One of the first questions we get from South African business owners considering ISO 9001 is simple: how long is this going to take? It depends, but on specific, predictable factors, not luck.
The typical stages
For most SMMEs, ISO 9001 certification runs through five stages: gap assessment, documentation and design, implementation, internal audit, and the external certification audit itself (split into Stage 1 and Stage 2 by the Certification Body).
What determines the timeline
Three factors matter more than anything else: how mature your existing processes already are, how much time your team can dedicate to implementation alongside day-to-day operations, and how quickly evidence (records, training logs, audit findings) can be generated once the system is live. A Certification Body needs to see the system operating before Stage 2, not only documented.
What “certification-ready” means
The timelines below are the time it takes to become certification-ready: your system is documented, implemented and in use by your people. That is not the finish line. A Certification Body will want evidence of a working system before the Stage 2 audit (records, an internal audit and a management review), typically after about 3 months of operation. That evidence can only start to build once you are certification-ready, so plan for that operating period as well.
Three realistic scenarios
Business size and complexity are the biggest single driver of how long it takes to become certification-ready:
- Sole trader or single-site operator: fewest processes to document and the fastest decision-making, so this end of the market moves through gap assessment and documentation quickest once committed. Realistically still 3-4 months to certification-ready, not weeks.
- 20-person workshop: the typical SMME case, at 3-6 months to certification-ready, depending on how organised existing processes already are.
- 100-person factory: more departments, more process interfaces, and more evidence to gather across shifts and teams push this toward 6-9 months to certification-ready.
These are typical ranges, not fixed quotes. Your gap assessment gives you a specific timeline for your business.
If a tender sets your deadline
Start the gap assessment as early as possible. The certification audit itself is usually the fastest part of the whole process; building a system that is operating is what takes the time.
Want a head start?
Download our 90-Day ISO 9001 Implementation Checklist, a practical, stage-by-stage outline of what the first three months of implementation involve.