ISO 19443: The Nuclear Supply Chain Standard, and What AUKUS Suppliers Are Asked For

Australia is building a nuclear-powered submarine fleet at Osborne, and a supply chain has to be built with it. If you machine parts, fabricate components, test materials or provide engineering services, you have probably been told you need ISO 19443, or seen it named in a capability presentation and wondered whether it is the price of entry.

It is a real standard and a serious one. It is also, right now, not what the programme is asking you for. Both of those things are worth understanding before you spend money.

What ISO 19443 is

ISO 19443:2018 is titled Quality management systems. Specific requirements for the application of ISO 9001:2015 by organizations in the supply chain of the nuclear energy sector supplying products and services important to nuclear safety (ITNS).

Read that title closely, because it tells you the structure. This is not a standalone standard. It is a sector application of ISO 9001, in the same way ISO 13485 applies quality management to medical devices. You do not choose between ISO 9001 and ISO 19443. You build ISO 9001 and then meet the additional nuclear requirements on top of it.

ITNS means products and services important to nuclear safety. Whether an item is ITNS drives how much of the standard applies to it, through a graded approach, so scoping is the first real decision in any ISO 19443 project and it is where the cost sits.

What it adds to ISO 9001

Four things matter beyond a conventional quality management system.

Nuclear safety culture. The standard asks you to demonstrate leadership behaviours, a questioning attitude, safe reporting of concerns, and that people understand the safety significance of what they do. This is the part that surprises engineering businesses. It is not a procedure you can write. It is evidenced through how people behave, what gets raised, and what happens when somebody stops the job.

Counterfeit, fraudulent and suspect items. CFSI is a live problem in nuclear supply chains and the standard treats it as one. You need provenance for what you buy, receipt inspection that would catch a substituted part, and a route for quarantining and reporting anything suspect rather than quietly returning it to the supplier.

A graded approach to ITNS classification. You classify what you supply by its safety significance and apply controls proportionately, then justify the classification. Get this wrong in either direction and you either miss requirements or gold-plate work that never needed it.

Control of special processes. Welding, heat treatment, non-destructive testing and coating, where the result cannot be fully verified by inspecting the finished item, so the process and the people have to be qualified instead.

If you already run a mature ISO 9001 system, none of this is alien. If your quality system is a folder of certificates, all of it will be.

What the AUKUS programme asks for

This is the part worth reading carefully, because the market is noisy. Australia’s AUKUS Submarine Industry Strategy does not mention ISO 19443. Neither does the ASC Supplier Quality Assurance Manual, which is the document that governs what ASC expects of its suppliers. What those sources name is this.

What is named	Where it comes from	What it means for you
ISO 9001	ASC Supplier Quality Assurance Manual: suppliers should maintain an effective QMS based on ISO 9001, latest version. Without it you may face further audit and assurance activity	A certified, working quality management system is the baseline
DISP membership	AUKUS Submarine Industry Strategy: suppliers must assure a very high standard of physical and cyber security, including through the Defence Industry Security Program	Security clearance for the business, separate from quality
AGSVA vetting	AUKUS Submarine Industry Strategy	Personnel clearances
ISO/IEC 17025	ASC manual, for laboratories	Relevant if you test or calibrate
ISO 9712 level 2	ASC manual, for non-destructive testing	Personnel qualification for NDT
AICIP	ASC manual, for pressure equipment	Sector specific
ISO 14001 and ISO 45001	ASC manual, recommended rather than required	Environmental and safety
DIVQ, AUSSQ and the ASC and BAE qualification programme	Australian Submarine Agency	The gateways into the supply chain

You may see ISO 19443 described as a legal requirement for AUKUS suppliers. It is not, and the primary sources are short enough to read yourself. The Australian Naval Nuclear Power Safety Act 2024 requires a licence holder to maintain a nuclear safety management system. It does not name ISO 19443.

None of that makes the standard worthless. It changes what you should say about it, and when you should spend money on it.

When ISO 19443 is worth it

There are good reasons to certify, and they are commercial rather than legal.

• A customer asks for it. Some operators do, and it arrives as a contract requirement rather than a national one.
• You export into the UK, French or US nuclear supply chains, where the standard is established and accredited certification schemes have been running for several years.
• You want to stand apart in a qualification queue. More than sixty Australian businesses are working through the national qualification gateway. When everyone holds ISO 9001, a nuclear-specific certification is a differentiator, and it shows you thought about safety culture and counterfeit parts before anyone asked.
• You supply ANSTO or the domestic nuclear medicine and research sector, which is a real Australian nuclear supply chain that exists today and does not depend on the submarine programme.

Reasons to wait: you do not yet hold ISO 9001, your scope is unclear, or you are being told it is mandatory by someone who wants to sell it to you.

Who accredits ISO 19443

Certification is available here through the Australian offices of the global certification bodies. One point matters more than any other, and almost nobody explains it.

There is no Australian accreditation for ISO 19443. The Nuclear Quality Standard Association maintains the list of accreditation bodies recognised for the standard, updated 30 June 2026. It runs to seven: ACCREDIA in Italy, COFRAC in France, DAkkS in Germany, INAB in Ireland, KAB in Korea, NAH in Hungary and UKAS in the United Kingdom. JAS-ANZ is not among them.

So any ISO 19443 certificate held by an Australian organisation is either accredited by a foreign body or not accredited at all. That is not a scandal and it is not a reason to avoid the standard. It is a reason to ask a question you would not need to ask for ISO 9001.

There is no Australian edition of the standard either. Standards Australia lists it in the catalogue under International, with the designation ISO 19443:2018, ISO named as the developing organisation and the publication type given as International Standard. There is no AS ISO 19443 and no AS/NZS version. You buy and work to the ISO document.

So ask which accreditation body signs the certificate, then check that body’s register. The schemes run under ISO/IEC TS 23406, which moved to a 2024 edition, so certification bodies had to transition. Bureau Veritas, LRQA, TUV UK and QSRMC are accredited through UKAS. AFNOR, APAVE, DNV, Qualianor, SGS ICS, SOCOTEC and TUV SUD run through COFRAC. RINA, ICIM and C&P sit with ACCREDIA, and TUV NORD CERT and TUV Rheinland with DAkkS.

The association also publishes a register of certified organisations, and records for each one whether the certificate came from an accredited body, a non-accredited body, or a body it could not identify. That distinction exists because it matters. If you are relying on a supplier’s ISO 19443 certificate, look them up rather than accepting the logo, which is the same discipline we set out in how to tell whether an ISO certificate is real and in our guide to choosing an ISO certification body in Australia.

Australian certification has been achieved, so the pathway works from here and is not theoretical. ANSTO was certified to ISO 19443 by Bureau Veritas in November 2023, described at the time as the first organisation in Australia and the Southern Hemisphere. An Australian company, UBH Group, followed in January 2025.

A revision is in train. ISO 19443:2018 carries a 2024 amendment covering climate action, and a revised edition is under development. If you are scoping a project now, build the system rather than the 2018 document, so a new edition is a gap analysis rather than a rebuild.

How long it takes

Three to six months for most organisations, on the same basis as any other standard. Larger, multi-site and multinational organisations run longer. The variable that matters most is whether you already have a working ISO 9001 system: if you do, ISO 19443 is an extension, and if you do not, you are building both at once.

We do not publish a cost range for ISO 19443. The scoping question, how much of what you supply is important to nuclear safety, moves the number too much for a range to be honest. Tell us your scope and we will give you a real figure.

Common questions

Is ISO 19443 available in Australia?

Yes, through the Australian offices of global certification bodies, and Australian organisations hold it. ANSTO was certified in November 2023 and an Australian company followed in 2025. What is not available is Australian accreditation: JAS-ANZ does not accredit ISO 19443, so the accreditation behind any certificate will be foreign.

Which accreditation bodies cover ISO 19443?

Seven, as at 30 June 2026: ACCREDIA in Italy, COFRAC in France, DAkkS in Germany, INAB in Ireland, KAB in Korea, NAH in Hungary and UKAS in the United Kingdom. The Nuclear Quality Standard Association maintains the list, and accreditation is granted under ISO/IEC TS 23406.

Is JAS-ANZ accredited for ISO 19443?

No. JAS-ANZ does not appear on the list of accreditation bodies recognised for the standard. This matters if your customer or your own procurement policy asks for JAS-ANZ accredited certification as a matter of course, because for this standard it is not available. Ask which body signs the certificate and check that body’s register.

Is there an Australian version of ISO 19443?

No. Standards Australia lists it under International in its catalogue, with the designation ISO 19443:2018 and ISO as the developing organisation. There is no AS ISO 19443 or AS/NZS equivalent, so you work to the ISO document.

What is the difference between ISO 9001 and ISO 19443?

ISO 19443 contains ISO 9001 and adds to it. You cannot hold ISO 19443 instead of ISO 9001, because the nuclear requirements sit on top of the same management system. In practice, an organisation with a mature ISO 9001 system is extending it, not starting again.

What does ITNS mean?

Important to nuclear safety. It describes products and services whose failure could affect nuclear safety, and the classification determines how much of the standard applies to a given item through a graded approach.

Is ISO 19443 required for AUKUS suppliers?

No. Neither Australia’s AUKUS Submarine Industry Strategy nor the ASC Supplier Quality Assurance Manual names ISO 19443. Those documents name ISO 9001 as the quality baseline, along with Defence Industry Security Program membership, personnel vetting and the qualification pathways run through ASC. ISO 19443 is a credential some suppliers choose, and individual contracts can require it.

How long does ISO 19443 take?

Three to six months for most organisations, longer for larger, multi-site or multinational ones. It depends heavily on whether a working ISO 9001 system already exists.

Where Streamline fits

Streamline is run by a practising ISO Lead Auditor with a Royal Australian Navy background, which is an unusual combination for this particular standard and a useful one. Nuclear supply chain quality is a deliberate area of focus.

The honest first step for most organisations is not certification. It is finding out whether your existing quality system would survive the question, and whether the work you supply is important to nuclear safety at all. A gap analysis answers both, and it costs a great deal less than a failed certification attempt.

From there you can build the system with us, or have your own people build it with ISO mentoring and the independent internal audit that clause 9.2 requires. If you do not yet hold ISO 9001, that is the place to start, and it is the requirement the programme documents name today. If you run a testing or calibration laboratory, ISO/IEC 17025 is named in the ASC manual as well.

Sources

• Australian Submarine Agency, Australia’s AUKUS Submarine Industry Strategy, March 2025
• ASC Supplier Quality Assurance Manual, version 14.0, October 2025
• Australian Submarine Agency, supply chain and qualification pathways, for DIVQ and AUSSQ
• ISO 19443:2018 and Amendment 1:2024, and ISO/IEC TS 23406:2024 for the accreditation scheme
• Nuclear Quality Standard Association, list of accredited certification bodies, 30 June 2026, and the ONUSIS register of certified organisations
• Standards Australia catalogue record for ISO 19443:2018
• ANSTO, ISO nuclear safety certification announcement, November 2023
• Australian Naval Nuclear Power Safety Act 2024