How to Get ISO 9001 Certified in the UK Without a Consultant
ISO 9001 certification costs most UK SMEs between £10,000 and £18,000 when using a consultant. It doesn't have to. This guide explains exactly what ISO 9001 requires, what it costs, how long it takes, and how to do it yourself — in plain English.
What is ISO 9001 and why do you need it?
ISO 9001 is the world's most recognised quality management standard. It provides a framework for consistently delivering products and services that meet customer requirements, and for continuously improving how your business operates.
Most UK SMEs pursue ISO 9001 for one of three reasons:
- A customer or contract requires it — large enterprises and public sector bodies increasingly make ISO 9001 a condition of doing business
- Tendering for public sector contracts — government procurement processes frequently list it as a minimum requirement
- Improving internal operations — the standard forces a level of process discipline that most growing businesses benefit from
Worth knowing: ISO 9001 is not legally required in the UK. But without it, many businesses find themselves excluded from tender processes or unable to join enterprise supply chains.
What does ISO 9001 actually require?
The standard is built around ten clauses structured under the High Level Structure (Annex SL). The requirements that matter most in practice are:
- Context of the organisation — understanding your business, its stakeholders, and the issues that affect your objectives
- Leadership — demonstrating that senior management is genuinely committed to the quality management system
- Risk-based thinking — identifying risks and opportunities with documented plans to address them
- Documented information — the policies, procedures, and records that prove your system is working
- Performance evaluation — internal audits, management reviews, and customer satisfaction measurement
- Continual improvement — non-conformance tracking and corrective action processes
How much does ISO 9001 certification cost in the UK?
Costs vary significantly depending on your approach. Here is a realistic breakdown for a small business with 10–50 employees:
| Approach | Preparation | Certification audit | Total year 1 |
|---|---|---|---|
| Full consultant | £8,000–£12,000 | £3,000–£6,000 | £11,000–£18,000 |
| DIY with software | £500–£1,500 | £3,000–£6,000 | £3,500–£7,500 |
| Fully DIY | Internal time only | £3,000–£6,000 | £3,000–£6,000 |
The certification audit cost is largely fixed — you need a UKAS-accredited certification body regardless of approach. What varies dramatically is the preparation cost, and that is where most businesses overspend.
How long does ISO 9001 certification take?
Most businesses take between 3 and 12 months. The timeline depends almost entirely on how much time you can dedicate to it.
- Gap analysis (2–4 weeks) — understanding where you are vs where you need to be
- Documentation (6–16 weeks) — writing your policies, procedures, and work instructions
- Implementation (4–8 weeks) — embedding the system and gathering evidence
- Internal audit (1–2 weeks) — checking your own system before the certification body arrives
- Stage 1 audit (1 day) — the certification body reviews your documentation
- Stage 2 audit (1–2 days) — the certification body visits and verifies implementation
- Certificate issued — typically 2–4 weeks after a successful Stage 2
What documents do you actually need?
A certification auditor will expect to see at a minimum:
- Quality Policy and Quality Objectives
- Scope of the Quality Management System
- Risk and Opportunity Register
- Competence and Training Records
- Documented processes for core business activities
- Supplier Evaluation and Control Procedure
- Non-Conformance and Corrective Action Procedure
- Internal Audit Programme and Records
- Management Review Minutes
For a small business this typically means writing and maintaining between 15 and 30 individual documents. This is where most of the time goes — and where consultants add most of their cost.
The Annex SL advantage: If you are also pursuing ISO 14001 or ISO 45001, roughly 70% of these documents overlap. Writing them once and mapping them across all three standards simultaneously is significantly more efficient than treating each as a separate project.
How to choose a certification body
Your certification body must be UKAS-accredited to issue internationally recognised certificates. When comparing bodies, always ask for quotes covering Stage 1 and Stage 2 audits, annual surveillance visits for years 1 and 2, and recertification at year 3. Pricing varies significantly — getting three quotes before committing is strongly recommended.
The ongoing commitment after certification
ISO 9001 is not a one-time achievement. Your certificate is valid for three years, but certification bodies conduct annual surveillance audits in years 1 and 2. At a minimum you need to conduct at least one internal audit per year, hold at least one management review, keep documents reviewed and up to date, and log and address non-conformances as they arise.
This is where many businesses struggle. Getting certified is a project with a clear end point. Staying certified is an ongoing operational discipline that most businesses underestimate.
Check your ISO 9001 readiness — free
Answer five plain English questions and get a personalised gap analysis showing exactly where you stand.
Check my readiness →