What consultancy, certification body and internal effort actually cost an SME, and where quotes hide the real numbers.
"How much does ISO 9001 cost?" is usually the second question an SME asks, right after "do we need it?" The honest answer has three separate line items that quotes often blur together: consultancy fees, certification body fees, and the internal time cost of running the system. Knowing where each one sits prevents budget shock partway through.
This covers gap analysis, system design, documentation and internal auditor training. For a single-site SME of twenty to eighty people, expect this to be quoted as a fixed project fee rather than an hourly rate — scope and site complexity drive the number more than headcount alone. Multi-site operations, regulated processes, or a business starting from zero documentation sit at the higher end.
Separate from consultancy, and paid to the accredited body that performs Stage 1 and Stage 2 assessment. This is priced by man-days, which scale with headcount and site count, and repeats annually as a smaller surveillance audit fee plus a recertification audit every three years. Get this quote directly from the certification body — a consultancy quoting a bundled "all-in" certification price is usually marking up a body it does not control.
The line item most quotes omit entirely. Someone internal must own the system, sit in workshops, review drafted procedures against real practice, and run internal audits going forward. Budget a meaningful share of that person's week during the build phase, tapering to roughly a day a month once the system is running.
A low consultancy quote that only produces a documentation template pack, with no gap analysis grounded in your actual workflow and no hands-on internal auditor training, tends to fail Stage 2 or lapse at the first surveillance visit — at which point the fee saved is spent twice over on rework and a delayed certificate. Price the whole three-part cost before comparing quotes, not just the headline number.
Inside a consultancy fee there are usually four phases of work, and each carries its own effort. Gap analysis — a structured review against every clause of the standard — is typically the smallest slice, a matter of days for a single site. System design, where the scope statement, quality policy, objectives and risk register are drafted, takes longer because it requires input from several department heads, not just the project owner. Documentation is usually the largest phase: writing procedures, forms and records that reflect how work is actually done, not a generic template. Training and mock-audit support closes out the fee, and includes teaching your own staff to run internal audits so the system does not depend on the consultancy forever.
Certification bodies do not price off a fixed table — they price off man-days, and IAF (International Accreditation Forum) guidance sets rough minimum man-day counts based on your headcount and the complexity of your processes. A twenty-person single-process business and an eighty-person business running three distinct production lines will get very different quotes from the same body, even at similar headcount, because complexity — not just size — drives audit duration. Always ask for the man-day count behind a quote, not just the total fee; it is the only way to compare two bodies fairly.
Certification is not a one-time purchase. After the initial Stage 1 and Stage 2 audits, the certification body returns for a shorter surveillance audit each year to confirm the system is still operating, and a full recertification audit at the three-year mark. Budgets that account only for the first year's fee are routinely surprised by year two. Build the surveillance and recertification fees into your planning from the start, and treat them as a fixed annual cost of holding the certificate rather than a one-off project expense.
Singapore SMEs pursuing ISO certification may be able to offset part of the cost through government support schemes such as Enterprise Singapore's Enterprise Development Grant, which can co-fund consultancy and training costs for qualifying projects. Eligibility and funding levels depend on your project scope and company profile, and applications must generally be approved before the project starts — factor the grant timeline into your certification timeline, not after budgets are already committed.
When two consultancy quotes look very different, the gap is almost always in scope, not efficiency. A lower quote may exclude internal auditor training, assume you already have usable documentation, or budget far fewer site visits than the work actually needs. Ask each consultancy for a line-by-line breakdown of deliverables and site visits, and ask each certification body for their man-day count and what triggers extra fees, such as multi-site sampling or a re-visit after nonconformities. Comparing scope-for-scope is the only honest way to compare price.
A real quote requires knowing your headcount, site count, current documentation state and target timeline — which is why we scope with a diagnostic call rather than a blanket price list. Ask any consultancy to itemise consultancy fees separately from the certification body's man-day quote, so you can see exactly what you are paying for and to whom.
If this describes a problem you are living with, an enquiry is the fastest way to find out whether it is worth engaging help.
Send an Enquiry