Before buying ISO 9001 support, decide whether you need to build a quality management system, evaluate how it works or obtain independent certification. These are different assignments. A clearly scoped request helps you find the appropriate provider and compare proposals without paying for the wrong service.
ISO develops standards; it does not certify your organisation or issue your certificate. Independent certification bodies perform certification. ISO also explains that an organisation can implement a management system without choosing certification, although a customer or contract may require it. See ISO’s certification guidance.
Choose the role that matches the outcome
| What you need | Provider to discuss | Deliverable to specify |
|---|---|---|
| Build or improve the system | ISO 9001 consultant or implementation specialist | Agreed process improvements, implementation support, training and usable documentation. |
| Evaluate the system internally | Competent internal auditor, employed or contracted | Audit scope, evidence-based findings, report and follow-up arrangements. |
| Obtain independent certification | Certification body | Independent assessment against the specified standard, with certification subject to its decision. |
| Clarify your starting point | Scoping or gap-assessment support | A defined assessment of gaps, priorities, responsibilities and next steps. |
Buying consultancy does not buy a certification decision. An internal-audit report does not replace the certification body’s assessment. Conversely, a certification quote should not be assumed to include implementation work. Ask each provider to state exactly which role it will perform.
Start with the business requirement
Collect the wording of the customer, tender or internal requirement. Which legal entity, sites and activities must be covered? Is an accredited certificate required, and does the customer specify recognition conditions? When is the evidence actually needed? Distinguish a commercial deadline from an achievable project schedule.
Describe the organisation’s current system honestly: no formal system, partial implementation, existing certification, expansion, transition or findings to resolve. Give the provider enough context to scope useful work: activities, locations, approximate workforce, languages, operational complexity and internal availability. Do not send employee records or confidential customer files with the first enquiry.
Check the edition before signing
ISO’s current product page lists ISO 9001:2026. Existing certification and transition arrangements need to be discussed with the certification body; do not infer an expiry date for an existing certificate simply from publication of a new edition. State the agreed edition and transition deliverables in the proposal. Our ISO 9001 reference guide provides a starting point for the standard and its European adoption.
Evaluate competence and independence separately
For a consultant, ask for relevant sector experience, the proposed person’s role, an anonymised deliverable example and the division of work between your team and theirs. For an internal auditor, discuss competence, audit coverage and objectivity, including previous involvement in the work being audited. A course certificate alone does not explain how a person will handle your processes.
For independent certification, verify the certification body’s identity and relevant accreditation scope through the accreditation body’s current directory. UKAS explains the distinction between ISO 9001 certification and accreditation: it accredits certification bodies for defined scopes; those bodies assess organisations for certification.
Keep consultancy and independent certification responsibilities clear. ISO/IEC 17021-1 sets requirements for the competence, consistency and impartiality of management-system certification bodies. Ask the proposed certification body to address any relationship with your consultant and any prior audit or consultancy work. See ISO/IEC 17021-1 and EA’s accreditation FAQs. A bundled commercial offer should not obscure who makes the certification decision.
Compare proposals against five purchasing questions
- What is included? List processes, sites, standard edition, deliverables and exclusions. Separate implementation, internal auditing and certification fees.
- Who does the work? Identify the delivery team, your internal owners, required meetings and access to operational evidence.
- How will progress be accepted? Agree useful milestones: an approved scope, completed process work, an audit report or agreed corrective-action support. Avoid treating a generic template bundle as a completed implementation.
- What does the schedule depend on? Record staff availability, operating records, corrective actions and assessment scheduling. Request a realistic plan with dependencies.
- What will the full engagement cost? Compare professional time, travel, taxes, software, standard licences, follow-up work and recurring assessment charges where applicable.
Send a brief that produces useful responses
A practical opening brief is: “We need [implementation, internal audit or independent certification] for [activities and sites]. Our current stage is [stage], our customer requirement is [requirement], and our target timing is [date]. Please state the proposed scope, applicable edition, deliverables, exclusions, provider role and assumptions.”
Ask providers to explain uncertainties before they price them. Treat guaranteed certification, guaranteed audit success or a certificate without an appropriate assessment as reasons to investigate the offer carefully. Your organisation remains responsible for operating its management system.
Need the right type of ISO support? Describe your ISO project and select the service you need, or compare ISO consultant and internal-auditor profiles. Provider availability, competence, independence and contractual scope must be confirmed before appointment; a directory listing is not accreditation or a certification decision.