ROTIX.io
ISO Compliance Consulting
Free Resource · ISO 9001:2015
SME Certification
Project Plan Overview
A phase-by-phase roadmap for a first-time SME pursuing ISO 9001 certification — covering the key stages, typical duration, and what to expect at each step. Engage ROTIX.IO to receive a full consultant-grade project plan tailored to your scope.
How to use this overview. This is a structured guide to the eight phases of a typical first-certification project. It will help you plan resource, understand sequencing, and have informed conversations with your management team or a certification body. A detailed task-level project plan with RACI, risk register, and milestone gates is available through a ROTIX.IO engagement.
Project Phases
| Phase | Title | Typical Timing | What Happens | Key Outputs |
|---|---|---|---|---|
| 0 | Initiation & Scoping | Weeks 1–2 | Project charter signed, QMS lead appointed, gap assessment questionnaire issued and completed, scope agreed. |
|
| 1 | Context & QMS Planning | Weeks 2–6 | Organisation context analysed, interested parties identified, quality policy drafted, objectives set, and risks and opportunities registered. |
|
| 2 | QMS Documentation | Weeks 4–14 | All mandatory procedures written and approved: document control, corrective action, internal audit, management review, training, customer satisfaction, supplier evaluation, and production or service provision. |
|
| 3 | Implementation & Training | Weeks 10–20 | Procedures rolled out, staff awareness training delivered, process owners briefed, and records generation begins. Allow a minimum of 6–8 weeks of live records before Stage 2 audit. |
|
| 4 | Internal Audit | Weeks 18–22 | Internal auditors trained and scheduled. All process areas audited. Corrective action requests raised for findings and closed out with evidence before the certification audit. |
|
| 5 | Management Review | Weeks 21–23 | Formal management review meeting held with top management. All nine inputs per clause 9.3.2 covered, outputs documented and actioned. |
|
| 6 | Certification Audit | Weeks 22–28 | UKAS-accredited certification body conducts Stage 1 (document review) then Stage 2 (implementation audit). Any nonconformities closed, certificate awarded. Book the CB no later than Week 10. |
|
Work Breakdown Structure — Top Level
1.0 Project Management
Charter · schedule · stakeholder communication · status reporting · closure
2.0 Gap Assessment & Scoping
Pre-assessment questionnaire · gap workshop · gap report · scope statement · exclusions
3.0 QMS Design
Context · interested parties · quality policy · objectives · risk register · process map · RACI
4.0 Documentation
Document control · corrective action · internal audit · management review · training · customer satisfaction · supplier control · production / service · calibration · nonconforming output
5.0 Implementation & Training
Leadership briefing · all-staff awareness · process owner handover · records generation · CSAT · supplier approval
6.0 Internal Audit Programme
Auditor training · audit schedule · audit execution · CARs · closure verification
7.0 Management Review
Inputs pack · meeting · minutes & action log
8.0 Certification Audit
CB selection · pre-audit readiness review · Stage 1 · findings response · Stage 2 · NC closure · certificate
Key Milestones
W2wk
Gap report issued & scope agreedRAG status per clause, signed off by top management
W6wk
QMS design baselinedPolicy, objectives, risk register and process map all approved
W14wk
All documented information issuedFull procedure set approved; master document register complete
W12wk
All-staff training completeAttendance records on file; process owners briefed
W22wk
Internal audit cycle closedAll process areas audited; all CARs closed with evidence
W23wk
Management review completeMinutes and action register signed off by top management
W26wk
Stage 1 audit passedCB observations closed; Stage 2 date confirmed
W28wk
Certificate awardedISO 9001:2015 certificate received; surveillance plan agreed
What First-Time SMEs Most Often Get Wrong
Starting documentation before the gap assessment. Writing procedures before you know what exists wastes weeks and produces documents that don't reflect how the business actually works.
Treating the quality policy as a formality. Auditors probe whether leadership can explain what the policy means in practice. A generic template pasted from the internet is a red flag at Stage 2.
Not generating records early enough. A well-written procedure with no records is worse than a mediocre procedure with 8 weeks of consistent evidence behind it. Start generating records in Week 10 at the latest.
Booking the certification body too late. UKAS-accredited CBs in the UK typically need 8–12 weeks' notice. Waiting until the QMS is finished routinely costs 2–3 months of delay to certification.
Running an informal chat as the management review. Clause 9.3.2 specifies nine required inputs. Missing even one is a nonconformity. Prepare a structured agenda with all inputs covered and documented outputs.
Ready to run a structured project — not just a checklist?
ROTIX.IO provides a full consultant-grade project plan, tailored task schedule, RACI, risk register, and milestone tracker as part of every engagement.
ROTIX.io
Free Resource · ISO 9001:2015 · compliance.rotix.io