ISO 9001 Frequently Asked Questions (FAQs)

How much does ISO 9001 certification cost?

The cost depends on factors like company size, complexity, risk level, and how ready your current systems are. However, Core Business Solutions offers programs in a range of $5,700 – $15,000. You’ll also need to budget for process improvements, copies of the standard, and the Certification fees from a Certification Body. We can help you estimate these costs. The best way to know your total cost is to request a custom quote based on your business.

What changed with ISO 9001:2015?

The 2015 version introduced Annex SL, a common framework used across ISO management system standards. This made it easier for businesses to integrate ISO 9001 with other standards like ISO 14001 (environmental) or ISO 45001 (health & safety). To learn more visit this article about ISO 9001:2015 Requirements.

What changes are expected in ISO 9001:2026?

The 2026 update is currently in development. While the core principles of quality management will remain, updates are expected to address:

• Digital transformation (AI, automation, and new technology in quality systems)
• Sustainability and ESG (greater emphasis on environmental and social responsibility)
• Risk and resilience (more guidance for global supply chain challenges)
• Customer experience (a stronger focus on customer expectations and outcomes)

At Core Business Solutions, we’re tracking these changes closely so we can guide our clients through a smooth transition when the new version is released. ISO 9001 2026 is expected to be released in the Fall of 2026. Here’s an article on the ISO 9001 2026 Revision explained.

Do I need a Management Representative for ISO 9001?

No, the standard doesn’t require one. However, you will need someone in your organization to act as the main point of contact for your certification body and to coordinate audits. Many companies choose to appoint a management representative even though it is no longer a requirement. If your company is currently in a staff transition and needs a temporary “Outsourced Management Representative,” Core Business Solutions can help. Just email us at info@thecoresolution.com.

What does ISO 9001 mean by “risk”?

Risks can include things like inaccurate documentation, supply chain delays, price fluctuations, or process failures. The standard asks you to identify, evaluate, and control risks so your business can continue delivering consistent quality. This is one of the big changes coming in the ISO 9001 2026 revision.

Do I have to document every process visually?

Not necessarily. While process maps and flowcharts can make things easier, they’re not required. What’s important is that your processes are well understood, managed, and clearly documented in a way that fits your business.

Are documented procedures required in ISO 9001?

No, it is not a requirement in the ISO 9001 standard to document your procedures; however, it may be helpful for you to do so to manage your QMS properly. In addition, if you add other standards such as AS9100, procedure documentation may be a requirement.

What’s the difference between “maintained” and “retained” information?

• Maintained means keeping your systems and procedures in place (like infrastructure, training, or policies).
• Retained means keeping documented evidence (like audit records, inspection logs, or reports).

How can leadership be measured in ISO 9001?

Leadership is about visibility, communication, and inclusiveness. Employees should understand the company’s mission, strategy, and quality objectives. When leadership is strong, your team feels connected to the organization’s vision. Having executive leadership participate in ISO 9001 Management Reviews and in the ISO 9001 development process is important for your success. If leadership isn’t involved and your QMS isn’t working and continually improving, leadership involvement could be the missing piece.

Do I need to renumber my Quality Management System to match ISO 9001?

No. You don’t have to match your documentation numbering to the standard. What matters is that your processes meet the requirements, not how they’re numbered.