Iso 9001 audits are a sham. I don't know what I expected but I remember being thoroughly underwhelmed the first time I sat through one. Companies flaunting their iso 9001 certification are kind of hilarious.
The problem is, that to correctly assess if an organisation does it job, the assessor must be competent in all facets of what the organisation does. Such people are quite rare, and to boot, rarely can be arsed to do things so utterly improductive as audits.
Therefore, the work-around is to establish a form with a number of GO/NOGO tick boxes, and then have a lobotomy patient (ie. "Auditor") ask questions he does not understand, receive answers that must conform to the text on the form (preferably "yes", of course) and fail the organisation as soon as there's something that differs between the overly simplistic form and reality.
The end result, that competent, productive people end up being bullied by morons, is quite familiar to management, so is not a cause for concern.
In the end, the "standards organisations" (like the corrupt gatekeepers Cerebus spoke about) get to extract protection money through the process, because caring for and feeding the asylum where auditors are kept surely must be expensive.
Calibration labs, H&S equipment sales persons, Aircraft spare part vendors, people selling spares and consumables for life jackets; they all have a "compliance" -fuelled license to print money. Not that it is expensive and important to maintain high quality, but when you have a third party that must certify things, the price has a tendence to double, simply because it can.
Case in point: I just performed inspection on our automatic life jackets. The trigger mechanism has a shelf life specified, and some of our vests expired their triggers this summer. I've had some spare triggers in storage, and found an unused one that expired 2017. It took all of 2 seconds in water to trig it. Now, it's been stored in optimum conditions, but still.