I work in health & safety as well as QA and the key enemy of both is unnecessary complication. When properly explained, ISO9001, like H&S law and OHSAS 18001, sets really rather simple objectives: the business just has to work out its own way of satisfying the objectives.
Many firms (and some of their advisers) over-react and produce systems of massive proportions and byzantine complexity because they seem to think it entertains the ISO auditors. Simplify, man! Simplify! In particular, keep the number of 'Procedures' (by that name) to a minimum. Write lists of requirements to be satisfied but don't be unnecessarily prescriptive about how those requirements are met - and so on.
One word of warning: don't let your consultants write your procedures for you. You are the experts on how your firm works: take ownership and do it yourself. Ultimately the clever part of ISO (or OHSAS) is what you succeed in leaving out