Chicago-Naperville-Elgin, Illinois-Indiana
ISO 9001 consulting for the Chicago supply base.
Three of this metro’s biggest clusters run on credentials an ISO 9001 certificate does not discharge. We will tell you which, and then show you the 8,000 manufacturers where ISO 9001 is exactly the right answer.
We work in the Kansas City metro. Engagements here run remotely, with on-site visits at the points where being in the building changes the outcome — gap analysis, internal audit, and the certification audits themselves. We do not maintain an office in this market and would rather say so than imply otherwise.
Start by getting the metro right
Chicago is the third-largest manufacturing metro in the country: 9,298 manufacturing establishments, 8,444 of them with fewer than 100 employees (US Census County Business Patterns, 2023). It is also the market where consulting pages most reliably describe a place that does not exist.
The federal definition is thirteen counties across two states — Cook, DuPage, Grundy, McHenry, Will, DeKalb, Kane, Kendall and Lake in Illinois, plus Jasper, Lake, Newton and Porter in Indiana. Gary, Hammond and East Chicago are in this metro. Most pages about Chicago omit Indiana entirely.
Two boundaries move the other way, and both are traps. Kenosha County, Wisconsin is no longer in this metro — the current title is Chicago-Naperville-Elgin, IL-IN, with no W. And Belvidere is in the Rockford metro, not this one, which matters because the largest Illinois manufacturing announcement of 2026 landed there.
We are opening with geography because it is the cheapest possible test of whether someone has actually looked at your market. It is also the difference between a supplier list that includes Northwest Indiana and one that does not.
Industry in Chicago
- The rail hub Roughly one in four US freight trains and all six Class I railroads. Rail supply runs on AAR M-1003, which we do not offer — but the 24-element audit rewards a quality system that already exists
- The food and beverage cluster The largest in the country, around 1,601 plants. It runs on GFSI schemes and FDA preventive controls, not ISO 9001. ISO 22000 alone is not GFSI-benchmarked; FSSC 22000 is
- Northwest Indiana steel Both integrated mills in the metro maintain A2LA accreditation to ISO/IEC 17025 for their testing laboratories alongside their plant certifications
- The device base Roughly 230 FDA-registered establishments that actually manufacture devices, concentrated in Cook, DuPage and Lake counties
- Two safety regulators Illinois covers public employees only, so private employers there are under federal OSHA; the Indiana counties are under a full state plan
Three credentials in this metro that ISO 9001 does not discharge
Chicago's three most recognisable manufacturing clusters are each governed by something other than ISO 9001. We would rather draw that map for you than let you discover it after signing.
Rail. Chicago is the largest freight rail hub in North America, handling roughly one in four US freight trains, with all six Class I railroads converging here. Rail supply runs on the AAR's M-1003 quality assurance programme, and the AAR is explicit that if your product appears in Appendix A of MSRP Section J, “your facility must obtain M-1003 certification.” Certification runs three years with annual audits against all 24 elements of Chapter 2. We do not do M-1003.
Food. This is the number one food and beverage manufacturing metro in the United States — around 1,601 food and beverage plants, about 14% of all manufacturing establishments here. Your customers want SQF, BRCGS or FSSC 22000, and the FDA wants a preventive-controls plan under 21 CFR 117, which references no ISO standard at all. One precise point people get wrong: ISO 22000 on its own is not GFSI-benchmarked. FSSC 22000 is. We do not do GFSI schemes.
Integrated steel. The Northwest Indiana mills hold IATF 16949 alongside ISO 9001, because they sell into automotive. We do not do IATF 16949.
That is the honest subtraction. What it leaves is not a remainder — it is the overwhelming majority of the metro.
What M-1003 leaves you, if you are in the rail chain
Saying we do not do M-1003 is not the end of a useful conversation, because the certificate is not the whole of the work.
M-1003 is audited against 24 elements, and the great majority of them are the ordinary machinery of a quality system: document and record control, corrective action, calibration and measurement traceability, internal audit, training and qualification, control of nonconforming material, purchasing and supplier control. Those are the same disciplines ISO 9001 asks for, and a shop that has built them properly is not starting an AAR audit from zero.
What M-1003 adds on top is the part we cannot help with: rail-industry technical requirements, and a nonconformance reporting programme specific to the industry.
So the honest version is this. If your product is in Appendix A, you need M-1003 and no ISO certificate substitutes for it. If your product is not — and the AAR notes that many facilities outside Appendix A certify voluntarily anyway to prove a quality programme to customers — then ISO 9001 is a legitimate way to make that same proof, at a fraction of the cost. We will help you work out which of those two you are in before you spend anything.
A laboratory market almost nobody here markets to
The Northwest Indiana mills publish their own certification registers, and the interesting line on them is not the one people look at.
Alongside ISO 9001, ISO 14001 and IATF 16949, both integrated mills in this metro maintain A2LA accreditation to ISO/IEC 17025 for their testing laboratories — chemical and mechanical — with certificates carrying their own expiry dates independent of the plant's quality certification.
That matters because it is a whole tier of demand that generalist consultancies in this market do not go after. Every metallurgical laboratory feeding a mill, and every independent testing house in that supply chain, lives or dies on the scope of its accreditation rather than the fact of it. Laboratories are accredited, not certified, and an assessor reads the scope line by line.
It is a small market by establishment count and a serious one by consequence. If you run a laboratory in this metro, ISO/IEC 17025 is a service we actually offer rather than a logo on a list.
Two states, two safety regulators, one metro
One structural fact worth knowing if you run more than one plant here. Illinois has an OSHA-approved plan that covers state and local government workers only — private-sector employers on the Illinois side are under federal OSHA. Indiana runs a full private-sector state plan.
So a manufacturer with a plant in Cicero and another in Hammond is running one safety programme against two regulators, with two different on-site consultation providers.
We go through what that does to a compliance obligations register in detail on our Cincinnati page, where a metro spans three states and the problem is sharper still. Here it is worth one sentence of warning and no more: a register assembled from federal sources alone will be incomplete for your Indiana sites.
Where the work actually is
Subtract rail, food and the automotive steel chain and what is left is still the largest concentration of small manufacturers in the Midwest: fabricated metal, machinery, plastics, printing, electrical equipment and contract manufacturing across thirteen counties.
The metro also carries roughly 230 FDA-registered establishments that actually manufacture medical devices — a distinct and much more useful figure than the larger count that includes distributors, repackagers and specification developers. Concentrated in Cook, DuPage and Lake counties, that is a real ISO 13485 market, now under the FDA's Quality Management System Regulation.
And there is live investment with a genuine supplier qualification cycle behind it: a $40.5 million advanced manufacturing and R&D facility on Goose Island, announced 24 February 2026 with 74 new jobs, building optomechanical scanners and metal additive-manufactured components. New programmes mean new supplier approvals, and supplier approvals mean somebody asks to see your quality system.
One caution on a nearby announcement, because you will see it cited as Chicago: the large pharmaceutical investment in Lake County is active pharmaceutical ingredient manufacturing, which runs under drug CGMP in 21 CFR 210 and 211 — not ISO 13485. The two are not interchangeable and we will not pretend they are.
How we work with companies here
We are based in the Kansas City metro and run Chicago engagements remotely, with on-site work at the points where being in the building changes the outcome — the gap analysis walkthrough, the first internal audit cycle, and the certification audits.
The first conversation about a Chicago engagement is usually a scoping one, because this is the metro where the odds are highest that some part of what you do falls under a credential we do not offer. We would rather establish that in twenty minutes than three months in.
The consultant who scopes the engagement does the work. No handoff to a junior implementer after the sale.
What an engagement covers
- ISO 9001 system build A quality management system designed around your processes rather than a template with your name on it. See ISO 9001.
- Scope and credential triage Before anything else: whether your product falls under AAR Appendix A, a GFSI scheme or an automotive customer's IATF requirement. If it does, we say so and tell you what we can still usefully do.
- ISO 13485 for the device base Roughly 230 device manufacturers across the thirteen counties, now under the FDA's QMSR incorporating ISO 13485:2016. See ISO 13485.
- ISO/IEC 17025 for laboratories Scope-first accreditation work for testing and calibration laboratories, including the metallurgical labs in the mill supply chain. See ISO/IEC 17025.
- Multi-state obligations register One safety management system, two regulators. The Indiana sites are not covered by a federal-only compliance register — see ISO 45001.
- Gap analysis and roadmap Two to four weeks, fixed scope and price, with a clear go or no-go before real money is committed.
- Internal audit and management review Auditor-grade internal audits and a facilitated management review producing recorded decisions.
Questions we get from companies in this market
Is Northwest Indiana really part of the Chicago metro?
Yes. Under the current federal delineation the Chicago-Naperville-Elgin metropolitan area includes Lake, Porter, Jasper and Newton counties in Indiana — so Gary, Hammond, East Chicago, Portage and Valparaiso are in this metro. What is no longer in it is Kenosha County, Wisconsin, which became its own metropolitan area. If you see the metro written as “IL-IN-WI,” that is a superseded definition, and it still appears in circulation including in some older federal releases. The current title is Chicago-Naperville-Elgin, IL-IN.
We make railcar components. Does ISO 9001 cover us?
It depends entirely on whether your product appears in Appendix A of AAR MSRP Section J. If it does, M-1003 certification is required and an ISO 9001 certificate does not discharge it. We do not offer M-1003 and we would rather say so now. What we can do is build the underlying system — document control, corrective action, calibration, internal audit, supplier control — so that the 24-element AAR audit is not starting from nothing. And if your product is outside Appendix A, certification is voluntary, and ISO 9001 is a far cheaper way to make the same point to a customer.
We are a food manufacturer. Can you certify us?
Not to the standard your customers are asking for. Food and beverage safety in this metro runs on GFSI-benchmarked schemes — SQF, BRCGS, FSSC 22000 — and on FDA preventive controls under 21 CFR 117, none of which we offer. One detail worth getting right because it trips people up: ISO 22000 on its own is not GFSI-benchmarked; FSSC 22000, which is built on it, is. Where we can help a food manufacturer is on a non-food line needing ISO 9001, or on ISO 14001 or ISO 45001 across the site.
Does Illinois have a programme that requires ISO certification?
We looked, and we did not find one. Illinois EPA and the state's commerce department publish no programme naming ISO 9001, ISO 14001 or ISO 45001 that we could locate. Indiana, on the other side of this same metro, is different: its Environmental Stewardship Program accepts a third-party ISO 14001 audit as one of two routes to membership, and members can request regulatory incentives. Note the verb — it accepts an ISO 14001 audit, it does not require certification.
How many device manufacturers are actually in the metro?
Roughly 230 establishments registered with the FDA whose registration type includes manufacturing medical devices, concentrated in Cook, DuPage and Lake counties. You will see a larger figure quoted — around 375 — and that one is also correct, but it counts every registration type including distributors, repackagers, importers and specification developers. The smaller number is the more honest one for anyone asking how big the ISO 13485 market is here.
Do you work with the large employers people associate with Chicago?
Some of the ones people name have left. Boeing moved its headquarters to Arlington, Virginia in 2022 and Caterpillar moved to Irving, Texas the same year; Tyson closed its Chicago and Downers Grove corporate offices. Abbott, Baxter, Motorola Solutions and Mondelez are all still headquartered in the metro. But our work is with the supply base rather than the household names — the 8,444 manufacturers here with fewer than 100 employees are the businesses that cannot staff a quality function internally, and that is the engagement we are built for.