ISO 9001:2026 (QMS)

Quality Management System

Ready to enhance your quality management system? We support both ISO 9001:2026, the current edition, and ISO 9001:2015. Our experts guide you from implementation to audit.

Quality that stands up to audit

One standard, three distinct needs. Whether you’re starting from scratch, preparing for an audit or managing an existing certification, choose the support that fits where you are today, with a clear scope and tangible outputs, shaped around your business, risks and deadline.

01 · Build

Implementation

Who it's forFor organisations pursuing certification or completing an implementation already underway.

Build a QMS your team can run and an auditor can test, delivered by senior practitioners.

Core deliverables
  • Gap assessment
  • Process map and scope
  • Risks and opportunities register
  • Quality policy and objectives
  • Certification readiness review
02 · Prove

Internal audit

Who it's forFor organisations preparing for certification, reviewing an existing QMS or approaching a surveillance audit.

Know where you stand before the auditor does, with an independent, evidence-based view of your QMS against ISO 9001:2026.

Core deliverables
  • Audit plan and schedule
  • Evidence and interview record
  • Findings register
  • Internal audit report
  • Corrective-action priorities
03 · Keep

Maintenance

Who it's forFor certified organisations that need ongoing support between audits.

Keep your certification valid and your QMS audit-ready as processes, customers, suppliers and requirements change, without the scramble before each audit.

Core deliverables
  • Annual QMS calendar
  • Records and evidence tracker
  • Updated risk and opportunity records
  • Management review pack
  • Surveillance readiness review

Exact deliverables are confirmed in your proposal after scoping.

How much does ISO 9001 cost?

Your budget should account for three elements: consultancy support, the certification body’s fees and your organisation’s own implementation effort.

Bitsecura provides a tailored quote after scoping your requirements. The fee depends on the services you need, the complexity of your organisation and how much work your team has already completed.

What affects the feeWhy it matters
Scope and complexityMultiple sites, products, services and processes require more assessment and coordination.
Existing quality practicesEstablished procedures, records and usable evidence can reduce the work required.
Internal capacitySome teams need targeted advice; others need more implementation support.
Engagement typeA standalone internal audit has a different scope from implementation or ongoing maintenance.
Delivery requirementsDelivery is remote by default. Any on-site activity identified during planning, and additional audit support, affect the fee.

Your proposal should make clear the deliverables, responsibilities, delivery arrangements, fees and any separately priced activities.

What should you budget for separately?

Your Bitsecura fee covers the work listed in your proposal. Three other costs sit outside it, and the first is the one clients most often confuse with consultancy fees.

  • Certification body fees. An independent, accredited certification body audits your QMS and decides whether to issue the certificate. It invoices you directly, separately from Bitsecura. Its fees typically cover the initial certification audit, annual surveillance audits and recertification at the end of the three-year cycle, and vary with your scope, headcount and number of sites. Get quotes from more than one body.
  • Your team’s time. Someone needs to own the QMS, join workshops, provide evidence and make decisions. The effort changes by stage, and we agree the expected involvement with you during scoping.
  • Improvements your starting point requires. Depending on where you begin, you may need process improvements, tooling, staff training or supplier remediation. These are not part of Bitsecura’s engagement unless your proposal expressly includes them.
Discuss your scope and request a quote

Remote delivery for UK, European and international teams

Workshops, document reviews, evidence assessment and many audit interviews can be delivered remotely. We agree meeting times, evidence-sharing arrangements and milestones with your team.

Where physical controls or operational activities need on-site assessment, we identify that requirement during planning. Your certification body determines the arrangements for its own assessment.

Senior-led, from scoping to audit

Every engagement is led by Arian Sheremeti, Bitsecura’s Principal GRC Consultant and Auditor, with more than 20 years of experience and a background at PwC and Deloitte.

You get a senior consultant and auditor with hands-on ISO 9001 implementation, internal audit and maintenance experience from the first scoping conversation, not a hand-off to a junior team. We work in a documented, repeatable way, and your policies, risk register and evidence stay in your own systems, so the QMS belongs to your organisation.

Frequently asked questions

How long does ISO 9001 certification take?

There is no single answer. Your timeline depends on the agreed scope, existing processes, internal availability and the certification body’s schedule. We agree a realistic plan with you during scoping.

A credible plan allows time to implement controls, collect operating evidence, complete the internal audit and management review, and address findings.

Do you support both ISO 9001:2026 and ISO 9001:2015?

Yes. We implement, audit and maintain quality management systems against ISO 9001:2026, the current edition, and we also support organisations that are still working to ISO 9001:2015.

Can you help if we have already started?

Yes. We assess what you have, identify the remaining gaps and agree where support will be most useful. You may need help with a specific activity, such as process mapping or the internal audit, rather than a complete implementation engagement.

Does Bitsecura issue the ISO 9001 certificate?

An external certification body conducts the certification assessment and decides whether to issue the certificate. Bitsecura provides implementation, internal audit and readiness support.

You can read more about the distinction in ISO’s guidance on certification.

What is the difference between Stage 1 and Stage 2?

Stage 1 assesses your QMS arrangements and readiness for the main certification assessment. Stage 2 evaluates implementation and effectiveness through interviews, records and other evidence.

We help you understand what to prepare and address gaps before the relevant assessment.

Do we need ongoing consultancy after certification?

No. Your organisation can maintain its own QMS if it has the capacity and competence. Ongoing support is useful when you need additional expertise, independent internal audits or help coordinating maintenance activities.

Get Started

Start with your scope, deadline and current position

Tell us whether you need implementation, an internal audit or ongoing QMS support. We will discuss your existing arrangements and the outcome you need.

  1. 1

    Free discovery call

    We learn where you are, what you need and when you need it.

  2. 2

    Scoping and proposal

    We prepare a tailored scope and proposal for you, also free of charge.

  3. 3

    Your decision

    If you decide to go ahead with the proposal, we take it from there.

Book a free discovery call

Explore Our Full Range of Compliance Services

View All Frameworks