ISO 9001 checklist for small businesses

Why SMEs need a different checklist

Most ISO 9001 guides are written for large enterprises with dedicated quality managers. SMEs need a leaner approach: fewer documents, more evidence of actually doing the work.

The 12-step SME checklist

1. Define your QMS scope — one paragraph naming what you do and where.
2. Write a one-page quality policy — signed by the owner/MD.
3. List 3–5 quality objectives — measurable, with owners and due dates.
4. Map your core processes — sales, delivery, support. One diagram each.
5. Identify risks and opportunities — a single risk register works.
6. Set up a supplier list with approval criteria.
7. Create SOPs for repeatable work — start with the top 5 by frequency.
8. Set up a nonconformity / CAPA log — even a spreadsheet is fine.
9. Schedule internal audits — once a year minimum, covering all clauses.
10. Run a management review — quarterly is ideal, annual is mandatory.
11. Train your team on the QMS — record attendance.
12. Pre-audit gap check — use a Stage 1 readiness checklist before booking.

Common SME mistakes

• Copy-pasting a 200-page manual from the internet
• Treating ISO as a one-off project instead of a habit
• Skipping internal audits because "we know our processes"
• Hiring a consultant to write everything, then forgetting it exists

Time investment

Realistically, a 10–30 person business can be certification-ready in 8–12 weeks of part-time effort if you start with proper templates.