Why Small Businesses Get This Wrong
Comparing ISO consulting packages sounds straightforward. You get a few quotes, pick the one that looks reasonable, and get started. In practice, most small business owners end up confused, overcharged, or stuck with a consultant who disappears after handing over a folder of templates.
On this page
The problem is not a lack of options. There are hundreds of ISO consultants operating across Australia, and most of them offer some version of a “full certification package.” The problem is that these packages are structured very differently, priced inconsistently, and rarely explained in plain terms. What looks like an apples-to-apples comparison is often anything but.
This guide is written specifically for small businesses going through ISO certification for the first time. It will walk you through exactly what to look for, what questions to ask, and how to tell whether a consulting package actually represents value or just a tidy invoice.
What an ISO Consulting Package Should Actually Include
Before you can compare packages, you need to understand what a complete consulting engagement looks like. Many consultants break their services into phases. Others bundle everything together. Neither approach is inherently better, but you need to know what each phase involves so you can check whether it is covered.
Gap Analysis
A gap analysis is usually the starting point. The consultant reviews your existing processes and documents against the requirements of the relevant ISO standard, then identifies what is missing or needs improvement. For a small business, this might take a few hours or a full day depending on complexity. Some consultants charge separately for this. Others include it in the overall package. Either way, it should be clearly listed.
Documentation Development
This is often the most time-consuming part of the engagement. The consultant helps you build or refine your management system documentation, which includes policies, procedures, work instructions, and records templates. Be careful here. Some consultants hand you a generic template set and call it documentation development. That is very different from building documentation that actually reflects how your business operates. Generic templates can create serious problems during your certification audit, so ask specifically how the documentation will be tailored to your business.
Implementation Support
Documentation alone does not get you certified. Your team needs to understand the system, follow the procedures, and generate evidence that the system is working. A good consulting package includes implementation support, which means the consultant helps you roll out the system internally, trains your staff, and checks that things are being done correctly before the audit.
Internal Audit
Most ISO standards require you to conduct internal audits before your certification audit. The consultant may conduct this audit on your behalf, help you conduct it yourself, or train someone in your business to do it. All three approaches are valid, but they have different implications for your long-term capability. If the consultant always does it for you, you may struggle to manage this requirement independently after certification.
Management Review
A management review is a formal meeting where leadership evaluates the performance of the management system. The consultant should help you run your first one and make sure it meets the requirements of the standard. This is often overlooked in cheaper packages.
Pre-Audit Support
In the lead-up to your Stage 1 and Stage 2 certification audits, your consultant should be available to answer questions, review your evidence, and help you address any gaps. Check whether this is included or whether it attracts additional fees. You can read more about what to expect in our guide on 8 things to do before an ISO Stage 1 readiness audit.
Post-Audit Corrective Action Support
If your auditor raises nonconformities during the certification audit, you will need to respond with corrective actions. Some consultants include support for this in their package. Others charge extra. Given that nonconformities are common, especially for first-time certifications, this support can be genuinely valuable.
Get 3 ISO Quotes. 24 Hours Response
Tell us what you need and compare vetted ISO consultants or certification bodies within 24 hours. Free, no obligation.
Trusted by 400+ businesses like yours
The Four Types of ISO Consulting Packages You Will Encounter
Once you start collecting quotes, you will notice that consultants tend to offer one of four package structures. Understanding each one helps you compare them more accurately.
Template-Only Packages
These are the cheapest option, often sold online for a few hundred dollars. You receive a set of pre-written documents and are largely left to implement them yourself. For a very small business with an owner who has some compliance experience, this might be enough. For most small businesses, it is not. The templates are generic, the support is minimal, and the risk of failing your audit or building a system that does not actually work is high. Our article on DIY ISO certification: when templates work and when they don't covers this in more detail.
Fixed-Scope Consulting Packages
These packages define a set number of consulting days or hours, typically covering gap analysis, documentation, internal audit, and pre-audit support. The price is fixed, which makes budgeting easier. The risk is that if your business is more complex than anticipated, the consultant may run out of allocated hours before the job is done, and you will either pay more or receive incomplete support. Always ask what happens if the scope runs over.
Full-Service Managed Packages
These are the most comprehensive option. The consultant manages the entire certification process from start to finish, including liaising with the certification body, conducting all internal audits, and handling any corrective actions. These packages cost more, but they reduce the burden on your internal team significantly. For small businesses with limited staff, this can be worth the premium. Just make sure you are also building internal capability, not just outsourcing the whole thing.
Retainer-Based Ongoing Support
Some consultants offer a retainer arrangement where they provide a set number of hours per month to support your management system on an ongoing basis. This is more relevant post-certification, but some consultants bundle the initial certification project into a longer retainer arrangement. This can work well, but read the contract carefully. You want to know what happens if you decide to end the retainer early.
How to Compare Quotes Side by Side
Once you have collected quotes from two or three consultants, the comparison process needs to be methodical. Here is a practical framework.
Build a Scope Checklist
List every deliverable you expect from the engagement: gap analysis, documentation, implementation support, internal audit, management review, pre-audit support, and corrective action support. Then go through each quote and mark whether each item is explicitly included, excluded, or unclear. You will often find that a cheaper quote is simply missing several items that a more expensive quote includes. The price difference may not be as large as it first appears once you account for what is actually covered.
Assess the Depth of Documentation Work
Ask each consultant directly: will the documentation be built from generic templates, or will it be developed specifically for our business? Ask to see an example of documentation they have produced for a similar business. If they cannot provide one, that tells you something. Generic documentation is a significant risk factor for certification audits, and it also means your system will not actually reflect how your business operates.
Check Industry Experience
A consultant who has worked extensively in your industry will understand your specific risks, processes, and regulatory environment. This matters more than most business owners realise. A consultant who mostly works in manufacturing may not be well-suited to a professional services firm, and vice versa. Ask specifically how many businesses in your sector they have taken through certification, and for which standards. Our article on why industry expertise is important for an ISO consultant explains why this matters in practice.
Clarify Who Does the Work
Some consulting firms quote attractively but then assign the work to a junior consultant or subcontractor. Ask who specifically will be working on your project, what their qualifications are, and whether they have direct auditing experience. Someone who has worked as a certification auditor will have a very different perspective from someone who has only ever been on the consulting side. That auditing experience is genuinely valuable when it comes to preparing your business for the certification audit.
Understand the Timeline
Ask each consultant for a realistic timeline from engagement to certification. For a small business pursuing ISO 9001 for the first time, a realistic timeline is typically four to nine months depending on your starting point and internal resource availability. Be cautious of consultants who promise certification in six to eight weeks. That is usually a sign that corners are being cut, or that the certification body they are working with is not reputable. You can read more about what causes delays in the ISO certification process to set realistic expectations.
Look at the Payment Structure
Some consultants require full payment upfront. Others split payments across project milestones. A milestone-based payment structure is generally better for you as a client because it ties payment to delivery. Be wary of consultants who want a large upfront payment with no clear deliverables attached to it.
Red Flags in ISO Consulting Packages
Beyond the comparison framework above, there are specific warning signs that should make you hesitant about a particular consultant or package.
Guaranteed Certification
No legitimate consultant can guarantee you will pass your certification audit. The audit is conducted by an independent certification body, and the outcome depends on whether your management system meets the requirements of the standard. A consultant who guarantees certification is either misrepresenting their relationship with the certification body, or cutting corners to ensure you get a pass regardless of your actual compliance. Neither is acceptable.
No Mention of the Certification Body
The consulting package and the certification audit are two separate things. The consultant helps you prepare. An accredited certification body conducts the audit and issues the certificate. If a consultant is vague about which certification body you will use, or suggests they can handle everything including the certification, ask very direct questions. ISO's guidance on conformity assessment and certification makes clear that certification must be conducted by an independent, accredited body. The two roles should not be conflated.
Very Low Prices With No Explanation
A complete ISO 9001 consulting package for a small business in Australia typically costs between $3,000 and $15,000 depending on scope and complexity. If you receive a quote significantly below this range, ask detailed questions about what is included. Cheap packages almost always mean generic templates, minimal support, and a consultant who will not be available when you need them. Our article on why cheap ISO certification is bad for your business covers the real costs of going this route.
No References or Case Studies
Any experienced ISO consultant should be able to point you to businesses they have helped achieve certification. If a consultant cannot provide references or at least describe specific projects they have completed, treat that as a significant concern. You are trusting this person to guide you through a process that will affect your business operations and your ability to win contracts. That trust needs to be earned.
Questions to Ask Before You Sign Anything
Before committing to any consulting package, get clear answers to these questions in writing.
- What specific deliverables are included in the package, and what is excluded?
- Will the documentation be tailored to our business, or based on generic templates?
- Who will be assigned to our project, and what is their background?
- How many businesses in our industry have you taken through this standard?
- What is the realistic timeline to certification, and what factors could extend it?
- What happens if the project scope runs over the allocated hours?
- Is support for corrective actions after the certification audit included?
- Which certification body do you recommend, and are they JASANZ accredited?
- What is the payment structure, and is any portion refundable if we are not satisfied?
- Will you be available by phone or email between sessions, and is that included?
Getting Multiple Quotes Without the Legwork
One of the practical challenges small businesses face is simply finding qualified consultants to compare. Cold-calling consultants, waiting for callbacks, and trying to assess credentials from a website is time-consuming. Most business owners have a business to run while they are doing this.
This is exactly the problem CertBetter was built to solve. You submit one form describing your business, your industry, and the standard you are pursuing. CertBetter matches you with up to three vetted ISO consultants who have relevant experience for your situation. Each one provides a quote, and you can compare them side by side. The service is completely free for businesses seeking certification help, and all consultants on the platform have been verified for credentials and experience.
Rather than spending days chasing quotes from consultants you know nothing about, you get structured, comparable proposals from people who have already been assessed. It does not remove the need to ask the right questions, but it does give you a much better starting point.
