A quality system your supervisors actually use.
Built lean around the way your business operates, with a defined route from gap analysis through implementation to certification readiness.
£6,000 to £10,000. A £900 gap analysis first, then a fixed implementation fee agreed before the build starts.
Credited in full against implementation if you proceed within six months.
Fixed after the gap analysis so the project scope is understood first.
Gap analysis, build, implementation, internal audit, review and certification readiness.
ISO 9001:2026 was published on 16 September 2026. If you're already certified, or are about to begin an implementation, the new edition changes what should happen next.
Certification matters. What the system does between certification audits matters more. The aim is a quality management system your managers and supervisors can use to control the operation, spot problems and improve performance without needing a consultant standing beside them.
Usually something has forced the question.
Few SMEs wake up and decide they would quite like another management system. Usually a customer wants certification, an existing system has stopped working, or a change to the standard has created a deadline.
“Our customer wants ISO 9001.”
An approved-supplier questionnaire, PQQ or contract condition suddenly requires certification. The commercial deadline is often much closer than the person setting it realises.
“We have ISO 9001, but the system isn't really working.”
The system may have come from a template, been inherited from somebody who left, or gradually become something maintained mainly for external audits. Certification remains, but operational ownership has drifted.
“What does the new edition mean for us?”
New implementations need the current requirements designed in from the beginning, while existing certificate holders need to understand their transition route. Neither situation is a reason to stop improving the system now.
Start by checking exactly what the customer has asked for.
Some customers want documented quality controls and evidence. Others require third-party ISO 9001 certification as a condition of approved supplier status or contract award. Confirming the actual requirement before starting can prevent the business building more than the customer has asked for, or less than the contract requires.
Check the PQQ, supplier questionnaire, tender or contract clause rather than relying on a verbal summary.
Establish whether certification is needed before tender, before onboarding or by an agreed future date.
If the wording is ambiguous, asking the customer directly is cheaper than building the wrong thing.
The trigger tells us why the project exists. The gap analysis tells us what actually needs doing. Those two pieces together are enough to establish whether the business needs a new ISO 9001 system, a rescue of the one it already has, or a transition review against the current edition.
What the 2026 edition means depends on where you are now.
The new edition does not mean every ISO 9001 system needs rebuilding. Existing certificate holders need a planned transition. New systems should incorporate the current requirements from the beginning.
You're certified already
Plan the transition into your audit cycle.Your ISO 9001:2015 certificate remains valid during the transition period. Organisations already certified to the 2015 edition have until 30 September 2029 to transition to ISO 9001:2026.
The transition can take place during a scheduled surveillance or recertification audit, or through a separate transition audit. That means the sensible timetable is driven by your certification body's audit programme rather than simply aiming for the final deadline.
You're not certified yet
Don't wait to begin building the system.DBIM builds new management systems with ISO 9001:2026 requirements incorporated from the start. There is little value in deliberately designing a new QMS around an edition that has already been superseded.
During the transition period, whether the initial accredited certification itself is issued against the 2015 or 2026 edition depends on the timing and readiness of the certification body. From 31 March 2028, new and initial accredited certifications may only be issued to ISO 9001:2026.
The sixth edition replaced ISO 9001:2015 as the current edition.
From this date, new and initial accredited certifications may only be issued to ISO 9001:2026.
Organisations certified to ISO 9001:2015 must complete transition by this date.
A half-day review compares the existing management system with the 2026 edition and identifies the changes that need bringing into the QMS before your transition audit.
The revision is a transition exercise, not automatically a rebuild. ISO describes the 2026 edition as targeted updates that retain the familiar framework while strengthening areas including leadership, quality culture, accountability and the treatment of risks and opportunities. 【2-35672e】【3-bbb3f3】
Quality management should be visible in the way the business runs.
ISO 9001 covers more than these four areas, but these are where the difference between a documented system and a functioning quality management system becomes obvious in day-to-day operations.
Processes you can point at
A map of how work actually flows through the business, with the inputs, outputs and handovers named. It should be recognisable to a supervisor, not just to an auditor.
Non-conformance & corrective action
A route for recording what went wrong, deciding whether it matters, fixing the issue and addressing the cause where corrective action is needed. The important part is proving later that the action worked.
Supplier & outsourced control
Criteria for who you buy from, evidence that those criteria are applied, and controls proportionate to what the supplier provides. An outsourced failure still arrives at your customer under your name.
Checking & improving
Internal audits that test the system, management review that ends in decisions, and useful measurement of whether quality performance is moving. Measurement should lead somewhere.
Can somebody show how quality is controlled without opening the ISO manual?
Purchasing should already know how suppliers are approved. Production should already know what happens when something is nonconforming. Managers should already review performance.
ISO should connect those arrangements into a controlled system rather than create a duplicate version of them for audit week.
Define how important processes should operate.
Make problems visible when planned results are not achieved.
Look beyond the immediate symptom where the issue warrants investigation.
Put proportionate action in place with clear ownership.
Use what the system learns to strengthen future performance.
ISO 9001 is not a collection of forms. It is a management framework for understanding how work delivers customer requirements, controlling what can affect conformity and learning when planned results are not achieved.
Familiar framework. Sharper expectations.
ISO 9001:2026 is an evolution rather than a wholesale redesign. The process approach remains, but several areas are now clearer or more explicit, particularly leadership, quality culture, ethical behaviour, risks and opportunities, and supporting guidance.
A functioning ISO 9001:2015 system should normally need a structured gap review, targeted updates, awareness and transition activity, rather than a completely new quality management system.
More explicit does not necessarily mean more paperwork.
The bigger questions are whether leadership can demonstrate the right quality culture, whether expected ethical behaviour is understood, whether opportunities receive genuine attention alongside risk, and whether the organisation's context reflects today's operating environment.
If those things already happen well, the job is to make sure the QMS reflects them clearly enough to demonstrate conformity.
The operational requirements see refinements rather than a fundamental redesign.
Monitoring, measurement, internal audit and management review remain central to evaluating the QMS.
Continual improvement remains fundamental, with leadership retaining an important role in making it happen.
Revision summary based on ISO 9001:2026 and published transition guidance. Climate change had already been introduced into ISO 9001:2015 through Amendment 1:2024, so it is not treated here as wholly new to the 2026 edition. ISO 9001:2026 was published on 16 September 2026. This is a practical summary of the changes and does not reproduce or replace the published standard.
If your system genuinely works today, the 2026 edition should be a transition project rather than a rebuild. If the existing system has already drifted away from the business, the revision is a useful deadline for fixing the underlying QMS at the same time.
The bit most implementations get wrong.
Auditors often spend time on the non-conformance and corrective-action process because it reveals how honestly the business captures problems and whether the quality system actually learns from them. A log that is almost permanently empty is not automatically evidence that quality is excellent.
It shows what happens when the process doesn't go to plan.
The useful question is whether problems become visible, get dealt with proportionately, lead to corrective action where needed and create information the business can learn from later.
The weak log
Quiet, repetitive and disconnected from improvement.Six entries in eighteen months. All raised by the same person. Every corrective action ends with “operator retrained”. There is no useful trend analysis because there is barely enough data to identify a pattern.
The log is far quieter than the real operation is likely to be.
Problems are not being captured naturally across the business.
A description of what happened replaces investigation into why it happened.
The person changes, but the process that allowed the issue remains untouched.
An unusually quiet log can suggest the system is not seeing the problems the operation is experiencing.
The working log
Easy to use, proportionate and useful for learning.The log is easy enough that people actually use it, which can mean considerably more entries than initially feels comfortable. That is not automatically evidence of poor quality. It can be evidence that the management system is seeing what is really happening.
Problems can be captured without turning every issue into an investigation project.
Small issues can be corrected and closed while significant ones receive deeper investigation.
Investigate the system, process, method or control rather than stopping at the person involved.
Repeated issues become management information instead of remaining isolated incidents.
Actions have an owner and a date, trends are reviewed and significant corrective actions are checked for effectiveness.
Capture what happened while the information is still useful.
Decide the significance rather than treating every problem identically.
Deal with the immediate nonconforming output or situation.
Go deeper where recurrence, consequence or systemic weakness justifies it.
Check that significant corrective action actually produced the intended result.
If somebody made an error, ask what made that error possible or likely. Was the process unclear? Was the method difficult? Was the information wrong? Was checking ineffective? Was the person competent for the task? Corrective action becomes useful when it changes the conditions that allowed the problem to happen, rather than simply documenting who was involved.
A useful non-conformance system makes problems visible without making reporting painful. Get that balance right and the log becomes one of the best sources of improvement information in the whole quality management system.
Four stages. Typically 12 to 20 weeks.
The programme depends on what already exists, how quickly your team can implement changes and when the certification body can accommodate the external audits. The sequence itself stays straightforward.
Gap analysis
One day on site comparing what you already do against ISO 9001. You receive a plain-English report showing the gaps and priorities, followed by a fixed price for the implementation work. The gap analysis is £900 and is credited in full against implementation if you proceed.
Build
Context, scope, policy and objectives come first, followed by process maps, the non-conformance routine, supplier controls and the documented information the business genuinely needs. The system is built with your people to ISO 9001:2026.
Embed, audit and review
The system now runs for real. Records accumulate, processes are used and any early weaknesses become visible. DBIM runs your first internal audit alongside you, facilitates the first management review and works through the resulting actions.
Stage 1 and Stage 2
DBIM helps you select a UKAS-accredited certification body and prepare for Stage 1 and Stage 2. The certification body's auditors conduct both audits and DBIM does not attend them. Any findings are closed out within the agreed implementation fee before the completed system is handed over with its 12-month calendar.
Your certification body's diary sets the final audit dates.
DBIM can control the gap analysis, system build, implementation support, internal audit and management review programme. The availability of Stage 1 and Stage 2 appointments sits with the independent certification body.
Where the customer has a hard certification deadline, book the certification body early rather than waiting until the system is finished.
Establish the real gap before fixing the implementation scope.
Create the management framework around the way the business operates.
Run the system long enough to generate genuine records and evidence.
Put the working system through independent Stage 1 and Stage 2 assessment.
Working towards a customer or tender deadline? Start with the date. We can work backwards from it to establish whether the implementation and certification timetable is realistic.
More questions? →Know the gap first. Then fix the price.
DBIM does not price a full ISO 9001 implementation before understanding what already exists. The £900 gap analysis establishes the scope, then the implementation is agreed as a fixed-fee project.
From gap analysis to certification readiness.
The final implementation fee depends on the starting position, complexity of the operation and how much of the existing management framework can sensibly be retained.
Stage 1 and Stage 2 findings are closed out within the agreed implementation fee.
ISO 9001 as a standalone management system.
Combined gap analysis across two management-system standards.
Integrated ISO 9001, ISO 14001 and ISO 45001 review.
Added for each additional site included within the assessment scope.
The gap-analysis fee is credited in full against implementation if you proceed with the DBIM implementation project within six months of the report.
Don't pay for a new build if the useful parts already exist.
Transition work and system rescue normally cost considerably less than a first implementation because the business already has processes, documentation and evidence that can be reviewed and retained where they still work.
Half-day review of the existing QMS against the current edition.
Scoped as a fixed-fee job once the required work is understood.
The certification body is appointed and paid directly by the client. Your supplied planning range is £4,000 to £9,000 across a three-year certification cycle. Obtain quotations for your actual headcount, sites and scope before budgeting the certification cost.
Travel beyond 40 miles is charged separately and agreed as part of the project scope before the work begins.
The gap analysis protects both sides from guessing at the implementation price. DBIM sees what already works, identifies what genuinely needs building and then fixes the fee around the actual project rather than pricing from a generic ISO package.
ISO 9001 doesn't have to become an isolated quality system.
Quality management often becomes the first formal management system in an SME. What happens next matters: another standard may follow, environmental transition work may overlap, or the existing system may simply need enough ongoing ownership to stop it drifting between audits.
Build onto the structure you already have.
ISO 9001, ISO 14001 and ISO 45001 share enough management-system structure that adding another standard should not mean creating another completely separate system.
Plan environmental work alongside quality where it makes sense.
If the business also holds, or is considering, ISO 14001, treating the two standards as connected management systems can reduce duplicated audit, review, objective and improvement activity.
Certification is when maintenance starts, not when it ends.
Internal audits, management review, corrective action and preparation for surveillance are what stop a certified management system gradually turning back into a collection of documents.
DBIM can provide individual support at £450 per day or ongoing QHSE capability through Fractional HSEQ from £800 per month.
Integration should remove duplicate management activity, not blur the purpose of each standard. Quality still needs customer and process controls. Environmental still needs aspects and impacts. Health & Safety still needs hazard and risk control. The shared management framework simply stops those disciplines creating three versions of the same organisational processes.
Keep testing whether the system is operating as intended.
Give management useful information and decisions rather than an annual ritual.
Keep actions and recurring problems moving through the system.
Use what the QMS learns rather than simply protecting the certificate.
A good ISO 9001 system gives the business somewhere sensible to build from. Additional standards can share its management framework, while ongoing audits, reviews and corrective action keep the original quality system useful after certification.
Before you decide what happens next.
The practical questions are usually about the 2026 transition, how long certification takes and whether the business actually needs a certificate in the first place.
01 Should we wait for ISO 9001:2026 before starting?
No. ISO 9001:2026 was published on 16 September 2026 and is now the current edition. 【1-993478】【2-c8bf6a】
DBIM builds new quality management systems with the 2026 requirements incorporated from the start. During the transition period, the edition your certification body can initially certify you against depends on its own accreditation readiness.
From 31 March 2028, new and initial accredited ISO 9001 certifications may only be issued against ISO 9001:2026. 【1-993478】
02 When was ISO 9001:2026 published?
16 September 2026. ISO/TC 176 confirms that ISO 9001:2026 was published on that date as the revised edition of the quality management system requirements standard. 【1-993478】【2-c8bf6a】
03 How long will we have to transition?
Organisations already certified to ISO 9001:2015 have until 30 September 2029 to complete transition to ISO 9001:2026. 【1-993478】【3-5572c3】
The transition can take place during a scheduled surveillance audit, a recertification audit or through a separate transition audit. 【1-993478】【3-5572c3】
In practice, speak to your certification body well before the final deadline. Its own audit availability and transition programme will determine the sensible date for your organisation.
04 How long does ISO 9001 certification take?
DBIM typically plans a new ISO 9001 implementation around 12 to 20 weeks from gap analysis through to certification readiness.
The main variables are how much useful structure already exists, how much time your team can give the project, how quickly the new processes can generate genuine records, and when the certification body can schedule Stage 1 and Stage 2.
Certification-body availability can be the final constraint even when the management system itself is ready.
05 Our system was set up badly. Is it cheaper to start again?
Usually not. A poorly implemented ISO system can still contain useful processes, records and controls that are worth keeping.
The common problems are often the management-system layer around the operation: process maps that no longer describe the business, non-conformance arrangements nobody uses, generic documented procedures and internal audits that do not meaningfully test anything.
A gap review shows what can be retained, simplified or rebuilt. Repairing the right parts is normally more proportionate than discarding everything automatically.
06 Do we need ISO 9001 if our customer only asked for “a quality system”?
Not necessarily. Some customers want documented quality arrangements and evidence without requiring independent ISO 9001 certification.
Where the requirement appears in a PQQ, approved-supplier questionnaire, tender or contract, check the exact wording.
If it is ambiguous, ask the customer whether third-party ISO 9001 certification is actually required before committing to a certification project. Confirming the requirement first is cheaper than building the wrong thing.
ISO 9001:2026 becomes the revised quality management standard. 【1-993478】
From this date, new and initial accredited certifications may only be issued to ISO 9001:2026. 【1-993478】【3-5572c3】
Existing ISO 9001:2015 certifications must complete transition by this date. 【1-993478】【3-5572c3】
Starting from nothing, rescuing an existing system and transitioning a working certificate are three different projects. A short conversation should be enough to identify which position you're actually in before anybody scopes the work.
Start with where the quality system is now.
Whether you're starting from nothing, rescuing a system that's stopped working, or working out what the 2026 revision means for a certificate you already hold, twenty minutes on the phone should be enough to establish which position you're actually in and roughly what it will cost.
From there, the sensible next step might be a £900 gap analysis, a £500 transition check, targeted rescue work or a full implementation.
Customer request, first certification, transition, recertification or a quality system that no longer reflects the business.
Get in Contact →Establish the gap, build the QMS around the operation and prepare for independent certification.
Keep what still works, remove unnecessary complexity and rebuild the parts that have drifted.
Compare the current QMS with the new edition and make targeted changes rather than assuming a rebuild.
For a new ISO 9001 implementation or significant system review.
Half-day comparison of an existing system against ISO 9001:2026.
Fixed after the gap analysis, typically over 12 to 20 weeks.
If ISO 9001 isn't what your customer is actually asking for, we'll say so. A requirement for a documented quality system does not automatically mean third-party certification. Where the wording is unclear, confirm it before committing the business to a certification project.
DBIM is based in Greater Manchester and supports ISO projects across the North West and elsewhere in the UK where the required site work and travel arrangement make sense for both sides.