If your business is exploring ISO certification, one of the first practical questions you’ll face is: what will it cost?
ISO audits are a key part of the certification journey, but the total investment isn’t a single, fixed number. Instead, it depends on your business size, the complexity of your operations, and the standard you’re working towards.
This guide breaks down the different types of costs you should expect and how they add up over time. Whether you’re new to ISO certification or already familiar with the basics, having a clear picture of the financial side will help you plan more effectively.
The Different Costs Involved in ISO Audits
1. Certification Body Fees
To achieve certification, you’ll need to work with an accredited certification body. Their charges usually include:
- Application fees – the initial cost for processing your certification request.
- Audit fees – charged for both the initial certification audit and the ongoing surveillance audits.
- Certification fees – in some cases, there’s a separate charge for producing the official certificate.
Each certification body has its own pricing structure, so it’s worth comparing providers, but the bulk of your spend will go toward audit time.
To get customised support specific to your organisation, please get in touch with us.
2. Audit Duration and Complexity
The number of days an auditor spends with your business is one of the biggest cost drivers. Audit time depends on:
- Number of employees – more staff means more processes and records to review.
- Number of sites – multi-site businesses require additional audit days.
- Business complexity – industries with high risk or regulatory requirements often need deeper assessment.
- The ISO standard(s) – achieving ISO 9001 may take less time than combining multiple standards like ISO 9001, ISO 14001, and ISO 45001.
Example: A small office-based company may only require two days of auditing, while a large manufacturer with multiple facilities could need ten or more days.
3. Surveillance Audits
Certification isn’t a one-off process. Once certified, your organisation must maintain compliance through surveillance audits, usually every 12 months. These are shorter than the initial certification audit but still come at a cost. They keep your certification active by proving you’re still meeting the ISO standard requirements.
4. Recertification Audits
ISO certificates are valid for three years. At the end of that period, a recertification audit is required. This is more thorough than a surveillance audit and is closer in scope (and cost) to the original certification audit.
5. Consultancy and Support (Optional)
Although not required, many businesses hire external consultants to help them prepare for audits. Consultants can:
- Conduct a gap analysis to identify what needs fixing before the audit.
- Develop or improve your policies, procedures, and documentation.
- Provide internal audit support.
- Deliver staff training so employees understand ISO requirements.
Costs vary widely depending on how much support you need. Some businesses do the groundwork internally, while others prefer external expertise to speed up the process.
6. Internal Costs
ISO audits also come with hidden costs that don’t appear on an invoice but still impact your budget. These include:
- Staff time spent preparing and organising documents.
- Employee training sessions.
- The cost of implementing new systems or processes (e.g., quality management software).
For many businesses, these internal costs are as significant as the certification body’s fees.
Typical Cost Ranges
To give you a clearer idea, here are some broad ranges you might expect:
- Small business (under 25 staff, single site): £3,000 – £6,000 over a three-year cycle (including certification and surveillance audits).
- Medium business (25–250 staff, multiple sites): £6,000 – £15,000 depending on complexity.
- Large or complex organisations (multiple standards or high-risk industries): £15,000+ over a three-year cycle.
Remember, these figures don’t include optional consultancy support or internal staff time.
Why the Costs Are Worth It
At first glance, the cost of ISO audits can feel like a big investment. But many organisations find that the benefits far outweigh the price tag:
- Efficiency gains – ISO frameworks encourage streamlined processes and fewer mistakes.
- Competitive advantage – certification is often a requirement for tenders and contracts.
- Improved reputation – customers trust businesses that meet international standards.
- Reduced risk – especially with standards like ISO 27001 (information security) or ISO 45001 (health and safety).
Put simply, ISO certification is less about the cost and more about the long-term return on investment.
Final Thoughts
The costs associated with ISO audits depend on your size, industry, and approach. Certification body fees, audit time, ongoing surveillance, and recertification all add up, but don’t forget to factor in consultancy support and internal resource costs too.
For many businesses, the value of ISO certification goes far beyond the expense, unlocking new opportunities, efficiencies, and customer confidence. With a clear understanding of what’s involved, you’ll be better prepared to budget and to maximise the benefits ISO certification can bring.
About Us
Candy Management Consultants has guided UK businesses through stress-free ISO certifications since 2017. Our 100% first-pass success rate comes from tailoring frameworks to your operations and personalised approach – not checklists, at fixed day rates, transparent per-project contracts and with the help of the modern ISO management software.
