Choosing an ISO consultant is a procurement decision as much as a technical one. Two consultancies can quote for the same standard and deliver very different outcomes. One leaves you with a management system your team actually uses, the other leaves a folder of documents nobody opens once the certificate arrives. If you are buying support towards a UKAS-accredited certificate at a fixed cost, the checks below will save you time, money and a great deal of frustration.
Know which standard you are buying support for
Certification is granted against a specific standard, not against the general idea of being ISO certified. The three most common in the UK are ISO 9001 for quality management, ISO 14001 for environmental management, and ISO 45001 for health and safety management. Others come up regularly too, including ISO 22301 for business continuity, ISO 27001 for information security and ISO 50001 for energy management.
Before you approach anyone, write down what is driving the decision. A customer requirement, a tender question or a genuine desire to tighten up processes all lead to different scopes. Then confirm the following in writing:
- Which standard or standards you are being quoted for.
- Whether the support covers implementation only, or implementation through to audit.
- How many sites, shifts and departments are in scope.
- Whether the certification body is chosen by you or by the consultant.
Understand where accreditation sits
A consultancy does not certify you. Certification is issued by an independent certification body, and UKAS accreditation is the marker that a body has been assessed against recognised requirements. Ask who will carry out your external audit and confirm that the body holds UKAS accreditation, because that is what your customers, tender evaluators and regulators can verify for themselves.
Impartiality matters as well. The person who helps build your management system should not be the same person who conducts your certification audit. A consultant who blurs that line is either working around the rules or setting you up for a certificate that carries less weight than you think.
What proper consultancy support should include
A consultancy engaged to help you achieve certification should be able to describe the full journey, not just the paperwork. The practical stages are consistent across standards, even though the content differs:
- A gap analysis against the current version of the standard, carried out against how you actually work.
- Building the management system, including the processes, records and controls the standard requires.
- Internal audit, delivered by someone competent and independent of the area being audited.
- Management review, with the outputs the standard expects.
- Support through the external Stage 1 and Stage 2 audits, including closing out any findings.
- A plan for maintaining the system between surveillance audits.
If a proposal skips straight to documentation without a gap analysis, the resulting system will usually describe a business that does not exist.
Fixed fees and what they should define
Fixed-fee consultancy appeals because budget approval is simpler and you are not exposed to an open-ended hourly meter. The trade-off is scope. A fixed fee only means something when it states what is included: the number of standards, the number of sites, days on site, whether internal audit and management review support are covered, and what happens if your requirements grow midway.
Ask for the fee in writing, with the deliverables listed alongside it. Also ask what is explicitly excluded. External certification body fees, for example, are usually separate from consultancy fees, and a quote that hides that distinction is not really fixed at all. Be wary of anyone promising a guaranteed certificate without knowing your operation, because the certification decision belongs to the certification body, not the consultant.
Competence, compatibility and value
These three tests cover most of what matters when comparing consultancies. They are also the areas where a slick sales process can disguise a thin delivery team.
| Test | What to check |
|---|---|
| Competence | Evidence of work on the specific standards you need, understanding of your sector, and named people who will actually do the work rather than a bid team. |
| Compatibility | How they communicate, whether they build the system with your team or write it for them, and whether their approach fits your operational reality. |
| Value | A defined scope, clear deliverables, named milestones and a fee structure you can compare fairly against other quotes. |
Running ISO 9001, ISO 14001 and ISO 45001 together
Many UK organisations end up pursuing more than one standard. ISO 9001, ISO 14001 and ISO 45001 share a common high-level structure, which means integrated documentation, combined internal audits and a single management review are all realistic. That reduces duplication and keeps the system coherent.
It does not mean the three are interchangeable, and it does not mean every business needs all three. A useful test is whether the standard answers a real requirement from a customer, a tender or a regulator. If it does not, certification becomes an overhead you will resent renewing. A consultant worth appointing will tell you that plainly rather than sell you a third certificate you do not need.
Questions to ask on the first call
- Which standards do you hold the deepest experience in?
- Can you give a fixed fee for a defined scope, in writing?
- Who will deliver the work, and will they be on site?
- Do you support internal audits and management review, or only documentation?
- Which certification bodies do your clients typically use, and are they UKAS accredited?
- What happens if a nonconformity is raised at Stage 2?
- What does ongoing maintenance look like after certification?
- Can you provide references from businesses of a similar size and sector?
Warning signs worth taking seriously
- Vague scope with no written deliverables.
- Promises of certification without any reference to an external audit.
- A template-driven approach that takes no interest in your existing processes.
- Hourly billing with no estimate of total cost.
- The same individual offering to both build and certify your system.
- Reluctance to name the certification body or its accreditation status.
Choosing well comes down to evidence. Ask for a fixed fee, a written scope, named delivery people and references you can call. If a consultancy can answer those four things clearly, the rest of the decision usually takes care of itself.
Frequently Asked Questions
How much does an ISO consultant cost in the UK?
Fees vary widely depending on the standard, the number of sites, staff numbers and how much of the system already exists. The most useful approach is to ask for a fixed fee tied to a written scope, with exclusions listed. That lets you compare proposals on the same basis instead of guessing at hourly rates.
Can a consultant issue my ISO certificate?
No. Certification is issued by an independent certification body, and UKAS accreditation is the marker that a body has been assessed against recognised requirements. Your consultant helps you build and maintain the management system, and supports you through the external audit, but the decision to certify sits with the certification body alone.
Do I need a consultant to achieve ISO 9001?
Not strictly. Plenty of organisations implement ISO 9001 themselves. A consultant helps mainly by getting it right first time, which reduces wasted effort on documentation nobody uses and lowers the risk of nonconformities at the external audit. The value is clearest when you have limited internal quality resource or a tight deadline.
What is the difference between ISO 9001, ISO 14001 and ISO 45001?
ISO 9001:2015 covers quality management, ISO 14001:2015 covers environmental management, and ISO 45001 covers health and safety management. They address different risks and different stakeholder expectations, but share a common structure, which is why many UK businesses run them as an integrated management system with combined audits and one management review.
Should I certify to all three standards?
Only if each one answers a genuine requirement. Customer demands, tender questions and regulatory or supply chain expectations are all good reasons. If no one is asking for a particular standard and it does not improve how you operate, certification becomes an ongoing cost with little return. Ask a consultant to justify each standard separately.
