Gap analysis
Your current state compared against the clauses, identifying what is genuinely missing — we do not assume you start from zero.

We build a management system that reflects how you actually work and passes the certification audit — ISO 9001 for quality or ISO 45001 for occupational health and safety. After certification it stays an operating tool rather than a file revived before each annual audit.
Your current state compared against the clauses, identifying what is genuinely missing — we do not assume you start from zero.
A real process map reflecting your workflow and the ownership of each step, rather than a template that does not resemble your organisation.
Quality policy, manuals, procedures and forms, plus document and record controls — to the extent the standard requires and no further.
The longest stage: running the system for real and training the team on its procedures, because the standard wants evidence of operation, not intent.
A genuine internal audit with documented findings and corrections, and a complete management review — both explicitly required before certification.
Preparing your team for the auditor's questions, accompanying you through both audit stages, and closing any findings until the certificate is issued.
Assessment visit
Understanding the activity, sites and lines of work, and defining the certification scope precisely.
Gap analysis
A report setting out what is already in place and what is missing, with a remediation timeline.
Build and implement
Preparing documentation, training the team, running the system and collecting records.
Audit and certification
Internal audit and management review, then accompanying you through both stages of the certification audit.
A small organisation with clear processes may be ready in three to four months; a mid-sized organisation with multiple sites or production lines needs six months or more. The deciding factors are process discipline before starting and senior management's engagement.
The point most often missed when comparing proposals: ISO certification is not a single payment but a three-year cycle. A proposal quoting one figure without stating which part of that cycle it covers is hiding costs that surface later.
Implementation and readinessBefore certification
Gap analysis, building and running the system, collecting records, then the internal audit and management review. This is where the consultant's fee sits, and the stage that determines whether everything after it succeeds.
Certification auditYear 1
The certification body audits in two stages: documentation review, then the on-site audit. The certificate is issued once findings are closed. This fee is paid to the certification body, not the consultant.
First surveillance auditYear 2
A narrower audit verifying the system is still genuinely in use. Organisations that treated the certificate as paperwork for the wall collect their findings here.
Second surveillance, then recertificationYear 3
A second surveillance audit, after which a new cycle begins with a recertification audit. Certification is never granted for life.
Three to four months for small organisations with disciplined processes, and six months or more for mid-sized organisations with multiple sites or production lines. The timeline depends on existing documentation readiness far more than on headcount.
No, and we may not. We are the consultancy that builds the system and prepares you; the certificate is issued by an independent accredited certification body whose fee is paid directly to them. Any party offering both consulting and certification is breaching accreditation rules.
The cost is spread across a three-year cycle: the consultant's fee sits in the implementation stage before certification, then the certification body's fee at the Year 1 certification audit, and smaller fees at the Year 2 and Year 3 surveillance audits. When comparing two proposals, always ask which stage of the cycle the quoted figure covers.
Multiple sites, multiple production lines or activities, no prior documentation, and a requirement for English-language documents. Organisation size alone is not the main factor.
Rarely for missing documents. The recurring causes are staff who do not recognise the procedures written in their name, records produced in one batch before the audit and therefore reading as unrealistic, or an internal audit performed as a formality with no findings.
Yes. We work on ISO 45001 for occupational health and safety — the one most often required in contracting, site work and telecom — and ISO 14001 for environmental management. The stages are similar across all three, and they can be built as a single integrated management system rather than three parallel ones. Name the standard in your quotation request and we will set out the scope and timeline for it specifically.
The certificate is subject to periodic surveillance audits. We tie the system's indicators to measures you already track — on-time delivery, rework, complaint resolution — so the system stays in use and passes surveillance without an annual preparation campaign.
How long does ISO certification take? What actually drives the cost? And why do some organisations fail the audit despite complete paperwork? A practical walkthrough of the full path.
Request a quotation naming the standard, your activity and the number of sites, and you receive an itemised proposal covering the stages, timeline and fees.

See how our solutions simplify operations, improve efficiency, and deliver sustainable growth with smart digital tools.