Overview

The requirements standard for a quality management system, and the most widely used certification standard in the world. The current edition is ISO 9001:2015 with Amendment 1:2024 (climate action); a revised edition is in preparation.

ISO 9001:2015, Quality management systems — Requirements, is the only standard in the ISO 9000 family that organizations certify against. It sets out what a quality management system (QMS) must contain, without prescribing how any particular organization should design its processes. It applies to organizations of any size and in any sector, including manufacturers, service providers, public bodies and not-for-profits.

The standard follows the harmonized structure used across ISO management system standards, so its auditable content sits in Clauses 4 to 10: context of the organization (4), leadership (5), planning (6), support (7), operation (8), performance evaluation (9) and improvement (10). Clauses 1 to 3 cover scope, normative references and terms, with the terms taken from ISO 9000. This shared structure is what makes ISO 9001 straightforward to integrate with ISO 14001, ISO 45001, ISO/IEC 27001 and other management system standards.

Three ideas run through the 2015 edition. The process approach requires the organization to determine the processes needed for its QMS, their sequence and interaction, the criteria and methods for controlling them, and the resources and responsibilities involved. Risk-based thinking replaces the older preventive-action clause: the organization must determine the risks and opportunities that could affect conformity of products and services and the ability to enhance customer satisfaction, and plan actions to address them. The Plan-Do-Check-Act cycle provides the improvement rhythm, applied both to individual processes and to the system as a whole.

Operational requirements in Clause 8 cover planning and control of operations, requirements for products and services, design and development (which can be excluded where not applicable), control of externally provided processes, products and services, production and service provision, release of products and services, and control of nonconforming outputs. Clause 7 covers resources, competence, awareness, communication and documented information — the 2015 edition deliberately gives organizations freedom over the form and extent of their documentation rather than mandating a quality manual or six specific procedures.

Amendment 1:2024 added climate action wording to Clauses 4.1 and 4.2, requiring the organization to determine whether climate change is a relevant issue in its context and to note that interested parties can have climate-related requirements. The amendment adds no new clauses and, in practice, is addressed by revisiting the context and interested-party analysis.

Certification is carried out by third-party certification bodies, normally accredited under an IAF-recognised national accreditation body. The usual route is a two-stage initial audit: Stage 1 reviews readiness, scope, documented information and the internal audit and management review evidence; Stage 2 assesses implementation and effectiveness across the scope. Certificates are typically issued for a three-year cycle with surveillance audits in between and a recertification audit at the end. Organizations that do not want certification can still use ISO 9001 as an internal framework or make a self-declaration of conformity.

A revision of ISO 9001 is in progress within ISO/TC 176/SC 2 and has reached the final draft stage, with publication of the next edition planned for 2026. ISO 9000 was revised ahead of it and published in 2026. When a new edition is published, the International Accreditation Forum sets the transition arrangements for existing certificates; organizations should plan a gap review against the published text rather than against drafts.

Purpose

To specify the requirements for a quality management system where an organization needs to demonstrate its ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements, and aims to enhance customer satisfaction through effective application of the system and continual improvement.

Key Benefits

• Provides a recognised, auditable framework for controlling quality across all processes
• Certification is widely accepted by customers, regulators and tender processes worldwide
• Clarifies responsibilities, process ownership and the criteria used to judge acceptable work
• Embeds risk-based thinking into planning rather than relying on after-the-fact corrective action
• Creates a consistent basis for internal audit, management review and continual improvement
• Aligns structurally with ISO 14001, ISO 45001 and ISO/IEC 27001 for integrated management systems
• Provides a common language for supplier and customer quality expectations
• Supports consistent onboarding and training through documented process criteria

Key Requirements

• Determine the context of the organization and the needs and expectations of interested parties (Clause 4)
• Define the scope of the QMS and the processes needed, with their sequence and interaction
• Demonstrate top management leadership and commitment, including a quality policy and assigned roles (Clause 5)
• Determine risks and opportunities and plan actions to address them; set quality objectives and plan changes (Clause 6)
• Provide resources, ensure competence and awareness, manage communication and documented information (Clause 7)
• Plan and control operations, including requirements review, design and development where applicable (Clause 8)
• Control externally provided processes, products and services, including suppliers and outsourced work
• Control production and service provision, including identification, traceability and property belonging to others
• Control nonconforming outputs and record the actions taken
• Monitor, measure, analyse and evaluate performance, including customer satisfaction (Clause 9)
• Conduct internal audits at planned intervals and management reviews at planned intervals
• Act on nonconformities with correction and corrective action, and continually improve the QMS (Clause 10)
• Address climate change as a context issue in accordance with Amendment 1:2024

Who Needs This Standard?

Organizations of any size or sector that need a recognised quality management framework — manufacturers, engineering and construction firms, service providers, laboratories, healthcare and education providers, public sector bodies, and suppliers whose customers or tender processes require certification. It is also the base standard for sector schemes such as IATF 16949 (automotive) and AS9100 (aerospace), and a common contractual requirement in supply chains.

Related Standards