ISO 9001 Certification Cost UK (2026): A Complete Breakdown

Written By: Fiona Parker, a BSI-qualified Lead Auditor in ISO 9001. Built and ran a certified ISO 9001 quality management system for six years before moving into auditing, and previously led IT teams in high-performance engineering, including at McLaren

Last Update:

5 August 2026

Grab our free ISO 9001 Toolkit.

Build your entire QMS with our set of templates. No catch.

The short answer, by business size

Certification body fees are based only on what we are seeing at the moment. This is the cost of the audit, not the work of building the system, and the thing most people are interested in.

The audit days column is not our estimate. It actually comes from Table QMS 1 of IAF MD 5, the mandatory document every accredited certification body has to follow. They only have control over the day rate, and the current 2026 UK rates are roughly £850 to £1,500 per day. The final column is what we typically see actually quoted, which is higher, for reasons explained immediately below.

“Effective personnel” means everyone working within the scope of certification, across all shifts, with part-time staff converted to a full-time equivalent. It is not your payroll headcount if some of the business sits outside your scope.

Add consultancy, internal time and tooling to get your real number. Those are covered further down.

Why the cost is higher than just the audit days

This is the gap that catches people out if they go over their invoice/breakdown carefully, and almost no published cost guide explains it. Multiply the audit days by a day rate, and you get a floor, not a total. A certification body invoice usually also includes:

• An application or registration fee (why wouldn’t they…)
• The certification decision, which is an independent technical review carried out by someone other than your auditor and is not counted as audit time
• Certificate issue fee
• An annual licence, maintenance or account fee
• Travel and expenses for on-site audits, which are frequently quoted separately

Let’s be honest, like most businesses, and especially EasyJet, if they can add on an additional cost for something, they will do.

On top of that, MD 5 allows certification bodies to increase audit time above the table for higher-risk sectors, complex or highly varied processes, multiple sites, or heavy regulation. A regulated manufacturer (say pharmaceuticals) of 20 people can legitimately need more days than a 20-person consultancy.

The rule runs the other way too, and it has a hard limit: reductions cannot exceed 30 per cent of the table figure. So if you are quoted 2 days for a 25-person business when the table says 3, that is below the permitted floor and worth questioning rather than accepting. I guess that’s to stop people undercutting each other.

What you are actually paying for

There are five separate costs, and most quotes only cover the first one.

1. Certification body fees

This is the audit itself, carried out by an accredited certification body. It covers the Stage 1 audit (a document and readiness review), the Stage 2 audit (the main assessment), the certification decision, and issuing the certificate.

Certification bodies then charge by the audit day. UK rates currently run from roughly £850 to £1,500 per day, with smaller certification bodies at the lower end and large international ones at the upper end. Day rates rose noticeably through 2025 and 2026, driven by a shortage of qualified auditors against rising demand.

I recommend you check with any certification body whether travel is included or billed separately. On an on-site audit, it can add several hundred pounds, but can be lost in the small print.

2. How many audit days you need

This is the part most guides skip, and it is the single biggest driver of your cost.

The number of audit days is not a matter of negotiation. It comes from IAF MD 5, a mandatory document published by the International Accreditation Forum that every accredited certification body has to follow. The table in it has been unchanged since 2009. The inputs are:

• Number of employees, adjusted for part-time staff
• Number of sites
• Complexity and risk of what you do
• Whether processes are repetitive or highly varied
• Whether you are integrating with another standard such as ISO 14001 or ISO 27001

Two consequences are worth knowing. First, if a certification body offers you dramatically fewer audit days than another for the same scope, that is a question worth asking rather than a bargain. Second, scope discipline is the most effective lever you have on cost, because a tightly defined scope needs fewer days than a sprawling one.

3. Consultancy or coaching

Finally, if you are looking at a complete solution, then you have the optional, and the largest variable: consultancy fees, keeping in mind that those who consult with you are barred from certifying you (although quite a number of dubious companies offer both).

UK consultancy rates run from roughly £500 to £1,500 per day, and a small business typically needs somewhere between 5 and 15 days of support. It really depends on their approach.

The two extremes both have costs. Done-for-you hands-on consultancy produces a system quickly but often one the business does not recognise or maintain, which becomes a problem at the first surveillance audit when the auditor finds a gap between what the documents say and what actually happens. Doing it entirely alone is perfectly possible, but usually takes longer and produces more rework.

We price this as a fixed fee rather than day rates, for reasons set out further down.

4. Your own people’s time

Real, and almost always underestimated. For a 20-person business, expect whoever owns the QMS to spend a significant part of their week on it for three to six months, in the region of 100 to 200 hours. You can put a cost against this if you choose.

It is not a new invoice, so it rarely appears in budgets. It is still time not spent on customers and something that can shake people into awareness when they see how much their internal costs mount up.

5. The Few Additional Bits Easily Overlooked

So for completeness, I feel it worth highlighting the final few costs that might be overlooked for ISO 27001;

• A copy of the standard. Around £138 from BSI. You need at least one. [VERIFY current price]
• Training. Budget £500 to £1,500 for awareness training across the business, plus internal auditor training if you intend to audit in-house.
• Calibration. If you use measuring equipment, ISO 9001 requires it to be calibrated or verified. Cost depends entirely on what you have. You’ll know this better than anyone else, so my estimates here aren’t going to be helpful
• Nonconformity closure. If your Stage 2 audit raises major nonconformities, you may need an additional visit to verify closure before the certificate is issued, at additional cost. Again, this is worth clarifying with any certification body you consider working with.

UKAS-accredited versus non-accredited, and why the price gap exists

We’ve written elsewhere about the two main paths to certification here. While that was around ISO 27001, the concept holds true for ISO 9001 as well. To summarise;

Accredited certification

Accredited certification means the certification body is itself audited by a national accreditation body. In the UK that is UKAS, which is the government-recognised national accreditation body. UKAS accredits the certification body; the certification body certifies you. That chain is what makes the certificate mean something to a third party. In effect, there are auditors overseeing the auditors.

Accredited certifications for 9001 are highly valued because of the level of scrutiny, and some clients will mandate that it’s UKAS accredited.

Non-accredited certification

Non-accredited certification, however, means someone has assessed you and issued a document. It may be a perfectly honest assessment. It carries no independent verification of the assessor.

The practical test is simple. If you are certifying to win contracts, ask the customer or the tender document what they require. Most public sector tenders and most large-company supplier requirements specify UKAS-accredited, or accreditation by an IAF-recognised body. A non-accredited certificate will not satisfy them, and discovering that after you have paid is an expensive way to learn it.

Typically, we see SME’s getting non-accredited certification bodies to audit them for around £2,500.

You can verify any certification body on the UKAS website in about thirty seconds. Do that before you commit, whoever you are talking to.

Why the price gap is real. An accredited certification body has to follow the IAF audit day formula, employ qualified auditors, maintain its own accreditation, and submit to being audited itself. Those costs are structural. A certificate issued in five days for £875 has skipped some of them by definition, because the audit days alone at accredited rates would cost more than that.

There is a legitimate reason to choose non-accredited: if nobody is asking you for a certificate and you want the discipline of the standard, the assessment can still be useful. Just be clear which product you are buying.

The three-year cycle, not year one

ISO 9001 certification runs on a three-year cycle, and quotes that only show year one understate the commitment. Typically, any auditor will lock you into a three-year deal, meaning that if you move certification bodies, you’ll have to get reaudited, and you’ll still have to pay them…

Across a full three-year cycle, that means you are paying for something in the region of twice the initial audit time, plus the annual fees. A quote showing only year one shows you roughly half the story.

Add to that the ongoing internal cost: internal audits, management review, corrective actions and improvement work. If you use an external internal auditor, that is an annual line item. External internal audit fees typically run from £400 to £800 per day, though fixed-fee options exist.

A reasonable planning assumption is that maintaining the system costs somewhere in the region of 5 to 10 per cent of your initial certification investment each year.

The ISO 9001:2026 revision, and what it means for your budget

This matters if you are budgeting right now.

The new version of 9001, ISO 9001:2026, is expected to be published in September 2026, replacing ISO 9001:2015. It is an evolution rather than a redesign: the clause structure and core requirements stay the same, with additions around quality culture and ethical behaviour, climate change integration, and clearer risk and change management. For an organisation already running a 2015 system, this is an update, not a rebuild (phew!).

What this does and does not mean for cost:

• Do not delay certifying. Until the new edition publishes, ISO 9001:2015 is the only certifiable version, and certification to it remains entirely valid.
• Certification bodies cannot certify to the new edition immediately. They need to be trained and accredited to it themselves, which typically takes 9 to 12 months. The first ISO 9001:2026 certificates are not realistically expected until around mid-2027.
• You get a three-year transition. Certificates issued to ISO 9001:2015 remain valid through a transition period expected to run to approximately September 2029, subject to formal confirmation by the International Accreditation Forum.
• Budget for a transition, not a re-implementation. The realistic cost is updating documentation, briefing staff, and covering the changes at a scheduled surveillance or recertification audit rather than a separate exercise.

The one thing potentially worth doing now is building your system so that it can absorb a moderate revision without a complete rewrite.

What reduces the cost

In rough order of impact, the following can reduce your costs, so are worth consideration;

Get the scope right.
Audit days follow scope. A scope that covers what you actually do, rather than everything you might one day do, is the single largest lever available.

Get three quotes.
This is a good rule for life, and even more so when you are getting certification quotes. Accredited certification bodies vary substantially in price for the same scope (based on that day rate), and there is no quality penalty for choosing a smaller one, because they all operate under the same accreditation framework. Use the UKAS directory to find them.

Do the preparation yourself.
Every day of preparation you do is a day of consultancy you do not buy. Gather your existing records before anyone starts creating new ones.

Use the evidence you already generate.
Most SMEs already do the right things; what they lack is evidence that those things happened consistently. Emails, job records, meeting notes and customer correspondence are usually acceptable evidence. Building a system on records you already produce costs less and survives longer than one built on new forms.

Integrate if you hold more than one standard.
If you are also going for ISO 27001 or ISO 14001, a single integrated management system audited together costs considerably less than two parallel systems. The shared clauses only get audited once. Read: ISO 9001 vs ISO 27001

Do not buy a bigger system than you need.
Our mantra at Iseo Blue is “maturity can be added later. You can keep scope, complexity, tooling minimised, especially in year one. Certification cannot be un-bought.

Frequently asked questions