There’s a story that gets told in a lot of SMEs — especially in construction — that goes something like this:
“If we’re going to do ISO properly, someone needs to own it. Full-time. Otherwise it’ll fall apart.”
It sounds responsible. It sounds serious. It also, for most businesses your size, isn’t true.
ISO does not require a full-time administrator. It requires a management system that works. Those are not the same thing.
Where the myth comes from
The idea didn’t appear out of nowhere. It usually comes from one of three places:
- A system that was over-built — procedures for everything, registers nobody uses, evidence scattered across emails, folders, and someone’s head.
- A bad experience of certification — where “keeping ISO alive” meant chasing paperwork before every audit.
- Vendors and habits that quietly sell complexity: more documents, more portals, more roles.
If your system needs a full-time feeder to stay alive, that isn’t compliance working hard. That’s a design problem wearing a high-vis jacket.
What the standards actually ask for
Strip ISO 9001 (and ISO 14001, if you hold it) back to the bones and you’re left with something much more modest:
- Know how your work runs and who’s responsible
- Control the risks that matter
- Keep the information you need — not everything you’ve ever written
- Check that things are working (internal audit, monitoring, customer feedback)
- Fix what goes wrong and improve what matters
- Look at the system as leaders, on a sensible rhythm
That’s control. That’s consistency. That is not a career in document babysitting.
There is no clause that says: “Employ one person whose only job is to feed the system.”
Minimum requirements ≠ maximum theatre
Here’s the uncomfortable bit most people won’t say out loud:
A lot of what eats time in “ISO admin” was never required.
- Procedures written for auditors instead of for the people doing the job
- Competence matrices that duplicate what’s already on tickets and inductions
- Supplier lists that exist to look complete rather than to manage real risk
- Evidence packs rebuilt from scratch before every visit because nothing was captured as work happened
Minimum requirements are smaller than the industry folklore. Once you accept that, the full-time admin role starts to look like a workaround for a noisy system — not a necessity.
So how do busy firms keep it alive?
With a lean system and a bit of digitisation. Not with heroics.
Capture evidence as work happens
Photos, signatures, toolbox talks, delivery checks, NCRs raised on a phone. If evidence only appears in a panic the week before surveillance, you’re paying a time tax.
One place for the truth
Shared, controlled folders or a simple platform beat five versions in email. Document control is version control — not a library wing.
Automation for the boring reminders
Ticket expiry, calibration due dates, action chasers, surveillance prep lists. Machines are good at nagging. People are better on site.
AI for draft and summarise — humans for decide
Turn a voice note into an NCR narrative. Turn a month of figures into a management-review summary. Extract expiry dates from certificate PDFs. Then a competent person checks and signs off. Speed without fake assurance.
None of that replaces judgement. It replaces re-typing, re-filing, and re-discovering what you already knew.
What “enough” looks like in practice
For a typical Accendo client, keeping ISO healthy often looks more like this:
- A clear process map that matches how you actually deliver
- A short list of controlled documents people still use
- Digital records that are searchable when an auditor asks
- A monthly habit measured in hours, not days
- Internal audits that sample with purpose, not archaeology
The certificate stays credible. The UKAS audit still stands up. The difference is that delivery doesn’t get stolen to feed the filing.
The Accendo line
We specialise in lean, proportionate management systems for SMEs — especially construction, manufacturing, and facilities. No documentation for documentation’s sake. No full-time admin role invented to prop up a bad design.
If your ISO system only survives because someone is constantly chasing it, it’s not “robust”. It’s fragile — and expensive.
Let’s build something quieter: minimum requirements, digitised where it helps, and designed so the people who deliver the work can keep the system honest without disappearing into an office.
If that sounds closer to what you wanted when you first went for certification, get in touch.
Accendo Consultants — practical ISO for businesses that have real work to do.