FAQs
Common questions
Straight answers to the questions we're asked most often. If yours isn't here, get in touch.
How much does ISO certification cost?
There are two parts. Our consultancy fee depends on the size of your business, the number of sites, the standards involved and what you already have in place. We offer both fixed-price projects and day rates, so you can choose what suits the work. Either way, costs are agreed before work starts. The certification body charges separately for its audits, including annual surveillance visits, and you pay them directly. We can help you compare quotes from UKAS-accredited bodies.
How long does it take to get certified?
For most small and medium-sized businesses, three to six months from gap analysis to certification audit. It can be quicker if you already have good processes, and longer for multi-site or complex operations. You'll get a realistic timeline once we understand your business.
What's the difference between a consultant and a certification body?
A consultant, like SBMS, helps you understand the standard and build your management system. A certification body independently audits that system and issues the certificate. To stay impartial, certification bodies can't also consult for you, which is why the two roles are separate. Our lead consultant previously worked as a lead auditor for a certification body, so we know exactly what they look for. We recommend using a UKAS-accredited certification body, as their certificates carry the most weight with customers.
Do small businesses really need ISO certification?
It isn't a legal requirement, but many customers, main contractors and public sector buyers ask for it. Even businesses with only a handful of staff often need ISO 9001 or 45001 to get onto tender lists. We scale the system to your size, so a small business gets a simple, proportionate system rather than a manual written for a large corporation.
What happens at the certification audit?
It's done in two stages. Stage 1 checks that your system is in place and you're ready. Stage 2 checks it's working in practice: the auditor interviews staff, reviews records and may visit your workshop or sites. Any issues are raised as nonconformities or opportunities for improvement. Once any major issues are closed, the certificate is issued.
What happens after we're certified?
Your certificate lasts three years. The certification body carries out surveillance audits, usually once a year, then a recertification audit in year three. You'll need to keep carrying out internal audits and management reviews. We offer ongoing support to make this straightforward.
Do you offer integration or combination of ISO standards?
Yes, if required. We can integrate or combine standards such as ISO 9001, 14001, 45001, 45003 and 22301 into one management system, or keep them separate if that suits your business better.
Will ISO create a lot of extra paperwork?
It shouldn't. We build the system around what you already do and only add documents that are genuinely required or useful. A good system should save time by making things clearer, not create work for its own sake.
How much of our time will it take?
We do the heavy lifting on documentation. We'll need time with you and key staff for the gap analysis, reviewing documents, training and audits. The time needed depends on the scope.
Do you work remotely or on site?
Both. Some work, like document reviews and check-ins, is easily done remotely. Gap analyses, internal audits and site inspections are usually best done in person. We'll agree the right mix with you.