ISO 9001 certification is obtained when an organisation sets up its quality management system, runs it for a few months and then passes a two-stage audit by an accredited certification body. Preparation consists of a gap analysis, documentation, an internal audit and a management review. The certificate is valid for three years, with a surveillance audit every year during this period.
Which version should you certify against?
The new edition of ISO 9001, ISO 9001:2026, was published on 16 September 2026. According to the transition timeline announced by ISO/TC 176, from 31 March 2028 new accredited certificates will be issued only against the 2026 edition. Organisations holding an ISO 9001:2015 certificate have until 30 September 2029 to transition. An organisation starting to set up its system today can avoid a second transition two years later by basing it directly on the 2026 edition. The content of the standard is explained in the what is ISO 9001 entry.
How does certification work step by step?
- Scope and gap analysis: The services and sites to be included in the system are defined; current practices are compared with the clauses of the standard.
- Process design and documentation: The quality policy, measurable objectives, process map, risk and opportunity assessment and mandatory records are prepared.
- Implementation: The system is run on site and produces records. The auditor wants to see evidence of implementation; in most organisations this period lasts at least a few months.
- Internal audit: A trained auditor independent of the work being audited checks all clauses.
- Management review (YGG): Top management evaluates objectives, customer feedback, nonconformities and resource needs.
- Stage 1 audit: The certification body reviews the documentation and state of readiness.
- Stage 2 audit: The effectiveness of implementation is audited on site. A corrective action plan is submitted for any nonconformities found.
- Certification decision: Once nonconformities are closed, the certificate is issued; annual surveillance audits are carried out within the three-year cycle.
What determines duration and cost?
| Factor | Effect |
|---|---|
| Number of employees | The number of audit days is calculated from the number of employees under IAF rules |
| Number of sites | Branches, warehouses and offices are audited by sampling |
| Complexity of scope | Design, multimodal transport or outsourced processes extend the duration |
| Current maturity | Preparation is shorter in an organisation used to keeping records |
| Consultancy | Optional; not included in the certification fee |
For a single-site logistics company with a few dozen employees, the process from preparation to certificate is usually completed within three to six months; in multi-site structures it takes longer.
How do you choose a certification body?
For the certificate to be recognised internationally, the body must be accredited for the relevant sector scope by TÜRKAK (Turkish Accreditation Agency) or another accreditation body that is a signatory to the IAF mutual recognition arrangement. For transport and storage, the scope should include sector code EA 31. Selection criteria are explained in detail in the choosing a certification body entry. The certificate issued should be verifiable in the IAF CertSearch database; the method is in the verifying certificate validity entry.
Common mistakes
- Using an off-the-shelf document set with the company name changed; the auditor immediately sees the contradiction with practice on site.
- Having the internal audit done by the person running the process.
- Obtaining a certificate from a body without accreditation or with a non-matching scope; it is not accepted in tenders or customer audits.
- Writing the scope narrower than necessary, for example certifying only the head office.
How does Voltim Global support this?
Voltim Global holds ISO 28000 and ISO 50001 management system certificates, an SQAS assessment and the TİO authorisation certificate of the Ministry of Transport (Ulaştırma Bakanlığı). Companies carrying out supplier evaluations can verify the validity of these certificates from the records of the issuing body; certificate and compliance questions are handled under regulatory consultancy.