WHAT IT IS
Quality Management
The international standard for managing and ensuring quality
CURRENT VERSION
ISO 9001:2015
2026 revision expected soon
CERTIFIABLE?
Yes
Through an accredited certification body
BEST FOR
Any organisation
Common in tenders & supply chains
STANDARD EXPLANATION
What is ISO 9001?
ISO 9001 is the international standard for quality management systems — a QMS. It's the most widely adopted management system standard in the world, used by organisations of every size and sector. The common misconception is that it's about product quality or making everything "high-end." It isn't. It's about having consistent, well-understood processes that reliably deliver what you promised your customers — and improving them over time.
The current published version is ISO 9001:2015. It's built around seven quality management principles (things like customer focus, leadership, a process approach, and continual improvement) and uses the same harmonised high-level structure shared by other ISO management standards, which makes it straightforward to run alongside something like ISO 27001. Risk-based thinking runs through the whole thing.
A revision — ISO 9001:2026 — has reached final draft stage and is expected to publish around September 2026. It's evolutionary, not a rebuild: clearer emphasis on quality culture, ethical behaviour, and climate considerations. A system built on the 2015 version today remains the right foundation, with a three-year window to transition once the new edition lands.
The internal audit isn't optional. Clause 9.2 of the standard requires you to run internal audits of your QMS at planned intervals — and you'll need evidence of them to certify and to keep certified. It's one of the most common things we're brought in to do.
WHY PEOPLE COME TO US FOR IT
Do you actually need ISO 9001?
It's rarely a legal requirement, but for many businesses it's a commercial one. The need usually turns up in one of the following ways.
01
A tender or customer requires it. Public-sector contracts and larger supply chains frequently ask for ISO 9001 before you can even bid — and a deal is waiting on it.
02
You want consistency as you grow. Things currently run on a few people's memory and goodwill. You want processes that don't fall apart when someone's on holiday.
03
You want a credible quality signal. Certification is a recognised, independent way to show customers you're reliable — useful when winning and keeping business.
HOW WE HELP
Two ways in. Same principle throughout.
Whether we're independently auditing your QMS or helping you build it, you stay involved and walk away understanding it. Here's how that splits for ISO 9001.
Audit & Assessment · Independent
We check your system against the standard.
Impartial, evidence-based work — and kept separate from your certification body, so nobody's marking their own homework.
-
Gap analysis against ISO 9001 before you commit
-
Internal audits to satisfy clause 9.2 (required to certify)
-
Efficiency assessments to ensure things are running smoothly
-
Clear findings — conformities, nonconformities, observations
Implementation Support · Collaborative
We help you build the QMS — alongside you.
Hands-on help with the parts that genuinely need it, with your team driving the work so you can run it afterwards.
-
Scoping your QMS and mapping your real processes
-
Building the risk assessment and treatment plan
-
Writing policies and procedures with you, not for you
-
Setting up the audit, review, and improvement cycle
COMMON QUESTIONS
ISO 9001 questions we hear a lot
Is ISO 9001 about the quality of my product?
Not directly. It's about your management system — having defined rules and frameworks, along with consistent, repeatable processes that reliably deliver what you committed to. A business making a simple product extremely consistently can meet it; a business making a sophisticated product chaotically would struggle.
Is ISO 9001 mandatory?
No, it's not a legal requirement. But it's often required commercially — particularly in public-sector tenders and larger supply chains, where it can be a condition of bidding at all. ISO 9001 expands into numerous other standards depending on the specific sector - some include quality management standards for medical equipment, or for health and safety equipment.
Should I wait for ISO 9001:2026?
No. The 2015 version is current and fully valid, and the 2026 revision is evolutionary rather than a rebuild. A system built on 2015 today is the right foundation, and you'll have a three-year transition window once the new edition publishes. Something done now is always better than something done later.
Is an internal audit required?
Yes. Clause 9.2 requires you to run internal audits of your QMS at planned intervals. You need evidence of internal audits both to achieve certification and to keep it at each surveillance visit. Using an independent auditor keeps those findings credible — and is exactly the kind of work we do.
Can I run it alongside ISO 27001 or any other ISO standards?
Yes, and many do. Many ISO standards share the same high-level structure, so you can operate an integrated management system rather than two separate ones — less duplication, fewer audits. If done correctly, the standards can complement each other and help you grow your business in a mature and consistent way.
Do you issue the certificate?
No — and that separation matters. The certificate is issued by an accredited certification body after their own Stage 1 and Stage 2 audits. We're independent of that process. We help you get ready and run the internal audits the standard requires, but we don't mark our own work or yours.
RELATED STANDARDS
Often comes up alongside
ISO 27001
The security counterpart, frequently run as an integrated management system with ISO 9001.
Information Security
ISO 42001
The newer standard for managing AI responsibly - increasingly relevant for tech companies handling data.
AI Management
ISO 20000
Quality thinking applied specifically to how IT services are delivered and improved.
