Inverifi logo

ISO 9001 Clauses Overview

A step-by-step overview of all the ISO 9001 clauses, with links to in-depth walkthroughs of each annex.

ISO:27001

Annex A Controls

A step-by-step overview of all the annex a controls in ISO:27001, with links to in-depth walkthroughs of each annex.

PURPOSE:

Helps businesses identify the areas that the QMS will cover, which can include specific products, services, or processes.

PURPOSE:

Emphasises the importance of the leadership team’s involvement in the QMS’s operation. This clause highlights the need for management commitment and involvement to ensure the QMS’s success.

  • 5.1.1 General
  • 5.1.2 Customer focus
  • 5.2.1 Establishing the quality policy
  • 5.2.2 Communicating the quality policy

PURPOSE:

Requires businesses to develop a plan for achieving their quality goals and identifying and mitigating risks that could impact their QMS.

PURPOSE:

Covers how businesses will support the operation of their QMS to ensure it runs efficiently. This includes providing resources, ensuring employee competence, and establishing communication channels.

  • 7.1.1 General
  • 7.1.2 People
  • 7.1.3 Infrastructure
  • 7.1.4 Environment for the operation of processes
  • 7.1.5 Monitoring and measuring resources

           –  7.1.5.1 General

           –  7.1.5.2 Measurement traceability

  • 7.1.6 Organisational knowledge
  • 7.5.1 General
  • 7.5.2 Creating and updating
  • 7.5.3 Control of documented information

PURPOSE:

Provides details on the day-to-day processes and operations within a business, including how performance will be tracked.

  • 8.2.1 Customer communication
  • 8.2.2 Determining the requirements for products and services
  • 8.2.3 Review of the requirements for products and services
  • 8.2.4 Changes to requirements for products and services
  • 8.3.1 General
  • 8.3.2 Design and development planning
  • 8.3.3 Design and development inputs
  • 8.3.4 Design and development controls
  • 8.3.5 Design and development outputs
  • 8.3.6 Design and development changes
  • 8.4.1 General
  • 8.4.2 Type and extent of control
  • 8.4.3 Information for external providers
  • 8.5.1 Control of production and service provision
  • 8.5.2 Identification and traceability
  • 8.5.3 Property belonging to customers or external providers
  • 8.5.4 Preservation
  • 8.5.5 Post-delivery activities
  • 8.5.6 Control of changes

PURPOSE:

  • Analysing and monitoring how well a business is operating against the requirements of its QMS.
  • Establish processes for measuring and evaluating their QMS’s effectiveness.
  • 9.1.1 General
  • 9.1.2 Customer satisfaction
  • 9.1.3 Analysis and evaluation
  • 9.3.1 General
  • 9.3.2 Management review inputs
  • 9.3.3 Management review outputs

PURPOSE:

  • Requires businesses to use the results of their performance evaluations to improve their processes continually. 
  • Identifying areas for improvement and taking action to make changes that will lead to better results.