Straight Answers About ISO Certification

There's no single number. Costs depend on the standard, the size of your organization, the number of locations, and the certification body you choose. Broadly, there are two parts: the cost of preparing your system (internal effort plus any consulting support) and the certification body's audit fees. We can help you understand the likely range for your specific situation after a short discussion.

For a small organization with good existing practices, 2–4 months is realistic. Larger or more complex organizations typically take 4–9 months. The biggest variables are how much documentation needs to be created, how many locations are involved, and how quickly your team can implement and start recording.

Yes. Certification is maintained through annual surveillance audits and a recertification audit typically every three years. Each of these carries audit fees. Beyond that, there's the ongoing internal cost of maintaining the system — internal audits, management reviews and record keeping.

Scope is usually the difference. A low quote may cover only documentation templates with minimal hands-on support; a higher quote may include gap assessment, on-site implementation support, internal audit delivery and audit preparation. Compare what's actually included, not just the headline number. Also check whether the certification body's fees are included or separate.

To a point. The main lever is how quickly documentation can be produced and records accumulated. However, most standards require a minimum period of records — internal audit completed, management review held, and enough operational evidence — before the certification audit can happen. Trying to compress beyond that usually backfires.

Yes, significantly. Certification bodies calculate audit days based on employee count, number of sites and complexity of operations. More people and more locations means more audit days, which means higher fees. Preparation effort scales similarly, though not always linearly.

For many organizations, yes — though it's usually indirect. Typical returns include access to tenders and contracts that require certification, fewer process errors and rework, improved customer confidence, and clearer accountability internally. The direct financial return depends heavily on your market and how much you leverage the certificate commercially.

An internal audit is conducted by your own team (or a hired auditor) to check your system before the real one — it's a required part of the standard itself. A certification audit is conducted by the certification body's auditor, and its outcome determines whether you get the certificate. Internal audits should find issues; certification audits verify that the system is working.

A non-conformity is a gap between what the standard requires (or what your own documents say) and what actually happens. Minor non-conformities are common and usually don't block certification — you'll be asked to correct them within a set timeframe. Major non-conformities, which affect the system's ability to function, generally need to be resolved before certification proceeds.

Complete your internal audit and management review first, close any findings, make sure records exist for the required period, brief your team on what to expect, and have your documented information organized and accessible. The auditor will want to see evidence — not perfect answers from memory.

Evidence that your system is implemented and effective: records, interviews with staff, observation of processes, and consistency between what your documents say and what people actually do. Most auditors will spend more time talking to operational staff than reading documents — they want to see the system in practice.

Increasingly, yes — many certification bodies now offer fully or partially remote audits, particularly for smaller organizations with straightforward operations. The rules depend on the body and the standard. Audits involving physical processes (manufacturing, food handling) still typically require some on-site presence.

Typically once a year, within 12 months of the previous audit (with a permitted grace period around the anniversary date). The surveillance audit covers a subset of the system — usually internal audits, management review, complaints, corrective actions and any changes since the last audit.

Certification isn't usually pass or fail in a binary sense. If non-conformities are raised, you're given time to implement corrective actions and submit evidence. For minor issues, this is often handled without a return visit. For major issues, a follow-up audit may be needed. Certification is usually delayed rather than denied outright.

No. Certificates are issued by accredited certification bodies, which remain independent from consultants. Our role is to help you understand the requirements and prepare properly, so that you approach the certification audit ready. This independence is a deliberate part of how credible certification works.

Absolutely. Many organizations do. A consultant mainly saves time, reduces rework and helps avoid common pitfalls — particularly around documentation and audit preparation. If you have internal capacity and someone who understands the standard, it's entirely achievable on your own. We're happy to help at whatever level you need.

Gap assessment, guidance on which standards apply to you, documentation support, help implementing the system, internal audit support, and preparation for the certification audit. We also provide standalone resources — guides, checklists and templates — for organizations that prefer to work independently.

We can explain what to look for — accreditation, relevant industry experience, audit approach, cost structure — and share what we've observed working across the industry. But the final choice is yours, and it should be. We don't take commissions from certification bodies, so our guidance stays independent.

Our primary focus is Pan India support. That said, we've assisted businesses with international operations and can work remotely with teams in other regions where the fit is right. Get in touch and we'll be honest about whether we're the right support for your situation.

Reach out through the contact page, call, or email. A short initial conversation — usually 20–30 minutes — is enough for us to understand your situation and give you an honest view of what's involved. There's no cost or obligation at that stage.