The question we hear most from owners and quality managers is simple: how long until we can get the certificate on the wall? The honest answer is: it depends on where you’re starting and how quickly your team can embed the system. The good news is there’s a clear path, and you can plan it with your diary and milestones in mind.
If you’re weighing up timing alongside benefits, our ISO 9001:2015 certification page covers the process at a glance. Below, I’ll give you a realistic timeline and the factors that usually speed things up—or slow them down.
What really determines the timeframe?
Time to certification isn’t just about documents. Auditors look for evidence that your processes actually work in practice. That means real records, improvement actions and staff who can explain how they do their jobs. The timeline is driven by a handful of practical factors.
- Your starting point: A mature QMS already used day-to-day can be certified quickly; a brand-new system needs time to bed in.
- Scope and complexity: One site and a straightforward service is faster than multiple sites, design, special processes or regulated activities.
- Resources and decision-making: Dedicated project time and quick approvals move things along; stretched teams make slower progress.
- Evidence of use: You’ll need internal audits, a management review and corrective actions completed. These take calendar time, not just effort.
- Audit scheduling: Certification body diaries get busy, especially around year-end and summer. Early booking avoids gaps.
A practical timeline you can plan to
Let’s take a typical first-time certification for an SME (say 20–100 people, one UK site, low-to-medium complexity). If you’re starting from scratch, a realistic project runs across a few months so you can build the system and show it working. Here’s how that often looks in practice.
First-time certification (brand-new system)
- Weeks 1–2: Gap assessment against ISO 9001, project plan, decide scope and key measures; nominate process owners.
- Weeks 3–8: Map core processes, write only the procedures you genuinely need, roll out document control and train teams.
- Weeks 6–10: Operate the system and generate records (orders, production/service delivery, inspections, nonconformities, supplier checks).
- Weeks 8–10: Conduct internal audits of core processes and raise corrective actions where needed.
- Weeks 10–12: Hold your management review, agree improvement actions and assign owners and deadlines.
- Book Stage 1: Allow lead time to secure your preferred dates; some organisations book this in parallel once internal audits are scheduled.
From the day you decide to proceed to the end of Stage 2, many first-timers manage it in roughly three to six months. Compressing it to eight to twelve weeks is possible with focused effort and clear leadership, but only if you can produce credible records and complete internal audits and management review in that window.
If your system is already mature
If you’ve run a QMS for some time—perhaps aligned to ISO 9001 but not yet certified—your path is much shorter. You’ll tighten up documentation, ensure internal audits and management review are recent and effective, then move to audit. From application to certificate, four to eight weeks is common, shaped mainly by scheduling and how quickly you can address any findings.
Multi-site or higher-risk processes
Multiple sites mean additional audit time and coordination. Design, complex manufacturing, or regulated services add depth to the audit and to your preparation. That doesn’t make certification hard; it just adds steps. Build in extra weeks for site sampling, training consistency and evidence gathering across locations.
The certification audit itself: what happens and how long it takes
The audit phase has two stages. The time here is a combination of audit duration, any actions you need to close, and the certification decision process.
Stage 1 (readiness review)
Stage 1 checks your documented system and readiness for Stage 2. For a small to mid-size organisation, it’s typically a short, focused review—sometimes remote, sometimes on site. Expect feedback on what’s ready and what gaps to close before Stage 2. You’ll leave with clear actions and a proposed plan for the main audit.
Stage 2 (certification audit)
Stage 2 is on site and tests how the QMS works in practice. For SMEs, it often runs across one to a few days, depending on headcount and complexity. Auditors sample processes end-to-end—sales to delivery, purchasing to goods-in, competence, equipment, nonconformity handling, and improvement. If we raise nonconformities, you’ll provide corrective actions and evidence. Minor issues are usually closed with documented actions; significant ones may require evidence of implementation before a certificate can be recommended.
Decision and certificate
After Stage 2 and closure of any findings, your audit file goes through an independent review and certification decision. Allow a short period for this administrative step. If everything is complete and clear, certificates are issued promptly and you enter the surveillance cycle.
The end-to-end steps at a glance
- Define scope, project plan and measures; choose your certification body and pencil in dates.
- Build and operate the QMS; complete internal audits, corrective actions and management review.
- Stage 1 audit; address readiness actions and confirm Stage 2 plan and dates.
- Stage 2 audit; implement corrective actions and submit evidence where needed.
- Certification decision; receive certificate and agree your surveillance schedule.
Two points often make or break timelines here. First, booking early avoids gaps between Stage 1 and Stage 2. Second, closing findings quickly depends on having practical corrective actions and owners who are not juggling too many other priorities.
Common delays (and how to avoid them)
- Over-documenting: Writing a procedure for everything slows you down and confuses people; document only what adds control or clarity.
- Skipping the essentials: Internal audits and a management review must be completed before Stage 2; don’t treat them as tick-boxes at the end.
- Thin evidence: Auditors look for records that show the system is used; build routine logs, checks and actions into daily work early.
- Lone-wolf quality: Quality managers can’t do this alone; involve process owners so improvements stick and audit interviews go smoothly.
- Late booking: Popular audit windows fill up; agree provisional dates as soon as you know your internal audit schedule.
- Corrective actions without causes: Fixing symptoms leads to repeat findings; use simple root-cause tools and verify effectiveness.
Ways to speed up without cutting corners
- Give it a project owner and a cadence: Weekly stand-ups, a visible action log, and clear deadlines keep momentum.
- Start with a tidy scope: Certify the core of your business first; add services or sites once the system is stable.
- Use plain language: Keep procedures short and match them to how work is really done; this reduces retraining and audit friction.
- Train internal auditors early: Audits done by peers uncover practical issues fast and build confidence before Stage 2.
- Run management review ahead of Stage 1: It shows leadership involvement and often surfaces actions you can close quickly.
- Choose your certification body early: Align diaries for Stage 1 and Stage 2 to avoid month-long gaps.
Some organisations bring in a consultant to compress timelines and bring structure. That can help, but remember: you can’t outsource leadership, risk-based thinking or ownership of processes. Auditors will talk to the people who do the work. The system must be yours.
After certification: keeping pace
Your certificate marks the start, not the end. You’ll have surveillance audits in years one and two to check the system continues to work and improve. Keeping internal audits regular, acting on measures, and closing actions promptly means surveillance is straightforward—and it makes future changes, such as adding sites or scope, much faster.
If you’d like a clear view of what your own timeline could look like, we’re happy to talk it through. Share your scope, sites and current QMS status, and we’ll outline realistic dates and what to prepare first. No hard sell—just practical guidance from auditors who see this every week.