ISO 9001 Certification Process Overview
The ISO 9001 certification process follows a structured sequence: gap analysis, QMS implementation, selecting a certification body, Stage 1 audit (documentation review), Stage 2 audit (on-site assessment), certificate issuance, and ongoing surveillance audits. For ISO 9001:2026, the process is the same as ISO 9001:2015 but with updated requirements to address.
ISO 9001 Certification Process: Step 1 — Gap Analysis
The first step in the ISO 9001 certification process is a gap analysis: a systematic comparison of your current quality management practices against ISO 9001:2026 requirements.
What a gap analysis covers:
- Clause 4: Is your organizational context documented? Have you identified interested parties?
- Clause 5: Does top management demonstrate active leadership? Is a quality policy in place?
- Clause 6: Are risks and opportunities identified and addressed? Are quality objectives set?
- Clause 7: Are competence requirements defined? Is documented information controlled?
- Clause 8: Are operational processes planned and controlled?
- Clause 9: Is internal audit and management review in place?
- Clause 10: Is there a corrective action process?
New in ISO 9001:2026 — check these additional gaps:
- Quality culture and ethical behaviour (Clause 5.1.1) — is this actively promoted by top management?
- Opportunities register (Clause 6.1.3) — are improvement opportunities formally identified?
- Climate change consideration (Clause 4.1) — is this documented in your context analysis?
A gap analysis typically takes 1–3 days for a small organization and produces a prioritized action list. Use the ISO 9001:2026 Gap Analysis TemplateISO 9001:2026 Gap Analysis Template/resources/gap-analysis-template to structure your assessment.
ISO 9001 Certification Process: Step 2 — QMS Implementation
Stay Current
ISO 9001:2026 publishes September 16, 2026. Get weekly briefings.
Based on the gap analysis, implement the missing elements of your quality management system. This is typically the longest phase of the ISO 9001 certification process.
Key implementation activities:
- Write or update the quality policy and quality objectives
- Document processes (process maps, procedures, work instructions)
- Establish documented information control (document register, version control)
- Implement risk and opportunity management
- Set up competence records and training plans
- Establish internal audit programme
- Conduct management review
Typical implementation timelines:
| Organization size | Implementation time |
|---|---|
| Small (under 50 employees) | 3–6 months |
| Medium (50–250 employees) | 6–12 months |
| Large (250+ employees) | 12–18 months |
| Multi-site organizations | 18–24 months |
These timelines assume starting from scratch. Organizations with an existing QMS (e.g., transitioning from ISO 9001:2015) typically need 3–6 months.
ISO 9001 Certification Process: Step 3 — Selecting a Certification Body
Choose an accredited certification body (CB) before your Stage 1 audit. Key selection criteria:
Accreditation: The CB must be accredited by an IAF-recognized accreditation body (e.g., UKAS, DAkkS, ANAB, IAS). Accreditation ensures the certificate is internationally recognized.
Industry experience: Some CBs specialize in specific sectors. For manufacturing, consider BSI, Bureau Veritas, or SGS. For smaller organizations, NQA or OKGlobal may offer more competitive pricing.
Geographic coverage: If you have multiple sites, confirm the CB can audit all locations.
Cost: Certification costs vary significantly. See the ISO 9001 Certification Cost GuideISO 9001 Certification Cost Guide/article/iso-9001-2026-certification-cost-guide for benchmarks.
Transfer: If you are already certified to ISO 9001:2015 and want to switch CBs, you can transfer your certificate without starting the certification process from scratch.
ISO 9001 Certification Process: Step 4 — Stage 1 Audit (Documentation Review)
The Stage 1 audit is a desktop review conducted by your certification body. The auditor reviews your QMS documentation to assess readiness for the Stage 2 audit.
What auditors check in Stage 1:
- Quality manual or equivalent documentation of QMS scope
- Quality policy and objectives
- Process documentation and procedures
- Documented information control procedures
- Internal audit records and management review minutes
- Risk register and opportunity log
Stage 1 outcomes:
- Ready to proceed: No significant gaps found — Stage 2 scheduled
- Minor issues: Proceed with conditions — address specific gaps before Stage 2
- Major issues: Stage 2 delayed — significant rework required
Stage 1 is typically conducted on-site or remotely (remote Stage 1 audits became standard practice post-2020). Duration: half a day to one day.
ISO 9001 Certification Process: Step 5 — Stage 2 Audit (Certification Audit)
The Stage 2 audit is the main certification audit. Auditors visit your site(s) to verify that your QMS is implemented and effective, not just documented.
What auditors check in Stage 2:
- Evidence that processes are operating as documented
- Records demonstrating QMS effectiveness (audit reports, management review minutes, corrective action records)
- Interviews with staff at all levels to verify awareness and competence
- Observation of processes in operation
- Compliance with all ISO 9001:2026 "shall" requirements
Audit findings:
- Conformity: No issues found
- Observation: Potential improvement identified (not a requirement)
- Minor nonconformity: Requirement not fully met — corrective action required within 90 days
- Major nonconformity: Requirement significantly not met — certificate cannot be issued until resolved
Stage 2 duration: Typically 1–3 days depending on organization size and complexity. Multi-site organizations require proportionally longer audits.
ISO 9001 Certification Process: Step 6 — Certificate Issuance
If the Stage 2 audit results in no major nonconformities (or all major nonconformities are resolved), the certification body issues an ISO 9001 certificate.
Certificate details:
- Certificate number and issue date
- Standard: ISO 9001:2026 (after September 16, 2026)
- Scope statement (what products/services and locations are covered)
- Accreditation body mark
- Expiry date (3 years from issue)
- Certification body name and logo
Certificate validity: ISO 9001 certificates are valid for 3 years, subject to annual surveillance audits.
ISO 9001 Certification Process: Step 7 — Surveillance Audits
After certification, your CB conducts annual surveillance audits to verify ongoing compliance.
Surveillance audit schedule:
- Year 1: Surveillance audit (typically 6–12 months after certification)
- Year 2: Surveillance audit
- Year 3: Recertification audit (full re-assessment)
What surveillance audits cover:
- Follow-up on previous nonconformities and observations
- Internal audit programme effectiveness
- Management review outcomes
- Customer complaints and corrective actions
- Changes to the organization or QMS
- Rotating coverage of all clauses over the 3-year cycle
Failure to maintain compliance during surveillance can result in suspension or withdrawal of the certificate.
ISO 9001 Certification Process: Costs
| Phase | Typical cost (small organization) | Typical cost (medium organization) |
|---|---|---|
| Gap analysis (external consultant) | $1,500–$5,000 | $5,000–$15,000 |
| QMS implementation (consultant) | $5,000–$20,000 | $20,000–$60,000 |
| Stage 1 audit | $500–$1,500 | $1,500–$3,000 |
| Stage 2 audit | $2,000–$6,000 | $6,000–$15,000 |
| Certificate issuance | Included in audit fee | Included |
| Annual surveillance | $1,500–$4,000 | $4,000–$10,000 |
Total first-year cost (small organization): $10,000–$30,000. See the full ISO 9001 Certification Cost GuideISO 9001 Certification Cost Guide/article/iso-9001-2026-certification-cost-guide for detailed benchmarks.
ISO 9001 Certification Process for ISO 9001:2026 Transition
If you are already certified to ISO 9001:2015, the transition to ISO 9001:2026 follows a simplified process:
- Gap analysis against ISO 9001:2026 — identify the three new requirements
- Implement new requirements — quality culture, opportunities register, climate change consideration
- Update documented information — revise quality manual, procedures, and records as needed
- Transition audit — your CB conducts a transition audit (typically combined with a surveillance audit)
- New certificate issued — certificate updated to reference ISO 9001:2026
The transition deadline is September 2029 (three years from publication). Organizations must transition before their current ISO 9001:2015 certificate expires or by September 2029, whichever comes first.
See the ISO 9001:2026 Transition GuideISO 9001:2026 Transition Guide/article/how-to-transition-iso-9001-2015-to-2026 for a detailed transition roadmap.
Frequently Asked Questions
How long does ISO 9001 certification take?
From gap analysis to certificate issuance: 6–18 months for a new certification, 3–6 months for a transition from ISO 9001:2015.
Can you get ISO 9001 certified without a consultant?
Yes. Many small organizations self-implement ISO 9001 without external consultants. The standard is available from ISO.org. However, consultants typically reduce implementation time and improve first-attempt pass rates.
What happens if you fail the Stage 2 audit?
If major nonconformities are found, the CB cannot issue a certificate. You must address the nonconformities and either have a follow-up audit or re-schedule Stage 2. Minor nonconformities allow certification with a corrective action plan.
Is ISO 9001 certification mandatory?
ISO 9001 certification is voluntary in most industries. However, many customers, government contracts, and regulated sectors require it as a condition of doing business.
How do you maintain ISO 9001 certification?
By passing annual surveillance audits and a recertification audit every three years. Maintaining your QMS, conducting internal audits, and holding management reviews are the key ongoing requirements.
Related Resources
- ISO 9001:2026 Gap Analysis TemplateISO 9001:2026 Gap Analysis Template/resources/gap-analysis-template — free PDF for your gap analysis
- ISO 9001 Compliance Checklist 2026ISO 9001 Compliance Checklist 2026/article/iso-9001-compliance-checklist-2026 — clause-by-clause requirements
- ISO 9001 Certification Cost GuideISO 9001 Certification Cost Guide/article/iso-9001-2026-certification-cost-guide — cost benchmarks
- Certification Body ComparisonCertification Body Comparison/resources/certification-bodies — compare BSI, Bureau Veritas, NQA, OKGlobal
- ISO 9001:2026 Transition GuideISO 9001:2026 Transition Guide/article/how-to-transition-iso-9001-2015-to-2026 — transition from ISO 9001:2015