What ISO 9001 is
ISO 9001 is the most widely used management system standard. It sets requirements for a quality management system (QMS): how you understand customer requirements, control your processes, handle complaints and nonconformities, and improve over time. It applies to any product or service, from software to spare parts.
A new edition, ISO 9001:2026, was published on 16 September 2026, replacing ISO 9001:2015. Certification bodies report a three-year transition, with ISO 9001:2015 certificates ceasing to be valid after 30 September 2029. The changes are moderate: more emphasis on quality culture and ethics, a restructured clause on risks and opportunities, and climate change as a context issue, which had already been added to the 2015 edition by a 2024 amendment.
BookMyLLC helps you build or update the QMS and prepares you for the audit. The certificate is issued by an independent, accredited certification body, not by us.
Who this is for
- Manufacturers and exporters whose buyers require a certified supplier.
- Service companies, including IT, logistics, staffing and consulting, bidding for corporate or government work.
- Startups that want repeatable processes before they scale headcount.
- Companies already certified to the 2015 edition that need to plan the move to 2026.
Size is not a barrier. A five-person agency can certify with a lean system of a few process maps, a complaint log and a supplier list. A factory with several lines will need more records, but the clauses are identical. What matters is that the system reflects how you actually work and that someone owns it.
If you are an Indian or other non-US exporter selling to American or European buyers, ISO 9001 is often the first certificate procurement teams ask for. It is also frequently a scoring item in government tenders in India, the Gulf and elsewhere, so check the tender documents you plan to bid on before you set your scope.
What BookMyLLC handles
- Gap analysis against the current edition, or a delta review if you hold a 2015 certificate.
- Process mapping: inputs, outputs, owners and measures for each core process.
- Quality policy, objectives, and the documented information the standard requires.
- Risk and opportunity register, supplier evaluation and customer feedback processes.
- Internal auditor training for your staff.
- A pre-assessment internal audit and management review.
- Help choosing an accredited certification body and preparing for Stage 1 and Stage 2.
- Support between surveillance audits if you want it.
Step-by-step process
- Kick-off and gap analysis. We review how work really flows today and list the gaps against each clause.
- Scope. You decide which sites, products and services are covered.
- Process design. Core processes are mapped and simple measures are chosen for each.
- Documentation. We write only what the standard requires and what your team needs to work consistently.
- Implementation. The QMS runs, producing records such as complaint logs, supplier reviews and corrective actions.
- Internal audit and management review. Both are required before the certification audit.
- Stage 1 and Stage 2 audits. The certification body reviews documentation, then tests the system in operation. Nonconformities are closed before the certificate is issued.
Documents and information you need
- Company registration details and the addresses of sites in scope.
- An organization chart and job descriptions or role lists.
- Descriptions of your products or services and your main customers.
- Any existing SOPs, checklists, inspection records or customer complaints.
- A list of key suppliers and subcontractors.
Timeline
For a small or mid-sized business, implementation typically takes three to six months before the certification audit. The pace depends on how many processes are in scope and how quickly records build up. Certificates are generally valid for three years, with annual surveillance audits.
If you are certifying now, ask your certification body which edition it will audit you against. Starting on the 2026 edition avoids a second transition within three years.
Common mistakes to avoid
- Over-documenting. A 200-page quality manual nobody reads creates audit findings, not quality.
- Choosing a non-accredited certifier. Buyers may reject certificates that do not come from an accredited body. Check the accreditation before you sign.
- Management absence. Top management leadership is a clause of its own, and auditors will interview leaders.
- No corrective action trail. Complaints and defects need a documented root cause and fix.
- Ignoring the 2026 transition. A 2015 certificate issued today will still need to move before 30 September 2029.
What changes in ISO 9001:2026
If you already hold a 2015 certificate, the move to 2026 is an update, not a rebuild. The clause structure stays close to what you know. The main areas to review are:
- Quality culture and ethical behaviour. Leadership is expected to promote them, and auditors may ask how.
- Risks and opportunities. Clause 6.1 is split into clearer subclauses, so your risk register may need restructuring.
- Climate change. You decide whether it is relevant to your context and to interested parties, which the 2024 amendment already required.
- Organizational knowledge and awareness. Expect more questions about how know-how is captured and shared.
A delta review against these points, followed by a transition audit at your next surveillance or recertification visit, is the usual path. Check with your certification body when it will be accredited to audit the 2026 edition.
Costs outside our fee
You pay the certification body directly for its audits. Its fee depends on headcount, sites and complexity, and is calculated under accreditation rules, so quotes for the same scope should be broadly similar. Internal time is the other real cost: plan for process owners to spend a few hours a week during implementation.
Related services
Quality systems often sit alongside other standards. See ISO 27001 for information security, ISO 14001 for environmental management and ISO 45001 for health and safety. Fees depend on size and scope, so check current pricing or book a call for a quote.
ISO 9001 at a glance
| Question | Short answer |
|---|---|
| What it covers | A quality management system: how you plan, deliver and improve your product or service. |
| Who certifies | An independent certification body, not the standards organisation. |
| Validity | Three years, with surveillance audits between. |
| Who needs it | Companies whose customers or tenders ask for it, or who want consistent delivery. |
| Typical effort | Three to six months for a small or mid-sized business. |
The certification path
| Stage | What happens |
|---|---|
| Gap analysis | Compare what you do today with the standard |
| Build the system | Write the documents and processes the standard requires |
| Run it | Operate the system long enough to produce records |
| Internal audit and management review | Check the system yourself before the auditor does |
| Stage 1 audit | The certification body reviews your documents and readiness |
| Stage 2 audit | The certification body audits how the system works in practice |
| Certificate | Issued for three years, with surveillance audits between |
The pace depends on how many processes are in scope and how fast records build up. Ask your certification body which edition it will audit you against before you start.
Benefits you can expect
- Fewer errors and rework, because processes are written down and followed.
- Easier tenders and customer approvals.
- Clear responsibilities and records.
- A habit of reviewing results and acting on them.
Certification is not a guarantee of quality, but it shows that you have a system and follow it. Learn how it differs from ISO 13485 for medical devices.
