hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

United Kingdom · Certification

ISO 9001 certification in the United Kingdom

Achieve ISO 9001 certification in the UK with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.

  • Accredited certification
  • London office team
  • Effivity software included
  • Academy training included

Clients include

  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
In short

ISO 9001 certification in the UK at a glance

HSE Managing for health and safety (HSG65) refers to ISO 9001, yet none of the UK instruments checked makes it compulsory. Buyers in the UK ask for it anyway.

Under the Procurement Act 2023, a contracting authority may set qualifications as conditions of participation, but it cannot require a particular qualification without allowing for its equivalents. That rule shapes how ISO 9001 works in UK public procurement: rarely a legal requirement, yet a recognised way to show a supplier controls quality. Private buyers are less formal and frequently more demanding, particularly in the advanced manufacturing clusters around the Thames, Solent and Liverpool City Region Freeports. HSE's guide Managing for health and safety also names BS EN ISO 9001 among the formal systems an organisation may choose. ISO 9001 certification is granted by a certification body accredited by UKAS or by another accreditation body within the international mutual recognition arrangements; From its London office, Sterling prepares the organisation for that audit, building process maps, risk-based planning, internal audits and management reviews that reflect how the business actually operates, with Effivity and Sterling Academy included.

The need

Who needs ISO 9001 in the UK, and what happens without it

In the UK the question rarely comes from a law. It comes from the buyer, the regulator or the partner that wants proof before it signs. These are the organisations that get asked.

  • Suppliers bidding for public contractsConditions of participation may include qualifications, provided equivalents are allowed.
  • Manufacturers in the Freeports, from Thames to the SolentAdvanced manufacturing customers ask suppliers how quality is controlled.
  • Engineering, construction and facilities firmsHSE guidance lists BS EN ISO 9001 among formal systems an organisation may use alongside safety management.
  • Organisations preparing for IATF 16949, AS9100 or ISO 13485Each sector standard builds on ISO 9001.

Not sure which of these applies to you?Answer a short set of questions and your readiness report arrives by e-mail.

Take the ISO 9001 readiness check
Requirements

ISO 9001 requirements in the UK

Strip away the vocabulary and ISO 9001 requires a company to prove six things about how it delivers what customers order.

You know what customers expectYou understand customer and other relevant requirements, and confirm you can meet them before you accept an order or contract.
Leadership sets direction and owns qualityTop management sets the quality policy and objectives, assigns responsibilities and makes sure the system has the people and resources it needs.
Your key processes are defined and controlledWork is planned, documented where it matters and carried out under controlled conditions, including the work you outsource.
You deal with risks before they biteRisks and opportunities that could affect your products, services or customer satisfaction are identified and acted on in proportion.
Problems get fixed at the rootComplaints, defects and nonconformities are recorded, corrected and traced to their cause so the same problem does not return.
You measure, review and improvePerformance and customer satisfaction are monitored, internal audits and management reviews take place, and the results drive improvement.

In the UK these six sit alongside the local laws and regulations listed under drivers below; one system can evidence both. The detail is on the global hub: ISO 9001 explained →

How Sterling gets a UK company certified

How to get ISO 9001 certified in the UK

One team from the London office carries the work from scoping to certificate. England, Scotland, Wales and Northern Ireland, on-site from London; remote delivery for distributed teams.

  1. Discovery call and scopeEntities, locations, regulators and target date, agreed before any proposal.
  2. Gap assessment against ISO 9001 and the UK requirements that apply to youControls you already run for your regulators and customers are reused, not rebuilt.
  3. Your system built with your team in EffivityRisks, controls, evidence, incidents and reviews in one live system the auditor can see.
  4. Internal audit, management review and corrective actionsYour internal auditors trained by Sterling; the evidence proven before the certification body arrives.
  5. Certification body stage 1 and stage 2, then surveillanceAn accredited body audits and decides. Sterling supports the audits and the three-year cycle.
Included in every engagement
  • End to end, from one team
  • Effivity ISO & GRC software
  • Preferential Sterling Academy access, with complimentary awareness training for your people
  • Internal auditor training for your audit team, as applicable to your standard
  • Vulnerability assessment on ISMS engagements

The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements.Sterling does not certify. Certification decisions stay with independent bodies.

Time

How long does ISO 9001 certification take in the UK?

There is no standard duration: it depends on your scope and on how much of the system already runs. In the UK these are the factors that set the timeline.

  • Number of sites and processes in scope
  • Maturity of existing procedures and records
  • Internal audit and management review completed before stage 2
  • Certification body availability

Sterling agrees a dated plan with you on the discovery call, once the scope is known.

Cost

How much does ISO 9001 certification cost in the UK?

The cost has two parts: the consulting work to build and prove the system, and the certification body’s audit fees, which are quoted separately. In the UK these factors move both.

  • Headcount and number of sites
  • Complexity of products, services and outsourced processes
  • Certification body audit fees, quoted separately from consulting
  • Integration with ISO 14001 or ISO 45001

Sterling gives one customised, all-inclusive proposal after the discovery call, never before the scope is agreed.

Choosing a partner

ISO 9001 consultants and certification bodies in the UK

Two different organisations are involved. A consultant helps you build the system and prove it works; an accredited certification body then audits or assesses it and decides. Keeping the two separate is what makes the result credible to buyers and regulators.

  • Check that the body’s accreditation or approval covers ISO 9001 and your sector, and that its certificates can be verified online.
  • Ask the consultant how the local requirements in the UK are mapped into the same system, so nothing runs twice.
  • Ask for client references in your sector; Sterling’s client letters are available on request.
  • Agree who owns the evidence and the tool after the engagement; with Sterling the system stays yours, in Effivity.

Laws and regulations that drive ISO 9001 in the UK (3)

InstrumentHow it treats the standard
Procurement Act 2023 — conditions of participation guidanceDoes not name the standard
Conditions may include qualifications but must allow for equivalents; individual procurements set their own criteria.
UKAS accreditation of certification bodies (Accreditation Regulations 2009)Market driver
Accredited certification is available through the UK's sole national accreditation body; no mandate.
HSE Managing for health and safety (HSG65)Refers to / expects
Lists ISO 45001 and BS EN ISO 9001 among standards an organisation may choose to use; voluntary.

Accreditation, audit language and remote audits in the UK

Use a certification body accredited for this standard by UKAS or by another accreditation body within the international mutual recognition arrangements (Global ACI — Global Accreditation Cooperation Incorporated, formerly the IAF MLA); check that the accreditation scope covers the standard and your sector. No body is named here unless its UK accreditation scope has been verified. Edition and transition details: ISO 9001 hub →

Audit language

English. Agree the audit language with the certification body at application; Welsh public body clients may set Welsh-language requirements.

Remote and on-site

Stage 1 is often remote; stage 2 normally includes on-site audit of the sites in scope, subject to the certification body's rules.

ISO 9001 in the UK: questions clients ask

Can a UK public tender require ISO 9001?

Only with equivalents allowed. Procurement Act 2023 guidance lets a buyer set qualifications, experience or technical ability as conditions of participation, but a condition cannot require particular qualifications without allowing for their equivalents. The Act lists no ISO certificates, so each tender sets its own. Read the conditions carefully and confirm your position with your counsel.

Is ISO 9001 a legal requirement in the UK?

No. Nothing in the sources we hold makes it a legal requirement; demand comes from buyers and sector rules. HSG65, the HSE's guidance, lists BS EN ISO 9001 among standards an organisation may choose to use, and calls the choice voluntary. A customer or a tender may still ask for it.

Can ISO 9001 be combined with ISO 14001 and ISO 45001?

Yes, as one integrated management system. A single accredited certification body can audit them together, and HSG65 lists both ISO 45001 and ISO 9001 among standards an organisation may use. Combining them avoids duplicated procedures, internal audits and management reviews. Each standard's own requirements still need to be met and evidenced.

Read more

More on ISO 9001 for UK organisations

Explore

Other standards UK businesses ask Sterling for

Organisations in the UK often combine ISO 9001 with one of these, under one management system where the scopes allow.

All 23 standards Sterling delivers in the United Kingdom →

Next step

Start with a free discovery call from the London office

A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.

Sources

  1. Procurement Act 2023 — conditions of participation guidance — gov.uk (accessed 5 Oct 2026)
  2. UKAS accreditation of certification bodies (Accreditation Regulations 2009) — ukas.com (accessed 5 Oct 2026)
  3. HSE Managing for health and safety (HSG65) — hse.gov.uk (accessed 5 Oct 2026)
  4. United Kingdom Accreditation Service (UKAS) — ukas.com (accessed 5 Oct 2026)

Talk to a consultant

Plan your certification with the London team.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

uk@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice