ISO 9001:2026 · Budget
What ISO 9001 certification really costs
The certification body fee is usually only a fifth to a third of what an ISO 9001:2026 certificate actually costs, and more than half on a small, simple scope. A full rand-by-rand breakdown excluding VAT, a worked example for a mid-sized South African manufacturer, the three avoidable costs, and the lines you cannot cut.
Every quote you have been sent for ISO 9001 certification is probably for one line of the bill. On a mid-sized site the certification body audit is usually a fifth to a third of the first-certificate cost. On a small, simple scope it can be more than half, because the audit day minimum does not scale down as far as the rest of the budget does. The rest is documentation, training, internal auditor competence, management time, and fixing the things the gap analysis finds. This article puts honest rand ranges against every line, shows a worked build for a mid-sized manufacturer, and names the three costs that are avoidable.
The short answer. A single-site South African manufacturer of 80 to 200 people should budget roughly R150 000 to R600 000 for the first ISO 9001:2026 certificate. Allow six to twelve months for the system, nine to fifteen months to the certificate in hand once the certification body’s own scheduling is allowed for. Of that, the accredited certification body’s own fee for stage 1 and stage 2 is typically only R35 000 to R85 000. The larger share is documentation, competence and the cost of closing the gaps you find. Every rand figure in this article, including the worked example and the headline range, is excluding VAT. Most manufacturers reclaim the input VAT, so budget the ex-VAT number on the P&L and the inclusive number on cash flow. Every figure here is a typical market range, not a quotation. Ask an accredited certification body for a written quote for your scope and headcount.
ISO 9001:2026 is the sixth edition of the standard, published on 16 September 2026. It cancels and replaces ISO 9001:2015 and incorporates Amendment 1:2024, the climate change amendment. The transition set by Global Accreditation Cooperation, known as Global ACI, which took over the work of the IAF when the IAF ceased operations on 1 January 2026, runs three years, so certified organisations have until 30 September 2029 to complete it, and from 31 March 2028 new and initial accredited certifications may only be issued to the 2026 edition. Confirm the exact dates with your own certification body before you plan around them. Confirm the clause lettering against your own controlled copy of ISO 9001:2026. If you are certifying for the first time in 2026 or 2027, certify to the 2026 edition and pay once.
Skip the most expensive line first. The ISO 9001:2026 Document Templates Toolkit is 202 documents and roughly 553 000 words, at a launch price of R5 480 until 30 November 2026. That is the documentation line of this budget, done.
See the ISO 9001:2026 toolkit Talk to us about implementation
What does ISO 9001 certification actually cost in South Africa?
There is no list price, and anyone who gives you one without asking your headcount, your number of sites, your scope and whether you design product is guessing. Certification body fees in South Africa are built from audit days. An accredited body works out how many days your certification audit needs from IAF MD 5, the audit-duration document carried forward by Global ACI, which uses effective personnel numbers and scope complexity, then multiplies by a day rate. In 2026 that day rate typically sits between R9 000 and R15 000 excluding VAT, before travel.
The table below is the whole bill, not just the audit. Treat every rand figure as a typical range seen in the South African market, not a quote.
| Line item | Typical range (ZAR, excluding VAT) | What drives it up or down |
|---|---|---|
| Certification body, application and document review | R3 500 to R9 000 | Usually a flat administration and contract review fee. Multi-site scopes attract a higher one. Some bodies fold this into stage 1. |
| Certification body, stage 1 audit | R9 000 to R25 000 (usually 1 day, 1 to 2 days on complex scopes) | Stage 1 checks readiness: scope, context, internal audit done, management review done. If it is conducted remotely under the ISO 19011:2026 remote auditing guidance, you save the travel line. |
| Certification body, stage 2 audit | R25 000 to R60 000 (typically 2 to 4 days for 80 to 200 people) | Effective headcount, shift patterns, number of processes, whether design and development is in scope. A second site adds days, not a second full audit. |
| Certification body, travel, accommodation, certificate issue | R2 000 to R18 000 | Near zero for a Gqeberha or Johannesburg site using a local auditor. Highest for a rural site or an auditor flown in for a niche scope. |
| Annual surveillance audit (years 1 and 2) | R12 000 to R30 000 per year | Normally about a third of the stage 2 day count. Rises if you had major nonconformities, changed scope or added a site. |
| Three-year recertification audit | R25 000 to R50 000 | Roughly two thirds to four fifths of the original stage 2. Budget it in year three, not year four, because it happens before the certificate expires. |
| Annual certificate maintenance and mark licence fee | R2 000 to R6 000 a year | Charged by most certification bodies for keeping the certificate live and for the right to use the accreditation and certification marks. Small, easy to forget, and invoiced whether or not an audit falls that year. |
| Consultant time, if you use one | R7 500 to R12 500 per day. A full build is 15 to 40 days, so R110 000 to R500 000 | The single biggest variable in the whole budget. Halves if the consultant is adapting an existing document set rather than writing one. Rises sharply if the consultant is also running your training. |
| Documentation, writing the QMS | R5 480 to R250 000 | R5 480 for the launch-priced ISO 9001:2026 toolkit that you adapt yourself. R100 000 and up if a consultant writes it from a blank page at day rate. This is the line with the widest honest spread on the whole table. |
| The standards themselves | R4 000 to R7 000 year one | ISO 9001:2026, ISO 9000, and ISO 19011:2026 if your auditors work to it. You cannot audit against a standard you do not hold, and 7.5.3 external document control means the auditor will check you hold the current edition. No toolkit includes the standard and none legally can. |
| Training, the people who build the system | R4 800 per person for the ISO 9001:2026 Understanding and Implementation course. Classroom lead implementer courses run R12 000 to R22 000 | One or two people need this depth. It is roughly 24 hours, 75 lessons, with a marked workbook and a proctored final. |
| Training, everyone the auditor will interview | R1 495 per person for the Introduction to ISO 9001:2026 course | Supervisors, line leaders, QA staff, stores, dispatch. A site of 140 people typically puts 15 to 30 people through this. Ask about a group arrangement at five or more. |
| Internal auditor competence | R3 500 to R9 000 per auditor for an external course, or the cost of two days of a consultant’s time for in-house training | You need at least two or three competent internal auditors so that nobody audits their own work. This is not a line you can delete. |
| Calibration and measurement traceability | R8 000 to R60 000 in year one | Clause 7.1.5.2 needs traceable calibration where measurement traceability is a requirement. Scales, thermometers, pressure gauges, torque tools, colour measurement on a print line. The first year is the expensive one because you are catching up. |
| Management time, the hidden line | 250 to 500 internal hours across the build, at your own loaded cost | Context analysis, interested parties, risk and opportunity workshops, management review, internal audits, corrective action. Nobody invoices you for this, which is exactly why it is the line that runs over. |
| The cost of the gaps you find | R20 000 to R300 000 and up | The genuinely unknown line until you have done a gap analysis. Typical items: a segregation issue in the warehouse, a missing acceptance criterion on a process, a laboratory method with no method validation, an ERP that cannot produce traceability in the time you claim. |
Two points on the certification body lines. First, ASC does not quote certification body fees and cannot. We are a consultancy, training provider and auditing firm, and the certification body must be independent of both. Get a written quote from an accredited certification body, and check the accreditation is live on the SANAS directory or the relevant Global ACI signatory’s register before you sign. Second, ask the quote to state the day count and the day rate separately. A body that will not break the number down is a body whose surveillance invoices will surprise you.
A worked example: a mid-sized manufacturer certifying for the first time
Take a food contact packaging converter in Gqeberha. One site, 140 effective personnel, two shifts, print and converting, a small in-house laboratory, no design and development in scope. No existing certification. Target: ISO 9001:2026 certificate within twelve months.
The build most sites actually run
| Line | Cost (ZAR, excluding VAT) | Note |
|---|---|---|
| ISO 9001:2026 toolkit, adapted in-house | R5 480 | Launch price to 30 November 2026 |
| Two people on the Implementation course | R9 600 | The QA manager and the operations manager |
| 22 people on the Introduction course | R32 890 | Supervisors, line leaders, QA, stores, dispatch. Ask about a group rate |
| Three internal auditors trained | R18 000 | Two per shift plus a reserve |
| Consultant, 10 days of targeted support | R95 000 | Gap analysis, risk and opportunity facilitation, two document reviews, a mock stage 2 |
| Calibration catch-up | R34 000 | Scales, thermometers, a torque wrench set, print colour measurement |
| Gaps found and closed | R70 000 | Warehouse segregation, two process acceptance criteria, a complaint handling change in the ERP |
| Certification body: application, stage 1, stage 2, travel | R68 000 | 1 day stage 1, 3 days stage 2, R14 000 per day, local auditor |
| Year one total, excluding internal time | R332 970 | Plus about 380 internal hours |
| Year one surveillance | R22 000 | |
| Year two surveillance | R23 000 | |
| Year three recertification | R45 000 | Falls before the certificate expires, not after |
The same site, done the cheap-but-slow way
No consultant. The QA manager does the Implementation course, adapts the toolkit, and runs the build alongside a full-time job. Take out the consultant (R95 000) and one Implementation seat (R4 800). Trim the gaps line to R40 000, because more of the fixing is done in-house at your own cost. About R195 000 direct, and roughly 250 extra internal hours. The timeline stretches from twelve months to twenty or twenty-two, because the build gets the hours that are left over rather than the hours it needs. You save about R137 000 and you spend roughly nine extra months without the certificate. If a customer questionnaire is the reason you are certifying, those nine months may cost more than R137 000 in tenders you could not answer.
The same site, done the fast way
A consultant on site for 30 days, writing and facilitating. Direct cost rises to about R520 000, with certification in seven to eight months. That is a legitimate choice when a contract has a date on it. It becomes a bad choice when most of those 30 days are spent typing documents that already exist in a toolkit, which brings us to the part of this article that will save you the most money.
Two numbers worth comparing before you sign a consulting contract. A consultant writing your QMS from a blank page is R7 500 to R12 500 a day. The toolkit is R5 480 once, for 202 documents already written to the 2026 clause structure.
Browse the toolkit contents See the three ISO 9001:2026 courses
The three biggest avoidable costs
1. Consultant days spent writing documents you could have bought
A complete ISO 9001 document set for a manufacturing site is 80 to 200 documents, depending on how you count forms. Written from scratch at day rate, that is 12 to 25 consultant days, or R90 000 to R310 000. It is also the least valuable use of a consultant, because writing a procedure is the part of the job that does not require your consultant to have seen your factory.
The ISO 9001:2026 Document Templates Toolkit for Food Contact Packaging Manufacturing is 202 documents, 190 Word and 12 Excel, plus the proof-read and remediation report, at roughly 553 000 words. Part 1 covers clauses 4 to 10. Part 2 is ten packaging quality control modules, from artwork, print and colour through statistical process control and capability, measurement system analysis and cost of poor quality. Part 3 is six enabler modules, including quality culture and ethical behaviour, climate change and sustainability, and transition from 2015 to 2026. It includes twelve Excel risk assessment workbooks with live formulas and 5×5 inherent and residual scoring, a 123-row internal audit checklist walking every sub-clause from 4.1 to 10.2 with the 2026-specific rows flagged, and a master product and process specification so no two documents can state a different limit.
The launch price is R5 480 until 30 November 2026, then R6 850. Both are excluding VAT, and no VAT is added at checkout. For comparison, Advisera sells a 61-document ISO 9001 toolkit from US$897, roughly R16 000 at current rates. That is about a third of the documents for roughly three times the money, written for a generic organisation rather than a packaging plant. ASC’s comparable toolkits sit in the same band as this one: FSSC 22000 V7 food contact packaging at R6 350, BRCGS Packaging Materials Issue 7 at R5 900, BRCGS Food Safety Issue 9 at R6 550.
We should be clear about the limit. The toolkit does not implement itself. Every document has to be made true for your site, your equipment and your customers, and that is work. What it removes is the blank page, not the thinking.
2. A failed stage 2 because nobody adapted the template
A failed stage 2 is the most expensive single event in this whole budget. A major nonconformity typically means a follow-up audit of one to two days at full day rate, R14 000 to R30 000, plus another six to twelve weeks before the certificate issues, plus the internal cost of a second run at whatever failed.
The usual cause is not a missing document. It is a document that says something the site does not do. An auditor reads your calibration procedure, walks to the print line, asks the operator what the acceptance criterion is for colour, and gets an answer that is not in the procedure. Clause 8.1 in the 2026 edition is restructured a) to e) and separates process criteria from acceptance criteria explicitly. The acceptance criterion has to exist in writing, not only in the operator’s head. A template that still carries a generic limit will fail that conversation every time.
Under the 2026 edition, clause 7.3 expanded from four items to five and the new e) is the organizational quality culture and ethical behaviour. An auditor satisfies 7.3 by hearing operators answer in their own words, consistently across shifts. A signed attendance register alone does not satisfy it. Budget for the floor conversations, not just the file.
3. Paying a consultant to teach what a course teaches for R1 495
Awareness training delivered by a consultant on site is two to three days at day rate, R15 000 to R37 500, and it reaches the people who happened to be on shift. The Introduction to ISO 9001:2026 course is R1 495 per person, about six hours across 21 lessons, self-paced with lifetime access, and it reaches night shift too. At 22 people that is R32 890 against R37 500 for three consultant days, and everyone who joins in March gets the same training as everyone who was there in January.
The depth course is the same comparison. ISO 9001:2026 Understanding and Implementation is R4 800 for roughly 24 hours across 75 lessons, with seven interactive tools, 68 case packs, a marked workbook and a proctored final. A consultant delivering equivalent depth in-house is four to six days, R30 000 to R75 000. The usual pattern that works on a South African site is one or two people on Implementation and everyone else on the Introduction. At five or more, ask about a group arrangement.
Then use your consultant days for what only a consultant on your floor can do: the gap analysis, the risk and opportunity workshop, the mock stage 2, and the argument about whether your scope statement is honest.
What you cannot save money on
The three lines below are where cutting the budget costs you the certificate. We would rather say this plainly than sell you something that fails.
- Competent internal auditors. Clause 9.2 requires internal audits at planned intervals, and 9.2.2 a) in the 2026 edition now requires you to define the audit objectives, criteria and scope for each audit, so one objective sentence per audit plan, every time. Auditors must be objective and impartial, which means nobody audits their own work. On a 140-person site that means at least three trained people. An internal audit programme that exists only as a signed checklist is the single most common finding we see, and it is the finding most likely to become a major.
- A management review that actually happens. Clause 9.3 went from six inputs to eight. The new c) is changes in the needs and expectations of interested parties, and g) and h) split risks from opportunities into two separate inputs. That is an eight-heading agenda with named owners, dated decisions and evidence that resources were allocated. A review that runs 40 minutes once a year, chaired by the QA manager with no director in the room, does not meet 9.3, and it is 5.1.1 that an auditor will write the finding against as well. In the 2026 edition 5.1.1 expanded from ten items to twelve, and the new i) is promoting quality culture and ethical behaviour while k) requires promoting risk-based and opportunity-based thinking. Posters do not satisfy i). Dated top management actions with measurable outcomes do.
- Making the documents true for your site. Every limit, every acceptance criterion, every responsibility, every piece of equipment named in a template has to be checked against what your factory actually does. There is no version of this work that someone else can do without asking you the questions. Budget the internal hours honestly, because this is the line that decides whether stage 2 is a formality or a fight.
One thing you can stop budgeting for: neither the 2015 edition nor the 2026 edition has ever required a quality manual, six documented procedures, or a management representative. If a proposal quotes you for writing a quality manual, ask which clause requires it. There isn’t one. That myth has sold a lot of consulting days in South Africa.
What does the 2015 to 2026 transition cost if you are already certified?
Far less, and this is the good news for most readers. You are not rebuilding a system. You are closing a defined set of gaps, and the authoritative change list is short enough to plan against. Our article on what actually changed between ISO 9001:2015 and ISO 9001:2026 walks every clause.
| Transition line | Typical cost (ZAR, excluding VAT) | Note |
|---|---|---|
| Transition to ISO 9001:2026 course | R1 950 per person | About 8 hours, 22 lessons, with an interactive Transition Planner. One or two people is usually enough |
| Transition gap analysis checklist | Included in the toolkit | Separates the genuinely new requirements from the terminology tidying, so you do the work that is real |
| Building the opportunity register under 6.1.3 | 15 to 40 internal hours | The single biggest new build for a certified site. 6.1.3 is a new dedicated sub-clause: determine, analyse, evaluate, plan, integrate, implement, evaluate effectiveness |
| Rebuilding the change record under 6.3 | 6 to 15 internal hours | Four considerations became seven. Three new columns: e) communication of the changes, f) monitoring and evaluating effectiveness, g) reviewing the results |
| Context register entry for climate change at 4.1 | 1 to 2 hours | One dated entry: issue, determination, reason, owner, date. A blank entry does not satisfy it |
| Splitting the risk register and adding the 9.1.3 analysis lines | 8 to 20 internal hours | 6.1.2 now requires you to analyse and evaluate risks; 9.1.3 went to eight items with e) and f) splitting risk action effectiveness from opportunity action effectiveness |
| Certification body transition audit | Usually absorbed into a scheduled surveillance or recertification visit, or R9 000 to R25 000 as a standalone | Ask your certification body now. Doing it at a visit you were already paying for is the cheapest route by a wide margin |
For most certified sites, the entire external spend on transition is the R1 950 course, a toolkit if you want the rebuilt documents and the gap checklist, and whatever your certification body charges to review the change. The rest is internal hours. Sites that leave it until 2029 will pay more, because they will be competing for audit days in the last transition window along with everyone else. Confirm your own transition audit date with your certification body.
How to get a number you can take to your board
- Count effective personnel across all shifts and write your scope statement in one sentence. These two things drive the certification body quote more than anything else.
- Send that to three accredited certification bodies and ask each for a written quote showing day count and day rate separately, for stage 1, stage 2, both surveillances and recertification.
- Do a gap analysis before you commit to a consulting scope. You cannot price the gaps line until you know what is in it.
- Decide the documentation line deliberately: adapt a toolkit, or pay day rate. Put both numbers next to each other.
- Count the training heads. One or two on Implementation, everyone an auditor will interview on Introduction, three internal auditors.
- Add a contingency of 20 percent on the gaps line, and book the internal hours in people’s diaries. The hours are the line that sinks projects, not the rands.
If you are still working out whether you need the certificate at all, start with what ISO 9001 is and what it means for a South African manufacturer. If your site already holds FSSC 22000 and a customer questionnaire is what triggered this, read whether you need both ISO 9001 and FSSC 22000 first, a certified GFSI site has already built a large share of the ISO 9001 system, and that changes the numbers above considerably. If the decision is made and you want help scoping the work, our ISO 9001 implementation consulting is built around doing the parts a consultant should do and not the parts a toolkit does better.
Build the budget from the two cheapest lines first. The toolkit at R5 480 covers documentation. The courses cover competence at R1 495, R1 950 and R4 800. Then spend your consultant days on your factory, not on your filing.
Get the ISO 9001:2026 toolkit Enrol in an ISO 9001:2026 course
Questions people ask
How much does ISO 9001 certification cost in South Africa?
For a single-site manufacturer of 80 to 200 people, budget R150 000 to R600 000 all-in for the first certificate, of which the accredited certification body’s stage 1 and stage 2 fee is typically R35 000 to R85 000. Surveillance runs R12 000 to R30 000 a year and recertification R25 000 to R50 000 in year three. These are typical market ranges, not quotations. Ask an accredited certification body for a written quote against your scope and effective headcount.
Why is the certification body quote so much lower than the total?
Because the quote covers audit days only. It does not cover writing the quality management system, training the people the auditor will interview, training internal auditors, calibrating your measuring equipment, the management hours the build consumes, or fixing whatever the gap analysis finds. On most sites those lines together are two to four times the certification body fee.
Do I need a consultant to get ISO 9001 certified?
No. Nothing in ISO 9001:2026 requires one, and a certification body cannot require one either. Sites do it themselves, usually more slowly. Where a consultant earns the fee is the gap analysis, facilitating the risk and opportunity work, and a mock stage 2. Where a consultant is poor value is typing procedures that already exist in a toolkit and delivering awareness training that a R1 495 course delivers to every shift.
How much does it cost to transition from ISO 9001:2015 to ISO 9001:2026?
Much less than an initial certification. For most certified sites the external spend is the R1 950 Transition to ISO 9001:2026 course, optionally a toolkit for the rebuilt documents and the transition gap analysis checklist, and whatever the certification body charges to review the change, which is often absorbed into a surveillance or recertification visit you were already paying for. The real cost is internal hours, mostly on the new opportunity register under 6.1.3 and the rebuilt change record under 6.3.
When do ISO 9001:2015 certificates expire?
ISO 9001:2026 was published on 16 September 2026 and the transition period set by Global Accreditation Cooperation, known as Global ACI, which took over the work of the IAF when the IAF ceased operations on 1 January 2026, is three years, so certified organisations have until 30 September 2029 to complete the transition. From 31 March 2028 new and initial accredited certifications may only be issued to the 2026 edition. Confirm the exact dates that apply to your certificate with your own certification body.
Is a quality manual required, and should I pay someone to write one?
No, and no. Neither ISO 9001:2015 nor ISO 9001:2026 requires a quality manual, six documented procedures, or a management representative. If a proposal includes writing a quality manual, ask which clause requires it. What the standard requires is documented information that your processes actually follow.
Can ASC quote me for the certification audit?
No. We are a consultancy, training provider and auditing firm, and the certification body must be independent of the people who helped build or train your system. We can help you scope the work and read the quotes you receive, but the certification fee must come from an accredited certification body in writing.
ISO 9001:2026 is published by the International Organization for Standardization. ASC Food Safety Consultants is an independent consultancy, training provider and auditing firm. Our toolkit and courses are independent products and are not approved, endorsed or accredited by ISO or by any certification body. All rand figures in this article are typical South African market ranges as at September 2026 and are not quotations.