Ask three consultants what ISO certification will cost and you will get three answers that look nothing like each other. That is not because one of them is trying it on. It is usually because they are quoting for different amounts of work, and because some of them are only quoting for their own half of the job.
Here is where the money actually goes, what the numbers look like in 2026, and what to check before you sign anything.
There are two invoices, not one
This is the most common reason a budget goes wrong.
The first invoice is the consultant. That covers building the management system and getting you ready for audit.
The second invoice is the certification body. That is the independent, UKAS-accredited organisation that audits you and issues the certificate. They are nothing to do with your consultant, they charge separately, and their fee is unavoidable no matter how well prepared you are.
We do not sell certification and we cannot issue a certificate. No consultant can. So if a quote looks remarkably cheap, the first question is whether the certification body’s fee is in there at all.
How certification bodies work out their fee
Certification bodies do not pluck a number out of the air, and this is worth understanding because it is the part of your bill you have least control over.
Audit time is set by a formula published by the International Accreditation Forum. It takes into account how many people you employ, how many of them are full time, how many sites you work from, and whether you are certifying to more than one standard at once. That gives a number of audit days. The certification body then multiplies those days by its day rate.
For a small organisation, the initial certification often works out at two to three audit days, split across a Stage 1 document review and a Stage 2 main audit.
Day rates among UKAS-accredited bodies currently run from about £850 to £1,500. Smaller certification bodies sit near the bottom of that, mid-sized ones around £1,000, and the large international names at £1,500 and above.
Two things follow from this. Your headcount drives your certification cost directly, and choosing the right certification body for your size and sector genuinely changes the number. We help every client make that choice as part of the work we do, because the biggest name is not automatically the right one, and paying for a brand you did not need is a waste of money.
What the consultant’s fee should cover
A full implementation is not a document pack. It should include all of this:
- A gap analysis against the standard, so you know where you stand before anyone commits to a scope
- Designing and documenting a management system that fits how your business actually runs
- A full programme of internal audits
- Chairing or supporting your first management review
- Guiding you through the Stage 1 and Stage 2 audits
If any of those are missing from a quote, the work has not gone away. It has moved to your team. That has a cost too, it just never appears on an invoice.
Day rate or fixed fee
Most UK consultants price one of two ways.
On a day rate, you pay for the days it takes. Rates run from roughly £500 to £1,500 a day, and a small business will typically need somewhere between five and fifteen days of support. The risk is obvious. If the project runs long, that is your problem, and there is not much you can do about it once work is under way.
On a fixed fee, the total is agreed before anyone starts. You know the number, and the consultant carries the risk of the job taking longer than expected.
We work on a fixed fee for exactly that reason. It also changes the incentives, because when the fee is fixed there is nothing to gain from stretching the work out.
Whichever route you take, ask what happens if the scope changes. A fixed fee is only fixed if the scope is written down properly.
Realistic numbers for a UK SME
These are market ranges for a single-site small business, not our prices. Ours are agreed with you up front once we know what we are dealing with.
Consultant, full implementation: roughly £5,000 to £8,000 is typical. Complex or multi-site work runs higher, and a lighter engagement where you already have documented processes can come in well under it.
Certification body, year one: roughly £2,000 to £5,000 for a small business, covering Stage 1 and Stage 2.
Annual surveillance from year two: roughly £1,000 to £3,000.
Total first year, fully supported: most small businesses land somewhere between £7,000 and £13,000 once both invoices are counted. Bigger or more complex organisations go beyond that.
If you do the implementation yourself and only pay the certification body, you can get certified for considerably less. Whether that is a saving depends entirely on how much of your own time it consumes and whether the system you build survives its first audit.
Why 2026 costs more than 2025
Worth knowing if you are working from an old quote or an older article. Certification costs have risen by around 20 percent going into 2026, driven mainly by a shortage of qualified auditors pushing day rates up.
If you were given a ballpark a year or two ago, it is out of date, and not in your favour.
What actually moves your price
Four things, in roughly this order.
Where you are starting from. This is the big one, and the one you can influence. A business with written procedures, records already kept and a management team that is engaged needs far fewer consultant days than one starting from a blank page. A gap analysis tells you which of those you are before anyone quotes for a full project.
Your size. Headcount feeds straight into the audit day formula, so it drives the certification body’s fee directly. It drives consultant effort too, because more people means more training, more interviews and more evidence to pull together.
Your sector. Aerospace, defence, medical devices and other regulated supply chains need a more thorough system and more audit time. Information security work under ISO 27001 sits differently again, and we cover that in our guide to information security management systems. A professional services firm chasing ISO 9001 for a tender sits at the other end of the range.
Number of sites. A second site does not double the cost, but auditors have to satisfy themselves that your processes are applied consistently in both places. That adds audit days at every visit, not just the first one.
The cost nobody puts in a quote
Your own team’s time.
Someone has to gather evidence, sit in audit interviews, keep records between visits, deal with anything the auditor raises, and prepare for the surveillance audit every year. For a small business that adds up to weeks of work across the certification year, and it repeats annually.
That is not an argument against certification. It is an argument for insisting on a system your team can actually operate. A management system built to impress an auditor once a year costs you more, every year, than one built around how you already work.
It is a three year cycle, not a one off
Once the certificate is issued you are on a three year cycle. Surveillance audits each year to keep it, then a full re-certification audit in year three at a cost similar to the original.
Budget for certification as an annual operating line, not a project you finish. The businesses that get caught out are the ones who accounted for year one and nothing after it.
Six questions to ask before you sign
- Does this quote include the certification body’s fees, or is that separate?
- Which phases are included, and specifically, are you doing our internal audits and our management review?
- Is this a day rate or a fixed fee, and what happens if the scope changes?
- How many consultant days are you estimating, and what did you base that on?
- Will you help us choose the certification body, or have you already picked one?
- What does this cost us annually after year one?
Any consultant worth using will answer all six without hesitating. We have written more on how to choose an ISO consultant if you are weighing up quotes.
Is it worth it?
For most of our clients, certification paid for itself the first time it let them bid for work that had been closed to them. In a lot of sectors it has stopped being a differentiator and become the entry requirement, and businesses tend to discover that when a tender asks for it and they have three weeks to respond.
The wider return builds more slowly. Less rework, fewer complaints, clearer accountability, and an audit each year that stops being an ordeal. That only happens if the system gets used rather than filed.
Getting a straight number for your business
We give every client a fixed fee, agreed before any work starts, based on a proper look at where you are rather than a guess. You will know what it costs, what is included, and what it costs you after year one.
Tell us which standard you are looking at, roughly how many people you employ, and whether anything is written down already. We will tell you what it will take.
Get in touch or read more about how our pricing works.
