Last updated: 9 November 2026
ISO 9001 is the international standard for quality management. It shows customers you deliver consistently and improve over time. A small business needs it when tenders or customers ask for it, and it is certified by an independent accredited body after an audit.
What ISO 9001 involves
Documented processes
Clear, repeatable ways of working for the services you deliver.
Customer focus
You understand customer requirements and measure satisfaction.
Internal audits
You check your own processes regularly and fix what is not working.
Continual improvement
Management reviews results and acts on them every year.
| Stage | What happens |
|---|---|
| Gap assessment | Compare how you work today with the standard |
| Build and document | Write the processes, policies and records you need |
| Internal audit and review | Test the system and have management review it |
| Certification audit | An accredited certification body audits and issues the certificate |
| Surveillance | Regular follow-up audits to keep it valid |
How ABCOM helps
We bring in independent ISO consultants to guide the quality system, and use Vanta to keep your documents, tasks and evidence in one place. See how we help with ISO certification.
Quick answers
Is ISO 9001 about IT security?
No. It is about quality and consistency. For information security look at ISO 27001.
How long does it take?
It depends on size and how well your processes are already documented. Plan for several months from gap assessment to certificate.
Asked for ISO 9001 in a tender? Talk to us about the shortest sensible route.
Related answers and guides
- Which ISO standard does our business need?
- What is ISO 27001, and can a small business get certified with Vanta?
- How does ABCOM help with ISO certification?
- All ABCOM FAQs
Sources and further reading
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about Microsoft Defender and Purview. Free, friendly and no obligation.