How long does ISO certification take in Australia?

“How long will it take?” is the second question Australian SMEs ask about ISO certification (right after “how much does it cost?”). The honest answer: 3–12 months for most businesses, but the range depends on where you're starting from.

The four phases

ISO certification follows a predictable path. The total timeline is the sum of four phases, each with its own variables:

Phase 1: Gap analysis (1–4 weeks)

Before you can build or improve your management system, you need to know where you stand. A gap analysis compares your current practices against the ISO standard requirements and identifies what's missing.

• With a consultant: 2–4 weeks (including scheduling, site visit, and report)
• Self-assessment: 1–2 days using a structured tool like Cert Ready
• DIY with the standard: 2–4 weeks if you're reading ISO 9001:2015 clause by clause

This phase has the most potential for time savings. A structured self-assessment compresses weeks of consultant-led analysis into hours, and produces the same output: a prioritised gap report.

Phase 2: Implementation (2–6 months)

This is where the real work happens. Based on your gap analysis, you need to:

• Write or update policies and procedures to meet standard requirements
• Implement new processes where gaps were identified
• Train staff on updated procedures
• Collect evidence that processes are being followed
• Conduct internal audits to verify effectiveness
• Hold a management review meeting

The timeline here depends heavily on your starting point. A business with mature but undocumented processes might need 2–3 months of documentation work. A business building systems from scratch could need 6 months or more.

Phase 3: Stage 1 audit (1–2 weeks)

The certification body conducts a Stage 1 audit — sometimes called a documentation review or readiness audit. They assess whether your management system documentation meets the standard's requirements and whether you're ready for the full certification audit.

Common Stage 1 outcomes:

• Ready to proceed: Move to Stage 2 (typically 4–6 weeks later)
• Minor gaps identified: Address them before Stage 2 (usually 2–4 weeks)
• Significant gaps: More implementation work needed (adds 1–3 months)

Phase 4: Stage 2 audit and certification (2–6 weeks)

The Stage 2 audit is the full on-site (or remote) certification audit. The auditor verifies that your management system is implemented and effective — not just documented. They interview staff, review records, and observe processes.

After a successful Stage 2 audit, the certification body issues your certificate. This typically takes 2–4 weeks after the audit, depending on the certification body's administrative processes.

Realistic timelines by scenario

What slows things down

• Waiting for consultant availability: Popular consultants may have 4–8 week lead times
• Certification body scheduling: Audit dates may be 6–10 weeks out
• Internal resource constraints: Quality work competes with day-to-day operations
• Scope creep: Trying to make the system perfect rather than compliant
• Lack of management commitment: Without leadership support, implementation stalls

How to accelerate the process

• Start with a thorough gap analysis. Knowing your exact gaps means no wasted effort. Cert Ready produces a scored gap report in hours, not weeks.
• Focus on high-priority gaps first. Address blocker clauses (Leadership, Operation) before lower-weighted areas.
• Build documentation incrementally. Don't write everything at once — document as you implement.
• Book your audit early. Reserve your preferred certification body and audit date as soon as implementation is underway.
• Assign a dedicated owner. Someone needs to drive the project day-to-day.

Start with clarity

The fastest path to certification starts with knowing exactly where you stand. Start your ISO readiness assessment and get a prioritised gap report that tells you where to focus and how much work is ahead.