ISO 9001 for a small business: a realistic roadmap
The steps between deciding to get certified and holding a certificate, and what happens after.
ISO 9001 sets out the requirements for a quality management system: a documented, consistent way of running your business so that customers get what they were promised. Certification is often requested in tenders and by larger buyers.
Who actually issues the certificate
Certificates are issued by certification bodies, which are themselves accredited to audit against the standard. A consultant prepares you; the certification body audits you. Keep the two separate: a body that both writes your system and certifies it has a conflict of interest.
The roadmap
- Agree the scope. Which sites, products and services the system will cover.
- Gap analysis. Compare how you work today with each requirement of the standard.
- Build the system. Write the quality policy, objectives and the procedures and records you need. Keep it as lean as the standard allows.
- Run it. Use the system in daily work long enough to produce real records.
- Internal audit and management review. Check the system works and fix what does not.
- Stage 1 audit. The certification body reviews your documents and readiness.
- Stage 2 audit. The body checks the system is working in practice. Close any findings, and the certificate follows.
After certification
A certificate is usually valid for three years. Expect surveillance audits in between, typically once a year, and a recertification audit before it expires. The system has to keep running between audits.
If you are considering certification, see how we help.