How long does it take an SME to implement ISO 9001?

It's the second question every SME asks, right after cost: how long is it going to take to actually hold the certificate? The rough answer, under normal conditions, is 4 to 6 months from when you start working on it to when you pass the certification audit. But that number hides several phases worth knowing about.

The phases of the process, with typical duration

1. Initial assessment (1-2 weeks). Reviewing what you're already doing well without realizing it, and what still needs building from scratch. The more organized your company already is, the shorter this phase.
2. System design (3-6 weeks). Defining the scope, the policy, the process map, risks and opportunities, and the document structure — the "skeleton" of the system.
3. Actual implementation (6-10 weeks). This is where the system stops being paper and becomes daily work: training the team, starting to generate real records (non-conformities, indicators, training records), and getting people used to using it.
4. Internal audit and management review (1-2 weeks). A check of your own, before anyone from outside comes in, that everything works as it should.
5. Certification audit (1-3 audit days, split across two stages). Stage 1 checks that the documentation is complete; stage 2, weeks later, checks that the system genuinely works day to day.

What lengthens the process

• Companies with several sites or very different activities from one another.
• Low actual availability from the team to dedicate time to it — the system doesn't implement itself.
• Needing to fix non-conformities found in your own internal audit before moving on to certification.
• Starting without a clear picture of the applicable legal requirements, forcing you to stop and research them halfway through.

What shortens it

• Already having documented processes even if they're not "in ISO format" — adapting is faster than building from zero.
• A small team with the authority to decide quickly, without long approval chains.
• Using a platform with the document structure already in place, instead of starting from a blank page.
• Having a consultant experienced in your sector, who already knows what questions to ask.

Can it go faster than 4 months?

For very small companies with simple processes, yes — certification processes have been completed in 2-3 months. But it's worth being careful about rushing: a system put together in a hurry, without the team really internalizing it, tends to fail its first surveillance audit, when the auditor checks whether what they saw on day one is still alive a year later.