Obtaining ISO 9001 certification in Jordan does not begin with selecting a certification body, nor is it limited to preparing a collection of procedures and forms.
The correct starting point is to build a quality management system that genuinely operates within the organization and connects its processes, responsibilities, risks, performance measurement, and continual improvement in a way that can be implemented and verified.
ISO 9001 is an international quality management-system standard. Organizations can use it to develop a new system or improve an existing one. Its fundamental elements include:
- The process approach.
- Customer focus.
- Risk-based thinking.
- Documented information.
- Performance evaluation.
- Continual improvement.
What are the actual steps required to obtain certification? How much does it cost? How long does the process take? Who issues the certificate?
This guide explains the journey from an operational perspective.
First: What Is ISO 9001 Certification?
ISO 9001 certification is independent confirmation issued by a Certification Body after it evaluates an organization’s quality management system and verifies its conformity with the requirements of the standard.
An important distinction exists between three parties:
- ISO develops and publishes the standard but does not certify organizations.
- The organization or its consultant develops and implements the quality management system and prepares it for auditing.
- The Certification Body conducts the certification audit and makes the certification decision according to its procedures and accreditation scope.
ISO expressly confirms that it does not issue ISO 9001 certificates to organizations. Certification is conducted by independent certification bodies, which may themselves be accredited by a competent accreditation body.
Maintaining this separation helps preserve the independence and integrity of the assessment process.
Is ISO 9001 Certification Mandatory?
The ISO 9001 standard does not require every organization that implements the system to obtain third-party certification.
An organization can implement the standard and benefit from its management principles without applying for certification.
Certification may nevertheless be valuable when an organization needs independent external evidence that its quality management system conforms to the standard. This may arise through:
- Customer requirements.
- Supplier-qualification processes.
- Business partnerships.
- Prequalification requirements.
- Tenders that specify particular eligibility criteria.
- Internal strategic objectives.
ISO explains that certification is voluntary from the standard’s perspective.
The first question should therefore be:
Why does the organization need ISO 9001?
Not merely:
How can we obtain the certificate?
A clear business purpose helps determine the appropriate scope, level of investment, implementation approach, and timing.
Step One: Define the Scope of the Quality Management System
Before preparing any document, the organization should define the scope of its quality management system precisely.
This includes understanding:
- The products and services provided.
- The processes included in the quality management system.
- The relevant sites and branches.
- Interested parties and their relevant requirements.
- The organizational structure.
- Responsibilities and authorities.
- Legal and regulatory requirements affecting the scope of operations.
An inaccurately defined scope may create a system that is unnecessarily broader than the organization needs. It may also exclude processes that significantly affect product or service quality.
The scope should correspond to the organization’s actual operations and the certification it intends to pursue.
Step Two: Conduct a Gap Analysis
A Gap Analysis is the practical starting point for identifying the difference between the current state and the requirements of ISO 9001.
It should not be reduced to a checklist that says only:
“Available” or “Not available.”
A useful Gap Analysis should answer questions such as:
- Which processes already exist?
- What is working effectively and can be retained?
- Where are the gaps in responsibility, control, or documentation?
- Is process performance measured?
- How are problems and nonconformities addressed?
- How are risks and opportunities managed?
- Do written procedures reflect actual practices?
- What evidence demonstrates that the system is operating?
The output of this stage should be a gap register and prioritized implementation roadmap that helps management determine what must be developed before progressing to the external audit.
A mature Gap Analysis evaluates more than documents. It compares:
Requirements → Current Practice → Available Evidence → Identified Gap → Required Action
Step Three: Design the Quality Management System
After understanding the current state, the organization can design a management system suited to its size, context, and operational processes.
Depending on its needs, this stage may include:
- Identifying processes and their interactions.
- Defining responsibilities and authorities.
- Developing the quality policy.
- Establishing quality objectives and related indicators.
- Developing the necessary policies and procedures.
- Designing forms and records.
- Controlling documented information.
- Establishing methods for addressing risks and opportunities.
- Controlling nonconformities and corrective actions.
- Defining monitoring, measurement, evaluation, and improvement arrangements.
The objective is not to increase the number of documents. It is to create a system that employees and process owners can use.
A good system is not the one with the greatest number of procedures. It is the one that clearly explains how work is managed, how results are verified, and how performance is improved.
Step Four: Implement the System in Practice
One of the most common mistakes is to prepare the documents and then apply immediately to a certification body.
The existence of a procedure does not mean that the system has been implemented.
Procedures, forms, controls, and responsibilities must operate within the organization. Evidence must also demonstrate that the system is used in daily operations, decision-making, and performance monitoring.
Examples of evidence may include:
- Monitoring records.
- Performance-indicator results.
- Supplier evaluations where applicable.
- Customer complaints and evidence of their resolution.
- Corrective actions.
- Process-monitoring results.
- Training and competence records.
- Decisions arising from performance reviews.
- Approved changes to processes.
- Evidence of achieving or reviewing quality objectives.
ISO 9001 focuses on the effectiveness of the management system—not on maintaining separate files that have no visible effect on operations.
The organization should allow enough time for the system to operate and generate genuine evidence before the external audit.
Step Five: Build Employee Capability and Define Responsibilities
The success of a quality management system does not depend on the quality manager alone.
Process owners should understand:
- Their responsibilities.
- The outputs expected from them.
- The indicators they monitor.
- How evidence is documented and retained.
- What to do when a problem occurs.
- When an issue must be escalated.
- How they contribute to improvement.
Employees should also understand how their work affects:
- Product or service conformity.
- Customer satisfaction.
- Process performance.
- Quality objectives.
- The effectiveness of the management system.
For this reason, IAC’s implementation methodology links system application with capability building and knowledge transfer.
The objective is to make the management system part of the organization’s normal way of working—not a temporary project that ends after the audit.
Step Six: Conduct the Internal Audit
Before applying to a certification body, the organization needs to evaluate its system internally.
An internal audit is not merely a rehearsal for the external auditor’s questions.
It is a structured method for verifying:
- The system’s conformity with the applicable requirements.
- Whether procedures and controls are implemented in practice.
- Process effectiveness.
- The availability and adequacy of evidence.
- Problems and nonconformities.
- Opportunities for improvement.
ISO identifies verification of system performance, including internal auditing, as a fundamental element of ISO 9001 implementation.
Following the audit, the organization should:
- Document identified nonconformities.
- Correct the immediate issue where necessary.
- Analyze the cause.
- Establish appropriate corrective actions.
- Assign responsibilities and deadlines.
- Verify implementation.
- Evaluate effectiveness.
Completing the audit report is not enough. The value of the internal audit lies in the actions and improvements that follow.
Step Seven: Conduct Management Review
Management review is not a meeting held merely to inform the general manager that “the system is ready.”
It is a leadership review of the quality management system’s performance, suitability, adequacy, and effectiveness.
It should help management examine subjects such as:
- Process performance.
- Achievement of quality objectives.
- Customer feedback.
- Audit results.
- Nonconformities.
- The effectiveness of corrective actions.
- Changes affecting the system.
- Required resources.
- Risks and opportunities.
- Improvement opportunities.
The purpose is to convert system data into actionable management decisions.
The outputs should identify:
Decision → Responsible Person → Required Resources → Target Date → Follow-Up
A certification auditor will look for evidence that top management is actively involved in the system—not simply that the quality department has completed the documents.
Step Eight: Select an Appropriate Certification Body
Once the organization has reached an appropriate level of readiness, it can begin selecting a certification body.
Price should not be the only selection criterion.
The organization should verify:
- The accreditation body that accredits the Certification Body.
- The Certification Body’s accreditation scope.
- Whether the accreditation covers ISO 9001 certification.
- Whether the body can cover the required industry sector and certification scope.
- The relevant competence and experience of the audit team.
- The proposed audit and surveillance arrangements.
- Fees and contractual terms.
- Rules governing use of the certification mark after certification.
The presence of an accreditation logo on a website is not sufficient by itself. The organization should verify the Certification Body’s actual accreditation scope and current status.
It should also understand the difference between:
- The certification body’s own commercial proposal.
- Its accreditation status.
- The proposed certification scope.
- The certification decision.
Step Nine: Stage 1 Audit
Stage 1 is used to assess whether the organization is ready to proceed to the main certification audit.
During this stage, the Certification Body reviews matters related to:
- The management system.
- Its scope.
- The organization’s context.
- Key processes.
- Relevant documented information.
- Readiness for the subsequent audit stage.
- Planning requirements for Stage 2.
The objective is not to obtain certification during Stage 1.
Its purpose is to determine whether the system is sufficiently ready for Stage 2 and identify issues that may need to be addressed beforehand.
The organization should not treat Stage 1 as its first Gap Analysis. By this stage, it should already have implemented the principal components of the system, completed internal auditing and management review, and addressed major readiness gaps.
Step Ten: Stage 2 Audit
Stage 2 is the principal assessment of the quality management system.
The audit team evaluates actual implementation by:
- Reviewing processes.
- Examining records.
- Interviewing employees and process owners.
- Observing activities.
- Selecting samples.
- Tracing evidence across the system.
The central question is:
Is the quality management system implemented, effective, and conforming to ISO 9001 within the defined scope?
If nonconformities are identified, they must be addressed according to the Certification Body’s requirements and procedures before the certification process can be completed.
Stage 2 does not test whether employees have memorized the clauses of ISO 9001. It examines whether the organization’s management system operates as intended.
Step Eleven: Certification Decision and Continuing Surveillance
After the audit has been completed and the relevant requirements have been addressed, the Certification Body makes its decision through its independent certification process.
The organization’s responsibility does not end when the certificate is issued.
It must continue to maintain and improve the management system through activities such as:
- Performance measurement.
- Internal auditing.
- Management review.
- Management of nonconformities.
- Corrective action.
- Monitoring quality objectives.
- Continual improvement.
- Surveillance audits conducted by the Certification Body according to the applicable certification cycle.
The real objective is not to display the certificate on a wall. It is to maintain a management system capable of supporting consistent quality and reliable processes.
How Much Does ISO 9001 Certification Cost in Jordan?
It is not professionally accurate to provide one fixed price for every organization because the cost of developing the system and the cost of certification are not the same thing.
The overall investment usually consists of several components.
1. Gap Analysis and System-Development Costs
These depend on the organization’s current condition.
An organization with clearly defined processes and functioning procedures will require a different level of work from one building its quality management system from the beginning.
The cost may be affected by:
- The maturity of existing processes.
- The availability of reliable documentation.
- The number and significance of gaps.
- The amount of redesign required.
- The need to cover several sites or business units.
2. Consulting and Development Costs
Consulting costs may be influenced by factors such as:
- The project scope.
- Process complexity.
- Number of locations.
- Scale and severity of the gaps.
- The amount of policy and procedure development required.
- The level of capability building and training needed.
- Whether key processes require redesign.
- The level of implementation support requested.
The consulting proposal should clearly distinguish between diagnosis, system development, training, implementation support, internal auditing, and readiness review.
3. Training and Qualification Costs
The organization’s teams may require development in areas such as:
- Understanding ISO 9001.
- Process management.
- Risk-based thinking.
- Internal auditing.
- Nonconformity management.
- Root-cause analysis.
- Corrective action.
- Performance measurement.
Training needs differ from one organization to another.
A small organization with experienced personnel may require a limited programme, while a larger or multi-site organization may need broader capability building.
4. Certification Body Fees
Certification fees are separate from consulting costs.
The Certification Body develops its proposal using information about the organization, its intended certification scope, and factors affecting the required audit time.
International accreditation frameworks use rules for determining management-system audit duration. Relevant factors may include:
- The effective number of personnel.
- The organization’s nature and complexity.
- The certification scope.
- The number of sites.
- Operational arrangements.
- Other factors affecting the audit.
All organizations therefore cannot be priced in the same way.
A professional quotation should be based on accurate organizational information rather than a generic fixed amount.
5. Surveillance and Certification-Maintenance Costs
The budget should not consider the initial certification audit alone.
The organization should also account for:
- Maintaining the management system.
- Subsequent surveillance audits.
- Recertification arrangements.
- Continual improvements.
- Ongoing internal auditing.
- Additional training where necessary.
- Changes in scope or locations.
Certification creates a continuing commitment rather than a one-time expense.
What Is the Correct Way to Determine the Cost?
The following information should first be defined:
Organizational Scope + Locations + Processes + Effective Number of Relevant Personnel + Current Readiness Level + Intended Certification Scope
Once this information is available:
- The cost of the readiness and implementation project can be estimated more accurately.
- The organization can request a separate formal proposal from the Certification Body.
Any fixed price offered before these factors are understood may be misleading.
How Long Does It Take to Obtain ISO 9001 Certification?
ISO 9001 does not establish one period within which every organization must obtain certification.
The timeline depends primarily on the difference between the current state and the required state.
An organization may be closer to readiness when it already has:
- Clearly defined processes.
- Assigned responsibilities.
- Performance data.
- Implemented procedures.
- An effective mechanism for handling complaints and operational problems.
- Appropriate documentation practices.
- Effective internal auditing.
- Visible management involvement.
Implementation may take longer when the organization:
- Is starting from the beginning.
- Has complex processes.
- Operates across multiple sites.
- Has unclear responsibilities.
- Lacks operating data.
- Requires substantial process redesign.
- Has significant legal, operational, or documentation gaps.
- Needs extensive employee training and capability development.
For this reason, IAC follows the principle:
Diagnosis first, followed by a defined implementation plan and timeline.
Setting a fixed duration before conducting a Gap Analysis does not reflect the organization’s actual condition.
What Can Accelerate Certification Readiness?
Readiness is not accelerated simply by reducing documentation or scheduling the external audit earlier.
The most significant enabling factors are:
- Commitment from top management.
- Clear responsibilities and authorities.
- Timely internal decision-making.
- Active participation by process owners.
- Immediate practical implementation of approved procedures.
- Availability of reliable data and records.
- Prompt handling of gaps and nonconformities.
- Completion of a genuine internal audit before the external audit.
- Completion of management review.
- Timely provision of required information and resources.
The more closely the quality management system is integrated into daily operations, the more structured the readiness process becomes.
What Mistakes Delay ISO 9001 Certification?
Copying Procedures From Another Organization
An effective procedure should describe and control the organization’s own way of working.
A copied procedure may introduce responsibilities, controls, or records that do not correspond to actual operations.
Assigning the Entire Project to the Quality Department
The quality management system covers organizational processes and their owners. It cannot function separately from other departments.
The quality function may coordinate the system, but process owners must operate and improve it.
Focusing on Documents While Neglecting Implementation
An auditor looks for evidence that the system is operating—not only for well-formatted files.
Selecting a Certification Body Based Solely on Price
The organization should verify accreditation, scope, competence, and proposed audit arrangements rather than comparing price alone.
Scheduling the External Audit Before Readiness Is Complete
This may lead to the discovery of gaps that could have been addressed before the certification process began.
Treating Certification as the End of the Project
Continual improvement is a fundamental principle of ISO 9001.
Certification begins the next stage of maintaining, reviewing, and developing the system. It does not mark the end of the work.
What Is IAC’s Role in the ISO 9001 Journey?
Ideal Additions Consulting & Training (IAC) approaches ISO 9001 as a management system that should serve the organization—not as a documentation project aimed solely at passing an audit.
Depending on the organization’s needs, the ISO 9001 consulting pathway may include:
- Current-state assessment and Gap Analysis.
- Design and development of the quality management system.
- Development of policies, procedures, and forms suited to actual operations.
- Integration of risk-based thinking.
- Capability building for quality teams and process owners.
- Internal auditing.
- Support for management review.
- Structured preparation for the external audit.
The engagement follows IAC’s methodology:
Diagnosis → Design → Phased Implementation → Internal Capability Building → Impact Measurement
The decision to grant ISO 9001 certification remains the responsibility of an independent Certification Body, acting according to its procedures and accreditation scope.
Frequently Asked Questions About ISO 9001 in Jordan
Does IAC Issue ISO 9001 Certificates?
No.
The consulting role should remain separate from the certification decision.
IAC supports organizations in developing and implementing the system and improving their readiness for external assessment. The certificate is issued by an independent Certification Body.
Does ISO Issue ISO 9001 Certificates?
No.
ISO develops and publishes international standards. It does not issue ISO 9001 certificates to organizations.
Should We Begin by Selecting a Certification Body?
Not necessarily.
It is generally more appropriate to define the organizational scope, conduct a Gap Analysis, and determine the current level of readiness first.
The organization can then select an appropriate Certification Body before beginning the external certification process.
Do We Need to Develop a Large Number of Procedures?
The objective is not to produce the largest possible quantity of documents.
The organization needs the documented information and operational controls required to support the management system and demonstrate its effectiveness, taking into account the nature and complexity of its processes.
Can ISO 9001 Be Implemented Without Certification?
Yes.
ISO confirms that organizations may implement and benefit from ISO 9001 without third-party certification being mandatory under the standard itself.
Why Does the Cost of ISO 9001 Differ Between Organizations?
Because organizations differ in:
- Size.
- Certification scope.
- Number of locations.
- Process complexity.
- Effective number of personnel.
- Readiness level.
- Required audit duration.
- Amount of implementation support needed.
Important Update on the New Edition of ISO 9001
As of 17 August 2026, ISO 9001:2015 remains the current published edition of the standard.
On 7 August 2026, the relevant ISO technical committee approved ISO/FDIS 9001. ISO expects the revised edition to be published in September 2026.
ISO has explained that organizations certified against ISO 9001:2015 will receive a transition period after publication of the new edition. Further transition information will be issued officially when available.
Organizations beginning an ISO 9001 project should therefore consider the approaching revision when planning:
- System design.
- Documentation.
- Training.
- Internal auditing.
- Certification arrangements.
- Future transition activities.
A draft should not be treated as the published international standard before the new edition is formally issued.
Conclusion
Obtaining ISO 9001 certification in Jordan is not a process of purchasing a certificate.
It is a structured journey that begins with understanding the organization and concludes with an independent assessment of its quality management system.
A disciplined pathway normally follows this sequence:
Scope Definition → Gap Analysis → System Design → Implementation → Capability Building → Internal Audit → Management Review → Readiness Review → Certification Audit → Resolution of Findings → Certification Decision → Continual Improvement
The cost and timeline cannot be determined accurately through one standard figure before the organization’s size, scope, complexity, and readiness have been assessed.
At IAC, the journey begins with diagnosis to determine the gaps, priorities, and required scope of intervention. An implementation plan is then designed to help the organization establish a quality management system that can be used, maintained, and continually improved.
To request an initial diagnostic session for your ISO 9001 quality management system, contact IAC to assess the current state and determine the appropriate scope of work.