How to Get ISO 9001 Certified: Step-by-Step Guide (2026)

The exact steps to get ISO 9001 certified — what to do first, how long it takes, what it costs, the biggest mistakes to avoid, and the fastest path to your certificate.

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

---

Ready to Get Certified? Here’s Exactly What to Do.

Most organizations know they need ISO 9001 certification. A customer asked for it. A contract requires it. A competitor already has it. The question isn’t whether to pursue it — it’s how to do it correctly without wasting time, overpaying, or failing your audit.

This guide covers the exact step-by-step process to get ISO 9001 certified — what to do in what order, how long each step takes, what the common mistakes are, and what separates organizations that pass their first audit from those that don’t.

If you’re looking for a comprehensive reference on ISO 9001 requirements and what the standard covers, see the ISO 9001 Certification Guide. This article is specifically for organizations that are ready to start and need a practical action plan.

---

---

👉 Start Here (Top Resources)

👉 Purchase the official ISO 9001:2015 standard — start here → ISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

👉 Get ISO 9001 certified with an accredited certification body → ISOQAR ISO 9001 Certification

👉 Get ISO 9001 training for your team → BSI Group ISO 9001 Training

👉 Deploy a ready-to-use ISO 9001 documentation system → 9001Simplified Documentation Kits

👉 Save up to 50% buying ISO standards as a bundle → ISO Standards Packages — ANSI Webstore

---

Before You Start — What You Actually Need

Before diving into the steps, be clear on what ISO 9001 certification actually requires:

The official standard — ISO 9001:2015 is the document your entire QMS is built against. Auditors evaluate your system against its precise language. You cannot build a certifiable QMS from summaries or free PDFs.

An accredited certification body — ISO certification is issued by third-party certification bodies accredited by recognized national accreditation authorities (ANAB in the U.S., UKAS in the UK). ISO itself does not certify organizations.

A minimum operating period — Most certification bodies require at least 3 months of QMS operating records before Stage 2. You cannot compress this phase regardless of how fast everything else moves.

A trained internal auditor — You must conduct a full internal audit against all ISO 9001 clauses before Stage 2. Someone on your team needs internal auditor training.

Management commitment — ISO 9001 Clause 5 requires demonstrable top management involvement. The quality manager cannot be the only person accountable for the QMS.

With those foundations understood, here’s the step-by-step process.

---

Step 1 — Purchase the Official Standard

Timeline: Week 1 | Duration: Same day

Before doing anything else — purchase the official ISO 9001:2015 standard. This is the document your QMS must align with and the reference auditors use during your certification audit.

Why this comes first: Organizations that begin implementation from summaries, consultant checklists, or training slides consistently produce documentation with gaps that generate Stage 1 and Stage 2 findings. The official standard is non-negotiable.

ISO 9001:2015 costs $150–$200 for a single-user PDF. In the context of your total certification budget, it is your lowest-cost and highest-leverage investment.

→ ISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

For a full guide on what the official document contains and authorized purchasing sources, see Buy ISO 9001 and Do You Need to Buy ISO 9001 to Get Certified?

---

Step 2 — Train Your Implementation Lead

Timeline: Weeks 1–3 | Duration: 2–3 weeks

Your quality manager or whoever owns the implementation must complete requirements-level or lead implementer training before documentation begins. This is the step most organizations skip — and the most common reason first-time certifications fail or overrun their timeline.

Training before documentation prevents:

• Misinterpretation of clause requirements that requires rework later
• Documentation that describes ideal operations rather than actual operations
• Internal audits that check document existence rather than process effectiveness
• Stage 1 findings that delay your Stage 2 by 6–10 weeks

→ BSI Group ISO 9001 Training — foundation through lead implementer level

→ ISOQAR ISO Training

For the full training guide by role and standard, see ISO Training for Manufacturing Teams.

---

Step 3 — Select Your Certification Body Early

Timeline: Weeks 2–4 | Duration: 2–3 weeks

Most organizations contact their certification body after documentation is complete. This is a mistake — certification body scheduling lead times can add 4–8 weeks to your back-end timeline that earlier contact could have avoided.

Contact your certification body during Phase 1 to:

• Understand their current Stage 1 scheduling availability
• Get a formal cost quote before committing
• Understand their documentation preferences and audit methodology
• Book your audit slots before you need them

What to verify before selecting:

• Accredited by ANAB, UKAS, or another IAF member body
• Accreditation scope includes ISO 9001 and your industry sector
• Experience auditing organizations in your specific manufacturing type
• Transparent fee structure covering Stage 1, Stage 2, surveillance, and recertification

→ ISOQAR ISO 9001 Certification — accredited certification body with manufacturing sector experience

For a full ranked review of the top certification bodies, see Best ISO Certification Bodies and Who Can Issue ISO Certification?

---

Step 4 — Conduct a Gap Assessment

Timeline: Weeks 3–6 | Duration: 2–4 weeks

A gap assessment compares your current practices against every ISO 9001 clause requirement. It identifies what exists, what’s missing, and what needs to be built or changed.

A thorough gap assessment prevents discovering major gaps at Stage 1 — where fixing them adds 6–10 weeks to your timeline. Organizations that rush from training to documentation without a proper gap assessment consistently overestimate how close they are to certification-ready.

What a gap assessment covers:

• Does a quality policy exist and is it communicated?
• Are your processes documented at an appropriate level?
• Do you have documented quality objectives with measurable targets?
• Is there a calibration system for measurement equipment?
• Are welder qualifications and WPS/PQR records current? (for fabrication)
• Do you have a supplier evaluation and qualification process?
• Is there a documented corrective action process?
• Have you identified interested parties and their requirements?

The gap assessment output is your implementation work plan — prioritized by clause and risk level.

---

Step 5 — Build Your QMS Documentation

Timeline: Weeks 5–16 | Duration: 6–12 weeks

Documentation development is typically the longest implementation phase. You must create all required documented information — policies, procedures, work instructions, forms, and records templates — that reflects how your organization actually operates.

The critical rule: Procedures must describe what actually happens — not what you wish would happen. Auditors verify reality against documentation. The most common Stage 2 nonconformance is procedures that don’t match what operators do on the floor.

Core documentation for manufacturers:

• Quality policy and objectives
• QMS scope statement
• Process maps or turtle diagrams
• Welding procedure specifications (WPS) and procedure qualification records (PQR)
• Welder qualification records (WPQ)
• Inspection and test plans (ITP)
• Calibration logs and equipment registers
• Nonconformance report (NCR) forms
• Corrective action records
• Supplier qualification records and approved vendor list
• Internal audit records

→ 9001Simplified Documentation Kits — purpose-built ISO 9001 documentation for manufacturers that reduces Phase 5 from 10–12 weeks to 4–6 weeks for most organizations

For documentation requirements and kit options, see ISO Documentation Kits for Manufacturers.

---

Step 6 — Implement and Generate Records

Timeline: Weeks 10–22 | Duration: 10–14 weeks minimum

This is the phase you cannot compress. Deploying your documented processes and generating the operating records that demonstrate your system is functioning takes time — and most certification bodies require at least 3 months of records before Stage 2.

What this phase involves:

• Training all relevant personnel on new or updated procedures
• Operating production processes with the new controls in place
• Generating completed inspection records, traveler packets, NCRs
• Running the corrective action process against real issues
• Maintaining calibration records and supplier qualification records

Organizations that rush from documentation to Stage 1 without adequate operating records consistently receive Stage 1 deferrals — adding 8–16 weeks to their timeline. The minimum operating period is non-negotiable.

---

Step 7 — Train Your Team

Timeline: Weeks 8–16 | Duration: 2–4 weeks (can overlap with Steps 5–6)

All personnel performing work that affects quality must be trained and competent. For manufacturers, this means:

• Quality managers — full requirements and internal auditor training
• Production supervisors — QMS awareness and their specific responsibilities
• Shop floor operators — awareness of the quality policy, their process controls, and nonconformance reporting
• Internal auditors — formal internal auditor training before conducting the internal audit

A note on internal auditor training: Your internal auditor must be able to evaluate whether processes are effective — not just whether procedures exist. This requires genuine auditor training, not just clause familiarity.

→ BSI Group ISO 9001 Training — foundation through internal auditor level

---

Step 8 — Conduct Your Internal Audit

Timeline: Weeks 18–22 | Duration: 2–3 weeks

Before your certification body arrives, you must audit your own system against every ISO 9001 clause. The internal audit must be conducted by a trained, objective auditor — someone who is not auditing their own processes.

The goal is simple: find and fix your own nonconformances before the certification auditor does.

What a good internal audit does:

• Evaluates process effectiveness — not just document existence
• Interviews personnel at multiple levels
• Reviews records for completeness and compliance
• Identifies gaps between documented procedures and actual practice
• Generates findings with root cause and corrective action requirements

What a poor internal audit does:

• Checks that procedures exist
• Is conducted by the quality manager auditing their own procedures
• Generates no findings — a zero-finding internal audit is almost always a sign the audit wasn’t thorough enough

Organizations that find and fix their own nonconformances before Stage 2 consistently pass on the first attempt. Organizations that skip meaningful internal audits consistently fail.

---

Step 9 — Complete Management Review

Timeline: Weeks 20–23 | Duration: 1–2 weeks

Top management must conduct a formal management review — a structured meeting evaluating QMS performance against all required inputs specified in ISO 9001 Clause 9.3.

Required inputs:

• Status of actions from previous reviews
• Changes in external and internal issues relevant to the QMS
• Quality performance and KPI data
• Customer satisfaction results
• Internal audit findings
• Nonconformance and corrective action status
• Resource adequacy

Required outputs:

• Decisions on improvement opportunities
• Changes needed to the QMS
• Resource needs

Records of the management review must be maintained. Auditors will review these records and may interview members of leadership about the meeting.

---

Step 10 — Stage 1 Audit

Timeline: Weeks 22–26 | Duration: 1–2 days on-site or remote

Your certification body conducts a documentation review — verifying your QMS documentation is complete, your scope is accurate, and your system is ready for Stage 2.

What Stage 1 covers:

• Verification that required documented information is in place
• Scope accuracy — does your scope statement match your actual operations?
• Confirmation that internal audit and management review have been completed
• Identification of any major gaps that must be addressed before Stage 2

Stage 1 findings must be addressed before Stage 2 proceeds. Typical Stage 1 findings in manufacturing: vague or inaccurate scope statements, incomplete objectives documentation, no evidence of internal audit, missing welder qualification records.

If Stage 1 goes well: Stage 2 is typically scheduled 2–6 weeks later.

---

Step 11 — Stage 2 Certification Audit

Timeline: Weeks 24–30 | Duration: 1–3 days on-site

Stage 2 is your certification audit. Auditors will:

• Interview personnel at all levels — from executives to shop floor operators
• Walk your operations and verify controls are physically in place
• Sample records to verify processes are generating required evidence
• Evaluate whether your documented system matches operational reality
• Assess the effectiveness of your corrective action process

Nonconformances at Stage 2:

• Major nonconformances must be corrected before certification is issued — typically adding 4–12 weeks to your timeline
• Minor nonconformances are addressed through corrective action plans submitted to the certification body within an agreed timeframe
• Observations are improvement suggestions — not required to be corrected before certification

If no major nonconformances are found — or all majors are corrected and verified — your certificate is issued.

---

Step 12 — Maintain Your Certification

After certification | Ongoing

ISO 9001 certification is valid for three years — subject to annual surveillance audits and a recertification audit in Year 4.

Annual surveillance audits (Years 2 and 3):

• Shorter than Stage 2 — typically 1–2 days
• Verify your system continues to operate
• Review corrective actions from previous findings
• Evaluate performance trends

Recertification audit (Year 4):

• Full audit similar in scope to original Stage 2
• Renews your certificate for another three-year cycle

Ongoing maintenance:

• Continue internal audit program annually
• Conduct management review annually
• Maintain training records as personnel turn over
• Update procedures when operations change
• Track and close corrective actions

---

Realistic ISO 9001 Certification Timeline

Phase	Duration
Standard purchase and training	2–3 weeks
Gap assessment	2–4 weeks
Certification body selection	2–3 weeks (overlapping)
Documentation development	6–12 weeks
System implementation and records	10–14 weeks
Team training	2–4 weeks (overlapping)
Internal audit and corrective actions	2–3 weeks
Management review	1–2 weeks
Stage 1 audit and gap closure	2–4 weeks
Stage 2 certification audit	1–3 days
Total	4–8 months

Realistic timeline by organization size:

Organization	Realistic Timeline
Small (1–25 employees), strong existing practices	4–5 months
Small (1–25 employees), starting from scratch	5–7 months
Mid-size (26–200 employees)	6–9 months
Large (200+ employees)	8–12 months
Multi-site	Add 2–4 months per additional site

For the full timeline breakdown with phase-by-phase detail, see How Long Does ISO Certification Take?

---

ISO 9001 Certification Cost Summary

Cost Category	Small Org (1–25)	Mid-Size (26–200)	Large (200+)
ISO 9001:2015 standard	$150–$200	$150–$200	$150–$200
Gap assessment	$700–$2,000	$1,500–$4,000	$3,000–$8,000
Documentation development	$1,500–$5,000	$3,000–$10,000	$8,000–$25,000
Training	$2,000–$5,000	$3,000–$8,000	$5,000–$15,000
Consulting (if used)	$0–$15,000	$0–$35,000	$0–$75,000+
Certification audit (Stage 1+2)	$4,000–$7,500	$7,500–$15,000	$15,000–$35,000
Total First Year	$8,000–$35,000	$15,000–$75,000	$30,000–$158,000+

→ Use coupon CC2026 for 5% off the standard → Apply at ANSI

For a full cost breakdown and three-year ownership cost, see How Much Does ISO 9001 Cost? and the ISO Certification Cost Calculator.

---

Three Paths to ISO 9001 Certification — Compared

Approach	Cost	Timeline	Risk	Best For
DIY — internal team, no external support	Lowest	Longest	Highest audit failure risk	Organizations with experienced quality managers and prior QMS exposure
Training + Documentation Kit ⭐	Moderate	Fast	Low	Most manufacturers — best balance of cost, speed, and knowledge transfer
Full Consulting	Highest	Fastest	Lowest	Organizations with tight timelines, no internal QMS experience, or complex operations

The recommended approach for most manufacturers: Lead implementer training for your quality manager combined with a purpose-built documentation kit. This delivers consultant-level results at significantly lower cost — and builds genuine internal QMS understanding that sustains the system through surveillance cycles.

→ 9001Simplified Documentation Kits → BSI Group ISO 9001 Training

---

The Biggest Mistakes Organizations Make

These are the most common reasons ISO 9001 certifications fail, overrun their timeline, or generate major Stage 2 findings:

Skipping lead implementer training The quality manager reads the standard once and starts writing procedures. Without genuine clause-level understanding, the documentation consistently misinterprets requirements — generating rework after Stage 1 findings that would have been avoided with proper upfront training.

Treating ISO 9001 as a documentation project ISO 9001 is a management system — not a filing cabinet. Organizations that write procedures to satisfy clause checklists without changing how they actually operate will have auditors find the gap between documentation and reality at Stage 2.

Rushing the operating period The single most common cause of Stage 1 deferrals. Three months of operating records is a minimum — not a target. Organizations that complete documentation in Month 2 and go straight to Stage 1 in Month 3 don’t have enough records to demonstrate system operation.

Not training internal auditors properly An internal audit conducted by someone who isn’t trained is theater — not an audit. Untrained internal auditors find no nonconformances. Certification auditors find the same nonconformances the internal auditor missed, except now they’re Stage 2 findings.

Choosing the cheapest certification body Certification bodies that quote dramatically less than accredited competitors almost always provide fewer audit days, superficial audit methodology, or certificates that aren’t accepted by major customers. See Best ISO Certification Bodies for the full ranked guide.

Procedures that don’t match the floor The most damaging Stage 2 finding — documented procedures that describe ideal operations while operators follow a different process. Auditors interview operators directly. If operators can’t describe the procedure or follow something different than what’s documented, it’s a major nonconformance.

Not involving top management Leadership that delegates ISO 9001 entirely to the quality manager will face Clause 5 findings when auditors interview executives who can’t articulate their quality objectives, quality policy, or QMS responsibilities.

---

Frequently Asked Questions

---

📥 Free Resources

• 👉 ISO 9001 Roadmap (Step-by-Step Implementation Guide)
• 👉 Manufacturing Compliance Checklist
• 👉 Supplier Quality Checklist

---

Not Sure What to Do Next?

🔹 You need the official ISO 9001:2015 standard — start here → ISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

🔹 You want to save buying ISO 9001 with other standards → Save up to 50% on ISO Standards Packages — ANSI Webstore

🔹 You’re ready to start the certification process → ISOQAR ISO 9001 Certification — accredited certification body for manufacturers

🔹 You need ISO 9001 training before implementation → BSI Group ISO 9001 Training → ISOQAR ISO Training

🔹 You need a documentation system to build your QMS → 9001Simplified Documentation Kits → ISO Documentation Kits for Manufacturers

🔹 You want to choose the right certification body → Best ISO Certification Bodies — Ranked & Reviewed → Who Can Issue ISO Certification?

🔹 You want to understand the full requirements → ISO 9001 Certification Guide — Complete Reference → ISO 9001 Clauses Explained

🔹 You want to understand realistic timelines → How Long Does ISO Certification Take? → ISO Implementation Timeline for Manufacturers

🔹 You want to understand costs before committing → How Much Does ISO 9001 Cost? → ISO Certification Cost Calculator

---

Follow the Steps. Pass the Audit.

ISO 9001 certification is achievable for any manufacturer — regardless of size, industry, or prior management system experience. The organizations that pass their first audit are almost always the ones that followed the steps in the right order, invested in proper training before documentation, and didn’t try to compress the phases that have inherent minimum durations.

The steps are clear. The resources are available. The path is straightforward when it’s followed correctly.

At The Standards Navigator, complex standards are translated into practical, real-world guidance you can act on.

👉 Get updates on new standards, implementation strategies, and compliance insights 👉 Be first to access new guides, tools, and checklists

Subscribe below to stay ahead.