ISO 55001 step-by-step plan: from baseline measurement to certificate

You obtain an ISO 55001 certificate in seven steps. You start with a baseline measurement of what you already do. You finish with an application to a certification body. Each step produces a concrete result, so you know when you are done.

ISO 55001 is the requirements standard for an asset management system. It was issued by the International Organization for Standardization (ISO) and renewed in July 2024. What the standard requires of you is explained per chapter on the requirements per chapter page. To read what an asset management system is, see the overview page on ISO 55001.

This step-by-step plan is meant for organisations that manage physical assets, such as roads, pipes, pumping stations, buildings or installations. You do not need to turn it into a large project. The board does need to support the project, because the policy and the objectives come from top management. Kiwa, a certification body in the Netherlands, names infrastructure managers, plant managers and grid operators as groups for whom the standard adds value.

Step by step to ISO 55001

Baseline measurement and gap analysis

You compare what you already do with the standard. Go through the chapters, from context (chapter 4) to improvement (chapter 10). You can do this yourself with a checklist. You can also have an adviser do it. Request a quote for that, because the price depends on your organisation.

Result: a list of gaps per chapter, with an owner and a priority for each gap.

Policy and objectives

The board records what asset management must deliver. Think of fewer faults, fewer unexpected replacements or safer bridges. The policy is a short document that the board adopts. Since the 2024 version, it also includes a sustainability commitment, such as energy use or reuse of materials, according to Glocert .

Result: a policy signed by the board, with objectives you can measure.

Asset register and risk assessment

You make an overview of everything you manage. For each asset, you note the owner, the age, the condition and what happens if it fails.

Example: a fictional water board (waterschap) manages 1,800 structures, such as culverts, pumping stations and weirs. A pumping station that fails during high water gets a high priority. A culvert that nobody can replace also gets one.

Result: an asset register with a risk estimate for each asset.

Drafting the SAMP

The strategic asset management plan (SAMP) translates the organisation’s goals into work on the assets. You can read more about this document on the SAMP page.

Example: the water board wants no flood damage during heavy rain. The SAMP turns that into a plan: which pumping stations are dealt with when, and what budget goes with it.

Result: a SAMP approved by the board, linked to a budget and a schedule.

Implementation and internal audit

You let the system run and record the evidence, such as work orders, inspection reports and decisions. The system must run for a period before the certification audit can start. Ask the certification body how long that period must be.

After that, you carry out an internal audit. It takes a few weeks, plus the time needed to resolve findings. The auditor must be independent of the people who set up the system.

Result: an internal audit report in which all findings are resolved or included in an action plan.

Management review

Top management reviews the performance of the system. They look at faults, costs, progress on objectives and the findings from the internal audit. Then they decide what must change and which resources are needed.

Result: a management review report with decisions on improvements and resources.

Certification application

You choose a certification body that is accredited for ISO 55001. Choose a body that is accredited for ISO 55001, such as Kiwa . Always check whether the accreditation applies specifically to this standard.

Then you schedule the first audit, the document review. See the audit process for what happens then.

Result: a confirmed application and an appointment for the stage 1 audit.

When are you ready?

You are ready when you have the result for each step and the auditor can find it in your documents. That means: a policy with a signature, a register that adds up, a SAMP linked to the budget and a management review report. If one of those four is missing, the auditor will ask about it in stage 1.

The timeline depends strongly on your starting point. A project from zero takes longer than an organisation that only needs to formalise what it does. See the page on costs and timeline for what that means.

Example: a fictional drinking water company

A fictional drinking water company with three pumping stations starts with the baseline measurement in January. The gap analysis shows that no asset register exists, only separate Excel lists per station. In March, the board appoints an owner for each station. In June, the register is in place, with risks per pump. The SAMP follows in September, and the internal audit in the spring of the following year. Only then does the company submit a certification application.

Common mistakes

Writing the SAMP first. The SAMP follows from the policy and the objectives. If the policy is missing, you are writing in a vacuum.
Making the register without owners. An asset without an owner will in practice receive no maintenance. The auditor will ask about this.
Having the team that built the system carry out the internal audit. Then nobody checks critically. Ask a colleague from another department to review it.

Frequently asked questions about the step-by-step plan

Can I work through the step-by-step plan myself?

Yes. You can write the policy, the register and the SAMP yourself if you know which assets you have. An outside view is worth most during the gap analysis and the internal audit. That is when you see the blind spots you cannot see yourself.

How long does it take if I already have ISO 9001?

You do not need to rethink your processes. You extend them with asset objectives, the register and the SAMP. How much time that takes depends on how mature your system is. See combining ISO 55001 with ISO 9001 and 14001 for how this works in practice.

What do I do if the gap analysis shows many gaps?

That is normal the first time. Make a plan for each gap, with an owner and a date. Start with the gaps that carry the most risk. The register and the SAMP come first, then the procedures that depend on them.