What ISO 9001 is
ISO 9001:2015 is the international standard for quality management systems (QMS). It doesn't tell you what quality your products must reach. It sets out how you plan work, control processes, deal with customers and complaints, measure results and keep improving.
It applies to any organization, of any size, in any sector: manufacturers, hospitals, schools, banks, SACCOs, construction firms, government agencies and service businesses.
Why Ugandan organizations get certified
Most organizations pursue ISO 9001 for a mix of commercial and operational reasons:
- ↳Tenders and procurement: many public and donor-funded tenders, and large private buyers, ask for a certified quality system.
- ↳Export and supply chains: international customers often require suppliers to be ISO 9001 certified.
- ↳Consistency: documented processes mean the same result whoever does the work, which matters as you grow or open branches.
- ↳Fewer errors and complaints, because problems are recorded, investigated and fixed at the root.
The five steps to certification
Whatever the size of the organization, the route to ISO 9001 follows the same five stages.
- ↳Gap analysis: compare how you work today with each requirement of the standard and list what's missing.
- ↳Implementation: define your quality policy and objectives, map key processes, assign responsibilities and put controls in place.
- ↳Documentation: write the procedures and keep the records the standard requires, in a form staff will actually use.
- ↳Internal audit and management review: check the system works as designed, fix non-conformities, and have leadership review performance.
- ↳Certification audit: an accredited certification body audits you in two stages. If you pass, it issues a certificate valid for three years, with surveillance audits in between.
How long it takes
For a small or medium organization, three to six months from gap analysis to certification audit is typical. Larger or multi-site organizations take longer. The biggest factor is how much of your current practice is already documented and consistent.
Consultant versus certification body
A consultant (like Terry Technologies) helps you build and document the system and prepares you for the audit. The certification body is a separate, independent organization that audits you and issues the certificate. To stay impartial, the same organization shouldn't do both for you.
When choosing a certification body, check that it is accredited by a recognized accreditation body, so your certificate is accepted by buyers and tender boards.
Combining ISO 9001 with other standards
ISO 9001, ISO 14001 (environment), ISO 45001 (health and safety) and ISO 27001 (information security) share a common high-level structure. Many organizations run one integrated management system covering two or more standards, which saves effort in documentation and audits.
Published 30 September 2026 by Terry Technologies, Kampala.