How we streamlined ISO 9001 certification across four locations under one coordinated audit programme — cutting cost and effort while raising consistency across the whole firm, and turning a fragmented group of offices into a single, credible organisation in the eyes of its clients.
Background
RIA Advisory had grown quickly and successfully, opening offices in four different cities within the space of a few years. That growth was a clear sign of health, but it carried a hidden cost that many rapidly expanding firms will recognise. Each office had, entirely understandably, developed its own habits, its own templates, its own informal shortcuts and its own subtly different way of serving clients. What worked effortlessly when the whole firm shared a single room began to fray quietly as the business spread across the map and headcount multiplied.
None of this was the result of carelessness. It was the natural consequence of empowering local leaders to build their offices and win their own clients. But as RIA began pitching for larger, more sophisticated engagements — the kind won through formal procurement rather than personal relationships — prospective clients started to expect two things at once: a recognised, credible quality certification, and genuinely consistent delivery no matter which office they happened to work with. The firm came to realise that its greatest early strength, its local entrepreneurial energy, was quietly becoming a liability whenever it needed to demonstrate reliability and uniformity at scale.
The challenge
The obvious route — certifying each office as a completely separate entity — would have been a serious and expensive mistake, and it is a trap many firms fall into. It would have meant four separate management systems to build and maintain, four sets of audits to schedule and pay for, four separate invoices arriving each year, and, worst of all, four subtly different ways of working formally documented and locked into place. Far from solving the consistency problem, that approach would have cemented it. It would also have multiplied the ongoing administrative burden fourfold, precisely when management attention was the scarcest resource in the firm.
What RIA actually needed was the exact opposite of fragmentation. It needed one clear, shared way of working — defined once, proven once, and recognised everywhere the firm operated. It needed a certificate that told a client in any city the same simple story: wherever you deal with us, you will receive the same standard of quality.
Our approach
Rather than treating each site as an isolated island, we worked closely with RIA’s leadership to design a single multisite certification programme. It was built on one shared management system, supported by a central coordinating function and a sampling-based audit plan agreed carefully in line with accreditation rules for multisite organisations.
- A common set of core processes and documentation, adopted across all offices while still allowing sensible, well-controlled local adaptation where it genuinely added value.
- A central review function made explicitly responsible for keeping every site aligned to the same standard, and for spreading good practice between them.
- A sampling audit plan that covered the organisation efficiently and fairly, without exhaustively re-auditing every office from scratch every single year.
- Internal-auditor training so that each office could monitor and sustain the system itself, rather than depending entirely on an external check once a year.
Throughout, we were careful not to crush the local energy that had made RIA successful. The goal was never to turn four lively offices into one bureaucratic machine. It was to give them a shared backbone — common standards and common language — while leaving room for the local judgement that clients valued.
The implementation journey
We began with a gap analysis across all four offices, mapping how each one actually worked rather than how the manuals claimed it did. This surfaced both the differences and, encouragingly, a great deal of common ground. We then facilitated a series of working sessions in which people from each office helped shape the shared processes, so that the final system felt like something they had built together rather than something imposed from the centre. That sense of joint ownership proved decisive: people defend what they help create.
Documentation was kept deliberately lean and practical. Rather than producing an intimidating manual that no one would read, we created clear, usable process descriptions and templates that made the right way the easy way. Internal auditors were trained in each office, giving every location the ability to check itself and fix small issues long before they could grow.
What changed day to day
The most valuable change was cultural rather than merely procedural. Where each office had once quietly solved the same recurring problems in four different ways, teams began working from one shared playbook. New joiners in any city learned the same processes and the same vocabulary, which made moving people and knowledge between offices far easier. Client-facing work took on a recognisable, consistent quality regardless of location. And because the system was documented and owned centrally, an improvement discovered in one office could be rolled out to all of them quickly, so the whole firm began to learn together instead of repeating the same mistakes in parallel across four cities.
The outcome
- One certificate covering all sites, with significantly lower total audit effort and cost than four separate certifications would ever have demanded.
- Consistent processes and reporting across the entire organisation.
- A clear surveillance schedule that keeps every site aligned year after year, rather than drifting apart again.
- A stronger, simpler and more confident story to tell in client pitches and competitive tenders.
- An internal audit capability that turns the certificate into a source of ongoing improvement rather than a once-a-year event to be endured and forgotten.
Lessons for similar firms
RIA’s experience holds several lessons for any multi-location organisation considering certification. First, resist the instinct to certify each site separately; a well-designed multisite programme is almost always cheaper, faster and more coherent. Second, involve the local offices in designing the shared system, because a system built with people is followed, while a system imposed on them is quietly worked around. Third, invest early in internal auditors at each location, so that quality becomes self-sustaining rather than externally policed. And finally, remember that consistency and local judgement are not enemies; the right system provides a shared backbone while leaving room for the human expertise clients actually pay for.
Looking ahead
With a single, well-run management system now in place, RIA is positioned to add further offices with far less friction, to pursue additional standards on the same foundation, and to compete for larger engagements with genuine confidence. The certificate is no longer merely a badge on the wall; it has become the framework through which the firm keeps its promise of consistent quality, wherever in the world its clients are served.
One system, one certificate, one standard of quality — wherever the client is served.← Back to all case studies