01
Quality management systems
A quality management system aligned to ISO 9001 that fits how you actually operate: scope, processes, roles and the evidence trail, sized to your organisation rather than a large corporate template.
Quality assurance advisory · Updated October 2026
I help organisations build quality that holds up: quality management systems aligned to ISO 9001 that keep the work consistent, documented and ready for audit. Practical, practitioner-led advisory for businesses, public bodies and NGOs in the European Union, the United Kingdom and the United Arab Emirates. Most want to win customers in those markets, or to pull ahead of local competitors who cannot show the same proof.
Not ready to talk yet? Try my free founder health check, or use Which model when? to see where to start.
“A trusted collaborator who brings both insight and enthusiasm to our students, aligning well with our standards of quality and good practice in adult learning.”
Head of Training and Development, an HR and management consultancy, 2025 · I lead every engagement myself · More references
Quality assurance is the discipline of making the right way of working the standard way, and being able to show it. The work spans the whole picture, from the system on paper to the habit on the floor, and it is built to be run by the people already in the organisation.
01
A quality management system aligned to ISO 9001 that fits how you actually operate: scope, processes, roles and the evidence trail, sized to your organisation rather than a large corporate template.
02
The procedures, records and version control that make the work repeatable: one clear way to do the thing that matters, kept current, so quality does not depend on who happens to be on shift.
03
An internal audit programme and a management review that actually bite: checking the system is followed and working, surfacing what is not, and giving leadership a real read rather than a rubber stamp.
04
Non-conformities, corrective action and improvement handled as a loop, not a filing exercise: problems caught and fixed at the root before clients feel them, with the change made to stick.
05
An honest gap analysis against ISO 9001 and a prioritised plan to close it, so you walk into a certification audit prepared. The certificate is issued by an accredited body; I get you ready for it.
06
I play the auditor for a day and run it the way a certification body would. Better to find the gaps now, while you can still close them, and your team gets used to being asked for proof.
Every job done twice is paid for twice. I put the checks where errors start, not at the end of the line. Then we track rework and complaints month by month, so you can see whether they are falling.
A firm of five can run on memory. A firm of fifty cannot. So I write the job down, train people against it, and audit it now and then. That way the person you hired last month does it the way your best person does.
ISO 9001 certification, or a system built to it, is often what gets you onto a supplier list. I build what the buyer asks for, and nothing they do not.
Three things sit under quality assurance here. They share one method.
Organisational
A working quality management system aligned to ISO 9001: consistent processes, controlled documents, internal audit and improvement, so what you deliver is reliable and provable to clients, partners and auditors.
Certification
Some clients need the ISO 9001 certificate to win or keep a contract. Others just want a system built to the standard and leave it there. The work is the same up to that point. If you go for the certificate, I get you ready for the audit.
The common thread
All of it aims at the same outcome: the right way of working becomes the standard way, and you can demonstrate it on demand. Quality that lives in a binder is not quality; quality that shows up in the work and the records is.
I do not begin by writing procedures. I begin with the procedures and records you already have, and with the people who do the work. Then I set that beside what the standard, or your certification body, is going to ask for. What happens next is up to you at each step.
I offer four build projects. Each one has a fixed scope, agreed before work starts.
I map how the work really moves through your business. Then I set up document control, a programme of internal audits and a management review. The aim is a system that is ready for the certification body's audit. I prepare you for the audit, and the decision is the certification body's.
I sit down with whoever owns each core process and map it step by step. We cut the steps where mistakes creep in, and every procedure ends up with one controlled version, so nobody works from an old copy.
A plan for the year, a couple of your people trained to audit, and a simple log that tracks each finding until it is closed. Without it, a system drifts between external audits.
If you hold a 2015 certificate, I go through the new text line by line, cost the changes, and stay with you until your certification body signs off the move.
A quality system can pass its first audit and then drift: the procedures stop matching the work, two people do the same job two different ways, and by renewal the evidence is a year old. I offer three maintenance arrangements to stop that drift. Keep, Assure and Assure Plus each run for 12 months.
| What is included | Keep | Assure | Assure Plus |
|---|---|---|---|
| Procedures updated once a year, in line with new standards and law | Yes | Yes | Yes |
| Standards and regulatory watch bulletin | Quarterly | Monthly | Monthly |
| Account review call | Annual | Quarterly | Quarterly |
| Quality monitoring: sampling of work and records | No | Quarterly | Quarterly |
| Standardisation session for process owners | No | One a year | Two a year |
| Mock audit | No | One a year | One a year |
| Management review facilitation | No | No | One a year |
| Certification renewal management | No | No | Yes |
| New procedure each year | No | No | One |
| Report for the board or the owner | No | No | Annual |
Swipe sideways to compare the three columns.
If you need someone to run the operation part-time, with compliance and quality checked inside it, that is the Fractional COO role: one to eight days a month. The Fractional COO packages page sets out what each option includes and costs.
You can also buy single pieces of work. A Mock Audit Day is a rehearsal for the certification audit, clause by clause. An Internal Audit Day is a one-day audit against ISO 9001, carried out by me or by a registered lead auditor I bring in. A Training Effectiveness Evaluation asks a harder question than who turned up: whether people work any differently afterwards. I also offer Management Review Facilitation and Certification Renewal Management, and you can buy my time in a ten-hour Advisory Hours Bank.
Current standard
ISO 9001 has a new edition. ISO published it on 16 September 2026, and it replaces the 2015 edition. There is time to plan the move. The accreditation bodies' international forum sets the transition, and three years is the planned period. On that timetable a 2015 certificate is expected to stay valid until 30 September 2029 at the latest (DQS, ISO 9001:2026 transition). Check the dates with your own certification body.
Most of what you know is still there. The process approach stays, and so do Plan, Do, Check, Act and risk-based thinking. The new text does ask more of your leadership team, mainly on quality culture and ethical behaviour. It also wants you to look harder at your context. The climate change wording that was added to the 2015 edition in February 2024 carries over into the new one. If you hold a 2015 certificate, the sensible first step is a gap analysis against the new text, which is what the Compliance and Quality Diagnostic does. If you are building a system from scratch, I build it to the 2026 edition.
Owners, managers and department heads at small and mid-sized businesses, public bodies and NGOs that need their work to be consistent and provable without a large quality function behind them, across the European Union, the United Kingdom and the United Arab Emirates. I have worked across regulated and demanding sectors, from finance and iGaming to manufacturing, hospitality, retail and property, and with public bodies and NGOs. Quality assurance sits naturally alongside my compliance management work: the same discipline of building a system that holds up and can be shown, applied to how you deliver rather than how you comply.
Why me
I am a doctoral candidate in business administration with research on how organisations put learning into practice, I hold a master's from the College of Europe and a Malta teaching warrant, and I have designed and run quality processes across education and business since 2013 alongside running my own companies. The full record of education, credentials and engagements is on my CV page, with selected work in my lecturing portfolio and consultancy and boards portfolio.
A note on scope: this is advisory work tailored to your organisation. I am not a certification body, and I do not issue ISO certificates; I help you build the system and get ready for the body that does.
Here are twenty of the models and standards I lean on in quality work. Each takes about a minute to read and comes with a real company case. They are taken from my book Key Quality Models.
Business Insights
Say what you do. Do what you say. Show the evidence. Put right what goes wrong, so it stays put right.
Business Insights
Terminal 5, March 2008. Every single part had been built well. What failed was the way the parts joined up.
Business Insights
Most people change how they work and never check if it helped. They just move on. Next month, the same problem is back.
Three practitioner workbooks that carry the same idea into different corners of the business: a right way of working, made the standard way, and proved. Training That Sticks is the closest to the education side of this page; Compliance Beyond Ticking the Box and Procurement That Performs apply it to compliance and to supplier spend.
Learning & development
Make the courses you pay for actually change what your team does, and prove it, with no training department.
View on Amazon →
Compliance
Turn compliance from a cost you endure into a system that protects the business and drives its growth.
View on Amazon →
Procurement
Turn supplier spend into growth and performance, using AI where it earns its place, with no procurement team.
View on Amazon →Where the rest of the picture lives, and the record behind the work.
The sibling practice: compliance and risk frameworks aligned to ISO 37301 and ISO 31000.
Where I have taught, and the subjects and programmes behind it.
Qualifications, the teaching warrant, and the standards this work is aligned to.
The full record of education, lecturing and published work behind the advisory.
Who I am, how I work, and why compliance and quality sit at the centre of it.
Tell me what you produce or teach, and I will come back on fit and scope.
Thinking about AI in your operations? See how I use AI to join strategy, data and day-to-day work, with examples from ten operational areas, from accounts payable to quality.
What all my work is for
Every obligation met, with an owner and the evidence to show it.
Work done the same way every time, checked and improved.
Figures that move: margin, cash, complaints and the time work takes.
Quality management aligned to ISO 9001: the processes, document control, internal audits and reviews that keep the work consistent and provable, and the preparation for certification if you want a certificate. It all aims at the same thing, a right way of working that is the standard way, and that you can demonstrate.
No. Certification is issued by an accredited certification body, not by an adviser. I help you build and run a quality management system aligned to ISO 9001, close the gaps against the standard, and get ready for a certification audit if you choose to pursue one. The certificate itself comes from the certification body.
Yes. The practice is set up for owners and managers who carry quality without a dedicated function. The system is built to be run by the people already in the business, sized to how you actually operate, not lifted from a large corporate template.
Yes, I work with businesses, public bodies and NGOs. ISO 9001 is the same for all of them. The rules around it are not: a council has procurement law to follow, and a charity has its funders' conditions. I look at those first and build the system to fit.
Not immediately, but I would not leave it until the last year. ISO published the new edition on 16 September 2026. The accreditation bodies' international forum sets the transition, and three years is the planned period. On that timetable a 2015 certificate is expected to stay valid until 30 September 2029 at the latest. Your own certification body will tell you the dates that apply to you, so ask. If you run a gap analysis against the new text now, you can make the changes at your normal management reviews.
They are three arrangements, each for 12 months, that keep a finished quality system ready for audit. With Keep, I update your procedures once a year for changes in standards and law, and I send you a watch bulletin each quarter. Assure adds sampling every quarter, a standardisation session and a mock audit. Assure Plus adds renewal management for your certificate, a management review and one new procedure a year.
Use the contact page to outline your organisation, what you produce or teach, and roughly what you need. You will get a straight answer on fit, scope and how the work would run, usually within a couple of working days.