An ISO 9001 audit is an independent assessment of your quality management system (QMS) conducted by an accredited certification body to verify that your organisation meets the requirements of ISO 9001:2015, the international standard for quality management.
The full ISO 9001 auditing process covers an initial two-stage certification audit, annual surveillance audits, and a recertification audit every three years. Your team will run internal audits as an ongoing part of maintaining your QMS, which your external auditor reviews as part of the certification audit process.
The ISO 9001 audit process is more straightforward than many businesses expect. Here’s what happens at every stage, from initial documentation review through to recertification.
No surprises – just process. ISO 9001 auditors assess whether your QMS is genuinely embedded in how your organisation operates. Here’s what your auditor is looking for at every stage of the ISO audit:
Internal audits are a mandatory requirement of ISO 9001:2015. You need to plan and carry these out regularly, checking your quality management system is working as intended and catching anything that needs fixing before your external auditor does.
Your external auditor will review your internal audit records, findings, and any corrective actions you’ve taken. A well-run program includes:
Auditor training is worth investing in. The people running your internal audits need a solid understanding of ISO 9001:2015 and the ability to assess your processes without bias. Citation Group provides complimentary online training to help.
We’ve helped over 3,500 Australian businesses achieve ISO certification. Here’s what you get when you work with us.
Loved working with the auditors for our ISO Accreditation. They provided me with valuable feedback and observations that will certainly enhance the business. I felt very well supported during this process as it was my first audit experience.
Catherine Trembath, Office Manager
Thank you for working with us to obtain ISO 45001 Certification. The process was thorough, structured and efficient and the system enhancements we have made to achieve certification will benefit our company greatly.
The breadth of experience and technical expertise you brought to the process was invaluable and really appreciated by all the senior leadership team involved.
Geoff Idzikowski, HSEQ Manager
The collaborative relationship we’ve developed with Citation Certification has turned into a true partnership where our business needs are holistically understood and supported.
John Hemingway, Regional HSE Manager
The auditor that was assigned to us was fantastic. He explained what was expected and required before the audit commenced. And even during the audit process, when things were being identified or uncovered, we could work quite dynamically. He was really accommodating and professional, and really quite pragmatic in the recommendations for improvement, which we’ve taken on board.
James Logan, Operations Risk and Compliance Manager
Our most recent audit cycle was one of the most positive experiences we’ve had since certifying to ISO/IEC 27001:2022, and the relaxed nature allowed us to engage in discourse that was open and honest about gaps and our plans to fix them.
Daniel van Driel, Risk and Governance Lead
So, what is the National Minimum wage, who decides what it should be, and how...
The Fair Work Commission’s Minimum Wage Panel has handed down its decision on the annual...
Conducting a disciplinary meeting isn’t always a straightforward process even for the most experienced business...
Every week, Citation’s advisory team takes calls from business owners navigating situations they didn’t see...
ISO 27001 is the internationally recognised standard for information security management systems (ISMS).
An ISO 9001 audit typically takes one to two days on-site for a small to medium business, depending on your organisation’s size, number of sites, and the complexity of your QMS. Stage one is usually a few hours and can be conducted remotely.
Your Citation auditor will confirm the expected duration before you begin. If you’re still in the ISO 9001 implementation phase, they can also help you understand what to have in place before audit day arrives.
Nonconformities found during an ISO 9001 audit are classified as major or minor. Major nonconformities must be resolved before certification is issued. You’ll address minor nonconformities within an agreed timeframe after certification. Your Citation auditor will explain every finding clearly and guide you through what’s required.
Yes. Internal audits are a mandatory requirement of ISO 9001:2015. Your external auditor will review your internal audit records, findings, and corrective actions as part of the certification audit process. Citation Group provides complimentary online training to help your team develop internal auditing capability.
After initial certification, ISO 9001 requires annual surveillance audits in year one and year two of your three-year certification cycle. A full recertification audit is then required every three years to maintain your certified status.
In Australia, ISO 9001 certification companies should hold JAS-ANZ accreditation, the Joint Accreditation System of Australia and New Zealand. JAS-ANZ accreditation confirms the independent certification body meets international standards for competence and impartiality. Citation Group is JAS-ANZ accredited, making our certifications recognised nationally and internationally.
ISO 9001 certification cost in Australia typically depends on your organisation’s size, number of sites, and the complexity of your quality management system. Larger organisations with more complex QMS requirements will generally pay more due to longer audit durations. Visit our ISO 9001 certification pricing page or contact us for more information.
Citation HR
HR Advice Line
HR Software
Citation Safety
Safety Advice Line
WHS Software
Citation Certification
ISO Certification
NDIS
Citation Legal
Workplace Law
Migration Services
HR & Safety Software 
ISO Training Academy 