What has actually happened
Someone in your customer’s organisation has been told to reduce supplier risk, and certification is the cheapest instrument they have. It is rarely personal and rarely about your quality. Companies get this letter after fifteen years of faultless supply.
It spreads the same way every time. A large buyer requires it of their tier ones; the tier ones require it of the people who machine their parts; and it arrives at a 20-person shop as a condition of staying on a list you are already on. That is why it feels abrupt — by the time it reaches you, the decision was made several companies away.
What to say back this week
Do not ignore it, and do not promise a date you have not checked. Three questions are worth asking your customer before you agree to anything, and asking them makes you look organised rather than evasive.
Does it have to be accredited certification, or is your own audit enough?
Some buyers accept a second-party audit — they come and look themselves — or a signed self-assessment against the standard. That is a fraction of the cost and time. It is worth ten minutes to find out, and a surprising number of requirements turn out to be softer than the email implied.
What is the real deadline, and what happens if we miss it?
There is usually a difference between the date on the letter and the date the work actually moves. Ask what happens at the deadline: removal from the list, no new work, or a review. The answers are very different, and they change what you should spend.
Would a booked certification date hold our position?
Often yes. A supplier with a signed contract with a certification body and a Stage 2 date in the diary is visibly in progress, which many supplier conditions accept where they would not accept silence. This is the single most useful thing to establish early.
Working out whether it is worth it
The instinct is to compare the cost of certification against the value of the account. That is the wrong comparison, and it understates the case in two directions.
It is rarely one account. Whatever pushed your customer to ask is pushing their competitors too. The second and third requests usually follow within a couple of years, which means the cost is spread across more revenue than the letter in front of you.
It also opens doors you are not currently at. Certification is a filter on tenders as often as it is a condition of supply — plenty of buyers screen it before anyone reads your quote. We keep a live list of public contracts that name the standard, refreshed daily, so you can see whether that is a real market for your line of work or a theoretical one.
Against that, the honest costs: $8,000–$20,000 in year one for a company your size, and four to twelve months, of which the largest hidden line is your own people’s time.
One thing worth knowing about the other side of this: whoever asked you will not simply file your certificate when it arrives. Buyers increasingly check certificates against the public register, including whether the scope on it covers the work they buy from you. Get the scope wording right and that check passes quietly.
The mistake to avoid
Buying a folder of templates, filling in the names, and presenting it as your quality system.
It is the fastest route and it fails in a specific, predictable way. An auditor does not read your procedures and tick them off; they take one and go and ask the person doing the job to describe it. If the document says something nobody on the floor recognises, that is not a documentation problem, it is evidence the system is not being used — which is the finding, and it is a serious one.
The awkward truth underneath is that most of the requirements describe what a competent shop already does: check what comes in, keep gauges calibrated, deal with complaints properly, decide things in meetings and record what was decided. The work is largely writing down what is already true, in a way that survives someone asking about it.
What good looks like in three months
You know which requirements you already meet and which you do not. The gaps have owners and dates. A certification body is booked, because their calendar and not your readiness is usually what sets the date. And your customer has been told where you are, honestly, with a date they can plan around.
None of that requires you to have finished. It requires you to have started visibly, which is what the person who sent that email actually needs.