If you are wondering how to get ISO 9001 certified in the UK as a small business, this guide breaks down exactly what the process looks like.
Most small businesses I speak to are not short of motivation. They know why they might want ISO 9001, whether that’s to win contracts, meet client requirements or just get a bit more structure into how things are running. The problem is understanding what actually needs to happen to get there.
The reality is, it is not as complicated as it is often made out to be. But it does help to see it broken down into something that makes sense in the real world.
What ISO 9001 Certification Actually Means
At its simplest, ISO 9001 certification for small businesses means you have been assessed by an external body and shown to meet the requirements of a recognised quality management standard.
That sounds quite formal, but in practice it is about having clear processes, knowing how your business operates and being able to show that you are delivering consistently, literally what you do day to day.
For most small businesses, it is not about chasing a certificate for the sake of it. It is about putting something in place that supports how the business runs and stands up to external scrutiny.
How to Get ISO 9001 Certified in the UK: The Process Step by Step
If you strip it back, the process of getting ISO 9001 certified as a small business usually follows a clear path. It can be quite daunting, but I promise you it is possible.
It does not happen all at once and it is something not something to rush too much. It builds in stages.
1. Understand where you are now
This is the starting point. Looking at how your business currently runs, what you already have in place and what might be missing. Most businesses are further along than they think. The key thing here is to lean on an ISO consultant who can do a gap analysis for you or purchase the ISO 9001 standard.
2. Shape your processes into something consistent
This is where things start to take form. You are not creating a system from scratch, you are refining what already exists so it is clearer, more consistent and easier to follow.
You don’t have to have a documented system. The ISO 9001 standard talks about the business deciding what documents they need, but there need to be evidence that what the business is doing aligns the standard.
3. Put structure around it
At this stage, you are adding the bits that make it a proper management system. Things like responsibilities, records and a way of tracking how things are going. This is where it starts to feel more “ISO shaped”, but it should still reflect how your business actually works. Think of how you deal with compliants and non-conformances.
4. Start using it properly
This is the part that makes the difference. Your system needs to be part of your day to day operations, not something that sits in a folder. Your team understands it, uses it and knows what is expected. You need to make sure your team has an understanding of ISO.
5. Check everything before the audit
Before going for certification, you step back and review it. This usually includes an internal audit, which is just a structured way of checking that everything is working as it should. You can do it or an ISO consultant can. The standard says you cannot audit your own system which is when a consultant comes in handy here.
6. Go through certification (Stage 1 and Stage 2)
Stage 1 is a review of your system and your readiness and this is done by a certification body (look for UKAS accredited). Stage 2 is where the auditor looks at how things work in practice, also done by the same certification body. If everything is in place, you are recommended for certification. Of course, if you need help with knowing how to prepare as a small business for your ISO audit, I have written a blog for that here.
7. Maintain and improve
Certification is not the end. It is about keeping things working, improving where needed and making sure your system continues to support your business as it grows. ISO loves continual improvement. You will need to continue with your internal audits and reviews of documents.
Why Kent businesses choose a local ISO consultant
For small businesses in Kent, ISO 9001 certification is not just about ticking a box. It is about winning contracts, meeting client requirements and building something that actually supports how your business runs.
Working with a Kent-based ISO consultant means someone comes to you, gets to know your business and builds a system around how you actually operate, not a generic template handed over at the end of a video call. We can act us your Outsourced Compliance Manager.
Next Step Compliance has a 100% client certification pass rate. Every business we have worked with has achieved certification first time.
How Long Does It Take?
This is one of the first questions people ask, and the honest answer is that it depends. For a small business starting from scratch, it is often somewhere in the region of a few months. Sometimes quicker, sometimes longer, depending on how much time you can realistically dedicate to it and how complex your business is. It is not about rushing it. It is about getting something in place that actually works. Make sure you watch out for people guaranteeing speedy certification.
Do You Need Help With It?
Some businesses do go through the process on their own. Others choose to work with an ISO consultant because it helps them move faster, avoid overcomplicating things and feel more confident when it comes to audits.
A good consultant should not be there to overwhelm you with paperwork. They should help you make sense of the standard and shape it around your business so it feels manageable.
If you are not sure what that looks like in practice, it might help to read a bit more about what an ISO consultant actually does and how they support businesses through the process.
There are so many good reasons to work with a local ISO consultant: –
- Someone who is local to Kent and can answer your ISO 9001 questions face to face or over the phone, who gets to know your business.
- A bespoke Quality Management System (QMS) for your business or bespoke upport for your existing system.
- Confidence that you are ready for your ISO 9001 certification audit, knowing you have had expert ISO support or if you have it already, not having to worry about audits moving forwards
- Guidance from your very own ISO consultant
If you are based in Kent and trying to work out whether ISO 9001 is the right step for you, or what the process would actually look like, I am always happy to have a straightforward conversation.
FAQ
How much does ISO 9001 certification cost for a small business in the UK?
ISO 9001 certification costs for a small business in the UK typically split into two parts: the certification body fees and, if you use one, a consultant’s fees. Certification body fees start at around £2,000 for the initial Stage 1 and Stage 2 audits, but the exact figure is calculated using a standard formula based on your number of employees, full-time equivalents, number of sites and how many standards you’re certifying against.
Do I need a consultant to get ISO 9001 certified?
My honest answer? No. There is nothing in the ISO 9001 standard that requires you to use a consultant, and plenty of businesses go through the certification process on their own. Where consultants tend to add real value for small businesses is the internal audit requirement; the standard says you cannot audit your own system, and most small businesses don’t yet have a dedicated quality manager to do this. A consultant can step into that role. Beyond that, a good ISO 9001 consultant brings day-to-day experience of what certification bodies actually want to see, which helps you avoid overcomplicating things and feel confident going into your audit. Whether you need one really depends on how much time you have and how comfortable you feel navigating the standard yourself.
Which certification body should I use for ISO 9001 in the UK?
When choosing an ISO 9001 certification body in the UK, the first thing to check is whether they are UKAS accredited. I only ever recommend UKAS accredited certification bodies to my clients. UKAS accreditation means the entire certification process is standardised and independently overseen, which gives your clients genuine confidence in your certificate; particularly if you are tendering for public sector contracts or working with larger organisations who will check.
Beyond accreditation, here is what to compare when getting quotes: –
- Price and what is included – some certification bodies charge for auditor travel and hotel expenses on top of their fees, while others offer an all-inclusive price. Make sure you are comparing like for like.
- Ongoing costs – certification is not a one-off. Budget for annual surveillance audits and a full recertification audit every three years.
- Whether they offer consultancy – a UKAS accredited certification body is not permitted to offer consultancy alongside certification, and for good reason. If the same organisation builds your system and certifies it, the independence of the audit is compromised. It brings far less value to your business than having those two roles kept separate.
Can a very small business or sole trader get ISO 9001 certified?
Absolutely! There is no minimum size requirement for ISO 9001 certification and sole traders and micro businesses achieve it regularly.
That said, my first question to any very small or micro business is always: why do you want it? Not to put you off, but because ISO 9001 is a real financial investment and it needs to deliver a real return.
For a sole trader or micro business, that usually means one of a few things: you are losing out on contracts because clients are asking for it, you are trying to get onto a tender framework that requires it or you want to scale and need the structure it brings. If any of those apply, it is absolutely worth pursuing.
If you are considering it because it seems like a good idea or you feel you should have it, it is worth having an honest conversation first. The cost of certification; audit fees, ongoing surveillance and consultant support if you need it, needs to be justified by the work it will bring you or the growth it will enable. For the right micro business it absolutely can be. I just want to make sure it is the right fit before anyone commits to it.
How long does ISO 9001 certification take for a small business?
For a small business starting from scratch, the process typically takes somewhere between three and six months. Sometimes quicker, sometimes longer. It really depends on how much time you can realistically dedicate to it and how complex your business operations are. The biggest factor I see is usually time rather than complexity. Businesses that can give it consistent attention move through it faster than those fitting it around an already stretched workload. It is not about rushing it. It is about getting something in place that actually works and will stand up to scrutiny at audit.
What is the difference between a Stage 1 and Stage 2 audit?
Both stages are carried out by your chosen UKAS accredited certification body. Stage 1 is essentially a readiness review, the auditor looks at your quality management system documentation and checks whether your business is ready to move to the full audit. They are not expecting perfection at this stage, but they need to see that your system is sufficiently developed and that you understand the requirements of ISO 9001. Stage 2 is where they come in and look at how everything works in practice. They will speak to your team, observe your processes and verify that what your documentation says actually reflects how your business operates day to day. If everything is in order, you are recommended for certification at the end of Stage 2.
Do I need ISO certification to work with the NHS?
The best place to answer whether you need ISO 9001 for working as a supplier in the NHS and how to get ISO certification as a NHS supplier,read this blog here.
