Quality management
ISO 9001 certification
The most widely held management system standard, and usually the first one an organization certifies. ISO 9001:2015 is the current certifiable version. The 2026 revision is targeted for publication in September 2026.
- 2015The version to certify to
- Sept 2026Next revision publishes
- 8Areas that generate findings
- 100+ISO certifications delivered
ISO 9001:2026 was published on 16 September 2026. That starts a three-year transition, so ISO 9001:2015 certificates stay valid until around September 2029.
The part most people miss: certification bodies need nine to twelve months to become accredited against a new edition, so the first ISO 9001:2026 certificates realistically arrive in mid-2027. Waiting doesn't get you the new standard sooner — it gets you nothing for about a year.
- ISO 9001:2015 — still certifiable, valid to about September 2029
- ISO 9001:2026 — published, but not yet auditable by most registrars
- Climate amendment in force since February 2024
- Evolutionary revision: same clause structure, same process approach
ISO 9001 sets the requirements for a quality management system: how you determine what customers need, control the processes that deliver it, measure whether it worked, and correct it when it doesn't. It is not a product standard and says nothing about how good your product must be. It asks whether you can consistently deliver what you promised, and prove it.
With over a million certificates issued worldwide it's the most recognised management system standard in existence, which is why it's usually what a customer means when they say "are you ISO certified?"
Who needs it
Choose ISO 9001 if
Most organizations arrive here for one of four reasons, and the reason changes how we scope the work.
- A customer or tender asked for it. The most common trigger. Scope follows what they actually require.
- Defects, rework or inconsistency are costing money. Here the system is the point, not the certificate.
- Processes live in people's heads. Common in growing companies, and dangerous when someone leaves.
- You need a QMS under R2v3 Appendix C or F. Test and repair, or brokering. RIOS is the alternative.
The eight areas that generate most findings
Drawn from reviewed nonconformities across client audit reports. The pattern is consistent: findings are rarely product failures, they're maintenance failures — the work happened, but it can't be evidenced.
Clause 4.1 & 4.2 — In force since February 2024
Climate change is already a requirement
The Amd 1:2024 climate amendment was applied to 31 ISO management system standards on 23 February 2024 with no transition period. Clause 4.1 requires you to determine whether climate change is a relevant issue for your context. Clause 4.2 adds a note that interested parties may have climate-related requirements. The trap is documentation: record the assessment even where your conclusion is that it is not relevant, because auditors want evidence you considered it.
Clause 9.2
Internal audit process issues
Records missing, incomplete or not retained, or auditor objectivity lost because the person auditing owns the process. In a small organization that independence is genuinely hard, which is why it recurs.
Clause 9.3
Management review not effective
Late, reused from a prior year, or missing required inputs and outputs. Worth fixing now regardless: the 2026 revision makes these inputs more prescriptive.
Clause 6.1
Risk and opportunity actions not tracked
Risks identified, but actions never assigned, tracked or reviewed for effectiveness. A risk register nobody revisits is a finding waiting to happen.
Clause 7.5
Documented information gaps
Outdated master document list, uncontrolled forms in circulation, or records that can't be located during the audit.
Clause 8.4
Supplier control issues
Evaluations or re-evaluations out of date, or approval and monitoring criteria never defined at all.
Clause 8.2.3
Contract review records missing
Customer requirements genuinely reviewed, but informally, so no evidence is retained that the review happened.
Clause 6.2 & 9.1
Objectives and KPIs not maintained
Objectives exist, but current data, trend analysis and follow-up evidence are incomplete.
Free download
The 45-point readiness checklist
The same checklist we run on a first engagement. Forty-five items across nine sections, scored Yes / Unsure / No, with an evidence prompt for every item and the seven common finding areas written out with their clause references.
Fifteen pages, fillable, and it converts your total into a recommended next step. Free, and useful even if you never call us.
45-item self-assessment · 7 common audit finding areas · certification roadmap · audit readiness pyramid · fillable scorecard with readiness bands.
How we work
Three to six months to certification
Single-site, starting from scratch. Multi-site takes longer; organizations with most of a system already in place move faster. Adding ISO 14001 or 45001 alongside doesn't extend it much, because the shared clauses get written once.
Readiness call and scope
What your customer actually asked for, which sites are in, and a realistic date.
Gap analysis
Clause by clause against your operation, with owners and effort estimates.
Build and document
Procedures, records and the routines that keep them current, written around how you actually work.
Internal audit, then Stage 1 and Stage 2
Full internal audit and management review with findings closed before the registrar arrives.
What organizations say
Tony was a great partner through the whole ISO experience. He helped us build our QMS system from the ground up … 100% would recommend to anyone looking for guidance with the ISO process.Jenna Wier — Google review
-
Compare
All four ISO standards Which one you need, and when integrating is worth it. Back to the ISO hub → -
3 minutes
ISO 9001 readiness quiz Score your system against the clauses that generate the most findings. Start the quiz →
Surveillance audit prep, internal auditing and closing findings are a good share of our work. And the 2026 transition is coming.
Questions
Common questions
Which version should we certify to right now?
ISO 9001:2015. It is the only certifiable version until the 2026 edition publishes, and 2015 certificates remain valid throughout the transition window that follows — expected to run roughly three years.
Do we already have to do something about climate change?
Yes. The February 2024 amendment took effect immediately with no transition period. You must determine and document whether climate change is a relevant issue for your context, and whether interested parties have climate-related requirements. Record the assessment even if your conclusion is that it is not relevant.
How long does ISO 9001 certification take?
Three to six months for a single site starting from scratch, assuming documentation work stays on schedule. Multi-site operations take longer.
Does ISO 9001 mean our products are high quality?
No, and it is worth being clear about this. ISO 9001 assesses whether you can consistently deliver what you promised and prove it. It sets no requirement on how good the product itself must be.
Can we use ISO 9001 for R2v3 Appendix C or F?
Yes. Both require a certified quality management system, and ISO 9001 satisfies that. RIOS is the alternative and often suits a dedicated recycler better.
Next step
Want to know where your QMS actually stands?
Score it in three minutes, or book a free call and get an honest read on the gap.