ISO 9001:2015

Your implementation guide

ISO 9001 is the worlds most popular

management system standard
Updated in 2015 to make sure it reflects the
needs of modern-day business, ISO 9001 is
the worlds most popular quality management
standard. Its an excellent framework to help
manage your business effectively so that you can
be operationally resilient, build long-term success,
and ensure customer satisfaction. Its suitable for
businesses of all sizes from manufacturing to
service providers and its designed to be really
flexible so you can make it work for the needs
of your business and continually improve.

At BSI we have the experience to help make sure

that you get the most from ISO 9001, in fact it was
our experts who helped shape the standard in the
first place.
This guide shows you how to implement
ISO 9001 in your business and get the most out
of it for the long term. We also showcase our
additional support services, which help you not
only achieve certification, but unlock further
business improvements after certification.

The new version of the

standard has been incredibly
useful to us.
Mark Kennedy, Programme Director, Salus

Contents

B
 enefits
ISO 9001:2015 clause by clause
Top tips from our clients
Your ISO 9001 journey
BSI Training Academy
BSI Business Improvement
Software

How ISO 9001 works and what it

delivers for you and your company
ISO 9001:2015 is the new business improvement tool that helps drive continual improvement and deliver
results in your organization. It helps your business stand out, gain a competitive edge, and grow.
Its more than a quality management system, its a complete operational tool designed to improve
performance. It uses a process approach to ensure customer satisfaction and places quality right at the
heart of your organization, complementing business strategy and helping enhance performance over time.
This has been designed with the needs of modern businesses in mind. It provides a framework which helps
you to focus on ensuring you anticipate your business environment and customer needs. Its flexible and
agile so you can make it work for your business. Thats how ISO 9001 really adds value.

Benefits of ISO 9001*

Better products and services

66%
Improving your
products and services

60%
Reducing the likelihood
of mistakes

Better for business

65%

Inspiring trust in
your business

54%

*Source: BSI Benefits survey - BSI clients were asked which benefits they obtained from ISO 9001:2008

57%

Attracting new
customers

Increases your
competitive edge

How ISO 9001 works

ISO 9001 was revised in 2015 to bring it up to date with the needs of modern businesses and to add even more
value. Its based on the high level structure (Annex SL) which is a common framework for all new management
system standards. This helps keep consistency, align different management system standards, offer matching
sub-clauses against the top-level
ag e
Organization and
structure and apply common language
lity Man ment Syst
em
Qua
its context (4)
(4)
across all standards. It makes it easier
Support
for organizations to incorporate their
& Operation
quality management system, into core
(7,8)
business processes, make efficiencies,
Plan
Do
and get more involvement from senior
management.
Intended
Performance
Planning
Leadership
Plan-Do-Check-Act (PDCA) is the
operating principle of ISO 9001. Its
applied to all processes and the QMS
as a whole. This diagram shows how
Clauses 4 to 10 of ISO 9001 can
be grouped in relation to PDCA.

(6)

(5)

Act

Needs and
expectations of
relevant interested
parties (4)

evaluation
(9)

Outcomes

Check

Improvement

Some of the core concepts of ISO 9001:2015 are:

Concept

Comment

Context of the organization

Consider the combination of internal and external factors and conditions that can have an
effect on an organizations approach to its products, services, investments and interested
parties.

Issues

Issues can be internal or external, positive or negative and include conditions that either affect
or are affected by the organization.

Interested parties

A person or organization that can affect, be affected by, or perceive themselves to be affected
by a decision or activity. Examples include suppliers, customers or competitors. You may refer
to them as stakeholders.

Leadership

Requirements specific to top management who are defined as a person or group of people who
directs and controls an organization at the highest level.

Risk associated with threats

and opportunities

Refined planning process replaces preventive action and is defined as the effect of uncertainty
on an expected result.

Communication

The standard contains explicit and detailed requirements for both internal and external
communications.

Documented information

The meaningful data or information you control or maintain to support your QMS.

Performance evaluation

The measurement of quality performance and the effectiveness of the QMS, covering the
methods for monitoring, measurement, analysis and evaluation, as applicable, to ensure valid
results.

Nonconformity and
corrective action

Evaluation of nonconformities and correct actions.

Management review

Will need to be carried out, with requirements relating to inputs and outputs of the review.

Key requirements of
ISO 9001:2015

Clause 1: Scope
The first clause details the scope of the standard.

Clause 2: Normative references

ISO 9000, Quality Management System Fundamentals and vocabulary is referenced
and provides valuable guidance.

Clause 3: Terms and definitions

All the terms and definitions are contained in ISO
9000:2015 Quality Management Fundamentals
and vocabulary.

Clause 4: Context of the organization

This clause establishes the context of the QMS and
how the business strategy supports this. Context
of the organization is the clause that underpins
the rest of the standard. It gives an organization
the opportunity to identify and understand the
factors and parties in their environment that
support the QMS.
The starting point is to identify all external and
internal issues relevant to your QMS. Then you
need to establish all interested parties and how
they are relevant to your QMS. You might refer
to them as stakeholders. You will also need to
decide on the scope of your QMS. This may be the
whole of your organization or specific, identified
functions.

Finally, by using the process approach, youll

need to show how you establish, implement,
maintain, and continually improve the QMS
in relation to the standard.

Clause 5: Leadership
This clause is all about the role of top management
which is the group of people who direct and control
your organization at the highest level.
They need to ensure that the QMS and its
requirements are integrated into the organizations
processes and the policy and objectives are aligned
with the strategic direction of the organization.
They also need to make sure that the QMS is
made available, communicated, maintained, and
understood by all parties.
Theres also a focus on customer satisfaction and
top management need to show how this is
enhanced. They will also need to show the
organizations internal strengths and weaknesses
and how they could have an impact on products
or services. They need to understand the key
risks associated with each process and the
approach taken to manage, reduce or transfer the
risk. Top management can assign QMS-relevant
responsibilities and authorities but, ultimately,
they remain accountable for it.
5

Clause 6: Planning

Clause 7: Support

This clause focuses on how an organization plans

actions to address both risks and opportunities.
Consideration of risks needs to be proportionate
to the potential impact they may have, and
opportunities could include new product launches
or geographical expansion for example.

This section of ISO 9001 is all about getting

the right resources, the right people, and
the right infrastructure in place to meet the
organizational goals. Organizations should
make sure that resources are made available
to do this. It could include making training
and personnel available, for example.

Actions to address risks and opportunities

must be monitored, managed, and
communicated across the organization.
Another key area of this clause is the need to
establish measureable quality objectives.
Finally this clause covers what is referred
to as planning of changes. This has to be
done in a systematic manner. For example
organizations should consider who is involved,
when changes are to take place, and the
potential consequences of change.

Organizational knowledge relating to the QMS is

also covered in this clause. Personnel must not
only be aware of the quality policy, but they must
also understand how they contribute to it and
what the implications of not conforming are.
This is where the term documented information
is referred to. Previous versions of ISO 9001
required a quality manual, the standard no
longer stipulates this. It does, however, require
organizations to determine the level of documented
information thats necessary to control the QMS.
Theres also an emphasis on controlling access
to documented information which reflects
the importance of information security.

Clause 8: Operation
This clause is all about the execution of the plans
and processes that enable an organization to
meet customer requirements. It acknowledges the
increased use of outsourced and subcontracted
functions and there is a requirement to establish
criteria for monitoring the performance of
these parties in addition to keeping records
used to establish selection criteria.
This clause also covers requirements for
products and services. There is a requirement
for communicating with potential customers
which could be useful when developing new
solutions to the market.
Finally, there is a section which covers post-delivery
activities, which could include maintenance or repair.
Organizations need to consider the risks associated
with a product or service, customer requirements,
customer feedback, and any statutory requirements.

Clause 9: Performance evaluation

This is all about measuring and evaluating
your QMS to ensure that it is effective and
it helps you to continually improve. You will
need to consider what should be measured,
the methods employed, and when data
should be analysed and reported on.

Organizations must also actively seek out

information on customer perception of their
products or services, for example, through
satisfaction surveys. Internal audits will need to
be carried out, and there is certain audit criteria
defined to ensure that the results of these audits
are reported to relevant management. Finally,
management reviews will need to be carried out and
documented information must be kept as evidence.

Clause 10: Improvement

This clause requires organizations to determine
and identify opportunities for continual
improvement of the QMS. There is a requirement
to actively look out for opportunities to improve
processes, products or services, particularly
with future customer requirements in mind.
There are some actions that are required
that cover the handling of corrective actions.
Firstly organizations need to react to the
nonconformities and take action. Secondly
they need to identify whether similar
nonconformities exist or could potentially occur.

Top tips on making ISO 9001

effective for you
Every year we help tens of thousands of clients. Here are their top tips.

Top management commitment is key to

making this a success.

The earlier that organizations talk to senior

managers, the better it will go for them so
have those discussions early.
John Scott, Overbury, leading UK fit-out and
refurbishment business

Keep staff informed of whats going on, create

a team or assign a champion, as this will
increase motivation. This could include a well
communicated plan of activities and timescales.

When we decided to implement the new

standard, we assigned an internal champion
of the standard inside the organization.

Think about how different departments

work together to avoid silos. Make sure the
organization works as a team for the benefit of
customers and the organization.

Its helped us mobilize all of our employees

and all of our employees now understand
the key metrics and the success factors. So
its helped us out in a business way and in an
operational way. Maxime Clerk, Vortex Conseils,

Ronald Tse, Ribose, Hong Kong cloud service provider

Canadian consultancy business

Review systems, policies, procedures and

processes you have in place you may already
do much of whats in the standard, and make it
work for your business.

Dont try and change your business to fit the

standard. Think about how you do things and
how that standard reflects on how you do it,
rather than the other way around.
Paul Brazier, Overbury, leading UK fit-out and
refurbishment business

Speak to your customers and suppliers. They

may be able to suggest improvements and give
feedback on your service.

It results in a more finely-tuned service

to your customer, which is obviously very
important to us. Mark Kennedy, Salus, UK
occupational health and return to work services

Train your staff to carry out internal audits.

This can help with their understanding, but it
could also provide valuable feedback on potential
problems or opportunities for improvement.

And finally, when you gain certification

celebrate your achievement and use the BSI
Assurance Mark on your literature, website
and promotional material.

I have previously attended the internal auditor

course and since implemented a QMS for my
place of work. Claire Pressdee-Collins, Ofcom, UK
communications regulator

Your ISO 9001 Journey

Whether youre new to quality management or looking to enhance your current system, we
have the right resources and training courses to help you understand and implement
ISO 9001. But our support doesnt stop there. We can help make sure your system keeps on
delivering the best for your business.

We
help you:

Understand
and prepare

D
 iscover information on our website, including
case studies, whitepapers and webinars
visit bsigroup.com
BSI ISO 9001:2015 Requirements training course

E
 nsure your organization understands the
principles of ISO 9001 and the roles individuals
will need to play, and review your activities and
processes against the standard

ISO 9001 self-assessment checklist

Review and get

certified

B
 uy the standard and read it; understand the
content, your requirements and how it will
improve your business
Contact us, we can propose a solution tailored
to your organizations needs

See how
ready you are

You
need to:

B
 SI ISO 9001:2015 Implementation training
course
Book a BSI gap assessment to see where you are
B
 SI Business Improvement Software helps
ISO 9001 implementation

Contact us to book your certification

assessment
This is a two-stage process, the length depends

on the size of your organization

BSI ISO 9001:2015 Internal and Lead Auditor

training
Your BSI certification assessment
B
 SI Business Improvement Software
helps you effectively manage your system

Continually improve and make excellence a habit

Your journey doesnt stop with certification. We can help you to fine-tune your organization so it performs at its best.

C
 elebrate and promote your success
download and use the BSI Assurance Mark to
show you are certified.
Your BSI Excellerator report will benchmark
the performance of your business and highlight
where you can improve.
Lean Six Sigma training - make your business
lean and boost customer satisfaction.

B
 SI Business Improvement Software will help
you to manage systems and drive performance.
Your BSI Client Manager will visit you regularly
to make sure you remain compliant and
support your continual improvement.
Consider integrating other management system
standards to maximize business benefits.

BSI Training Academy

The BSI Training Academy is a world leader in helping clients develop the knowledge and skills they
need to embed excellence in their organizations. We offer a range of ISO 9001 training solutions that
can be tailored to your needs. Our training courses are developed by experts in their fields who have
been directly involved in the development of ISO 9001 so when you train with us youll benefit from
their expertise.
Using the latest research, our accelerated learning approach is proven to fast-track learning and
improve knowledge retention. Our experienced tutors can help you get to grips with the matters that
concern you and your organization directly, whether delivered in-house or as part of an open course
where other delegates can share their experience.

Courses that help you understand ISO 9001 include:

ISO 9001:2015 Senior Management Briefing ISO 9001:2015 Internal Auditor
Two-hour face-to-face session

Two-day classroom-based training course

U
 nderstand the purpose of ISO 9001:2015 and the L earn how to initiate an audit, prepare and
leadership responsibilities outlined in the standard conduct audit activities, compile and distribute
audit reports and complete follow-up activities
Important for top management of organizations
implementing to ISO 9001:2015

BSI ISO 9001:2015 Requirements

One-day classroom-based training course
L earn about the structure and key requirements
of ISO 9001:2015
E ssential for anyone involved in the planning,
implementing, maintaining, supervising or
auditing of an ISO 9001:2015 QMS

ISO 9001:2015 Implementation

Two-day classroom-based training course
D
 iscover how to apply a typical framework for
implementing ISO 9001:2015 following the PDCA
cycle and using the handy resources contained in
the good practice toolkit
R
 ecommended for anyone involved in the
planning, implementing, maintaining, supervising
or auditing of an ISO 9001:2015 QMS

10

Ideal for anyone involved in auditing, maintaining

or supervising an ISO 9001:2015 QMS

IRCA Certified ISO 9001:2015 Lead Auditor

Five-day classroom-based training
G
 ain the knowledge and skills required to
undertake and lead a successful management
system audit
R
 ecommended for anyone involved in auditing,
maintaining or supervising an ISO 9001:2015
QMS

ISO 9001:2015 Best Practice Programme

Six-day in-house programme

Understand, implement and audit the

requirements of the standard with
additional gap assessment

R
 ecommended for any organization wanting a
flexible tailored solution to embed ISO 9001,
retain knowledge in-house and add real value

BSI Business Improvement

Software
Accelerate implementation time and
deliver continual improvements

It can help you to:

The decision to implement a new management

system standard is a huge opportunity to drive
business improvement, but initiating, implementing,
and maintaining this can also be a challenge.
Ensuring you get the most from your investment is
a key driver to your future success. BSI business
improvement software provides a solution that can
significantly reduce the cost and effort to implement
an effective management system such as ISO 9001.
It can be configured to the requirements of ISO
9001 and provide your organization with the tools
necessary to manage essential elements of ISO
9001 across your organization. The start of your
ISO 9001 journey is an ideal time to implement BSI
business improvement software to support your
QMS.

Manage your document control effectively

Accelerate implementation time by up to 50%

P
 rovide company-wide visibility on
implementation of the standard so you know
exactly where you are at any one time
Y
 ou can easily and accurately input actions related
to audits, incidents/events, risk and performance
T hrough its customizable dashboards and
reporting tools it gives you early insight into
trends that help you make business decisions
early on and drive improvement

The savings are the costs you

avoid because you could not see
what was happening at
the facility level.

11

Why BSI?
BSI has been at the forefront of ISO 9001 since the start. And, it was originally based on BS
5750 which was developed by BSI. Since 1994 we have held the Secretariat of the International
Committee developing and evolving ISO 9001 to where it is today. Thats why were best placed to
help you understand the standard.
At BSI we create excellence by driving the success of our clients through standards. We help
organizations to embed resilience, helping them to grow sustainably, adapt to change, and prosper
for the long term. We make excellence a habit.
For over a century our experts have been challenging mediocrity and complacency to help embed
excellence into the way people and products work. With 80,000 clients in 182 countries, BSI is an
organization whose standards inspire excellence across the globe.

Our products and services

Knowledge

Assurance

Compliance

The core of our business centres

on the knowledge that we
create and impart to our clients.
In the standards arena we
continue to build our reputation
as an expert body, bringing
together experts from industry
to shape standards at local,
regional and international levels.
In fact, BSI originally created
eight of the worlds top 10
management system standards.

Independent assessment of
the conformity of a process
or product to a particular
standard ensures that our clients
perform to a high level of
excellence. We train our clients
in world-class implementation
and auditing techniques to
ensure they maximize the
benefits of our standards.

To experience real, long-term

benefits, our clients need to
ensure ongoing compliance to
a regulation, market need or
standard so that it becomes an
embedded habit. We provide
consultancy services and
differentiated management
tools to facilitate this process.

Find out more

Call: +44 (0)345 086 9001
Visit: bsigroup.com

BSI/UK/825/SC/0416/EN/GRP

We provide a unique combination of complementary products and services, managed through our three
business streams; Knowledge, Assurance and Compliance.