If you tender for construction, civil, rail, facilities or government work in Australia, sooner or later a tender will ask for ISO certification. Usually ISO 9001 for quality, ISO 45001 for safety and ISO 14001 for environment, and often all three. Here is what the process actually involves, how long it takes when it is done properly, and where businesses lose months.
What ISO certification actually means
ISO certification means an accredited third party certification body (in Australia, one accredited by JAS-ANZ) has audited your management system and confirmed it meets the international standard. It is not a certificate you buy. It is a system you build, operate and then prove under audit. The certificate is the evidence; the system is the product.
That distinction matters because procurement teams and auditors can tell the difference within minutes. A template system with your logo pasted on it reads like one. A system built around how your crews actually work reads like a business that knows what it is doing.
The pathway, step by step
- Gap and risk review. What you already have, what the standard requires, and what your target tenders and regulators will look for.
- System build. Context and risk mapping, policies, procedures, registers, safe work method statements, forms and evidence frameworks, aligned to your operations rather than to a generic template.
- Implementation and records. The system goes live in the field. Toolbox talks, inspections, training records, incident reports and management reviews start generating the evidence an auditor needs to see.
- Internal audit and management review. Both are mandatory before certification. A formal internal audit with defensible reporting and close out, then a management review that meets clause 9.3.
- Stage 1 certification audit. The auditor checks the system is designed correctly and you are ready. Typically a day to a day and a half.
- Stage 2 certification audit. The auditor checks the system is actually operating. Three to three and a half days for a triple certification. Pass this and the certificate is issued.
- Surveillance and recertification. Periodic audits keep the certificate current. The businesses that treat this as a live system, not a folder, sail through them.
How long it takes
Done the traditional way, with a consultant visiting once a fortnight and your office manager writing procedures between jobs, six to twelve months is common. That is not because the work takes that long. It is because nobody owns it full time.
Done as a project, with a dedicated team building the system and managing the auditors, the same outcome takes weeks. RLM’s 21 Day FastTrack Certify™ program runs the build, the internal audit, the management review and both certification audits inside 21 days, and we have delivered triple certification in as little as two and a half weeks when a tender deadline demanded it.
Where businesses lose months
- Templates from the internet or borrowed from a client. They fail the first real audit or the first serious tender review, and then you start again.
- Waiting for the auditor. Certification bodies book out. Lock in audit dates at the start of the project, not the end.
- Treating it as paperwork. If the crews have never seen the procedures, the Stage 2 auditor will find out in the first site interview.
- Choosing on price alone. Certification is a cost. A system that wins a tender is an investment. The gap between the two is usually a few thousand dollars and a multi million dollar contract.
What it costs, and what it returns
Consulting fees and certification body fees vary with the size of the business and the number of standards. What matters more is the return. Every one of the case studies on this site follows the same pattern: certification unlocked a tender, and the tender was worth many times the cost of getting certified. Sajo Group’s certification supported a $50 million, five year contract. ProRail’s Sydney Trains contract exceeded the total cost of certification and consulting several times over.
What to do next
If you have a tender in front of you that asks for ISO certification, the fastest path is a 30 minute call to map the gap and the timeline. RLM will tell you plainly whether 21 days is realistic for your business, what it will take, and what the certificate will let you bid for.
One Response