← All resources

Resources

Your path to ISO 9001 certification in 10 steps

A practical guide for anyone who wants to certify ISO 9001: what to do, in what order and where organizations commonly go wrong. Here you can read the introduction and the first three steps; we email you the full guide.

Getting ISO 9001 certified is not paperwork: it is deciding how your organization wants to work and proving it to an independent body. This guide walks the whole path in ten steps, with the realistic effort of each and the mistakes we see most.

It works whether this is your first time or you held a certification before and want to take it up again. You can apply it with your own team or combine it with outside support; at SummaQ we are here to help you at every step.

Before you start

  • Timelines vary a lot with size, complexity and maturity; this guide makes no promises about duration.
  • Use the official standard text for exact requirements; here we paraphrase by area.
  • The steps are a logical sequence, but in practice some overlap.

Step 1. Be clear about why you want to certify

The reason shapes everything else: a customer requiring it, a tender, an internal need for order, or a mix. A certification obtained "just for the certificate" tends to produce documents nobody uses and trouble at the first surveillance audit.

  • Write on one page which business problem you expect to solve.
  • Confirm with customers which standard and edition they accept; some ask for sector standards built on top of ISO 9001.
  • Decide whether you certify the whole organization or a defined scope (set in step 3).

Common mistake

Starting to write procedures before knowing what the customer really asks for and what management expects to gain.

How we help

At SummaQ we help you put your goal into words and confirm with your customer what is expected of you.

Step 2. Secure real management commitment

The standard requires top management to be involved, and audits check it: they ask management what it decides, which resources it assigned and how it reviews results. A system held up only by the quality department rarely survives.

  • Name a project owner with real time and authority.
  • Assign budget and hours of key people from the start, not "when possible".
  • Agree a follow-up rhythm with management (for example, a monthly progress review).

Effort: low in hours, high in importance. One frank conversation with us at the start saves months later.

How we help

At SummaQ we are here to help you prepare that conversation with management and define a realistic follow-up plan.

Step 3. Define context and scope

Describe your organization: which products or services you deliver, to whom, from which sites, which external and internal factors affect you and what interested parties (customers, authorities, suppliers, staff) expect. This sets the scope of the system.

  • List main processes and how they relate: inputs, outputs, owners.
  • Write the scope clearly: which sites, products and activities are in.
  • Justify in writing any requirement you consider not applicable; exclusions must make sense.

Common mistake

A scope that is too broad out of habit, or trimmed to avoid something your customer will notice anyway.

How we help

At SummaQ we support you in defining a scope that makes sense for your business and holds up in the audit.

Coming up in the full guide

  1. Run a gap assessment
  2. Plan the project realistically
  3. Design or adjust processes and documentation
  4. Implement and train
  5. Carry out the internal audit
  6. Close actions and hold the management review
  7. Choose the body and pass the certification audit

Get the full report by email

We'll email you the full guide (all 10 steps, ready to read or print).

Also send the report to a colleague (optional)

We will send the report once, saying you sent it. We do not store that email or add it to any list.

Ready to put this into practice?

Let's talk about your organization's specific challenges and how we can help you solve them.

Request a quote↗