Guide

ISO 9001 clauses explained

ISO 9001 has ten clauses. Clauses 1 to 3 cover scope, references and definitions, and carry no requirements. Clauses 4 to 10 are where the requirements live. Here is what each one asks for, in plain English, and the records it usually leaves behind.

Clause 4, Context of the organisation

Understand the internal and external issues that affect you, who your interested parties are and what they need, and define the scope of your QMS and its processes.

Clause 5, Leadership

Top management must own the system: set the quality policy, keep customer focus, and assign roles and authorities.

Clause 6, Planning

Identify risks and opportunities, set measurable quality objectives with plans to achieve them, and plan changes to the system.

Clause 7, Support

Provide the people, infrastructure, environment and monitoring equipment needed. Make sure people are competent and aware, communication is planned and documents are controlled.

Clause 8, Operation

The biggest clause. Plan and control your operations, agree customer requirements, control design where it applies, manage external providers, control production and service delivery, release products and handle nonconforming outputs.

Clause 9, Performance evaluation

Monitor and measure what matters, including customer satisfaction, run internal audits to a programme and hold management reviews.

Clause 10, Improvement

React to nonconformities, find root causes, take corrective action, check it worked, and keep improving the system.

Next steps

  1. Plan. Clauses 4 to 6 set direction: context, leadership and planning.
  2. Do. Clauses 7 and 8 deliver: support and operation.
  3. Check and act. Clauses 9 and 10 measure, review and improve.

Frequently asked questions

Can we exclude a clause?

You can state a requirement is not applicable, most often design and development in 8.3, if you justify it and it does not affect your ability to deliver conforming products or services.

Which clause causes the most audit findings?

In practice, clauses 9.2 (internal audit) and 10.2 (corrective action) generate many first audit findings, usually because the work was done but not fully evidenced.

Do the clauses change in the 2026 revision?

The clause structure is expected to stay largely the same, with updated wording and emphasis. Check the published text when it is released.

Related guides

See your evidence mapped to every clause

Upload your documents and the platform's A.I. analyst drafts a clause by clause map with gaps, for your team to review and approve.