Introduction

The most common question we get before a first conversation is some version of: "how much is this going to cost?" It is a fair question. ISO certification involves real money and most of the content on this topic is either vague ("it depends on your business") or suspiciously optimistic. This post gives you a straight answer - what the costs are, what they depend on, and what you should expect to pay for the most common standards in Australia. There are two separate costs every business needs to understand: the consulting fee and the certification body audit fee. Most people only know about one of them until they are partway through the process.

The Two Costs

Cost 1 - The consulting fee

The consulting fee covers the work of building your management system - the gap analysis, the documentation, the implementation support, the internal audit, and the certification audit support. This is what you pay a consultant like ComplyOn.

Consulting fees vary significantly depending on:

The size and complexity of your business. A five-person electrical contractor needs a leaner system than a 50-person civil contractor with multiple sites and a large subcontractor chain. More complexity means more work.

The standard you are certifying to. ISO 27001 typically takes more consulting time than ISO 9001 because the risk assessment process is more involved. An integrated HSEQ system covering ISO 9001, ISO 45001, and ISO 14001 takes more time than a single standard - but less time than three separate implementations.

What you already have. Businesses with existing safety plans, quality procedures, and documented processes have a head start. The gap between where you are and where you need to be is smaller, and the consulting fee reflects that.

Who you use. Solo consultants typically charge less than firms with multiple staff and overhead. That is not always a reason to choose the cheaper option - experience, availability, and the quality of documentation all matter.

Typical consulting fee ranges for Australian businesses:

ISO 9001 (small business, under 20 staff): $5,000 - $12,000 ISO 45001 (small business, under 20 staff): $6,000 - $14,000 ISO 14001 (small business, under 20 staff): $5,000 - $12,000 ISO 27001 (small business, under 20 staff): $8,000 - $18,000 HSEQ integrated (ISO 9001 + 45001 + 14001): $8,000 - $18,000

These are indicative ranges for small to medium businesses. Larger or more complex businesses will sit above these ranges. Businesses with very simple operations and good existing documentation may sit below them.

At ComplyOn we charge a fixed price agreed before we start. The ranges above reflect what we see across our engagements.

Cost 2 - The certification body audit fee

The certification body audit fee is what you pay the organisation that actually issues your certificate. This is separate from the consulting fee and is paid directly to the certification body.

Certification body fees are not published on most certification body websites. They are quoted based on your business size, industry, number of sites, and the standard being audited.

The main factors are:

Number of staff. Certification bodies use staff numbers as a primary input for calculating audit time. More staff means more audit days means higher fees.

Number of sites. A business operating across multiple sites will pay more than a single-site business.

Industry risk. Higher-hazard industries may attract longer audit times for ISO 45001.

Which certification body you choose. Fees vary between certification bodies. Getting two or three quotes before committing is worth doing. Typical certification body fee ranges for Australian small businesses less than 10 staff:

Single standard (ISO 9001, 45001, or 14001), under 20 staff: $3,500 - $7,000 for Stage 1 and Stage 2 combined

ISO 27001, under 10 staff: $7,000 - $712000 for Stage 1 and Stage 2 combined

HSEQ integrated audit (three standards combined) under 10 staff: $7,000 - $12,000

These fees cover the initial certification audit only. You will also pay annual surveillance audit fees in years one and two, and a recertification audit fee in year three. Surveillance audits are typically 30-50 percent of the initial audit cost.

Ongoing Costs

Certification does not end at the certificate. Every year you will pay: Surveillance audit fees to your certification body - typically $2000 - $3,000 per year for a single standard, more for HSEQ.

Internal audit costs - either the cost of internal resource time or an external auditor. An independent external internal audit typically costs $1,500 - $3,500 depending on the standard and business size.

System maintenance - keeping documentation current, managing corrective actions, updating the system when your business changes. This is either done internally or by a consultant. If done externally, expect $1,500 - $5,000 per year depending on the level of support needed.

The annual ongoing cost for a small business maintaining a single certification is typically in the range of $3,000 - $8,000 per year including all of the above.

What affects the price most

If you want to keep costs down, the factors most within your control are:

Have documentation ready. Any existing policies, procedures, safety plans, or quality documentation that is relevant to the standard reduces the consulting time required. Gather what you have before the gap analysis.

Be available and responsive. Certification projects stall when the consultant cannot get time with the right people. Engagements that move quickly cost less than ones that drag out over many months.

Choose the right certification body. Fees vary. Get two or three quotes. Ask about combined audit fees if you are certifying to more than one standard - a combined audit is almost always cheaper than separate audits.

Build integrated if you need multiple standards. An integrated HSEQ system costs significantly less than building three separate systems.

What to be wary of

Unusually low quotes. If a consulting fee seems very low, ask what it includes. Some consultants quote for documentation only and charge separately for implementation support, internal audit, and audit attendance. Others use generic templates that bear little relationship to how your business operates - which increases the risk of audit failure.

Hourly rate engagements. Fixed price engagements give you cost certainty. Hourly rate engagements put the risk of scope blowout on you. If a consultant will not quote a fixed price, ask why.

Certification bodies that are not JAS-ANZ accredited or accredited by an IAF MLA Signatory such as ANAB, UKAS and others. Only certification from a JAS-ANZ accredited body or IAF MLA signatory is recognised for tender, government procurement, and prequalification purposes in Australia. Check accreditation before you commit.

Summary

ISO certification in Australia involves two separate costs - consulting fees and certification body audit fees.

For most small businesses, the total cost from start to certificate ranges from around $8,000 for a single standard to $20,000 for an integrated HSEQ system.

Ongoing annual costs add $3,000 - $8,000 per year. The price varies significantly based on business size, complexity, the standard being certified to, and what existing documentation you have.

Fixed price consulting gives you cost certainty from the start. If you want a specific quote for your business, contact us and we will call you the same day.