ISO 9001 is the international standard for quality management systems (QMS), published by the International Organization for Standardization. It describes what an organisation needs to have in place to deliver products and services that consistently meet customer and legal requirements, and to keep improving. It applies to organisations of any size and sector, and is the most widely used management system standard in the world.
Core Ideas of ISO 9001
- Process approach: work is managed as connected processes with clear inputs, outputs and responsibilities.
- Plan-Do-Check-Act: plan, carry out, measure and improve, in a continuous cycle.
- Risk-based thinking: identify risks and opportunities and address them in advance.
- Customer focus: understand and meet customer requirements and measure satisfaction.
- Evidence: decisions based on data, and documented information that shows what was done.
- Improvement: handling non-conformities with corrective action, see CAPA, and improving the system over time.
Certification
Organisations can have their QMS certified by an accredited certification body. After an initial audit, surveillance audits follow every year and a recertification audit every three years. Certification is voluntary, but many customers, especially in manufacturing and government, require it from their suppliers. The current edition dates from 2015, with an amendment added in 2024; check iso.org for the latest status.
ISO 9001 and Software
The standard does not require software, but software makes compliance much easier: controlled documents and work instructions, registration of non-conformities and corrective actions, calibration and maintenance records, supplier evaluations, internal audit planning and management reports from live data. See quality control software and process analysis and optimisation.
Frequently Asked Questions
Is ISO 9001 mandatory?
No. It is voluntary, but customers often require it in tenders and supplier agreements.
What is the difference between ISO 9001 and a sector standard?
ISO 9001 is generic. Sector standards such as IATF 16949 for automotive or ISO 13485 for medical devices build on it with sector-specific requirements.
Does ISO 9001 require specific software?
No. It requires processes and evidence; how you manage them is up to you. Software helps keep records complete and actions on track.