How to Prepare for an ISO 9001 Audit in the UK

You have spent weeks building your quality management system. You have written the procedures, briefed the team, run an internal audit. And now the certification audit is three weeks away.

For most UK small businesses, this is where the nerves kick in.

Here is the honest truth: the businesses that find their ISO 9001 audit straightforward are not the ones with the most elaborate documentation. They are the ones who have actually been using their management system day-to-day — and who know exactly what to have ready when the auditor arrives.

This guide gives you the practical ISO 9001 audit preparation checklist that our clients use, alongside the most common mistakes that delay UK SME certifications and how to avoid them.

What Is an ISO 9001 Certification Audit?

An ISO 9001 certification audit is an independent, structured assessment of your quality management system (QMS) against the requirements of ISO 9001:2015. It is conducted by a qualified auditor from your chosen certification body — in this case, UniCert.

For initial certification, the audit runs in two stages:

Stage 1 — Document Review. The auditor reviews your QMS documentation to confirm the required procedures, policies, and records are in place. For most UK SMEs, this is conducted remotely and takes two to four hours. Think of it as a readiness check before the main event.

Stage 2 — Certification Audit. The auditor verifies that your QMS is not just documented but actually working in practice. They will visit your premises (or conduct the session remotely), walk through your key processes, review records, and speak with your staff. This is where certification is earned.

What Are ISO 9001 Auditors Actually Looking For?

There is a common misconception that auditors are looking for a perfect system. They are not.

What a good auditor is actually looking for is evidence that your QMS is:

• Documented — You have written procedures for processes that affect quality
• Implemented — Staff are following those procedures, not working around them
• Monitored — You are measuring whether the system is doing what it is supposed to do
• Improving — You are using what you measure to make things better

A small business with a simple, well-used QMS will have a smoother audit than a large business with elaborate documentation that nobody follows.

ISO 9001 Audit Preparation Checklist

Work through this checklist in the four to six weeks before your Stage 2 audit date.

Documentation — have these ready:

• Quality Policy: signed by top management, communicated to all staff, reviewed within the last 12 months
• Scope of QMS: clearly defined, accurate, and reflecting what your business actually does
• Procedures for key processes: proportionate to the size and complexity of your business
• Risk register: identifying key quality risks and opportunities, with controls documented
• Quality objectives: specific, measurable, and tracked against KPIs

Records — have these accessible:

• Internal audit records showing a complete audit cycle (this is mandatory)
• Management review meeting minutes addressing all required agenda items
• Customer feedback records, including complaints and how they were handled
• Non-conformance records and completed corrective actions
• Supplier evaluation records for key suppliers
• Training and competence records for all staff in quality-relevant roles

People — brief your team:

• All staff know the audit is happening and roughly what their role is
• Key process owners are available and can explain what they do and why
• Top management is present for the opening and closing meetings

The Four Most Common Reasons UK SMEs Are Not Ready

1. The internal audit has not been completed. ISO 9001 requires at least one complete internal audit before initial certification. Complete your internal audit at least four weeks before your Stage 2 date — not the week before.

2. The management review has not been held. A formal management review meeting, with minutes that address all the required agenda items, must be completed before Stage 2.

3. Quality objectives are not measurable. "Improve customer satisfaction" is not measurable. "Achieve 85% customer satisfaction by Q4" is.

4. Staff cannot explain their own processes. Staff need to be familiar with how they do their job and where to find relevant documents.

On the Day: What to Expect

Opening meeting (30–45 minutes). The auditor runs through the audit plan, scope, and objectives. Top management attends.

Process walkthroughs (most of the day). The auditor moves through your key processes, reviewing records and talking with the people involved. Be direct and honest.

Closing meeting (30–45 minutes). The auditor presents findings. Minor non-conformances — the most common outcome — can typically be closed within 30 days without affecting certification. See our guide on what audit findings actually mean.

One More Thing: ISO 9001 Is Changing in 2026

ISO 9001:2026 is expected to be released in September 2026, with increased focus on digital capability, risk-based thinking, and alignment with sustainability expectations.

Ready to Start?

UniCert certifies UK businesses of all sizes to ISO 9001. Our auditors have direct industry experience, and our process is designed to be proportionate for SMEs.

Get a free quote for ISO 9001 certification →

Want to understand what certification costs before you commit? See our ISO certification cost guide for UK businesses →.