Getting a small manufacturer ready
for an ISO 9001 audit.

What an ISO 9001 audit actually checks

An auditor does not grade your manual. They sample evidence: a procedure, then the records that prove it was followed, then a person who can explain it. Most findings at small manufacturers come from the gap between what the documents say and what the floor does, not from missing documents. Readiness means closing that gap on the processes that will be sampled.

The readiness checklist

Twelve practical checks with ISO 9001:2015 clause references. This is a starting point, not a complete conformity assessment. Agree the applicable edition and audit criteria with your certification body before using it; ISO has also published ISO 9001:2026.

1. Scope and context. The quality system scope, interested parties, and the issues that affect the business are written down and current (clauses 4.1 to 4.3).
2. Process map with owners. Each process has a named owner, defined inputs and outputs, and at least one measure that is actually reviewed (clause 4.4).
3. Quality policy and objectives. The policy is communicated, and objectives are measurable with evidence that progress is tracked (clauses 5.2 and 6.2).
4. Controlled documents. Procedures and forms are at the current revision, approved, available where the work happens, and obsolete copies are gone (clause 7.5).
5. Records you can find. Training, calibration, supplier evaluations, and inspection records are retrievable in minutes, not hours (clause 7.5.3).
6. Competence matches roles. Training records cover the people doing each job today, including new hires and temporary staff (clause 7.2).
7. Measurement traceability. Gauges and instruments are calibrated, identified, and traceable, and out-of-calibration handling is recorded (clause 7.1.5).
8. Supplier controls. An approved supplier list, evaluation records, and incoming inspection evidence exist for critical purchases (clause 8.4).
9. Customer feedback. Complaints and feedback are logged and show follow-through, not just receipt (clause 9.1.2).
10. Internal audit cycle complete. Every process has been audited by someone independent of it, and findings are closed or on a tracker (clause 9.2).
11. Management review held. The required inputs were reviewed and the outputs, including decisions and resources, are recorded (clause 9.3).
12. Nonconformance and corrective action. Records show root cause, action taken, and an effectiveness check, not just a disposition (clause 10.2).

Where small manufacturers usually fail

Three patterns account for most findings SolveXa sees. Stale documents: the procedure describes a process that changed a year ago. Corrective actions without root cause: the record says what was fixed but not why it happened or whether the fix held. Audits and reviews done for the auditor: an internal audit and a management review squeezed into the month before, with nothing to show in between. All three are visible in records, which is why a readiness review samples records first.

How the Audit-Readiness Review works

The review covers up to five agreed processes, chosen for audit risk. For each, SolveXa samples evidence the way an auditor would, interviews the process owner, and writes findings graded by severity with the clause reference. You receive a corrective-action tracker with owners, and one follow-up review to confirm the actions closed. The sequence is simple: agree the processes, review and sample, work the tracker, confirm closure, then meet the auditor with evidence in hand.

The review does not guarantee certification or identify every possible finding. The certification body decides, and its fees are separate. A sampled review gives you evidence of gaps in the agreed processes and a plan to address them.

What it costs and how to start

The Audit-Readiness Review is fixed in scope and quoted after a free 20-minute discovery call. Additional processes, sites, shifts, and travel are quoted separately. If the review shows that procedures or forms are missing rather than unfollowed, the next step is usually the ISO 9001 implementation module, which can draw on SolveXa’s documentation package of about ninety ISO 9001:2015 templates to move faster. Raise it on the call if that sounds useful.

Questions

We have an audit in a few weeks. Is it too late?

Usually not. Start with the processes most likely to be sampled and the records with the biggest gaps. Book the call and say the date.

Can SolveXa run our internal audit?

Internal-audit support is part of the Audit Readiness & Ongoing Support service, and the readiness review is itself an independent sample of your system. The audit programme stays yours.

Does this apply to ISO 13485 or IATF 16949 audits?

The review method can be used for both, but this ISO 9001:2015 checklist does not replace their requirements. ISO 13485 is a standalone medical-device standard; IATF 16949 is used with ISO 9001. Agree the applicable standard, customer requirements, and review scope on the call.