Quality management
ISO 9001 — Quality Management
Published Reviewed
What is ISO 9001?
ISO 9001 specifies requirements for a quality management system that controls processes, addresses risk and supports consistent delivery and continual improvement.
| Jurisdiction | International standard |
|---|---|
| Authority | ISO 9001:2015 |
| Current status | Current published edition: 2015 |
| Reviewed |
Why it matters operationally
ISO 9001 is the world’s most widely certified management standard and the default proof of process discipline in B2B supply chains — losing the certificate can mean losing approved-supplier status overnight. It runs on the same machinery as every ISO management standard: scoped system, process ownership, objectives, internal audit, management review, corrective action. ISO revises the standard on a cycle: when a new edition publishes, certified organisations get a fixed transition window to migrate.
Are you aware?
The dates that bind
A new edition starts a transition clock
ISO 9001:2015 is subject to revision through the ISO process. When a new edition publishes, certified organisations get a fixed transition window — historically around three years — to migrate their certification.
Surveillance audits do not wait
Annual surveillance between three-year recertifications expects a functioning loop: objectives tracked, nonconformities closed with cause analysis, internal audits done, management review held.
Where to start
- 1
Define the certification scope by products, services and sites — and keep customer-facing claims consistent with it.
- 2
Give every core process a named owner, measurable objectives and a record of how nonconformities are corrected.
- 3
Keep the audit trail current: internal audit programme, management review minutes and corrective-action log.
Authority links
Read the official sources
The official text is the authority. This guide is only a short orientation for operational planning.
Common questions
Frequently asked questions
Is ISO 9001 worth it for a small company?
Where customers require it, it is the ticket to the game — many industrial and public-sector buyers only work with certified suppliers. The standard scales: the requirements are the same, but the depth of documentation follows the size and risk of the organisation.
What do auditors actually check?
That the system runs: objectives with data behind them, nonconformities traced to cause and closed, internal audits covering the scope, management review with decisions, and process controls that match what staff actually do.
How does it relate to ISO 14001 and ISO 45001?
They share the same high-level structure, so one integrated management system can serve quality, environment and health & safety — one audit programme, one management review, three certificates.
Side by side
Compared against
Key terms in this guide
A quick self-check
Are you ready?
- Could you show this year’s internal audit results and the management review that acted on them?
- Does every open nonconformity have a cause analysis and an owner — or just a due date?
- Is anyone watching the ISO 9001 revision so your transition starts on your schedule, not your certifier’s?
Every question above has a written, evidence-backed answer in a well-run compliance record. If one made you pause, that pause is the gap.