How much does ISO 9001 certification cost?
There is no list price for ISO 9001. The number on your quote is built from audit days, your organisation's size and complexity, how much of the system already exists, and how much outside help you need to close the gap.
ISO 9001 certification cost splits into four buckets: certification-body audit fees (Stage 1 + Stage 2, then annual surveillance), consulting or readiness support, internal staff time, and small recurring items like software and training.
Audit-day counts are not arbitrary — accredited certification bodies price them against the IAF MD 5 mandatory duration tables, driven by effective headcount, number of sites and process complexity. Everything else on the quote is negotiable; the audit days largely are not.
For most 20–200 person organisations, plan on a two- to six-month readiness programme and a three-year certification cycle rather than a one-off purchase.
- 01Certification is priced per audit day, and audit days scale with effective headcount, sites and scope complexity.
- 02Budget across three years: Stage 1 + Stage 2 in year one, then two surveillance audits, then recertification.
- 03Readiness effort — not the certificate — is where most of the real cost sits.
- 04The cheapest quote is often an unaccredited certificate that your customers will not accept.
The four things you are actually paying for
| Cost bucket | What it covers | How it is priced |
|---|---|---|
| Certification body audit | Stage 1 readiness review, Stage 2 certification audit, certificate issue and registration. | Per auditor-day, from the IAF MD 5 duration table for your effective headcount and scope, plus auditor travel. |
| Surveillance & recertification | Annual surveillance audits in years two and three, then a full recertification audit. | Roughly a third to half of the initial audit days per surveillance visit; recertification is close to a Stage 2. |
| Readiness / consulting | Gap analysis, documentation, process change, internal audit cycle, management review, mock Stage 2. | Fixed-scope programme or day rate — the one line you control most directly. |
| Internal effort | Process owners' time writing and running procedures, training, records, corrective action. | Usually the largest hidden cost: loaded hourly rate × hours across the readiness window. |
What moves your number up or down
Effective headcount
Audit duration is driven by the number of people performing work in scope — part-time and shift staff count proportionally, not per head.
Number of sites
Multi-site operations add days. A defensible multi-site sampling plan under IAF MD 1 can cut them significantly.
Scope complexity
Design responsibility, regulated products, welding and special processes, and outsourced work all extend audit time.
System maturity
An organisation with real procedures, records and an audit history closes gaps in weeks; one starting from scratch needs months.
Integration
Adding ISO 14001, 45001 or 27001 on a combined audit cycle costs less than certifying each standard separately.
Findings at Stage 2
Major non-conformances trigger follow-up audit days — the single most avoidable cost line on the whole programme.
A realistic two-to-six month path to certification
- Step 01Output: gap report + plan
Weeks 1–3 · Gap analysis
Clause-by-clause assessment against ISO 9001:2015, scope definition and a prioritised remediation plan. This is also where the audit-day estimate firms up, because scope and effective headcount are settled here.
- Step 02Output: procedures + records in use
Weeks 3–10 · Remediation
Close the gaps with usable documented information and real process change — context, risk, competence, control of outputs, supplier control. Run the system long enough to generate genuine records; auditors sample evidence, not intentions.
- Step 03Output: audit reports, CAPA, review minutes
Weeks 8–14 · Internal audit and management review
A full internal audit cycle (Clause 9.2) and a management review with all required inputs (Clause 9.3). Both are mandatory evidence — a certification body cannot grant a certificate without them.
- Step 04Output: Stage 1 report
Weeks 12–16 · Stage 1
The certification body reviews documentation and readiness, usually on site or remotely for one to two days, and issues areas of concern to close before Stage 2. Typically four to eight weeks separate the stages.
- Step 05Output: ISO 9001 certificate, 3-year cycle begins
Weeks 16–26 · Stage 2 and certificate
Full conformity audit against every clause and process in scope. Minor non-conformances need a corrective action plan; majors need evidence of closure, sometimes verified by a return visit. Certificates are typically issued two to six weeks after closure.
Budget the cycle, not the certificate
| Year | Certification body activity | Your effort |
|---|---|---|
| Year 1 | Stage 1 + Stage 2 audit, certificate issue. | Readiness programme, first internal audit cycle, first management review. |
| Year 2 | Surveillance audit (partial scope). | Internal audits, management review, CAPA closure, supplier re-evaluation. |
| Year 3 | Surveillance audit (partial scope). | Same cycle, plus preparation for recertification. |
| Year 4 | Recertification audit (near full scope). | Full evidence refresh and system review before the cycle restarts. |
Five ways to spend less without weakening the system
If you want to see what the auditor will actually look for, work through our clause-by-clause ISO 9001 internal audit checklist and the practitioner's guide to running the audit — both are the same evidence set a certification body samples at Stage 2.
The certificate is the cheap part.
Organisations that treat ISO 9001 as a purchase spend the least in year one and the most over three years — re-audits, repeat findings, and a system nobody uses that still has to be maintained.
Organisations that treat it as a readiness programme spend more up front on gap analysis, internal audit capability and a mock Stage 2, then run a quiet three-year cycle with no surprise audit days. That is the version we build.
- IAF MD 5 — Determination of Audit Time ↗International Accreditation Forum
- ISO 9001:2015 — Quality management systems ↗ISO
Questions we get on this topic
How much does ISO 9001 certification cost?
There is no fixed price. Total cost is built from certification-body audit days (Stage 1 + Stage 2), annual surveillance audits across the three-year cycle, readiness or consulting support, and internal staff time. Audit days are set by IAF MD 5 duration tables based on your effective headcount, number of sites and scope complexity, so a small single-site service company pays a fraction of what a multi-site manufacturer with design responsibility pays. Ask certification bodies to quote audit days and travel separately so you can compare offers directly.
How long does ISO 9001 certification take?
Most organisations reach Stage 2 in two to six months. A company with documented procedures, records and some audit history can be ready in eight to ten weeks; one starting from limited documentation typically needs four to six months to build the system and generate enough real evidence for auditors to sample. Stage 1 and Stage 2 are usually four to eight weeks apart, and certificates are issued two to six weeks after non-conformances are closed.
What are the ongoing costs after certification?
Certification runs on a three-year cycle: a surveillance audit in each of years two and three, then a recertification audit close to the size of the original Stage 2. Surveillance visits are typically a third to a half of the initial audit days. Internally, you continue to fund internal audits, management review, corrective action and competence records — the evidence surveillance audits sample.
Do I need a consultant to get ISO 9001 certified?
No — the standard does not require one, and certification bodies cannot consult on the system they audit. A consultant is worth it when you lack an independent, qualified internal auditor, when a client deadline is fixed, or when nobody in the business has taken a system through Stage 2 before. The measurable return is avoided major non-conformances and follow-up audit days.
Why are some ISO 9001 quotes so much cheaper?
Usually because the certificate is unaccredited, or the quote understates audit days by using headcount rather than effective headcount in scope. Check that the certification body is accredited by an IAF-recognised member such as ANAB, SCC or UKAS, and check the audit-day count on the proposal. Customers increasingly verify accreditation at pre-qualification.
Does the cost change if we certify to ISO 14001 or 45001 as well?
Yes, but less than certifying separately. Integrated management systems audited on a combined cycle share context, leadership, competence, internal audit and management review evidence, so certification bodies apply a duration reduction rather than adding two full audits.
Want a costed ISO 9001 readiness plan?
Send us your scope, sites and headcount — we'll return a clause-level gap view and a realistic cost and timeline for certification within one business day.