Last Updated on October 24, 2025 by Hafsa J.

How Long Does ISO 22716 Certification Really Take?

One of the first questions I get from cosmetics manufacturers is simple: “How long will it take to get certified?”

In my experience, most companies underestimate the time needed for proper ISO 22716 implementation. They rush documentation or skip internal audits, only to lose weeks fixing issues later.

The truth is, certification doesn’t have to drag on — if you know what’s coming.
This article walks you through the full ISO 22716 timeline step-by-step, showing what happens at each stage, how long it usually takes, and how you can stay ahead of schedule.

Step 1: Initial Gap Analysis and Project Planning (1–2 Weeks)

Every successful certification starts with a clear picture of where you stand. A gap analysis compares your current practices against ISO 22716 requirements — hygiene, facilities, documentation, and staff training.

Here’s what I’ve noticed: companies that skip this step always pay for it later. They find themselves rewriting procedures mid-project or facing audit findings that could’ve been fixed early.

Pro Tip: Do a formal gap analysis with your consultant or quality manager before touching any templates. It saves time and avoids costly rework.

Pitfall to Avoid: Jumping straight into SOP writing without understanding your gaps. You’ll end up editing the same documents over and over.

Step 2: Documentation Development & Implementation (4–8 Weeks)

This is where the real work begins. You’ll need to develop or refine your Good Manufacturing Practice (GMP) procedures — from raw-material control and production hygiene to cleaning, deviations, and recalls.

The timeline here depends on your company’s size and how much documentation you already have. Some small brands finish in four weeks; larger facilities might take two months or more.

Pro Tip: Start with structured templates, then adapt them to reflect your real processes. Auditors can tell instantly if a document is generic.

Pitfall to Avoid: Copy-pasting procedures from other companies. What looks efficient now can turn into a non-conformity later when auditors ask, “Do you actually follow this?”

Real Example: A cosmetics lab I worked with used a documentation toolkit and completed all core SOPs in just six weeks. Because they tailored every procedure, they passed their audit on the first attempt.

Step 3: Internal Training and Awareness (1–2 Weeks)

Once your documents are ready, it’s time to bring your people onboard. ISO 22716 isn’t just paperwork — it’s a culture shift.

Train your staff on hygiene, record-keeping, equipment maintenance, and deviation handling. Everyone, from production to warehouse staff, needs to know how their role connects to GMP compliance.

Pro Tip: Train supervisors first. Their understanding sets the tone for the rest of the team.

Pitfall to Avoid: Treating training like a checkbox exercise. People remember examples and demonstrations more than PowerPoint slides.

Step 4: Internal Audit and Management Review (1–2 Weeks)

Before inviting a certification body, test your system internally. An internal audit is your dress rehearsal. It shows what’s working and what still needs attention.

Follow up with a management review to discuss results, resources, and next steps. This is where top management demonstrates commitment — something auditors look for closely.

Pro Tip: Have someone outside your team (or an external consultant) perform the internal audit. A fresh set of eyes catches what you might miss.

Pitfall to Avoid: Rushing this step. Missing records or incomplete signatures during the mock audit often turn into real non-conformities later.

Step 5: Stage 1 and Stage 2 Certification Audits (2–4 Weeks)

Now comes the big moment. The certification body conducts two audits:

• Stage 1 reviews your documentation.
• Stage 2 happens on-site to verify implementation.

Depending on your company size, these stages can be scheduled back-to-back or a few weeks apart.

Pro Tip: Prepare your team. Assign one person to handle documentation, another to escort auditors around the facility. A well-organized audit saves hours.

Pitfall to Avoid: Being unprepared for simple requests. When auditors ask for cleaning logs or batch records, you should be able to pull them instantly — not after 15 minutes of searching.

Step 6: Corrective Actions and Certificate Issuance (2–6 Weeks)

After the audit, you’ll receive a report listing any non-conformities. Don’t panic — almost every company gets a few. The key is how quickly you respond.

Submit corrective actions, update records, and provide proof of implementation. Once your auditor approves the fixes, your ISO 22716 certificate is issued.

Pro Tip: Respond within the first week. Quick action signals strong commitment to quality.

Pitfall to Avoid: Sending incomplete evidence. If your auditor asks for a root-cause analysis, don’t just write “staff error” — show what changed to prevent recurrence.

Real Example: A client of mine closed all non-conformities within 10 days and got their certificate two weeks later — faster than average.

Typical ISO 22716 Certification Timeline Overview

Phase	Average Duration	Key Focus
Gap Analysis & Planning	1–2 weeks	Identify compliance gaps
Documentation & Implementation	4–8 weeks	Create and apply SOPs
Training & Awareness	1–2 weeks	Educate staff
Internal Audit & Review	1–2 weeks	Verify readiness
Certification Audit	2–4 weeks	External review
Corrective Actions & Certification	2–6 weeks	Close findings & issue certificate

Average Total Timeline: 10 to 20 weeks, depending on company readiness and resource allocation.

FAQs: ISO 22716 Certification Timelines

How long does ISO 22716 certification usually take?
For most companies, expect around 3 to 5 months from start to finish. Smaller businesses with good documentation might finish sooner.

Can I speed up the process?
Yes — use pre-written templates, conduct early internal audits, and respond quickly to findings. That alone can shave off several weeks.

Does my certificate expire?
ISO 22716 certificates are valid for three years, with yearly surveillance audits to maintain compliance.

Stay on Track with a Realistic ISO 22716 Timeline

Getting certified doesn’t have to feel overwhelming. When you understand each step — and how long it realistically takes — you can plan smarter and avoid unnecessary delays.

I’ve guided dozens of companies through this process, and the secret is simple: structure + consistency. Stay organized, train your people, and keep communication open with your auditor.

If you’d like a head start, download our Free 6-Step ISO 22716 Timeline Planner or schedule a short consultation. We’ll help you estimate your exact timeline and keep your certification project running smoothly.