Prepare your organization for ISO 9001:2015 certification
Training for HR, QA managers, Management Representatives, and internal audit teams — understand the ten clauses, run internal audits per ISO 19011, and enter Stage 1 with documentation ready to be tested.
- 4.9/5 · 287 reviews
- 300+ clients nationwide
- 2,000+ trainers
- 1 to hundreds of participants
- Standard · Premium · Private 1-on-1
- Clauses covered
- Clauses 4–10Clauses covered
- Internal audit standard
- ISO 19011:2018Internal audit standard
- Format
- Inhouse, online, hybridFormat
- Output
- Active internal auditorsOutput
2,000+ trainers and experts
Our group's teaching network, matched to what your team needs.
See class documentationYou see your trainer first
The trainer's profile, track record and field come with the proposal, before you decide.
4.9 out of 5
287 participant reviews.
300+ clients nationwide and 180,000+ private training sessions completed. Among them: MPR RI, Akademi Militer Magelang, DPRD Provinsi Jawa Timur.
One person to hundreds
Private coaching for one participant, a class for one team, or several cohorts at once.
Three budget levels
- Standard: core class, material fitted to the participants’ work
- Premium: senior trainer, deeper material design
- Private 1-on-1: one participant, one trainer, schedule set by the participant
ISO 9001 Awareness + Internal Auditor training equips your team to understand the ten standard clauses and run internal audits per ISO 19011. Neksus trains your organization to audit-readiness; a KAN-accredited certification body performs the certification audit and issues your ISO 9001:2015 certificate.
The world’s most-adopted quality management system standard
ISO 9001:2015 is the international standard for Quality Management Systems (QMS) published by the International Organization for Standardization. Its clause structure follows Annex SL — the High Level Structure shared with ISO 14001, 45001, 27001, and 37001 — so organizations already using one standard integrate others more easily. The 2015 version moved focus from procedures toward risk-based thinking, organizational context, and leadership. Neksus trains your team to understand clauses 4–10, prepare conforming documentation, and complete one internal audit cycle before the certification body arrives.
- Annex SL High Level Structure — common clause language across ISO MSS
- Risk-based thinking replaces formal preventive action
- Context of the organization (clause 4) and leadership (clause 5) are foundations
- One internal audit cycle + management review is mandatory before certification
No training vendor can issue an ISO 9001 certificate. Official certificates come only from accredited certification bodies (in Indonesia typically via KAN, internationally recognized through the IAF MLA). Neksus prepares your organization so that Stage 1 and Stage 2 audits go smoothly.
Awareness takes half a day to one day for all impacted employees. Internal Auditor runs two to three days for the team that will perform internal audits — with practice in building checklists, observing audits, and writing finding reports.
Organizations already certified to ISO 9001 save 30–50% effort when adding ISO 14001 or 45001, because clauses 4–10 share identical structure. Many Indonesian organizations target triple 9001+14001+45001 certificates within a single audit cycle.
ISO 9001:2015/Amd 1:2024 was published on 23 February 2024 alongside a joint ISO and IAF communiqué. Clause 4.1 now says the organization shall determine whether climate change is a relevant issue, and clause 4.2 gained a note that relevant interested parties can have requirements related to climate change. Certification body auditors have asked about it since the amendment appeared. Concluding that it is irrelevant is acceptable when the reasoning is recorded in the context analysis. Typical relevant cases: floods that cut off raw material supply, or export customers asking for emissions data.
Annex A.4 of ISO 9001:2015 states that there is no requirement for formal methods for risk management or a documented risk management process. Auditors look at the actions: the organization plans how to address risks and opportunities, builds those actions into its processes, and evaluates their effectiveness. A risk register remains a practical tool for organizations with many processes. Smaller organizations may record the same thinking in their process map or management review minutes, as long as an auditor can trace the actions.
The sixth edition, ISO 9001:2026, was announced as published on 16 September 2026 by several certification bodies, with a three-year transition period. During that period ISO 9001:2015 certificates remain valid, and your certification body schedules the transition audit. The ten-clause structure is retained, so internal auditors fluent in the 2015 text only need to learn the changes.
Scopes typically certified
ISO 9001 certifies the processes that produce a product or service. The scope statement describes the business processes within the QMS.
Example: design, production, assembly, and shipment of automotive components — including raw material warehousing and line QC control.
Example: engineering consultancy, financial services, or IT services — pre-contract processes, project delivery, and after-sales support.
Example: public licensing services, clean water management, or electricity distribution. Often linked to Indonesia’s Bureaucratic Reform policy.
Scope around academic processes or clinical services. Many hospitals pair this with KARS or JCI accreditation.
Corporations with multiple offices or plants can use multi-site sampling per IAF MD 1 — the auditor samples locations per cycle.
Design & development may be excluded when not relevant to the business model. Exclusions must be justified in writing and must not impair the ability to meet customer requirements.
Processes performed by outside parties stay inside the QMS scope. Examples include calibration of measuring equipment at an external laboratory, freight forwarding, painting by a subcontractor, or a cloud service running the order system. The type and extent of control is set according to its impact on the conformity of products and services (clause 8.4.2).
Organizational readiness before inviting a certification body
The minimum set that must demonstrably exist at Stage 1 audit. Without these, Stage 2 is deferred and re-audit costs appear.
- Written quality policy authorized by top managementAligned to strategic direction, committed to continual improvement, communicated across the organization.
- Context & interested parties defined (clause 4)Analysis of internal/external issues — SWOT or PESTLE — plus mapping of interested parties and their expectations.
- Written QMS scope statementDescribes processes, locations, and any clause 8.3 exclusions — approved by top management.
- Actions on risks & opportunities (clause 6.1)Planned actions that are built into processes and evaluated for effectiveness. ISO 9001 requires no formal method or risk register (Annex A.4), so the format is your choice as long as the trail of actions can be checked.
- Process map and interactions (clause 4.4)A list of core and support processes with their inputs, outputs, sequence, owners, resources, criteria, and performance indicators. Many teams capture this as one turtle diagram per process, which later becomes the basis of the internal audit checklist.
- Documented information matrix (clause 7.5)Separate the documents you maintain (policy, scope, quality objectives, and the work procedures you decide you need) from the records you retain as evidence (calibration results, competence evidence, design review results, supplier evaluations, audit results). Assign an owner, a location, and a retention period to each.
- Controlled documentation procedure (clause 7.5)Version control, approvals, distribution, and retention — including external documents.
- External provider evaluation criteria (clause 8.4.1)Criteria for selecting suppliers, monitoring their performance, and re-evaluating them are written down, and the evaluation results are retained. An approved supplier list with no evaluation record for the current year is a finding that often surfaces at Stage 2.
- Nonconforming output handling (clause 8.7)How nonconforming product is identified, segregated, contained, corrected, or accepted under concession, including who has the authority to decide. The record describes the nonconformity, the actions taken, any concessions obtained, and the person who decided (clause 8.7.2).
- At least one internal audit cycle completedEvidence of checklists, finding reports, and verified corrective actions — this is why Internal Auditor training is mandatory.
- At least one management review (clause 9.3)Complete minutes with all required inputs and outputs, signed by top management.
Audit path from contract signing to certificate
Per ISO/IEC 17021-1 — a 3-year certification cycle with two surveillance audits in years 1 and 2.
- 1
Application & contract with certification body
1–2 weeksSubmit application form: scope, employee count, site count, IAF sector. The body computes mandays per IAF MD 5.
- 2
Stage 1 — Documentation readiness review
1–2 days onsiteThe auditor reviews policy, scope, quality manual, risk register, internal audit results, and management review minutes. Output: readiness confirmed, or findings to close first.
- 3
Stage 2 — Implementation audit
3–10 days onsite, depending on scaleAuditor goes into operational processes. Employee interviews, work observation, record review. Findings classified as Major NC, Minor NC, OFI, or Observation.
- 4
Closure of findings & certification recommendation
30–90 daysMajor NC corrective actions must be closed before certificate recommendation. Minor NCs can be closed at the first surveillance. The body’s technical committee recommends certification.
- 5
Certificate issuance (3-year cycle)
—Certificate valid for 3 years. Bears certificate number, scope, and accreditation mark (e.g. KAN). Usable in SOE/government tenders.
- 6
Year 1 & 2 surveillance audits
Annual, 2–5 daysLighter maintenance audits — focus on changes, prior finding follow-up, and a sample of critical processes. Cost ±60% of Stage 2.
- 7
Recertification audit (year 3)
Before certificate expiresFull re-audit near the end of the cycle. If passed, the certificate is renewed for another 3 years.
What an ISO 9001 Internal Auditor does
Internal Auditor training follows ISO 19011:2018 — guidelines for auditing management systems.
Internal auditors design the annual audit program, build per-clause checklists, conduct interviews and observations across operational processes, document findings with objective evidence, and verify the effectiveness of corrective actions. Independence is a core principle — auditors are not allowed to audit their own work. Internal audit results are a mandatory input to the management review (clause 9.3).
- Independence & objectivity — audit ethics per ISO 19011 clause 4
- Professionalism — fair and accurate judgement
- Fair presentation — duty to report findings as they are
- Evidence-based approach — conclusions from verifiable sampling
- Risk-based approach — audit focus on highest-impact areas
- Structured interview, observation, and document review techniques
- Writing audit findings that are clear, factual, and re-auditable
- Reading a single process through a turtle diagram: inputs, outputs, with what, with whom, how, and how it is measured
- Telling correction (fixing the faulty output) apart from corrective action (removing its cause) under clause 10.2
- Building a finding from three elements: the requirement cited, the objective evidence, and the statement of nonconformity (ISO 19011:2018 clause 6.4.8)
- Major Non-Conformity (Major NC)
Failure to meet clause requirements with systemic or recurring impact. Must be closed before certificate issuance.
- Minor Non-Conformity (Minor NC)
Isolated deviation that does not undermine overall system effectiveness. May be closed at the next surveillance.
- Opportunity for Improvement (OFI)
Not a non-conformity, but an improvement opportunity recommended by the auditor to strengthen the system.
- Observation
Auditor note on potential future risk; does not require formal corrective action.
Expected outcomes for your team after the training
Awareness vs Internal Auditor vs Lead Auditor preparation
Choose the track based on the person’s role and the organization’s end goal.
| Criterion | Awareness | Internal Auditor ★ | Lead Auditor preparation |
|---|---|---|---|
| Typical duration | 0.5–1 day | 2–3 days | 5 days (IRCA-style) |
| Target audience | All impacted employees | Internal audit team members | Aspiring Lead Auditors / consultants |
| Main output | Basic understanding & vocabulary | Checklists + audit simulation + finding reports | Individual certificate from a registered training scheme |
| Delivered by | Training vendor (e.g. Neksus) | Training vendor (e.g. Neksus) | Registered training organization (e.g. IRCA / Exemplar Global) |
| Clauses trained in most depth | Quality policy, quality objectives, and each person's awareness (5.2, 6.2, 7.3) | Clauses 4–10 by process, with emphasis on 6.1, 7.5, 8.4, 8.7, 9.2, and 10.2 | The full third-party audit cycle under ISO/IEC 17021-1 |
| How participants are assessed | Short comprehension quiz | Finding-writing exercises and audit simulation | Written exam from a registered training scheme |
Engagement path with Neksus for ISO 9001 training
From kickoff conversation to handoff to the certification body.
- 1
Kickoff & readiness diagnosis
Week 1Short 2-hour workshop with your quality team: map documentation readiness, identify early gaps against the clauses, set target certification schedule.
- 2
Awareness session for the wider audience
Week 2Half a day to one day for line management and supervisors. Goal: every role understands why the QMS exists and their part in it.
- 3
2–3 day Internal Auditor workshop
Weeks 3–4Material: clauses 4–10, ISO 19011, interview techniques, checklist construction practice, audit role-plays, and writing findings with objective evidence.
- 4
Guided mock internal audit
Week 5A Neksus facilitator accompanies your internal audit team through one real audit in one department, as a final exercise.
- 5
Readiness review & closure recommendations
Week 6A concise report: remaining gaps, action priorities, and readiness to invite the certification body.
- 6
Handoff to your chosen certification body
Week 7+Neksus helps prepare the document package for the Stage 1 audit; selecting the certification body is entirely your decision.
Target roles in the organization
Owns the QMS and is the primary contact with the certification body.
Maintains quality consistency across operations and prepares audit records.
4–8 cross-functional people who will run periodic internal audits.
Operational process owners who must demonstrate conformity during audits.
Manages competence and controlled-document records per clause 7.
Directs the quality policy and leads the management review (clauses 5 & 9.3).
Examples of accredited certification bodies commonly chosen by Indonesian organizations
The list below is not a Neksus recommendation. Selecting a certification body is entirely your organization’s decision based on scope, IAF sector, and procurement requirements.
Global network, strong in manufacturing and automotive.
Frequently used for multi-site scopes across Southeast Asia.
UK-origin body; original author of many ISO standards including ISO 9001.
Broad sector coverage — manufacturing, services, government, FMCG.
French origin; strong in energy, maritime, and infrastructure sectors.
State-owned inspection & certification body; frequently chosen for SOE/government tenders.
The bodies above are examples of organizations accredited (typically through KAN and the IAF MLA network) that can perform certification audits. They are not Neksus partners and do not receive referrals from Neksus. Choosing a certification body is entirely your organization’s decision based on scope, sector, and internal procurement requirements.
Typical outcome patterns from comparable clients
Generic illustrations based on intervention patterns. No client names.
Mid-size manufacturer, 200 employees, three plants, first-time certification.
Awareness for all supervisors (1 day) + 3-day Internal Auditor for 6 cross-plant auditors + guided mock audit per plant.
Stage 1 passed with no critical findings; Stage 2 produced 2 Minor NCs closed within 45 days.
SOE public-service operator, multi-site national, transition from ISO 9001:2008 to 2015.
Gap analysis on clause 4 (context) and clause 6.1 (risk); Internal Auditor workshop for 12 cross-region auditors; coaching on redesigning the management review process.
Transition audit passed within a single cycle without schedule extension; re-audit cost was zero.
Engineering consultancy, 50 employees, single office, fast certification driven by a tender requirement.
Intensive package: kickoff + awareness + Internal Auditor + mock audit within 6 calendar weeks.
ISO 9001:2015 certificate issued within 4 months of kickoff, meeting the SOE tender documentation requirement.
Procurement information
- Contract formatInhouse training (per-session package) or continuous program (including mock-audit coaching).
- LocationOnsite at the client site, regional onsite, or live online.
- Language of deliveryIndonesian (default) or bilingual ID/EN for MNC global audiences.
- Materials & participant certificateModules, handouts, checklist templates, and a Neksus participation certificate (this is not an ISO certificate; that comes from the certification body).
- Tax documentationVAT invoice, receipt, BAST. SOE/government e-procurement support available.
- ISO 9001 in government procurementIndonesian government procurement follows Perpres 16/2018 as amended by Perpres 12/2021 and Perpres 46/2025. A QMS certificate becomes a technical requirement on packages whose selection documents or LKPP e-catalogue storefront terms ask for it. Read the qualification requirements package by package, and confirm that your certificate scope covers the product or service you are offering.
- SOE and corporate vendor registrationVendor registration portals at state-owned enterprises and large corporations commonly ask for an uploaded ISO 9001 certificate together with its scope and validity dates. Buyers may also run a second-party audit at your site. A trained internal audit team makes that kind of customer audit feel like the internal audits it already runs.
- Indonesian-language referenceBSN adopted the standard as SNI ISO 9001:2015, so the clause terms used in class can be matched against documents requested by government agencies. Certification bodies issuing certificates under KAN accreditation operate to SNI ISO/IEC 17021-1.
- Payment terms30% advance on contract, 70% on training completion (negotiable per procurement terms).
- Optional coaching schemePre-Stage-1 coaching engagement, separate from the training package, on a manday basis.
Frequently Asked Questions
Discuss ISO 9001:2015 readiness for your organization
Send a short team profile and your target certification schedule. The Neksus team studies your context and prepares a program design.
- Awareness, Internal Auditor, and mock-audit coaching in one contract
- Facilitators with internal-audit experience across manufacturing, SOE, and services
- Materials tailored to your scope and IAF sector
- Structured handoff to your chosen certification body