First-Time QMS Implementation Roadmap: What Happens After You Download
Short answer: templates remove most of the writing, not the deciding. After you download, you still define your scope, adapt the documents to how you actually work, approve them, train people, and run each process long enough to produce records an auditor can sample. For a small company that is usually 3 to 6 months from download to a certification audit, and the templates typically save the first 4 to 8 weeks of drafting.
The roadmap
-
Get your copy of the standard and run a gap assessment
Buy ISO 9001:2026 or ISO 13485:2016 from ISO or your national body. Run the gap assessment workbook with the people who own each process so you know what already exists.
-
Define scope, role and exclusions
Write down what you do, for which products, at which sites, and in which regulatory role (manufacturer, distributor, design-only). For ISO 13485, justify any clauses that do not apply. This drives every other document.
-
Map your processes, then pick the templates you need
List your real processes and owners. Match each to a procedure in the kit. Delete or merge what you don't need; a smaller system you actually run beats a big one you don't.
-
Adapt the documents
Replace example text, roles, numbering and approval routes with yours. Start with the quality manual, document control and CAPA, because everything else references them. Keep a list of every placeholder you still need to fill.
-
Review and approve under document control
Have each owner review their procedure, approve it, and enter it in the master document list with a revision and effective date. This is your first evidence that document control works.
-
Train people and record it
Brief everyone on the policy and objectives, and train each person on the procedures they use. Record training and how you checked it worked.
-
Run the processes and build records
Operate the system for long enough to create real records: CAPAs, supplier evaluations, training, calibration, complaints, design reviews. Certification bodies usually want to see roughly 3 months of operation.
-
Internal audit, management review, then certification
Audit every process at least once, fix what you find through CAPA, hold a management review with all the required inputs, then book the stage 1 audit with an accredited certification body.
Who does what
| Task | You | Templates | Optional help |
|---|---|---|---|
| Scope, role, exclusions | Decide | Structure and prompts in the quality manual | Onboarding call |
| Procedures, forms, registers | Adapt and approve | Pre-written, cross-referenced drafts | Document review |
| Device-specific content (risk analysis, specifications, validation data) | Create | Blank structures with guidance | Consulting |
| Training and awareness | Deliver and record | Training matrix and records | Online courses |
| Operating the system | Do | Logs and registers | - |
| Internal audit and management review | Do | Checklists, agenda, minutes | Internal auditor course |
When you get stuck
- Questions about how the templates fit together: email support (included).
- Tailoring the kit to your company: 60-minute onboarding call, $149.
- Checking what you adapted before the auditor does: document review, $349.
- Hands-on help: remote consulting.
Not sure which kit to start with? Compare the options.