ISO 9001 is the most widely used quality management standard in the world. More than a million companies are certified. But what exactly does it mean? And more importantly: is it something for your company?
In this guide you can read everything about ISO 9001 certification. From costs and lead time to practical tips for the audit. Without jargon, without sales pitches.
1. What is ISO 9001?
ISO 9001 is an international standard that describes how to organise quality management. It revolves around one core question: do you consistently deliver what you promise to your customers?
1.1 The standard in brief
The current version is ISO 9001:2015. This standard describes requirements for a quality management system. Not a checklist that you check off, but a framework for how you organise your company.
The standard is built around seven quality principles:
| Principle | What it means |
|---|---|
| Customer focus | You understand what customers want and deliver that |
| Leadership | The management actively promotes quality |
| Involvement | Employees understand their role in quality |
| Process approach | You work in clear, coherent processes |
| Improvement | You are constantly looking for what can be improved |
| Decision making based on facts | You measure and analyse before you decide |
| Relationship management | You maintain good relationships with suppliers and partners |
1.2 What is a quality management system?
A quality management system (QMS) is the collection of processes, procedures and responsibilities with which you guarantee quality. It sounds abstract, but in practice it comes down to:
- Recording how you work - Who does what, when, and how?
- Check whether it works - Do you measure whether you do what you say?
- Improve where necessary - Do you tackle problems structurally?
Core. A QMS is not a folder with documents that lies in the cupboard. It’s the way you work every day, recorded so that everyone understands it and you can improve it.
1.3 New version: ISO 9001:2026
A revised version of the standard will be published in September 2026. The Draft International Standard (DIS) was published in August 2025. The most important changes:
- Sustainability and climate - Organisations must include external factors such as climate change in their risk analysis
- Digitalisation - Data analysis, AI and digital tools are given a place in quality management
- Quality Culture - Greater emphasis on ethical behaviour and employee involvement
- Harmonization - Better alignment with other management system standards (ISO 14001, ISO 45001)
Read also: ISO 9001:2026 is coming: what will change for your certificate?
2. Why certify ISO 9001?
A certificate costs time and money. Why would you make that investment?
2.1 Benefits of certification
| Advantage | Explanation |
|---|---|
| Access to contracts | More and more clients require ISO 9001. Without a certificate, you may not qualify for the tender. |
| Fewer errors | By recording and measuring processes, you catch problems earlier. |
| Internal clarity | Everyone knows what is expected of them. Less confusion, less frustration. |
| Customer confidence | A certificate is independent proof that you have your affairs in order. |
| Basis for improvement | You gain insight into where things go wrong and can make targeted improvements. |
Core. The certificate itself is a piece of paper. The real value is in the process: you force yourself to look critically at your company.
2.2 For whom is ISO 9001 relevant?
ISO 9001 is industry independent. From production companies to service providers, from builders to healthcare institutions. The standard is especially relevant if:
- You work for clients who demand it (government, large companies, construction)
- You want to grow and professionalize your organisation
- You regularly receive complaints that you want to tackle structurally
- Your company is growing and processes are in danger of getting out of hand
Sectors where ISO 9001 is common:
| Sector | Why relevant |
|---|---|
| Construction and installation | Often required in tenders and main contractors |
| Manufacturing industry | Quality assurance in production processes |
| IT and software | Increasingly requested by enterprise customers |
| Business services | Distinctiveness, professionalization |
| Care | Quality requirements from legislation and regulations |
| Transport and logistics | Requirements of major shippers |
2.3 When is ISO 9001 not a good idea?
- You only want the paper. If you don’t plan to really work on quality, it’s a waste of money.
- Your company is too small. With two employees, the overhead is often not profitable.
- You are in a crisis situation. Stabilize first, then certify.
3. The ISO 9001 certification process
Certification is not an exam you take in one day. It is a process of preparation, implementation and external assessment.
3.1 The six phases
| Phase | What’s happening | Lead time |
|---|---|---|
| 1. Gap analysis | You take stock of where you are and what still needs to be done | 1-2 weeks |
| 2. Building a system | You record processes, create procedures, assign responsibilities | 2-4 months |
| 3. Implementation | You will work according to the new system and train employees | 1-2 months |
| 4. Internal audit | You check yourself whether everything works before the certifier arrives | 2-4 weeks |
| 5. Management review | Management assesses whether the system is effective | 1 day |
| 6. Certification audit | An external auditor tests your system and issues the certificate | 1-3 days |
3.2 Average lead time
Most SMEs are ready for the certification audit in three to six months. Factors affecting lead time:
- Starting point: Do you already work in a structured way? Then it goes faster.
- Available time: Someone has to lead the project.
- Complexity: More processes, locations or employees = more work.
3.3 Who does what?
| Role | Responsibility |
|---|---|
| Management | Promotes quality policy, makes resources available |
| Quality Manager | Builds the system, coordinates, monitors progress |
| Employees | Working according to the agreements, providing input for improvement |
| Advisor (optional) | Helps with set-up, trains employees, prepares audit |
| Certifier | Conducts the independent audit |
4. Cost of ISO 9001 Certification
What does it really cost? The total investment consists of three parts.
4.1 Cost structure
| Cost item | Indication (SME up to 25 FTE) | Explanation |
|---|---|---|
| Consultancy fees | €2,000 - €8,000 | Optional, if you hire guidance |
| Certification fees | €2,500 - €4,000 | First year (phase 1 + phase 2 audit) |
| Annual costs | €1,500 - €2,500 | Surveillance audits (years 2 and 3) |
| Recertification | €2,000 - €3,500 | Complete re-audit after three years |
Core. The total investment in the first year for a small SME is between €3,000 and €7,000. If you do everything yourself, you save on consultancy costs.
4.2 Price Factors
The exact price depends on:
- Number of employees - More people = more audit days
- Number of locations - Each location must be visited
- Complexity - Production is more intensive than service delivery
- Certifier - Prices vary by up to 30-40%
4.3 Indication per company size
| Company size | First year (total) | Annually thereafter |
|---|---|---|
| Small (5-25 FTE) | €3,000 - €7,000 | €1,500 - €2,500 |
| Medium-sized (25-100 FTE) | €7,000 - €12,000 | €2,500 - €4,000 |
| Large (100+ FTE) | €12,000 - €20,000+ | €4,000 - €7,000+ |
Prices are indications excluding VAT. Consulting costs optional.
4.4 Hidden costs
Don’t forget these items in your budgeting:
- Internal hours - Someone has to lead the project
- Training - Employees must understand the system
- Documentation - Time for recording processes
- Possible adjustments - Sometimes you have to change something to meet the standard
5. Preparation for ISO 9001
Good preparation saves time, money and frustration during the audit.
5.1 Documentation Requirements
ISO 9001:2015 prescribes fewer mandatory documents than previous versions. But you must record these things:
| Document | What it is |
|---|---|
| Quality Policy | Brief statement of your quality goals and approach |
| Quality Objectives | Measurable goals (e.g. customer satisfaction > 8) |
| Scope | Which activities and locations are certified |
| Process overview | How your core processes run and are connected |
| Procedures | Working agreements for critical processes |
| Registrations | Proof that you do what you say (forms, logs) |
5.2 Practical checklist
Preparation checklist:
- Management is committed and communicates this
- Someone has been appointed as project leader
- You know which processes you have
- You have done a gap analysis
- Employees know what is going to happen
- You have made a realistic plan
- Internal audit is scheduled (well before external audit)
5.3 Common mistakes
| Error | Consequence | Solution |
|---|---|---|
| Too much documentation | Unworkable system, no one reads it | Keep it simple, only document what is necessary |
| Only for the piece of paper | System not used, audit failed | Build something that really helps you |
| Too little time | Rushed work, stress, poor implementation | Plan realistically, take three to six months |
| Management not involved | Employees don’t take it seriously | Management must propagate it |
| Internal audit too late | No time to solve problems | Schedule internal audit at least four weeks before external |
Read also: How to prepare for a certification audit?
6. The ISO 9001 audit
The audit is the moment of truth. An external auditor checks whether your system meets the standard.
6.1 Phase 1 and phase 2
The certification audit consists of two phases:
| Phase | Target | Duration | What’s happening |
|---|---|---|---|
| Phase 1 | Documentation review | Half to full day | Auditor reviews your documentation and assesses whether you are ready for phase 2 |
| Phase 2 | On-site audit | One to three days | Auditor checks whether you do in practice what you have recorded |
There is usually two to four weeks between phase 1 and phase 2, so that you can resolve any shortcomings.
6.2 What the auditor looks at
The auditor wants to see evidence that your system works. He does this by:
- Documents to be checked - Are procedures current and complete?
- Records viewable - Are there any records that prove you do what you say?
- Employees to be interviewed - Do they know how it works?
- Processes to be followed - Does practice match reality on paper?
Key. The auditor is not a police officer who wants to catch you. He checks whether your system works and gives you points for improvement. Think of it as a free consultation.
6.3 Possible outcomes
| Outcome | Meaning | Action |
|---|---|---|
| Certificate | You meet the standard | Congratulations, you are certified |
| Minor deviations | Minor shortcomings | You will receive the certificate, but must correct within 90 days |
| Major deviations | Serious shortcomings | No certificate, first solve and reaudit |
6.4 After the audit: maintenance
The certificate is valid for three years, but you are not finished after the audit:
- Annual surveillance audit - The certifier returns every year for a shorter audit
- Continuous improvement - You continue to measure, analyse and improve
- Recertification - A full re-audit after three years
7. Choosing an ISO 9001 Certifier
Not every certifier is the same. The choice affects your experience and your wallet.
7.1 Accreditation: crucial
A certifier must be accredited by a recognised body. In the Netherlands this is the Accreditation Council (RvA), but foreign accreditations are also valid.
Recognised accreditation bodies include:
| Country | Authority |
|---|---|
| Netherlands | RvA (Accreditation Council) |
| United Kingdom | UKAS |
| Germany | DAkkS |
| Belgium | BELAC |
| France | COFRAC |
All these bodies are members of the IAF (International Accreditation Forum). Certificates of IAF members are recognised worldwide through the MLA treaty.
7.2 Selection criteria
| Criterion | Why important |
|---|---|
| Accreditation | Without accreditation, your certificate may not be recognised |
| Industry experience | An auditor who knows your sector, understands your context |
| Price | Prices vary, compare at least three quotes |
| Accessibility | Short lines are nice for questions or problems |
| Reputation | Request references from similar companies |
7.3 Questions to ask
When comparing certifiers you can ask these questions:
- Are you accredited for ISO 9001? By whom?
- Do you have experience in my sector?
- What is included in the price? (travel costs, preliminary consultation, reporting)
- Who will be my permanent auditor?
- What is the lead time until the audit?
- How do you deal with deviations?
The right choice is not necessarily the cheapest. An auditor who understands your sector and provides constructive feedback is worth more than a few hundred euros in savings.
Read also: How do you choose the right certifier? 5 practical tips
8. Frequently asked questions about ISO 9001
What does ISO 9001 certification mean?
ISO 9001 certification means that an independent auditor has verified that your company works according to the international standard for quality management. You will receive a certificate that is valid for three years, with annual surveillance audits.
How much does an ISO 9001 certification cost?
For an SME (up to 25 employees), ISO 9001 certification costs €3,000 to €7,000 in the first year. This includes the certification audit (€2,500-4,000) and any guidance. After that, you pay €1,500 to €2,500 annually for surveillance audits.
How long does ISO 9001 certification take?
On average three to six months if you already work in a structured way. If you start from scratch, count on six to twelve months. The audit itself takes one to three days, depending on your company size.
How do you get an ISO 9001 certificate?
You first build a quality management system that meets the standard. You record this in procedures and work instructions. You then work according to this system for at least three months. You then hire an accredited certification body that carries out an audit. If you receive a positive result, you will receive the certificate.
Is ISO 9001 certification mandatory?
No, ISO 9001 is voluntary. There is no legal obligation. But many clients do require it as a condition for collaboration. ISO 9001 is often a requirement in tenders in construction, healthcare, IT and government contracts.
What is the difference between ISO 9001 and ISO 14001?
ISO 9001 is about quality management: do you consistently deliver what you promise? ISO 14001 is about environmental management: are you limiting your impact on the environment? The standards complement each other. Many companies combine both in an integrated management system.
Will there be a new version of ISO 9001?
Yes, ISO 9001:2026 is scheduled for September 2026. The Draft International Standard (DIS) was published in August 2025. Most important changes: more attention to sustainability, digitalisation and quality culture. After publication, you are expected to have three years to switch.
Can I arrange ISO 9001 certification myself?
Yes, many SMEs build their quality system themselves, without an external advisor. This will save you €2,000 to €8,000 in consultancy costs. It does take more of your own time. The certification audit must always be carried out by an external, accredited certifier.