Back to Frameworks

ISO 29001:2020

International
vISO 29001:2020, second edition (2020-07)
7 domains
28 controls

The oil, gas and petrochemical sector's supplement to ISO 9001: the documented processes, retained evidence, risk-proportionate controls, infrastructure and measurement records, competence validation, quality and contingency plans, special process validation, risk-based preservation, provider assessment, change control with customer notification and risk-based audit intervals that supply organisations must add to the ISO 9001 base.

Verified

ISO 29001:2020 is a compliance framework from International with 7 domains and 28 controls. The largest domains are Clause 8: Operation (sector additions) – ISO 29001:2020 (11 controls), Clause 7: Support (sector additions) – ISO 29001:2020 (6 controls), Clause 4: Context of the organization (sector additions) – ISO 29001:2020 (4 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard Blokdyk

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

Clause 10: Improvement (sector additions) – ISO 29001:2020

2 controls
Controls in the Clause 10: Improvement (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 2 controls
CodeTitle
iso-29001-2020::10.2Document the nonconformity and corrective action process
iso-29001-2020::10.3Put improvements through change management and document the improvement process

Clause 4: Context of the organization (sector additions) – ISO 29001:2020

4 controls
Controls in the Clause 4: Context of the organization (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 4 controls
CodeTitle
iso-29001-2020::4.1Retain documented evidence of the understanding of context
iso-29001-2020::4.2Retain documented evidence of interested party needs and expectations
iso-29001-2020::4.3Advise interested parties of requirements determined not applicable
iso-29001-2020::4.4.3Define the extent of documented information required by interested parties

Clause 5: Leadership (sector additions) – ISO 29001:2020

1 controls
Controls in the Clause 5: Leadership (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 1 controls
CodeTitle
iso-29001-2020::5.3Define relevant roles and document their responsibilities and authorities

Clause 6: Planning (sector additions) – ISO 29001:2020

2 controls
Controls in the Clause 6: Planning (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 2 controls
CodeTitle
iso-29001-2020::6.1Run a defined risk and opportunity management process, proportionate to product conformity impact
iso-29001-2020::6.3Manage the risks of proposed changes through a documented change process

Clause 7: Support (sector additions) – ISO 29001:2020

6 controls
Controls in the Clause 7: Support (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 6 controls
CodeTitle
iso-29001-2020::7.1.3Document infrastructure determination, maintenance and service-related infrastructure
iso-29001-2020::7.1.5.1Document the processes and controls for monitoring and measuring resources
iso-29001-2020::7.1.5.2Document measurement traceability per equipment item and the actions on nonconforming equipment
iso-29001-2020::7.2Validate competence to task risk and document competence management practices
iso-29001-2020::7.3Make internal and external provider personnel aware of regulated and customer quality requirements
iso-29001-2020::7.5.3Document the control of documented information and the integration of external specifications

Clause 8: Operation (sector additions) – ISO 29001:2020

11 controls
Controls in the Clause 8: Operation (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 11 controls
CodeTitle
iso-29001-2020::8.1Plan operations around the customer's scope, quality plans, change management and contingency plans
iso-29001-2020::8.2.3Document the process for reviewing requirements for products and services
iso-29001-2020::8.3.3Include environmental and safety performance and risk outputs in design inputs
iso-29001-2020::8.4.2Assess external provider performance at planned intervals and document the control approach
iso-29001-2020::8.5.1Validate special processes with defined equipment, competence, methods, criteria and revalidation, and document production controls
iso-29001-2020::8.5.2Document the identification and traceability processes
iso-29001-2020::8.5.3Document the processes for customer and external provider property
iso-29001-2020::8.5.4Maintain documented risk-based preservation requirements
iso-29001-2020::8.5.6Control changes in structure, personnel, critical providers, design and the management system, and notify customers
iso-29001-2020::8.6Document the release process
iso-29001-2020::8.7Document the control of nonconforming outputs

Clause 9: Performance evaluation (sector additions) – ISO 29001:2020

2 controls
Controls in the Clause 9: Performance evaluation (sector additions) – ISO 29001:2020 domain of ISO 29001:2020: 2 controls
CodeTitle
iso-29001-2020::9.1.2Document the customer satisfaction measurement process
iso-29001-2020::9.2Set internal audit intervals from process risk and performance results

What is ISO 29001:2020 and who does it apply to?

ISO 29001:2020 is a compliance framework from International with 7 domains and 28 controls. The oil, gas and petrochemical sector's supplement to ISO 9001: the documented processes, retained evidence, risk-proportionate controls, infrastructure and measurement records, competence validation, quality and contingency plans, special process validation, risk-based preservation, provider assessment, change control with customer notification and risk-based audit intervals that supply organisations must add to the ISO 9001 base. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 29001:2020 actually require?

ISO 29001:2020 has 28 controls organised across 7 domains. The largest domains are Clause 8: Operation (sector additions) – ISO 29001:2020 (11 controls), Clause 7: Support (sector additions) – ISO 29001:2020 (6 controls), Clause 4: Context of the organization (sector additions) – ISO 29001:2020 (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 29001:2020 do I already cover?

ISO 29001:2020 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement ISO 29001:2020?

Start your ISO 29001:2020 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 29001:2020 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 28 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.

Get Started Free →

Free forever, no credit card required