ISO 9001 — Quality Management System
It certifies that you follow your process, and the evidence is your own failures
What ISO 9001 is
ISO 9001 is the international standard for quality management systems. Large commercial clients, housing associations and public sector bodies increasingly ask for it, because it gives a buyer a systematic reason to expect consistency without having to inspect the work.
Certification comes from a UKAS-accredited certification body. It costs around £4,000 and runs on a 36-month cycle: annual surveillance audits in years one and two, and a full re-certification audit in year three.
The first thing to understand is what it does not certify. It does not say the work is good. It says that you have a documented way of doing the work, that you follow it, and that you correct it when it goes wrong. A business with a poor process, followed consistently, can pass.
The standard audits the system, not the roof
That distinction is the one tradespeople most often get wrong, in both directions. Some assume certification is a statement about workmanship and are surprised by how little it asks about the work itself. Others assume it is paperwork for its own sake and are surprised when an auditor asks to follow a single job from enquiry to completion and see every decision on the way.
The auditor is asking whether the thing you say you do is the thing you do. Where your documented process says a quote is reviewed before it goes out, they will find a quote and look for the review. Where it says a complaint is logged, they will ask to see the log.
That is why a lightweight system, honestly followed, beats an impressive manual nobody uses. The impressive manual produces non-conformances for every gap between the text and reality; the lightweight one describes what actually happens, so there are none to find.
What certification requires
-
A quality management system
Covering policy, objectives, process mapping, document control, records and customer feedback, addressing the 2015 version of the standard. Evidence: the manual and procedures.
-
An internal audit programme.
At least one full internal audit of every process before certification, by trained auditors. Evidence: schedule, reports and training records.
-
A management review
, held and minuted, covering performance, customer satisfaction and objectives.
-
A corrective action process
, shown working. Evidence: a non-conformance register with examples closed out.
-
Customer satisfaction measurement
, then a two-stage certification audit.
The register of failures is the point
Of everything on that list, the non-conformance register surprises people most, because it asks for evidence that something has gone wrong. A business with an empty register does not look excellent to an auditor. It looks like a business that either does not notice problems or does not write them down.
That reverses the instinct most owners have, which is to keep mistakes out of the paperwork. Under this standard, a logged problem with a cause, a fix and a check that the fix held is the strongest thing you can show. It is the proof that the system works, produced by the system.
For a trade business the raw material is plentiful: a part ordered wrongly, a job that overran, a customer who was told the wrong day, a snag on handover. Most firms deal with these perfectly well in the moment and then lose the lesson.
Capturing them takes a minute. Looking for patterns takes a monthly meeting. Between them they are most of the system.
What you have to keep doing
Surveillance audits in years one and two of the cycle, and re-certification in year three.
Internal audits continuing annually, and management reviews at least once a year.
All three produce records, and the records are the ongoing cost: the £4,000 is the smaller number once you count the time to keep a living system going.
The mistakes we see most
-
Buying a template system.
It describes a business that is not yours, and every gap becomes a finding.
-
An empty non-conformance register.
To an auditor it looks like blindness.
-
Treating it as a project.
The standard is the thing you do every month afterwards.
-
Pursuing it without a buyer asking.
Look at what the tenders you want actually require before spending £4,000.
Where this lands in Gaffer
Jobs, snags and customer feedback are recorded as they happen, which gives the system its raw material without a separate logging exercise. A snag raised on a job is already a dated record with an owner and a closure.
Satisfaction measurement and the history of what went wrong and what changed sit in the same place, so the management review is working from the actual year rather than from memory.
Who actually asks for it, and when
ISO 9001 is requested far more often in writing than in conversation. It appears as a line on a pre-qualification questionnaire, a tick-box on a framework, or a scoring criterion on a tender, and the person asking has usually never spoken to you.
That is useful because it makes the decision checkable. Before spending around £4,000 and building a system, look at the last ten tenders or frameworks you wanted to bid for and count how many required it, how many scored it, and how many accepted a lesser alternative such as your own documented procedures.
The pattern is typically lumpy. A business chasing housing association or public sector work meets it constantly. A business doing domestic and small commercial work may never meet it at all, in which case the money is better spent on the schemes buyers in that market do ask about.
The standard is a good tool for the right firm and an expensive ornament for the wrong one. The questionnaires will tell you which you are.
Making it pay once you have it
If certification is justified, the marketing mistake is to treat it as a logo. Buyers who ask for the standard are also asking what it does for them, and a firm that can answer in specifics is well ahead of one that can only display the mark.
The specifics are the ordinary products of the system: how a complaint is handled and how quickly, what happens when a job overruns, how customer feedback is gathered and what changed because of it. A short page describing those, written plainly, is far more persuasive than the certificate number.
It also helps with the renewal. The surveillance audits in years one and two are far less stressful for a business that uses its system in sales conversations, because the records are live rather than assembled.
Tender responses are the clearest place to see the value. A section that points to actual corrective actions, with dates and outcomes, outscores a section that says the company is committed to quality.
Questions contractors ask
Does ISO 9001 prove our work is good? It proves that you have and follow a system for managing quality and correcting faults.
How long does certification last? Three years, with annual surveillance audits between.
Is it worth £4,000? If the contracts you want ask for it, yes. If nobody asks, check before you spend.
Do we need a consultant? Not required, but the system must describe your real business, however it is written.
Get your free website review · Logging snags and fixes as you go? See Gaffer