ISO 9001 Quality Management Policies for UK SMEs
12 ISO 9001:2015 QMS policies drafted for your business — document control, internal audit, corrective action and continuous improvement. Cert-ready in 48 hours.
ISO 9001 Quality Management Starter pack
12 policies · £400 one-off
Lifetime access · no renewal · bespoke to your sector
What is ISO 9001?
ISO 9001 is the international standard for Quality Management Systems (QMS). The current version, ISO 9001:2015, uses the Annex SL high-level structure shared by ISO 27001, ISO 14001 and most other ISO management standards — making it easy to integrate if you're pursuing multiple certifications.
Certification requires a documented QMS, evidence of operation (internal audits, management reviews, corrective actions) and a two-stage audit from a UKAS-accredited certification body. The underlying philosophy is continuous improvement — Plan-Do-Check-Act — operationalised through risk-based thinking across every process.
Who needs ISO 9001?
- UK manufacturers and engineering firms — often required by OEM customers and prime contractors.
- Construction and civil engineering SMEs — frequently required in PQQs and ITTs.
- Aerospace suppliers — ISO 9001 is the baseline before AS 9100.
- Automotive suppliers — gateway to IATF 16949.
- Medical devices and life sciences — precursor to ISO 13485.
- UK professional services firms tendering for public sector or enterprise contracts that mandate an accredited QMS.
Policies you need for ISO 9001
ISO 9001:2015 doesn't mandate a specific policy list but auditors expect these 12 documented areas — all covered in our ISO 9001 Quality Management Starter pack:
Quality Policy
Clause 5.2 — top-level statement signed by leadership.
Document Control
Clause 7.5 — issue, review, version control of documented information.
Record Control
Clause 7.5 — retention, protection, accessibility.
Management Review
Clause 9.3 — at-least-annual leadership review with defined inputs/outputs.
Internal Audit
Clause 9.2 — planned audit programme with competent auditors.
Corrective Action
Clause 10.2 — root-cause analysis and CAR tracking.
Preventive Action
Clause 6.1 — risk-based thinking and opportunity management.
Customer Focus
Clause 5.1.2 + 9.1.2 — feedback, complaints, satisfaction measurement.
Supplier Management
Clause 8.4 — control of externally-provided processes, products, services.
Training and Competence
Clause 7.2 — skills matrix, training records, refresher cycles.
Non-Conforming Products
Clause 8.7 — identification, segregation, disposition.
Continuous Improvement
Clause 10.3 — improvement loop tied to KPIs and management review.
Realistic timeline to certification
Most UK SMEs reach Stage 2 certification in 4–6 months. PolicySuite compresses the documentation phase from 4–8 weeks to 48 hours.
- Week 1: Scope and gap analysis. Buy the pack, receive 12 bespoke policies in 48 hours.
- Week 2–4: Distribute documentation, train staff, start recording objective evidence (KPIs, supplier reviews, non-conformities).
- Week 5–10: Run first internal audit programme covering every clause.
- Week 11–12: Management review with full agenda — inputs, risks, opportunities, decisions.
- Week 13–16: Stage 1 audit (documentation review) by UKAS-accredited body.
- Week 17–24: Stage 2 audit (on-site operational audit) → certificate issued.
Policy packs for ISO 9001
ISO 9001 Quality Management Starter
12 policies · £400 · full 2015 clause coverage
ISO 27001 Core Set
16 policies · £400 · combine for integrated management system
Training & Awareness
8 policies · £250 · covers ISO 9001 Clause 7.2 in depth
Third-Party Risk & Contracting
10 policies · £300 · Clause 8.4 supplier management depth
Further reading
Frequently asked questions
What does ISO 9001:2015 require?
A documented QMS covering 10 clauses — context, leadership, planning, support, operation, performance evaluation, and improvement. Auditors expect around 12 core policies covering quality policy, document control, record control, management review, internal audit, corrective action, customer focus, supplier management, training, non-conforming products, and continuous improvement.
Who needs ISO 9001 in the UK?
ISO 9001 is commonly required in UK manufacturing, engineering, construction, public-sector tenders, aerospace supply chains, automotive and medical devices. Many UK SMEs first pursue it because a large customer or a tender specifically asks for accredited QMS certification.
How much does ISO 9001 cost in the UK?
UKAS-accredited certification body fees for a 10–50 person UK SME typically run £3,000–£8,000 for Stage 1 + Stage 2, plus £1,500–£3,000/year surveillance. Add internal time or £3,000–£15,000 if you use a consultant. PolicySuite replaces the policy-drafting portion with a one-off pack.
How long does ISO 9001 take?
4–6 months from kickoff to Stage 2 audit for a UK SME. Weeks 1–2 for scoping and gap analysis; 3–4 for policy drafting (PolicySuite cuts this to 48 hours); 4–12 for rollout, training, internal audit and management review; then Stage 1 + Stage 2 audits.
Can I combine ISO 9001 with ISO 27001?
Yes — both standards share the Annex SL high-level structure so clauses 4–10 align. Many UK SMEs run an integrated management system with single document control, single internal audit programme, single management review. Our QMS Starter + ISO 27001 Core Set are designed to layer cleanly.
What does the ISO 9001 pack include?
12 ISO 9001:2015-aligned policies covering every documented-information expectation: quality policy, document control, record control, management review, internal audit, corrective action, preventive action, customer focus, supplier management, training and competence, non-conforming products, continuous improvement. Bespoke to your sector — see live pricing.
Start your ISO 9001 rollout today
Get 12 bespoke QMS policies in 48 hours — lifetime access, no renewal.
Get Started — £400