ISO 9001 is the world's most widely used quality management standard, and in Australia it's often the difference between making a supplier list and being filtered out of one. But if you've never been through certification, the process can look opaque. This is what it actually involves.
What ISO 9001 certification really means
Certification is independent proof that your business runs a quality management system — a documented, consistent way of delivering your product or service — that meets the requirements of the ISO 9001 standard. An accredited certification body audits your system and, if it meets the mark, issues your certificate. It's not a one-off exam: certification is maintained through periodic surveillance audits.
Crucially, ISO 9001 is not about drowning in paperwork. A good system reflects how you already work at your best, and makes that repeatable across your team.
The steps to certification
However you approach it, the path looks broadly the same:
- Gap analysis — compare how you currently operate against what ISO 9001 requires, and identify what's missing.
- Build the system — document your processes, controls and records: quality policy, procedures, and the way you handle non-conformance and improvement.
- Implement it — put the system into day-to-day use so there's real evidence it works, not just a manual on a shelf.
- Internal audit and management review — check the system yourself and have leadership review it before the external audit.
- Certification audit — an accredited certification body audits your system in two stages and, if it's satisfied, issues your certificate.
Two ways to get there
The first is to do it yourself. It's possible, but for most small and mid-sized businesses it means one of your people learning the standard from scratch, writing the documentation, and running the project on top of their day job. It's slow, and it's easy to over-engineer the system.
The second is to have it done for you. This is what IMSM does: a dedicated Australian consultant runs the gap analysis, writes your documentation around how you actually work, and manages you through to the certification audit — for a single fixed fee agreed upfront. You stay focused on the business; the certification gets handled.
How long does it take, and what does it cost?
Both depend on the same things: the size of your organisation, how many sites you have, and how much you already do informally. A business that already controls its processes well has less to build than one starting from scratch. Rather than quote a generic timeline or price, we scope both against your actual situation — see what drives the cost of ISO certification for the detail.
Ready to see what ISO 9001 looks like for your business?
Get my fixed-fee quote →If you'd like a fixed-fee quote for ISO 9001 certification, tell us your headcount and what you do — we'll send an exact figure within 24 hours.