How to choose an ISO consultant: what they do and what to ask

Many UK manufacturers reach for ISO certification because a customer has asked for it, a tender requires it or an insurer expects it. Few have done it before, and the standards read as dense and abstract. That is where ISO consultants come in, and where many firms spend money they did not need to.

This guide explains what a consultant actually does, when you can manage without one, how to spot the warning signs, and which questions to put to anyone you are considering.

What does an ISO consultant do?

A consultant helps you design, implement and maintain a management system that meets a standard such as ISO 9001 (quality), ISO 14001 (environment) or ISO 45001 (health and safety). They do not certify you. Certification is carried out by a separate certification body, which should be accredited by UKAS.

Typical work includes:

A gap analysis comparing your current practice with the standard's requirements.
Help defining scope, processes, roles and objectives.
Drafting or reviewing procedures, work instructions and records.
Training staff and running internal audits.
Preparing you for the certification audit and handling any findings afterwards.

A good consultant builds a system around how your factory really runs. A poor one hands over a generic template set with your logo on it.

Doing it yourself or using a consultant

Neither route is automatically better. The standards are written to be implemented by the organisation itself, and plenty of firms do exactly that.

Doing it in-house tends to work when you have someone with time, authority and some quality experience, when your processes are already reasonably well controlled, and when you want the system to feel owned by your own people.

A consultant is more useful when nobody internally has the time or experience, when a customer deadline is tight, when you are adding a second or third standard, or when a previous attempt has stalled. Many firms take a middle path: a few days of support for the gap analysis and a pre-audit review, with the rest done internally.

Whichever route you take, remember that the cost is not only the consultant's fee. Staff time is usually the larger commitment, and it is the part firms most often underestimate.

How to find and shortlist ISO consultants

Start with people who have been through it. Peers in your sector, your trade association and your customers' supplier quality teams can often point to consultants who understand your type of work. Make UK and similar bodies can be a useful starting point for networks, though membership of any body is not a guarantee of quality.

Look for sector experience. A consultant who has worked in precision machining or food production will know what auditors expect on a shop floor, which matters more than a long list of certificates.

Check credentials, but treat them as one signal. Lead auditor qualifications show they understand how audits work. They do not show they can implement a system well. Ask for references from similar-sized manufacturers and actually call them.

Red flags to watch for

A guaranteed pass. Only the certification body decides, and no consultant can promise the outcome.
Off-the-shelf document packs. Templates can save time, but a system made of unedited generic documents will fail in practice.
Vague scope and pricing. You should know what is included, how many days, and what counts as extra.
Pressure to use a particular certification body. The choice should be yours, and a consultant with a financial link to one should say so.
Taking over the system entirely. If your own people are not involved, the system will not survive the consultant's departure.
Heavy documentation for its own sake. The standards require far less paperwork than many consultants produce.

Questions to ask before you appoint

Which standards and which manufacturing sectors have you worked in?
What will you do, what will we do, and how many days do you expect it to take?
Can I see an example of the documents you would produce, and how they are tailored?
How do you involve operators and supervisors, not just managers?
Which certification bodies have your clients used, and do you have any commercial relationship with them?
What happens if we have a major non-conformity at audit? Is support included?
Who will actually do the work, you or a colleague?
What do we own at the end, and can we maintain the system without you?

Pay attention to how they answer as much as what they say. A consultant who asks you detailed questions about your processes and customers before quoting is usually a better bet than one who quotes immediately.

Agreeing the arrangement

Put scope, deliverables, days, fees, confidentiality and ownership of documents in writing. Agree milestones, such as gap analysis complete, internal audit done and management review held, so you can judge progress along the way.

Keep a named internal owner for the project, ideally someone with enough standing to get colleagues to engage. The consultant can guide, but the system only works if your people use it day to day.

Finally, aim for a system that helps you run the business: fewer repeat defects, clearer responsibilities, better supplier control. Certification then becomes a by-product rather than the whole point.

Do I need an ISO consultant to get certified?

No. The standards can be implemented in-house, and the certification body audits the result regardless of who built it. A consultant saves time and reduces mistakes if you lack experience, but it is not a requirement.

How much do ISO consultants cost?

Fees vary widely by consultant, standard, company size and the amount of support needed. Ask for a written quote showing days and deliverables, and compare several.

How long does it take to get ISO 9001 certification?

It depends on the size and complexity of your business, the state of your existing processes and the time your team can commit. Smaller firms with reasonable controls in place can move faster than larger or more complex sites.

Can a consultant also be my certification body?

No. Certification should be carried out by an independent certification body, ideally accredited by UKAS. A consultant who offers to certify you as well should be treated with caution.