ISO 9001:2015 Quality Management System Certification
ISO 9001 is the world’s most widely adopted management system standard, and the one most often demanded in tenders. Done properly, it standardises how work gets done; done badly, it produces a binder nobody opens.
4.9/5 average client rating · 500+ engagements delivered
What ISO 9001 requires
ISO 9001:2015 asks you to define the context you operate in, understand what interested parties need, run your organisation as a set of interacting processes, and improve them using evidence. It is deliberately sector-agnostic — a software company and a foundry implement the same clauses very differently.
The 2015 revision replaced preventive action with risk-based thinking, made leadership engagement explicit, and dropped the mandatory quality manual — so the standard now rewards useful process design rather than documentation volume.
- Clause 4 — context, interested parties, QMS scope and process interactions
- Clause 5 — leadership, quality policy, and organisational roles and authorities
- Clause 6 — risks and opportunities, quality objectives and planning of change
- Clause 7 — resources, competence, awareness, communication and documented information
- Clause 8 — operational planning, design and development, supplier control, production and service provision
- Clauses 9 & 10 — monitoring, internal audit, management review, nonconformity and continual improvement
Key facts
| Standard | ISO 9001:2015 (Annex SL high-level structure, clauses 4–10) |
|---|---|
| Certificate validity | 3 years, with annual surveillance audits |
| Audit stages | Stage 1 documentation review, Stage 2 implementation audit |
| Typical timeline | 8–14 weeks for a single-site organisation |
| Integrates with | ISO 14001, ISO 45001, ISO 20000-1, ISO 13485 |
What we build with you
We design the QMS around your existing workflows, then close the gap to the clause requirements — not the other way round.
Context & process map
SWOT and interested party analysis, scope statement, and a process interaction map with owners and measures.
Risk & opportunity register
Risk-based thinking applied at process level with treatment actions tied to quality objectives.
Documented information
Lean policy, procedure and work instruction set with controlled formats — no manual for the sake of a manual.
Operational controls
Design controls, purchasing and supplier evaluation, production controls, calibration and release criteria.
Measurement system
KPIs, customer satisfaction measurement, nonconformity and CAPA workflow with root cause analysis.
Audit cycle
Internal auditor training, full internal audit, management review and certification body liaison.
Who benefits most
Any organisation that needs to prove consistent delivery — but the return is highest where rework, customer complaints or supplier variability are costing real money.
- Manufacturers and engineering firms bidding for OEM or government contracts
- IT and professional services firms formalising delivery beyond founder-led processes
- Distributors, logistics and trading companies with multi-site operations
- Construction contractors where ISO 9001 is a prequalification requirement
- Organisations preparing to integrate ISO 14001 and ISO 45001 later
Tender eligibility
Meets the prequalification requirement that removes most bidders before technical evaluation.
Less rework
Structured CAPA and root cause analysis measurably reduce repeat defects and customer complaints.
Role clarity
Documented ownership ends the ambiguity that causes handover failures between departments.
Integration ready
The Annex SL structure means ISO 14001 and 45001 later cost a fraction of a standalone project.
How the engagement runs
Gap assessment
Clause-by-clause review of current practice with a prioritised action plan and realistic certification date.
Design & documentation
Process map, policy, objectives, risk register and the minimum documented information the standard requires.
Implementation & training
Awareness training for all staff, internal auditor training for the core team, and operational rollout.
Internal audit & review
Full internal audit cycle, corrective actions closed, and a documented management review.
Certification
Certification body selection, Stage 1 and Stage 2 support, and non-conformity closure through to certificate issue.
What you receive
- QMS scope statement, context and interested party analysis
- Process interaction map with owners, inputs, outputs and KPIs
- Quality policy, measurable objectives and risk/opportunity register
- Procedure and work instruction set with controlled document register
- Internal audit programme, checklists, reports and auditor training
- Management review pack and CAPA log with root cause records
- Certification body liaison through Stage 1, Stage 2 and certificate issue
ISO 9001 — frequently asked questions
Eight to fourteen weeks for a single-site organisation. Certification bodies expect to see the system operating with real records, so the constraint is usually the two to three months of evidence needed before a Stage 2 audit, not the documentation work.
Not since the 2015 revision. You need documented information necessary for the effectiveness of the QMS — scope, policy, objectives, and specified records. Many of our clients keep a short manual anyway because customers ask for one, but it is no longer a clause requirement.
Two components: our implementation fee and the certification body’s audit fee, which is set by mandays based on headcount, sites and process complexity. We quote both up front and help you compare accredited bodies rather than defaulting to the cheapest.
Yes — you define the scope, and the certificate states it. Scope must be honest and defensible: excluding a function that clearly affects product conformity will be challenged by the auditor. We help you set a scope that is both economical and credible.
The certification body audits a sample of the system annually for two years, then performs a full recertification audit in year three. We provide a surveillance readiness check so findings do not accumulate between visits.
Still not sure what applies to you?
Ask an assessor directly — we answer scoping questions before anyone talks about a fee.
Get a realistic timeline and a fixed fee
A 30-minute call is usually enough to scope ISO 9001 accurately. You will leave with a timeline, an evidence checklist and a number — whether or not you engage us.