How long does ISO 9001 certification take? For a UK SMB with 10–50 employees, the realistic answer is 4–9 months from starting implementation to holding a certificate. That accounts for documentation, implementation, internal audits, and the two-stage external audit process required by every UKAS-accredited certification body.

This guide breaks down each phase with honest time estimates and explains what speeds things up or slows them down.

The ISO 9001 Certification Timeline: Phase by Phase

Phase 1: Gap Analysis (2–4 Weeks)

Compare your current processes against ISO 9001 Clauses 4–10 and identify what's missing. A 15-person IT company with existing procedures may finish in 2 weeks. A 40-person manufacturer with no written processes may need 4.

Output: a scored gap analysis report with prioritised actions and assigned owners. We've published a detailed gap analysis checklist for this phase.

Phase 2: Documentation (4–12 Weeks)

This phase has the widest range and causes the most delays. You're writing or updating your quality policy, objectives, procedures, work instructions, risk register, competence matrix, and supplier records.

ISO 9001 mandates documented information for roughly 20–25 specific items, including: quality policy (Clause 5.2), QMS scope (Clause 4.3), quality objectives (Clause 6.2), competence evidence (Clause 7.2), internal audit results (Clause 9.2), management review records (Clause 9.3), and nonconformity records (Clause 10.2).

If your business runs on tribal knowledge, 12 weeks is realistic. If you already have procedures and an employee handbook, 4–6 weeks of reformatting may suffice.

The trap: over-documentation. A 20-person company needs 15–25 controlled documents, not 150. Write what people actually do.

If you need a starting point for your quality policy, our ISO 9001 quality policy generator creates a Clause 5.2-compliant draft based on your sector.

Phase 3: Implementation (4–8 Weeks)

You need to operate the system before your certification audit — following documented procedures, generating records, and proving the QMS works in practice. This includes staff training, running your first management review, and evaluating suppliers against your criteria.

Certification bodies typically want at least 3 months of operational records. Check with your chosen body before assuming a shorter period works.

Phase 4: Internal Audit (1–2 Weeks)

Clause 9.2 requires a full internal audit before certification. Cover every applicable clause. Document findings, raise corrective actions for gaps, and close them before the external audit.

The auditor must be independent of the processes they're auditing. In small companies, cross-audit: the operations manager audits finance, the finance manager audits operations. External consultants typically charge £400–£700 per day.

Phase 5: Stage 1 Audit (1 Day)

Your certification body reviews QMS documentation and confirms you're ready for Stage 2. They check your quality policy, scope, procedures, risk register, internal audit records, and management review minutes. The output is a report with any findings that must be resolved before Stage 2.

Allow 2–4 weeks between Stage 1 and Stage 2 for any corrective work. Budget £800–£1,200 (one audit day at UKAS-accredited rates).

Phase 6: Stage 2 Audit (1.5–3 Days)

The main certification assessment. The auditor interviews staff, reviews records, observes processes, and checks that documentation matches practice. Duration follows IAF Mandatory Document 5 (MD 5) guidance:

Employees	Typical Stage 2 Duration
1–10	1.5 days
11–25	2 days
26–45	2.5 days
46–65	3 days

No major nonconformities: certificate issued within 2–4 weeks. Major nonconformities: up to 90 days for corrective action, plus a follow-up verification visit. Budget £1,200–£3,600 for Stage 2.

Realistic Total Timeline

For a 20-person UK SMB:

Phase	Duration	Running Total
Gap analysis	3 weeks	3 weeks
Documentation	6 weeks	9 weeks
Implementation	6 weeks	15 weeks
Internal audit	1 week	16 weeks
Stage 1 + gap	1 day + 3 weeks	19 weeks
Stage 2 + certificate	2 days + 3 weeks	22 weeks
Total		~5.5 months

Fast track (existing processes, no issues): 4 months. Worst case (from scratch, audit findings): 9–12 months.

What Speeds Things Up

Existing documented processes. Even informal ones shrink the documentation phase.
Senior management commitment. An MD who attends reviews, approves documents promptly, and allocates resources removes bottlenecks.
Booking your certification body early. Popular UKAS-accredited bodies have 4–8 week lead times. Working backwards from a fixed audit date keeps the project on track.
Prior management system experience. If you already hold ISO 14001, ISO 45001, or ISO 27001, shared clauses (context, leadership, support) transfer directly.

What Slows Things Down

Over-documentation. 100 procedures when 20 would suffice adds 4–8 weeks.
Lack of dedicated resource. If the quality manager wears five hats, allocate 2–3 days per week specifically for QMS work.
Certification body availability. Q4 (October–December) is peak season. Book by July for a November audit.
Major nonconformities. Each one adds 4–12 weeks for corrective action.

Use our ISO 9001 cost estimator to model the full investment for your situation.

ISO 9001 Certification Timeline Checklist

This article is for general informational purposes only and does not constitute legal, regulatory, or professional compliance advice. ISO certification requirements vary by scope, sector, and certification body. Always verify requirements with your UKAS-accredited certification body or a qualified consultant before making compliance decisions.

How Long Does ISO 9001 Certification Take? UK Timeline Guide