Ask three different consultants how long ISO certification takes and you will get three different answers, usually somewhere between three months and a year. That spread is unhelpful. It also hides a more useful answer, which is that the timescale is largely within your control.
How Long Does ISO Certification Take in Practice?
For a single standard such as ISO 9001 or ISO 14001, a well-prepared small or medium business can realistically achieve certification in one to six months. ISO 27001 tends to run longer because the controls are more involved, typically two to nine months. ISO 45001 sits in the same range as 9001 and 14001 for most businesses.
Integrated certification across two or three standards does not take three times as long. If your management system is genuinely integrated rather than three documents stacked together, the audit time only increases marginally. This is one of the practical arguments against the clause-based approach where each standard ends up with its own manual and its own audit trail.
What Actually Drives the ISO Certification Timeline
The variables that matter:
- Document readiness, whether you start with a working management system or a blank page
- Internal audit and management review, both must be completed before the Stage 2 audit
- Certification body availability, lead times of four to twelve weeks are common, longer at year-end
- Stage 1 to Stage 2, there can be a gap here of four to twelve weeks
- Scope and site count, a single-site SME audits faster than a multi-site or multi-discipline organisation
The point most often missed is that the certification body's timeline is the smaller half of the equation. Your own preparation time dwarfs it. A business that already operates the way ISO standards expect can reach certification in weeks rather than months.
UKAS-Accredited vs Non-Accredited ISO Certification
The route you choose affects both timing and cost. UKAS-accredited certification bodies follow ISO/IEC 17021-1 and have defined audit duration tables based on your organisation's size and risk category. Lead times are often longer because audit day requirements are higher, and UKAS-accredited bodies expect management systems to have been operational for three to six months before they will audit which can means this route to certification can take much longer.
Non-accredited certification bodies operate to similar principles but with more flexibility on audit duration and scheduling. For many SMEs, particularly those not bidding for public sector or large supply chain contracts, a non-accredited route is faster and lower cost. It is a legitimate certification choice, not a lesser one. Check what your customers actually require before assuming you need accredited certification.
The Fastest Route to ISO Certification
Most of the certification timeline is preparation. A complete document set tailored to your business removes weeks of drafting from scratch and avoids the rework that comes from working off generic clause-based templates. The alphaZ documents toolkits provide the integrated management system, forms, registers, and audit checklists in one package, structured around how a business actually operates.
If you are choosing your certification route, both options are listed below.
Find a UKAS-accredited certification body
Visit isoassured.co.uk for non-accredited ISO certification
View the alphaZ documents toolkits
Published: 8 May 2026
