We use essential cookies to make the site work and, if you allow it, aggregated analytics cookies to improve the content. We do not use marketing cookies.
Implementing ISO 9001 in 90 days is realistic if you separate the critical from the decorative. Here's the concrete week-by-week sequence.
Implementing a QMS from zero in 90 days sounds aggressive but it's feasible for well-led mid-sized operations. The typical mistake is losing weeks to documentation before touching the plant floor. Our approach flips it: start from real critical processes and document only what already operates.
Week 1. Gap analysis against ISO 9001:2015 with top management and middle managers. Identify critical processes (typically 6 to 10). Define preliminary scope.
Weeks 2-3. Fast process mapping with owners. Short operations interviews. Identify existing indicators that can become quality objectives.
Week 4. Context, interested parties and risk matrix. First draft of the quality policy. 90-day training plan.
Weeks 5-6. Minimum viable documentation: policy, objectives, critical procedures, work instructions where needed. Nothing generic. Everything based on how work actually happens.
Weeks 7-8. Plant rollout. Training for operators on policy, objectives and procedures that affect them. Indicator dashboards installed. First record iteration.
Week 9. Pilot internal audit with an external auditor (usually us) observing. Detection of operational gaps.
Week 10. Critical finding closure. Procedure tweaks. Reinforced training where it failed.
Week 11. Management review with real data. Definition of improvement actions.
Week 12. Pre-audit with certification body. Final adjustments. Certification-audit date confirmed.
Three things that don't fit:
Those require 6 to 12 months. Forcing them destroys documentation quality and team morale.
Three non-negotiable conditions:
If any of the three is missing, extend the timeline before starting. 90 days only work when everyone pushes.
If you're considering starting, prepare the business case. How many new customers the cert unlocks. What audits it saves. What not doing it costs. With that document, the conversation with the CEO is 30 minutes, not 3 months.
Clause 7.4 requires communicating what matters about the QMS. Internal email doesn't work. Here's how to build channels that actually land.
Clause 7.2 requires documented competence. A generic training certificate isn't enough. Here's how to build a useful competence matrix.
The 2015 version removed the quality manual. Here's what the standard actually requires and what's unnecessary tradition.