ISO 9001 Consultants
A quality system your supervisors actually use - built lean, certified in four to eight months, on a fee agreed before we start.
From £4,000. Gap analysis first, fixed fee after.
The September notice
ISO 9001 is being revised. The new version cleared its final vote in July and is expected to publish in September 2026. If you're certified, or about to be, it changes what you should do next →
Why businesses call us
It's a customer, nearly every time. An approved-supplier questionnaire, a PQQ, a contract with "ISO 9001 certified" written into the conditions. Manufacturing supply chains increasingly won't onboard a new supplier without it, and the deadline in the email is usually shorter than the person sending it realises.
The second reason is a certificate that stopped working. Plenty of businesses hold ISO 9001 already - implemented from a template by a consultant who's since disappeared, inherited from a manager who left, or built for an audit rather than for the business. It passes surveillance until the year it doesn't.
The third, right now, is the revision. Businesses that were about to start have paused, and businesses already certified are asking whether they need to do anything. Both are reasonable questions with straightforward answers, and neither is a reason to do nothing.
Should you wait for the 2026 version?
Short answer: no. Longer answer depends on which of these you are.
If
You're certified already
Nothing needs to happen this month. Your ISO 9001:2015 certificate stays valid throughout the transition period, and that period is expected to run three years from publication — so roughly September 2029, though the IAF confirms the exact rules once the standard is out.
What matters more than the deadline is that transitions happen inside a scheduled surveillance or recertification audit. You're working to your certification body's diary, not to 2029. Plan it into your next two audits and it's a gap review and some documented additions. Leave it to the last year and you'll be queueing with everyone else.
If
You're not certified yet
Don't wait. A customer deadline won't move because a standard is being republished, and you can't certify against a version that doesn't exist yet.
Start now and certify against 2015 — but build the system to the 2026 structure from day one. The changes are known: climate and sustainability in your context review, quality culture and ethical behaviour under leadership, risks and opportunities handled separately. Building those in from the start costs nothing extra. Retrofitting them in 2028 costs real money.
That's what we're doing on every 9001 build we start this year.
What ISO 9001 actually requires
01
Processes you can point at
A map of how work actually flows through your business, with the inputs, outputs and handovers named — recognisable to a supervisor, not just to an auditor.
02
Non-conformance, corrective action
A route for logging what went wrong, deciding whether it matters, fixing the cause rather than the symptom, and proving later that the fix held.
03
Supplier and outsourced control
Criteria for who you buy from, evidence you applied them, and controls over anything you subcontract — because their failure arrives at your customer as yours.
04
Checking and improving
Internal audits that find things, management review that ends in decisions, and measurement of the handful of numbers that tell you whether quality is moving.
What's changing in 2026
Climate & sustainability
2015Not mentioned; added later as a short amendment.
2026Built into clause 4 — you assess whether climate change is relevant to your quality system and to what your interested parties expect.
Leadership
2015Commitment, policy, roles and responsibilities.
2026Adds quality culture and ethical behaviour as things top management must actively demonstrate.
Risks & opportunities
2015Handled together in one clause.
2026Separated into clearer subclauses, with real weight on pursuing opportunities rather than only mitigating risk.
Awareness
2015Policy, objectives, your contribution, non-conformity.
2026Extends to understanding the quality culture and the ethical behaviour expected of you.
Terms & definitions
2015Points you at ISO 9000 for most of them.
2026Key QMS terms brought into the standard itself.
Guidance
2015None on the intent of the requirements.
2026Annex A — guidance on what the requirements are for, inside the standard for the first time.
Based on the final draft (FDIS, May 2026). If the published text differs, this table will be updated the same week.
Clauses 8 to 10 - operations, performance evaluation, improvement - see refinements rather than fundamental change. If your system genuinely works today, this is a gap review and some documented additions, not a rebuild. If it doesn't, the revision is a good excuse to fix it while there's a deadline to point at.
The bit most implementations get wrong
Every failed ISO 9001 audit we're called into has the same root cause. Not the process maps. Not the policy. The non-conformance log.
The log we usually inheritWhat we usually find
Six entries in eighteen months, all raised by the same person, all closed with “operator retrained”. No trend analysis, because six data points aren't a trend. Root cause recorded as “human error” — which is a description, not a cause.
An auditor reads that and knows immediately that things go wrong here and nobody logs them. That single observation turns a routine surveillance visit into a major.
The log we buildWhat works
A log that's easy enough to use that people actually use it, with far more entries than feels comfortable — because a busy log is evidence the system is alive, not evidence you're bad at quality.
Then a triage step so small things get fixed and closed without ceremony, and only the ones that matter get a real root cause investigation. Trends reviewed quarterly. Actions with a name and a date against them.
Getting this one thing right fixes more audit findings than every other part of the system put together.
How long it takes
Internal audit programme run once alongside you, management review facilitated, then Stage 1 and Stage 2 with a UKAS-accredited body. We're on site for both.
Weeks 15–24 - Embed.
Process maps, non-conformance routine, supplier controls, documented information. Built with your team, to the 2026 structure, so it doesn't need reworking later.
Weeks 1–2 - Gap analysis.A day or two on site comparing what you already do against the standard. You get a plain-English report and a fixed price for everything after it. £900 standalone, credited in full if you go ahead.
Weeks 3–14 - Build.What it costs
New certification
£6,000 to £10,000 for ISO 9001 as a single standard. Fixed and agreed after the gap analysis, so there's no day-rate drift.
Certification body fees are separate and go to them - typically £4,000 to £9,000 across a three-year cycle.
Existing system
Transition to 2026, or a rescue job on a system that isn't working - quoted after we've seen it. Both are usually a fraction of a new build, because the raw material already exists. The gap review is the same £900, credited the same way.
Where 9001 connects
Adding 14001 or 45001
Shared structure means one audit programme and one management review instead of three. Cheaper to build together than sequentially.
Integrated system build →
ISO 14001's own 2026 revision
Environmental has already been republished, with a transition deadline of April 2029. If you hold both, plan them as one piece of work.
ISO 14001 →
Keeping it alive afterwards
Internal auditor training and a named person on retainer are what stop a system decaying between surveillance visits.
Training and development →
Frequently Asked Questions
-
No. You can't certify against a standard that hasn't published, and a customer deadline won't move to accommodate ISO's schedule. Start now, certify against 2015, and build to the 2026 structure so nothing needs redoing. The changes are already known from the final draft - designing them in from the start costs nothing.
-
It cleared its final vote on 10 July 2026 and is at ISO's publication stage now, with September 2026 the expected date. We'll update this page the week it lands rather than guessing further.
-
Three years from publication is the expectation, which puts it around September 2029 - but that isn't formally confirmed yet. The IAF issues the binding transition rules once the standard is out. Anyone quoting you an exact deadline today is extrapolating from the last revision.
-
Four to eight months for most SMEs, gap analysis to certificate. The variables are how much already exists in writing, how much time your team can commit, and how far ahead your certification body is booking Stage 2 audits - which is frequently the real constraint rather than anything you control.
-
Almost never. Templated implementations fail in predictable places - a non-conformance log nobody uses, process maps that describe a business you no longer are, and internal audits that confirm everything is fine. The underlying business usually does good work; it's the documentation of it that's wrong, and that's quicker to fix than to recreate.
-
Not necessarily, and we'll tell you when the answer is no. Some questionnaires accept documented processes and evidence without third-party certification. But if the requirement appears in a PQQ, an approved-supplier list, or a contract clause, it almost always means the certificate - and going back to ask is cheaper than finding out after you've built something.
Whether you're starting from nothing, rescuing a system that's stopped working, or trying to work out what the 2026 revision means for a certificate you already hold, twenty minutes on the phone will tell you which it is and roughly what it costs. If ISO 9001 isn't what your customer is actually asking for, we'll say so.