20 certification schemes

ISO 9001:2015

ISO 9001 Certification

ISO 9001 sets the requirements for a quality management system that controls how an organisation delivers consistent work.

Standard
ISO 9001:2015
Indicative timeline
8-14 weeks, depending on scope and readiness
Discipline
ISO Standards
Assessment type
Independent third-party assessment

The standard

Overview

ISO 9001:2015 is the international standard for quality management systems. It follows the common clause structure used across ISO management system standards: context of the organisation, leadership, planning, support, operation, performance evaluation and improvement. The standard asks you to define your processes, understand what customers and other interested parties require, plan around risks and opportunities, and measure results against stated objectives.

Certification shows that an independent assessor has examined the system against the standard and found it both conforming and in use. Procurement teams, tender panels and larger customers frequently ask for it as evidence of consistent control rather than good intentions.

UKCert assesses in two stages. We first review your documented information, scope and readiness, then audit the system in operation across the sites and activities in scope. Findings reference the clause concerned and the evidence seen. The certification decision is taken independently of the audit team.

Who this is for

  • Manufacturers and engineering firms with repeatable production processes
  • Contractors and suppliers bidding for public sector or tier-one work
  • Professional and technical service firms with client deliverables to control
  • Growing organisations replacing informal habits with defined processes
  • Groups needing one management system across several sites

What it gives you

Why organisations certify

What a certified ISO 9001:2015 assessment gives you once the certificate is issued.

Tender eligibility

Many public sector and tier-one procurement frameworks list ISO 9001 as a condition of entry, or score it heavily during supplier assessment.

Fewer repeat failures

Nonconformity and corrective action requirements force root cause analysis, so recurring defects and rework are addressed rather than absorbed as normal cost.

Clear accountability

Roles, responsibilities and authorities are defined in writing, so staff know who decides what and handovers between departments stop losing information.

Evidence for customers

Records of monitoring, measurement and review give you something concrete to show when a client or auditor asks how quality is controlled.

Structured improvement

Objectives, measurement and management review create a regular cycle in which performance data is examined and decisions about change are recorded.

Basis for other standards

The clause structure is shared with ISO 14001, ISO 45001 and ISO 27001, so adding a second standard later reuses much of the same framework.

Scope

What the assessment covers

The areas an assessor works through. Your final scope is confirmed in writing before any audit is booked.

  • Context and interested party analysis
  • Quality policy and measurable objectives
  • Process map and process interactions
  • Risk and opportunity register
  • Design and development controls
  • Control of externally provided processes and suppliers
  • Nonconformity and corrective action records
  • Internal audit and management review

How it runs

The assessment, stage by stage

From first enquiry to certificate. Each stage is agreed with you before it starts.

  1. Scope and quotation

    We confirm your activities, sites, headcount and any exclusions, then quote the assessment on that basis. Scope wording is agreed before any audit is booked.

  2. Gap review

    An optional review of your existing documented information and practice against the clauses, identifying what is missing before formal assessment begins. Useful for first-time applicants.

  3. Stage 1 assessment

    A readiness assessment of your documentation, scope, internal audit results and management review records. We confirm whether the system is developed enough for Stage 2.

  4. Stage 2 assessment

    An audit of the system in operation. We interview staff, follow processes end to end and sample records against each clause of the standard at the sites in scope.

  5. Certification decision

    Any findings are closed with evidence of correction and root cause. An independent reviewer then takes the certification decision and the certificate is issued for three years.

  6. Surveillance and renewal

    Surveillance audits are carried out during the three-year cycle to confirm the system is still operating, followed by a full recertification audit before expiry.

Questions

ISO 9001:2015 — frequently asked

Anything here that does not cover your situation, put it to an assessor rather than guessing at it.

Ask a question

It depends on size, number of sites and how much of the system already exists. A single-site organisation with documented processes typically reaches a certification decision in around 8 to 14 weeks. Most of that time is your own preparation: writing the system, running a full internal audit and holding a management review. The assessment itself is usually a matter of days.

Three years. The cycle runs from the certification decision rather than the audit date. Continued validity depends on surveillance audits during the cycle and a recertification audit completed before the expiry date. If surveillance is refused, or findings are left unresolved beyond the agreed time, the certificate can be suspended or withdrawn.

No. There is no UK legislation requiring ISO 9001 and certification is voluntary. In practice it is often contractual: many public sector frameworks, tier-one contractors and regulated clients set it as a condition of tendering or supply, which can make it commercially necessary even though it is not mandatory in law.

We return during the certification cycle and sample part of the system rather than all of it. Internal audit, management review, objectives, nonconformities, complaints and any changes since the last visit are examined every time. Across the full three-year cycle, every clause and every site within the certified scope is covered.

No. The 2015 revision removed the requirement for a quality manual and for documented procedures named individually. You must keep the documented information the standard specifically requires, plus whatever your organisation needs to run its processes reliably. Many organisations still keep a manual because it suits their staff and their customers, which is entirely acceptable.

Certifying against more than one standard?

Where you hold several standards, shared clauses are assessed once in a combined visit rather than as separate audits. Talk it through with an assessor before you decide what ISO 9001:2015 should sit alongside.