TheArtOfService
Back to Frameworks

ISO 9001

Self-Assess
International
v2015
26 domains
48 controls

Quality management systems requirements

Unverified

ISO 9001 is a compliance framework from International with 26 domains and 48 controls that map to 81 other frameworks. The largest domains are ISO 9001: Leadership & Planning (9 controls), ISO 9001: Operational Controls (6 controls), ISO 9001: Performance Evaluation (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (26)

Audit

1 controls
Controls in the Audit domain of ISO 9001 — 1 controls
CodeTitle
9001-9.2Internal Audit

Competence

1 controls
Controls in the Competence domain of ISO 9001 — 1 controls
CodeTitle
9001-7.2Competence

Context

2 controls
Controls in the Context domain of ISO 9001 — 2 controls
CodeTitle
9001-4.1Understanding the Organization and its Context
9001-4.2Needs and Expectations of Interested Parties

Corrective Action

1 controls
Controls in the Corrective Action domain of ISO 9001 — 1 controls
CodeTitle
9001-10.2Nonconformity and Corrective Action

Customer

1 controls
Controls in the Customer domain of ISO 9001 — 1 controls
CodeTitle
9001-8.2Requirements for Products and Services

Design

1 controls
Controls in the Design domain of ISO 9001 — 1 controls
CodeTitle
9001-8.3Design and Development

Documentation

1 controls
Controls in the Documentation domain of ISO 9001 — 1 controls
CodeTitle
9001-7.5Documented Information

ISO 9001: Improvement

3 controls

Continual improvement of quality management system (ISO 9001)

Controls in the ISO 9001: Improvement domain of ISO 9001 — 3 controls
CodeTitle
ISO9001-16Cl. 10 Improvement - continual improvement methodology for the quality management system
ISO9001-17Corrective and preventive actions
ISO9001-18Cl. 6.3 Planning of changes - innovation and change management for the quality management system

ISO 9001: Leadership & Planning

9 controls

Quality management leadership and planning (ISO 9001)

Controls in the ISO 9001: Leadership & Planning domain of ISO 9001 — 9 controls
CodeTitle
ISO9001-01Cl. 4.4 Quality management system and its processes - quality policy and objectives
ISO9001-02Leadership commitment to quality
ISO9001-03Risk-based thinking and planning
ISO9001-04Cl. 7.1.1 Resources (general) - resource management for quality including people, infrastructure, and organizational knowledge
ISO9001-05Organizational roles and responsibilities
ISO9001-CL7.1.2Cl. 7.1.2 People - determining and providing persons necessary for effective QMS operation
ISO9001-CL7.1.6Cl. 7.1.6 Organizational knowledge - determining knowledge necessary for QMS operation and process performance
ISO9001-CL7.2Cl. 7.2 Competence - ensuring competence of persons doing work under QMS control
ISO9001-CL7.4Cl. 7.4 Communication - determining internal and external communications relevant to the QMS

ISO 9001: Operational Controls

6 controls

Quality controls in operations (ISO 9001)

Controls in the ISO 9001: Operational Controls domain of ISO 9001 — 6 controls
CodeTitle
ISO9001-06Cl. 8 Operation - operational planning and control for products and services
ISO9001-07Requirements for products and services
ISO9001-08Design and development controls
ISO9001-09Control of externally provided processes
ISO9001-10Production and service provision controls
ISO9001-CL7.1.3Cl. 7.1.3 Infrastructure - determining, providing, and maintaining infrastructure for quality processes

ISO 9001: Performance Evaluation

5 controls

Measuring and evaluating quality performance (ISO 9001)

Controls in the ISO 9001: Performance Evaluation domain of ISO 9001 — 5 controls
CodeTitle
ISO9001-11Monitoring, measurement, and analysis
ISO9001-12Internal audit program
ISO9001-13Management review process
ISO9001-14Customer satisfaction measurement
ISO9001-15Nonconformity and corrective action

Improvement

2 controls
Controls in the Improvement domain of ISO 9001 — 2 controls
CodeTitle
9001-10.1Improvement General
9001-10.3Continual Improvement

Leadership

1 controls
Controls in the Leadership domain of ISO 9001 — 1 controls
CodeTitle
9001-5.1Leadership and Commitment

Nonconformity

1 controls
Controls in the Nonconformity domain of ISO 9001 — 1 controls
CodeTitle
9001-8.7Control of Nonconforming Outputs

Objectives

1 controls
Controls in the Objectives domain of ISO 9001 — 1 controls
CodeTitle
9001-6.2Quality Objectives and Planning

Operations

2 controls
Controls in the Operations domain of ISO 9001 — 2 controls
CodeTitle
9001-8.1Operational Planning and Control
9001-8.5Production and Service Provision

Performance

1 controls
Controls in the Performance domain of ISO 9001 — 1 controls
CodeTitle
9001-9.1Monitoring, Measurement, Analysis, Evaluation

Policy

1 controls
Controls in the Policy domain of ISO 9001 — 1 controls
CodeTitle
9001-5.2Quality Policy

Process

1 controls
Controls in the Process domain of ISO 9001 — 1 controls
CodeTitle
9001-4.4QMS and its Processes

Release

1 controls
Controls in the Release domain of ISO 9001 — 1 controls
CodeTitle
9001-8.6Release of Products and Services

Resources

1 controls
Controls in the Resources domain of ISO 9001 — 1 controls
CodeTitle
9001-7.1Resources

Review

1 controls
Controls in the Review domain of ISO 9001 — 1 controls
CodeTitle
9001-9.3Management Review

Risk

1 controls
Controls in the Risk domain of ISO 9001 — 1 controls
CodeTitle
9001-6.1Actions to Address Risks and Opportunities

Roles

1 controls
Controls in the Roles domain of ISO 9001 — 1 controls
CodeTitle
9001-5.3Roles, Responsibilities, and Authorities

Scope

1 controls
Controls in the Scope domain of ISO 9001 — 1 controls
CodeTitle
9001-4.3Scope of the QMS

Suppliers

1 controls
Controls in the Suppliers domain of ISO 9001 — 1 controls
CodeTitle
9001-8.4Control of Externally Provided Processes, Products, Services

Your Compliance Coverage

If you comply with ISO 9001, you already cover:

ISO 9001:2015

56%

27 controls mapped

Compare →

ISO 22000:2018

35%

17 controls mapped

Compare →

ISO 27701:2019

31%

15 controls mapped

Compare →

+ 78 more: ISO 14001:2015 (31%), ISO 22301:2019 (29%)

See all 81 mapped frameworks ↓

Maps to 81 other frameworks

48 total controls
ISO 9001:2015
27 source controls mapped|29 target controls covered
56%
ISO 22000:2018
17 source controls mapped|15 target controls covered
35%
ISO 27701:2019
15 source controls mapped|12 target controls covered
31%
ISO 14001:2015
15 source controls mapped|13 target controls covered
31%
ISO 22301:2019
14 source controls mapped|12 target controls covered
29%
ISO 37301:2021
14 source controls mapped|15 target controls covered
29%
ISO 37001:2016
14 source controls mapped|11 target controls covered
29%
ISO 45001:2018
13 source controls mapped|12 target controls covered
27%
ISO 55001:2014
13 source controls mapped|10 target controls covered
27%
ISO 14004:2016
11 source controls mapped|10 target controls covered
23%
ISO 50001:2018 - Energy Management Systems
10 source controls mapped|9 target controls covered
21%
ISO 13485:2016
8 source controls mapped|15 target controls covered
17%
ISO 10005:2005
7 source controls mapped|4 target controls covered
15%
TISAX - Trusted Information Security Assessment Exchange
4 source controls mapped|2 target controls covered
8%
ICH Q10 - Pharmaceutical Quality System
4 source controls mapped|1 target controls covered
8%
ISO 19011
4 source controls mapped|2 target controls covered
8%
ISO 37301
4 source controls mapped|2 target controls covered
8%
ISO 37001
4 source controls mapped|2 target controls covered
8%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
4 source controls mapped|3 target controls covered
8%
ISO 55001
4 source controls mapped|2 target controls covered
8%
ISO 30401
4 source controls mapped|2 target controls covered
8%
IEC 62304:2015 Medical Device Software Lifecycle Processes
4 source controls mapped|4 target controls covered
8%
ISO 27005:2022
4 source controls mapped|6 target controls covered
8%
ISO/IEC 23894:2023
4 source controls mapped|7 target controls covered
8%
ISO 45001
3 source controls mapped|1 target controls covered
6%
UK FCA/PRA Operational Resilience Framework
3 source controls mapped|1 target controls covered
6%
SA8000:2014 - Social Accountability Standard
3 source controls mapped|1 target controls covered
6%
PIC/S Guide to Good Manufacturing Practice for Medicinal Products
3 source controls mapped|1 target controls covered
6%
NIST SP 800-39
3 source controls mapped|1 target controls covered
6%
NIST SP 800-37
3 source controls mapped|1 target controls covered
6%
NIST SP 800-30
3 source controls mapped|1 target controls covered
6%
ITAR - International Traffic in Arms Regulations
3 source controls mapped|1 target controls covered
6%
German Supply Chain Due Diligence Act (LkSG)
3 source controls mapped|1 target controls covered
6%
ISO 20400:2017 - Sustainable Procurement
3 source controls mapped|1 target controls covered
6%
ISO 31000
3 source controls mapped|1 target controls covered
6%
ISO 27005
3 source controls mapped|1 target controls covered
6%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
3 source controls mapped|1 target controls covered
6%
South Korea ISMS-P
3 source controls mapped|1 target controls covered
6%
ISO/IEC 27003:2017
3 source controls mapped|2 target controls covered
6%
SQF Code Edition 9 - Safe Quality Food
3 source controls mapped|1 target controls covered
6%
ISO 22000
3 source controls mapped|1 target controls covered
6%
EASA Part-IS - Information Security in Aviation
3 source controls mapped|1 target controls covered
6%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
3 source controls mapped|1 target controls covered
6%
ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)
3 source controls mapped|1 target controls covered
6%
Aged Care Quality Standards 2019 (repealed edition)
3 source controls mapped|1 target controls covered
6%
ISO/IEC 27014:2020
3 source controls mapped|1 target controls covered
6%
AS9100D - Aerospace Quality Management System
3 source controls mapped|1 target controls covered
6%
ISO 41001:2018 - Facility Management Systems
3 source controls mapped|1 target controls covered
6%
ISO 39001:2012 - Road Traffic Safety Management
3 source controls mapped|1 target controls covered
6%
ISO 56002
3 source controls mapped|1 target controls covered
6%
NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management
3 source controls mapped|2 target controls covered
6%
AICPA Privacy Management Framework (PMF)
3 source controls mapped|1 target controls covered
6%
ISO 31000:2018
3 source controls mapped|3 target controls covered
6%
ISO 10006:2003
1 source controls mapped|1 target controls covered
2%
ISO 10007:2017
1 source controls mapped|1 target controls covered
2%
SASB Standards
1 source controls mapped|2 target controls covered
2%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
1 source controls mapped|1 target controls covered
2%
NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security
1 source controls mapped|2 target controls covered
2%
NIST SP 800-146
1 source controls mapped|1 target controls covered
2%
NIST SP 800-145
1 source controls mapped|1 target controls covered
2%
NIST SP 800-144
1 source controls mapped|1 target controls covered
2%
NIST Privacy Framework
1 source controls mapped|1 target controls covered
2%
NERC CIP
1 source controls mapped|1 target controls covered
2%
MTCS (Singapore)
1 source controls mapped|1 target controls covered
2%
FTC GLBA Safeguards Rule (16 CFR Part 314)
1 source controls mapped|1 target controls covered
2%
BSI IT-Grundschutz
1 source controls mapped|1 target controls covered
2%
ISO 27019
1 source controls mapped|1 target controls covered
2%
Annex 11 to EU GMP - Computerised Systems
1 source controls mapped|1 target controls covered
2%
ISO 20000-1
1 source controls mapped|1 target controls covered
2%
IEC 62443
1 source controls mapped|1 target controls covered
2%
ISO 27017
1 source controls mapped|1 target controls covered
2%
API 1164
1 source controls mapped|1 target controls covered
2%
ISO 27018
1 source controls mapped|1 target controls covered
2%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|1 target controls covered
2%
SSAE 18 - Attestation Standards (SOC Reporting)
1 source controls mapped|2 target controls covered
2%
NIST SP 800-53 Rev 5
1 source controls mapped|1 target controls covered
2%
SOC 2
1 source controls mapped|1 target controls covered
2%
NIST SP 1800-32
1 source controls mapped|1 target controls covered
2%
SOC for Cybersecurity - Cybersecurity Risk Management Examination
1 source controls mapped|1 target controls covered
2%
NIST SP 800-190
1 source controls mapped|1 target controls covered
2%
ITIL 4
1 source controls mapped|1 target controls covered
2%
Compare ISO 9001 with ISO 9001:2015

What is ISO 9001 and who does it apply to?

ISO 9001 is a compliance framework from International with 26 domains and 48 controls. Quality management systems requirements It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 9001 actually require?

ISO 9001 has 48 controls organised across 26 domains. The largest domains are ISO 9001: Leadership & Planning (9 controls), ISO 9001: Operational Controls (6 controls), ISO 9001: Performance Evaluation (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 9001 do I already cover?

ISO 9001 maps to 81 other compliance frameworks. The top mapping partners are ISO 9001:2015 (56% coverage), ISO 22000:2018 (35% coverage), ISO 27701:2019 (31% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement ISO 9001?

Start your ISO 9001 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 9001 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 48 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required