Consulting, auditing and training from Gaborone
We help Botswana organisations build, audit and maintain ISO/IEC 27001, ISO 9001, ISO 14001, ISO 45001 and integrated management systems, and get ready for the Data Protection Act, 2024.
Data Protection Act, 2024
Botswana's Data Protection Act, 2024 (Act No. 18 of 2024) commenced on 14 January 2025. The Information and Data Protection Commission can audit and investigate how you handle personal data, and it will ask for evidence, not intentions. An information security management system built on ISO/IEC 27001, extended with ISO/IEC 27701 for privacy, gives you that evidence.
Controllers must notify the Commission of a personal data breach within 72 hours of becoming aware of it.
Public authorities and organisations that monitor people or process sensitive data at scale must appoint one.
High-risk processing needs a data protection impact assessment before it starts.
Policies, records of processing, training records, breach registers and processor contracts should be ready to produce.
We put the systems and records in place and work alongside your legal advisers. This section is a summary, not legal advice.
Services
Each engagement starts from where you are. We assess, build what is missing, train your people to run it, and audit it the way a certification body will, because our lead auditors do that work.
Gap assessment, ISMS design and implementation, information security risk assessment and Statement of Applicability, policies and procedures, internal audit and certification readiness.
Personal data mapping and records of processing, data protection policies and privacy notices, impact assessments, breach response procedures and processor contract reviews. Training for staff and data protection officers, contract data protection officer support, and preparation for a Commission audit.
Quality, environmental and occupational health and safety systems, separately or as one integrated system: gap assessments, documentation, implementation, internal audits, management review and certification readiness.
Development and review of OHS policies, management system frameworks, hazard identification and risk assessment procedures, and legal and other requirements registers for Botswana operations.
Enterprise and operational risk frameworks, risk registers and risk assessment methods that link into your management system.
Awareness, implementation, internal auditor, lead implementer and lead auditor courses, live online or in-house for 10 or more delegates. We also design complete ISO/IEC 27001 training programmes, including manuals, learner and facilitator guides and assessment tools, and support HRDC accreditation of courses and trainer development.
Training schedule, October to December 2026
Live online public courses from awareness and requirements to internal auditor, lead implementer and CQI and IRCA certified lead auditor. Any course can also run in-house, at your premises or online, for groups of 10 or more delegates.
Standards we cover
Beyond our core consulting work, we train and support teams across a wide range of management system standards and professional certifications.
ISO 9001, PAS 99, ISO 19011 auditing, root cause analysis
ISO 14001 (including the 2026 transition), ISO 50001, ISO 14064, ISO 14067, ISO 14068-1, net zero and Scope 3
ISO 45001 and ISO 45003 psychological health and safety
ISO/IEC 27001, ISO/IEC 27701, data protection officer, CISSP, CISA, CISM, CIPM, CIPT
ISO 22301 business continuity and ISO 31000 risk management
ISO/IEC 42001 AI management, ISO/IEC 20000-1 IT service management, ISO 19650 BIM
ISO/IEC 17025, ISO 22000, FSSC 22000, HACCP, ISO 13485, ISO 7101
ISO 55001 asset management, Lean Six Sigma, change management, ISO 44001
How we work
We measure your current practice against the standard, clause by clause, and give you a prioritised gap report.
We build the policies, procedures, registers and records your system needs, written for how your organisation works.
We help your teams put the system into practice and train the people who will own and audit it.
We audit the system before certification, close the findings with you, and prepare you for the certification body.
We are consultants, not a certification body. Certification is carried out by an accredited certification body of your choice, which keeps our advice independent.
Credentials
For procurement teams: the registrations below can be verified with the issuing bodies. Copies are available on request.
| Registration | Issued by | Reference | Valid to |
|---|---|---|---|
| Registered consultancy | Botswana Qualifications Authority | CON406 | December 2035 |
| Economic Diversification Drive | Department of Industry Development | EDDS6111 | September 2027 |
| Professional indemnity insurance, covering ISO management consultancy | Botswana Insurance Company | BWP 1,000,000 | October 2027 |
Our lead auditors and trainers are CQI and IRCA certified for ISO/IEC 27001, ISO 9001, ISO 14001 and ISO 45001. The people who audit management systems also design and deliver our training, so what we teach is what certification auditors look for.
Also from Smart Radiation Group
Exposure monitoring for dust, noise, heat, lead, silica and radiation, and exposure science for mining and industry, through Industrial Hygiene HUB.
srghygiene.comA free self-assessment that scores your sustainability report against GRI 403 and GRI 14 or GRI 12, and shows your biggest gaps.
disclose.riskexposome360.comContact
Tell us which standard, course or obligation you are working on and where you are now. We will reply with a proposed scope or booking details.
info@smartradiationgroup.co.bw