Northwest Arkansas
ISO 9001 consulting for the Northwest Arkansas industrial base.
The belief that selling to Walmart requires ISO 9001 is not supported by anything Walmart publishes. What is published is a food safety scheme we do not offer — so here is where ISO 9001 genuinely applies.
We are based in the Kansas City metro, and this market is a drive rather than a flight. That makes on-site work here a normal working assumption rather than a budget line. We do not maintain an office in this market and would rather say so than imply otherwise.
The pitch we are not going to make
The most common thing a manufacturer in this region is told is that selling to Walmart requires ISO 9001.
We went and read what Walmart actually publishes. ISO 9001 is not named in it. Neither is ISO 22000. What is published is food safety certification to a scheme recognized by the Global Food Safety Initiative — and for fresh produce it is genuinely required, with the documents stating that local, state and federal inspections will not be accepted in its place.
We do not offer GFSI schemes. BRCGS, SQF, FSSC 22000, PrimusGFS and IFS are food safety certifications and they are not what we deliver. So the single most obvious pitch available to a consultant in this region is one we are telling you we cannot make.
We would rather lose that pitch than sell you a certificate your customer never asked for. What follows is the part of this market where ISO 9001 genuinely is the right answer — and it is not the part the region is famous for.
Industry in Northwest Arkansas
- What Walmart's published requirements actually say Fresh produce operations must be certified or assessed to a GFSI-recognized audit standard, and local, state and federal inspections are expressly not accepted in its place. For other commodities, GFSI certification is encouraged and an annual approved audit is required. ISO 9001 is named in neither
- GFSI schemes are outside what we offer BRCGS, SQF, FSSC 22000 and PrimusGFS are food safety schemes, not ISO management system certifications we deliver. A firm that tells you otherwise has not read them
- Bakeries and tortilla manufacturing 3,377 employees across 29 establishments at more than five times the national concentration — a genuinely counterintuitive fact about a region everyone associates with poultry
- Freight transportation arrangement 46 establishments at nearly 2.5 times the national rate, the brokerage and third-party logistics concentration that comes with a supplier community
- 468 manufacturing establishments above the national concentration This is the real ISO 9001 base here, and it is not the one the region is famous for
What the published requirements actually say, in their own words
Two different cases, and flattening them into one claim is where most accounts of this go wrong.
Fresh produce. Operations producing fresh produce must be independently certified or assessed to a GFSI-recognized audit standard, or by exception to an alternative food safety audit standard. The published requirement also states that local, state and federal inspections will not be accepted in place of a GFSI-recognized certification. Exceptions exist for small suppliers below defined revenue thresholds, and for potato and sweet potato suppliers.
National branded products, other commodities. Here the wording is different and weaker: suppliers are encouraged to work toward GFSI-recognized certification. But an annual approved audit is required, and the published consequence of not maintaining one is loss of business and deactivation of the vendor number.
So: required in one case, encouraged in the other, with an annual audit required in both. Anybody who tells you “Walmart requires GFSI” flat, or “Walmart just encourages it” flat, is half right in a way that could cost you a year.
There is a separate responsible sourcing program requiring a valid social compliance audit from an approved program, per facility. That covers labor, ethics and environmental conduct. It is not a quality management system requirement and it should not be presented as one.
As for the region's other major corporate customer: its published supplier code of conduct covers legal compliance, product safety and quality, labor and human rights, business practices, occupational health and safety, animal welfare and environmental matters. It names no ISO management system standard and no GFSI scheme at all.
Where ISO 9001 does belong in this equation
Having said all that, the conclusion is not that ISO 9001 is irrelevant here. It is that its role is different from the one it is usually sold in.
ISO 9001 is frequently the management system underneath a supplier's quality organization, whether or not any customer names it. Document control, competence, corrective action, internal audit, management review, control of externally provided processes — a food safety scheme assumes those exist and audits the food safety layer on top of them. A company with a real quality management system passes a scheme audit more easily than one without, because half of what the scheme asks about is generic management system discipline.
That is a legitimate reason to build one. It is not the same as a requirement, and we are not going to blur the two.
The other reason is that most of this metro is not a food supplier at all. Northwest Arkansas carries 468 manufacturing establishments running above the national concentration (US Bureau of Labor Statistics, QCEW 2024), and 410 manufacturing establishments with 355 employing fewer than 100 people in the Census count. Metal fabrication, machinery, plastics, building products, equipment and contract manufacturing — companies whose customers are industrial buyers, and industrial buyers ask for ISO 9001.
That is the real addressable market here, and it is invisible in almost everything written about this region.
Two things the federal data says that nobody expects
This region is described almost exclusively in terms of retail and poultry. Two of its sharpest concentrations are neither.
Bakeries and tortilla manufacturing: 3,377 employees across 29 establishments, at more than five and a half times the national concentration. That is a genuinely counterintuitive fact about a region everyone associates with poultry, and it is a substantial, concentrated, food-manufacturing population in its own right.
Advertising, public relations and related services: 2,237 employees across 87 establishments, at more than 2.6 times the national rate. Very few metros of this size carry an advertising concentration anywhere near that, and it is the supplier and vendor community showing up in federal employment data rather than in a press release. It is also the most concrete evidence available of how large that community actually is — better evidence than the supplier headcount figures that circulate, which trace back to a source page that no longer resolves.
Freight transportation arrangement runs at nearly 2.5 times national across 46 establishments, which is the third-party logistics and brokerage layer you would expect around it.
One limit we will state rather than work around: poultry and animal processing employment is suppressed for this metro under federal disclosure rules. We are not going to publish a figure for the industry this region is best known for, because we cannot see one.
Arkansas specifics, and a geography correction worth making
Arkansas is not an OSHA-approved State Plan state. Federal OSHA covers private-sector workers here, and the state's on-site consultation program runs through its department of labor and licensing. Food processing and warehousing are both meaningful ISO 45001 populations in this metro — repetitive motion, machine guarding, ammonia refrigeration, powered industrial trucks and a high-turnover workforce.
On the environmental side there is something genuinely current, and most references to it are out of date in one of two ways. Arkansas' stewardship program was dormant and was revived in November 2025. It now runs at three tiers; a great many secondary sources still describe four, under the old agency name — the state environmental quality department is now a division within a broader energy and environment department. The top tier requires a fully functioning facility-specific environmental management system for permitted facilities, and the program's own guidance says its content closely reflects the ISO 14001 requirements. Certification is not required at any tier, and the guidance names ISO 14001 without citing an edition, which quietly leaves the reader to supply one.
Finally, a correction on the map, because it affects anything written to an older definition. This metropolitan area is three Arkansas counties: Benton, Madison and Washington. The current federal title carries no Missouri component. McDonald County, Missouri is not in this metropolitan area — it is not in any metropolitan or micropolitan area at all, having been dropped in an earlier revision. Copy written to the old four-county, two-state definition is simply wrong.
In the other direction: Siloam Springs is in Benton County and is inside this metro, though it is frequently described as nearby in a way that reads as outside. Springdale straddles Washington and Benton counties and is inside either way. Fort Smith and Little Rock are separate metropolitan areas.
How we work with companies here
We are based in the Kansas City metro, and Northwest Arkansas is a drive rather than a flight. That makes on-site work here a normal working assumption rather than a budget line.
The first conversation is usually about which standard your customer has actually asked for, in writing, as opposed to what the region assumes. In a market where the loudest requirement is one we do not deliver, that question decides whether we are the right firm — and we would rather answer it in week one than month four.
The consultant who scopes the engagement does the work. No handoff to a junior implementer after the sale.
What an engagement covers
- ISO 9001 system build A quality management system for the industrial base here — metal fabrication, machinery, plastics, building products, equipment and contract manufacturing. See ISO 9001.
- The management system underneath a scheme audit Document control, competence, corrective action, internal audit and management review are what a food safety scheme assumes already exists. Building them properly is legitimate work — it is just not the certificate itself.
- Control of externally provided processes Clause 8.4 in a supply chain where a great deal is outsourced, and where a certificate on file is routinely mistaken for verification.
- ISO 45001 for processing and warehousing Machine guarding, repetitive motion, ammonia refrigeration, powered industrial trucks and a high-turnover workforce, under federal OSHA jurisdiction. See ISO 45001.
- ISO 14001 and the state stewardship route Arkansas' stewardship program was revived in November 2025 at three tiers, with an environmental management system required at the top one and certification required at none. See ISO 14001.
- Gap analysis and roadmap Two to four weeks, fixed scope and price, with a clear go or no-go before real money is committed.
- Internal audit and management review Auditor-grade internal audits and a facilitated management review that produces recorded decisions rather than minutes.
Questions we get from companies in this market
Does selling to Walmart require ISO 9001?
Not according to anything Walmart publishes. ISO 9001 is not named in its published supplier food safety requirements, and neither is ISO 22000. What is published is food safety certification to a GFSI-recognized scheme — and the two cases differ. For fresh produce, operations must be independently certified or assessed to a GFSI-recognized standard, and the documents state that local, state and federal inspections will not be accepted in its place. For national branded products in other commodities, suppliers are encouraged to work toward GFSI certification, but an annual approved audit is required and the published consequence of not maintaining one is deactivation of the vendor number.
Can you take us through a GFSI certification?
No. BRCGS, SQF, FSSC 22000, PrimusGFS and IFS are food safety schemes and we do not deliver them. That means the single most obvious pitch available to a consultant in this region is one we are telling you we cannot make — which is the reason to trust the rest of this page. If GFSI is what your customer requires, you need a firm that does that work, and we would rather say so on the first screen.
Then is ISO 9001 pointless for a supplier here?
No, but its role is different from the way it is usually sold. ISO 9001 is frequently the management system underneath a supplier's quality organization whether or not a customer names it — document control, competence, corrective action, internal audit, management review. A food safety scheme assumes those exist and audits the food safety layer on top, so a company with a real quality system passes a scheme audit more easily than one without. That is a legitimate reason to build one. It is not a requirement, and we will not blur the two.
Is Northwest Arkansas only food and retail?
No, and the federal data is more interesting than the reputation. Two of the region's sharpest concentrations are neither poultry nor retail: bakeries and tortilla manufacturing at more than five and a half times the national concentration across 29 establishments, and advertising and public relations at more than 2.6 times national across 87 — the supplier and vendor community showing up in employment data rather than a press release. Beyond that there are 468 manufacturing establishments running above the national concentration, in metal fabrication, machinery, plastics, building products and contract manufacturing. Those companies sell to industrial buyers, and industrial buyers ask for ISO 9001.
Is McDonald County, Missouri part of this metro?
No, and this one matters because a lot of copy is still written to the old definition. The current federal title for this metropolitan area carries no Missouri component — it is three Arkansas counties: Benton, Madison and Washington. McDonald County is not in this metropolitan area and is not in any metropolitan or micropolitan area at all, having been dropped in an earlier revision. In the other direction, Siloam Springs is in Benton County and is inside this metro despite being frequently described as nearby, and Springdale straddles two of the three counties.
What will certification cost?
Audit days are set from the number of people within your certification scope against a published table, then adjusted for factors including system maturity and single-site operation. The scoping question that matters most here is whether you are certifying the business or a product line — a supplier with one demanding customer and several undemanding ones frequently certifies everything by default, which buys audit days and surveillance cost nobody asked for. Our certification cost breakdown reproduces the table.
Other standards we support in Northwest Arkansas
Other standards in Northwest Arkansas
This page is about ISO 9001, which is what this metro's industry asks for most often. We cover these here too.
- ISO 14001 in Northwest Arkansas Arkansas' stewardship program was dormant for three years and was revived in November 2025 at three tiers. Most references to it are out of date — in one of two different ways.