performance, impacts and how issues were addressed.

Improvement requires leadership commitment and integration into management systems, so that lessons learned feed back into policy, objectives and practices.

The standard is guidance, not a certification scheme; improvement is demonstrated through evidence of performance and stakeholder outcomes, not a certificate.

Integration is organization-wide: it requires embedding social responsibility into policies, culture, strategy, objectives, processes, practices and decision-making at all levels, not a standalone programme.

The standard's integration guidance covers: due diligence, determining relevance and significance, sphere of influence, establishing priorities, and reviewing and improving.

Due diligence is a process to identify, prevent, mitigate and account for actual and potential negative impacts; it should be proportionate to risk and applied across the value chain.

Relevance determination: consider the organization's activities, products and services, its value chain, and the interests of stakeholders; significance adds the degree of impact and likelihood of harm.

Communication on social responsibility should be accurate, verifiable and not misleading; claims should be substantiated and consistent with the organization's actual performance.

Integration mechanisms include governance structures, performance indicators, training, internal reporting lines, and grievance mechanisms that are legitimate, accessible, predictable, equitable, transparent and rights-compatible.

Review and improvement cycle: monitor, measure, evaluate performance against priorities, and update priorities when context, stakeholders or impacts change.

Voluntary initiatives and tools (codes, labels, standards, partnerships) may be used, but the organization remains accountable for the credibility and outcomes of any initiative it joins.