07595 023361

03 October, 2024 | Category: ISO 9001 Certification, ISO 9001 Quality Management System

ISO 9001 Certification Process UK

Preparation, Stage 1 & Stage 2 Audits

Achieving ISO 9001 certification demonstrates that an organisation consistently delivers products and services that meet customer and regulatory requirements while driving continual improvement. Certification does not happen overnight. It follows a structured process led by an accredited certification body such as the British Standards Institution (BSI).

A clear understanding of preparation activities and the two-stage audit process helps organisations avoid delays, reduce nonconformities, and achieve successful certification first time.

1. Preparing for ISO 9001 Certification

Preparation forms the foundation of a successful certification journey. Organisations must first establish a compliant Quality Management System (QMS) aligned with ISO 9001:2015 requirements.

Key preparation activities include:

Gap Analysis and Readiness Review
Organisations should assess their current processes against ISO 9001 requirements. This identifies gaps in documentation, process control, risk management, and performance measurement.

QMS Development and Implementation
Teams must define and document processes that cover leadership, planning, support, operations, performance evaluation, and improvement. This stage also includes embedding a process approach and risk-based thinking into daily operations.

Internal Audit Programme
Internal audits test the effectiveness of the QMS before external assessment. Auditors should confirm that processes operate as described and identify opportunities for improvement.

Management Review
Senior leadership must review the QMS at planned intervals. This ensures that the system remains aligned with strategic direction, customer needs, and performance objectives.

Pre-assessment with Certification Body
Many organisations engage early with a certification body to confirm readiness and understand audit expectations. This reduces surprises during formal audits.

2. Engagement with the Certification Body

Once the organisation feels confident in its QMS, it selects an accredited certification body such as BSI. The certification body then defines the audit scope, confirms organisational sites, and agrees the audit plan.

The organisation provides documentation such as:

  • Scope of the QMS
  • Process maps and procedures
  • Quality policy and objectives
  • Internal audit reports
  • Management review outputs

This engagement ensures the audit team understands the business before the formal assessment begins.

3. Stage 1 Audit – Documentation and Readiness Review

The Stage 1 audit focuses on understanding whether the QMS design meets ISO 9001 requirements and whether the organisation is ready for Stage 2.

Objectives of Stage 1:

The auditor evaluates documented information and checks whether the organisation has established a suitable framework for compliance. This includes reviewing:

  • Context of the organisation and interested parties
  • Scope of the QMS
  • Process interactions
  • Documented procedures and records
  • Risk and opportunity management approach
  • Internal audit and management review status

Outcomes of Stage 1:

The auditor issues a Stage 1 report identifying:

  • Areas requiring improvement before Stage 2
  • Potential nonconformities or gaps
  • Readiness status for full certification audit

The organisation then addresses any findings before progressing.

4. Stage 2 Audit – Implementation and Effectiveness

The Stage 2 audit assesses how effectively the QMS operates in practice. This stage carries the most weight in the certification decision.

What auditors evaluate:

Auditors visit operational areas and verify that processes function as documented. They assess:

  • Operational control of processes
  • Customer requirements management
  • Competence and awareness of staff
  • Performance monitoring and KPIs
  • Internal audit effectiveness
  • Nonconformity and corrective action handling
  • Continual improvement activities

Auditors gather evidence through interviews, observation, and records review. They test whether the organisation consistently delivers conforming products and services.

Audit outcome:

At the end of Stage 2, the certification body issues a formal audit report. This includes:

  • Any nonconformities (minor or major)
  • Opportunities for improvement
  • Recommendation for certification approval or further action

If the organisation addresses any nonconformities within the agreed timeframe, the certification body grants ISO 9001 certification.

5. Certification Decision and Surveillance

Once the organisation meets all requirements, the certification body issues the ISO 9001 certificate. However, certification does not end the process.

Surveillance audits occur annually or semi-annually to ensure continued compliance and improvement. A full recertification audit takes place typically every three years.

Conclusion

ISO 9001 certification requires structured preparation, disciplined implementation, and active engagement with a certification body. Organisations that invest time in internal readiness, strong documentation, and effective internal auditing achieve smoother Stage 1 and Stage 2 audits.

A well-implemented Quality Management System not only achieves certification but also strengthens operational performance, customer satisfaction, and long-term business resilience.

Contact us today for a free consultation.

Name

ISO 9001 Consultants