How Long Does ISO Certification Take?

By EQRM · Editorial policy and sources

Updated October 1, 2026

There is no responsible universal completion time for every management-system certification application. The overall period depends on preparation, scope review, assessment arrangements, findings and the certification decision. The number of audit days is only one part of that timeline.

Distinguish the periods you are estimating

An organization may need time to establish its system before it can be assessed. The certification body then needs enough information to review the application and plan the work. Audits, responses to findings and decision activities follow according to the programme.

When comparing proposals, ask which period a quoted number actually describes. “Two audit days,” for example, is not a statement that a certificate will be issued two days after the first enquiry.

The scope affects planning

Activities, personnel, sites, complexity and relevant risks can affect the assessment work. Applicable programmes may set methods for determining audit time. IAF MD 5 is one published reference concerning audit time for certain management systems where its requirements apply; it is not a universal duration calculator for every standard or EQRM enquiry.

Provide an accurate description of the organization before asking for a firm estimate. A later discovery of another operating site or a significant activity can require the plan to be reconsidered.

Readiness and access matter

Can the organization show how its processes work? Are the responsible people available? Can records be reviewed without breaching confidentiality obligations? Are relevant activities operating during the proposed audit period?

Seasonal operations, shift work and temporary projects may need particular planning. Explain these features early instead of assuming that any date is equally suitable.

Findings can change the timeline

Where action is needed, the organization must understand the issue and provide the required response and evidence. A response may involve more than changing a document. It may need to show that an action has been introduced and that the issue has been adequately addressed under the programme.

This is why a fixed “guaranteed certificate by Friday” promise is a poor foundation for procurement planning.

Work backwards from a real deadline

If a tender or contract requires certification by a particular date, tell the certification body the date and exact condition. Build a plan that distinguishes what is already established from what remains uncertain. Ask how changes, findings or missed access arrangements could affect the sequence.

Do not tell a customer that an application is equivalent to certification. Where useful, communicate the actual stage reached without implying an outcome that has not been decided.

Information that helps produce a meaningful estimate

  • The standard and edition requested.
  • Activities, organization boundaries and site list.
  • Personnel and shifts where relevant.
  • Existing certification and system maturity.
  • Any known readiness gaps or significant changes.
  • The intended deadline and why it matters.

Contact EQRM with this information to discuss an assessment. Read the certification process for the steps between enquiry and ongoing certification.

Ask for three separate time estimates

Request an estimate for assessment planning, the audit activities themselves, and the subsequent review and decision steps. Separately estimate the preparation work your organization must complete. Mark assumptions such as site access, personnel availability and responses to findings. Revisit the plan when those assumptions change, especially where a customer deadline depends on the result.

Quick answers

Is audit duration the same as time to certification?

No. Audit days are one part of a wider process that includes preparation, scheduling, findings and the certification decision.

Can a tender deadline guarantee faster certification?

A deadline can inform planning, but it does not replace evidence or decision requirements. Provide it early and ask what arrangements are feasible.

Related reading

More from EQRM Insights

Guides

Evaluate a certification body’s competence, accreditation scope, proposal, decision process and certificate verification before choosing a provider.

Guides

Consider ISO certification for a small business: relevant scope, practical evidence, shared responsibilities and questions before requesting a quote.

Certification Insights

Learn how documents, records, interviews and observations can support a certification audit, and why templates alone cannot prove conformity.