Guide
ISO 9001 clauses explained
ISO 9001 has ten clauses. Clauses 1 to 3 cover scope, references and definitions, and carry no requirements. Clauses 4 to 10 are where the requirements live. Here is what each one asks for, in plain English, and the records it usually leaves behind.
- Clause by clause, without the jargon
- Names the typical record for each clause
- Follows the Plan, Do, Check, Act cycle
Clause 4, Context of the organisation
Understand the internal and external issues that affect you, who your interested parties are and what they need, and define the scope of your QMS and its processes.
- Typical records: issues and interested parties register, written scope, process map
Clause 5, Leadership
Top management must own the system: set the quality policy, keep customer focus, and assign roles and authorities.
- Typical records: approved quality policy, roles and responsibilities
Clause 6, Planning
Identify risks and opportunities, set measurable quality objectives with plans to achieve them, and plan changes to the system.
- Typical records: risk and opportunity register, objectives with owners and targets
Clause 7, Support
Provide the people, infrastructure, environment and monitoring equipment needed. Make sure people are competent and aware, communication is planned and documents are controlled.
- Typical records: training and competence records, calibration records, document control
Clause 8, Operation
The biggest clause. Plan and control your operations, agree customer requirements, control design where it applies, manage external providers, control production and service delivery, release products and handle nonconforming outputs.
- Typical records: contract reviews, supplier evaluations, inspection and release records, nonconforming output log
Clause 9, Performance evaluation
Monitor and measure what matters, including customer satisfaction, run internal audits to a programme and hold management reviews.
- Typical records: KPI data, audit programme and reports, management review minutes
Clause 10, Improvement
React to nonconformities, find root causes, take corrective action, check it worked, and keep improving the system.
- Typical records: nonconformity and corrective action records with effectiveness checks
Next steps
- Plan. Clauses 4 to 6 set direction: context, leadership and planning.
- Do. Clauses 7 and 8 deliver: support and operation.
- Check and act. Clauses 9 and 10 measure, review and improve.
Frequently asked questions
Can we exclude a clause?
You can state a requirement is not applicable, most often design and development in 8.3, if you justify it and it does not affect your ability to deliver conforming products or services.
Which clause causes the most audit findings?
In practice, clauses 9.2 (internal audit) and 10.2 (corrective action) generate many first audit findings, usually because the work was done but not fully evidenced.
Do the clauses change in the 2026 revision?
The clause structure is expected to stay largely the same, with updated wording and emphasis. Check the published text when it is released.
Related guides
- ISO 9001 requirements guide, Every requirement of ISO 9001, what it means in practice and the evidence auditors expect.
- ISO 9001 internal audit guide, How to plan, run and report an internal audit programme that meets clause 9.2.
- ISO 9001:2026 checklist, Self-assess against each clause before the revision lands.
See your evidence mapped to every clause
Upload your documents and the platform's A.I. analyst drafts a clause by clause map with gaps, for your team to review and approve.