Illustrative stock imagery from Pexels. Images do not identify the people, premises or events discussed and do not imply endorsement.
ISO 9001 is an internationally recognised standard for creating, implementing, and maintaining a Quality Management System. It is intended to be used by organisations of any size or industry, and it can be used by any company.
Edition review - 24 October 2026: ISO has published ISO 9001:2026. The original publication date is retained. Ask AAA to confirm the edition and certification arrangements applicable to your proposed audit; publication of a new edition does not establish AAA's accredited scope or a certificate transition deadline. See ISO's current edition information.
ISO 9001 sets requirements for a quality management system. A useful system helps an organisation understand customer requirements, control how it delivers its products or services and evaluate where improvements are needed. It should reflect the work that people actually do.
What a quality management system looks like in practice
Consider a customer order. Someone needs to establish what has been requested, check that the organisation can deliver it, communicate changes and confirm that the completed work meets the agreed requirements. Purchasing, staff competence and handling problems may all form part of that process.
The documents and records should support those activities. Their form and extent depend on the organisation and the applicable requirements. A large procedure manual is not, by itself, evidence of an effective system.
How an audit follows the process
An auditor could sample an order and follow it through quotation, planning, delivery and any subsequent complaint. They may interview the people involved and compare the records with what happens in practice. This is an example of an audit trail, rather than a promise that every audit will sample the same records.
The audit also considers how the organisation evaluates its system. Internal audit, management review, objectives and corrective action should help management understand performance and decide what needs attention.
What certification means
Independent certification provides assurance about the management system within its stated scope. ISO develops standards; it does not issue an organisation's certificate. A management-system certificate is not a product approval or a guarantee that every delivery will be error-free.
Customers or procurement exercises may require particular certification arrangements. A business should check those requirements before selecting a certification body, including the scope and accreditation that the customer will accept.
Reasons to consider it
A business may seek certification to provide independent assurance to customers or to have its management system assessed against a recognised framework. Clearer processes and better information can support improvements, but higher profits, lower costs and new contracts are not guaranteed.
The decision should follow the organisation's needs and the value of the proposed certification scope. Confirm the applicable edition and audit arrangements before committing to a programme.
AAA provides independent ISO 9001 certification audits. Your organisation remains responsible for designing and operating its management system and meeting its legal obligations. Tell us about your organisation for an indicative price or send a readiness enquiry. Certification follows an audit and an independent decision.
Sources: ISO 9001 catalogue; ISO explanation of certification.