Back to Frameworks
ISO 9001:2015
International
v2015
8 domains
71 controls
ISO 9001:2015 Quality Management Systems Requirements.
Verified
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
Clause 0 – ISO 9001:2015
5 controls
| Code | Title |
|---|---|
| iso-9001-2015::0.1 | General |
| iso-9001-2015::0.2 | Quality management principles |
| iso-9001-2015::0.3 | Process approach |
| iso-9001-2015::0.3.1 | General |
| iso-9001-2015::0.3.2 | Plan-Do-Check-Act cycle |
Context of the organization – ISO 9001:2015
4 controls
| Code | Title |
|---|---|
| iso-9001-2015::4.1 | Understanding the organization and its context |
| iso-9001-2015::4.2 | Understanding the needs and expectations of interested parties |
| iso-9001-2015::4.3 | Determining the scope of the quality management system |
| iso-9001-2015::4.4 | Quality management system and its processes |
Improvement – ISO 9001:2015
3 controls
| Code | Title |
|---|---|
| iso-9001-2015::10.1 | General |
| iso-9001-2015::10.2 | Nonconformity and corrective action |
| iso-9001-2015::10.3 | Continual improvement |
Leadership – ISO 9001:2015
7 controls
| Code | Title |
|---|---|
| iso-9001-2015::5.1 | Leadership and commitment |
| iso-9001-2015::5.1.1 | General |
| iso-9001-2015::5.1.2 | Customer focus |
| iso-9001-2015::5.2 | Policy |
| iso-9001-2015::5.2.1 | Developing the quality policy |
| iso-9001-2015::5.2.2 | Communicating the quality policy |
| iso-9001-2015::5.3 | Organizational roles, responsibilities and authorities |
Operation – ISO 9001:2015
26 controls
| Code | Title |
|---|---|
| iso-9001-2015::8.1 | Operational planning and control |
| iso-9001-2015::8.2 | Requirements for products and services |
| iso-9001-2015::8.2.1 | Customer communication |
| iso-9001-2015::8.2.2 | Determining the requirements related to products and services |
| iso-9001-2015::8.2.3 | Review of requirements related to products and services |
| iso-9001-2015::8.2.4 | Changes to requirements for products and services |
| iso-9001-2015::8.3 | Design and development of products and services |
| iso-9001-2015::8.3.1 | General |
| iso-9001-2015::8.3.2 | Design and development planning |
| iso-9001-2015::8.3.3 | Design and development inputs |
| iso-9001-2015::8.3.4 | Design and development controls |
| iso-9001-2015::8.3.5 | Design and development outputs |
| iso-9001-2015::8.3.6 | Design and development changes |
| iso-9001-2015::8.4 | Control of externally provided processes, products and services |
| iso-9001-2015::8.4.1 | General |
| iso-9001-2015::8.4.2 | Type and extent of control |
| iso-9001-2015::8.4.3 | Information for external providers |
| iso-9001-2015::8.5 | Production and service provision |
| iso-9001-2015::8.5.1 | Control of production and service provision |
| iso-9001-2015::8.5.2 | Identification and traceability |
| iso-9001-2015::8.5.3 | Property belonging to customers or external providers |
| iso-9001-2015::8.5.4 | Preservation |
| iso-9001-2015::8.5.5 | Post-delivery activities |
| iso-9001-2015::8.5.6 | Control of changes |
| iso-9001-2015::8.6 | Release of products and services |
| iso-9001-2015::8.7 | Control of nonconforming outputs |
Performance evaluation – ISO 9001:2015
9 controls
| Code | Title |
|---|---|
| iso-9001-2015::9.1 | Monitoring, measurement, analysis and evaluation |
| iso-9001-2015::9.1.1 | General |
| iso-9001-2015::9.1.2 | Customer satisfaction |
| iso-9001-2015::9.1.3 | Analysis and evaluation |
| iso-9001-2015::9.2 | Internal audit |
| iso-9001-2015::9.3 | Management review |
| iso-9001-2015::9.3.1 | General |
| iso-9001-2015::9.3.2 | Management review inputs |
| iso-9001-2015::9.3.3 | Management review outputs |
Planning – ISO 9001:2015
3 controls
| Code | Title |
|---|---|
| iso-9001-2015::6.1 | Actions to address risks and opportunities |
| iso-9001-2015::6.2 | Quality objectives and planning to achieve them |
| iso-9001-2015::6.3 | Planning of changes |
Support – ISO 9001:2015
14 controls
| Code | Title |
|---|---|
| iso-9001-2015::7.1 | Resources |
| iso-9001-2015::7.1.1 | General |
| iso-9001-2015::7.1.2 | People |
| iso-9001-2015::7.1.3 | Infrastructure |
| iso-9001-2015::7.1.4 | Environment for the operation of processes |
| iso-9001-2015::7.1.5 | Monitoring and measuring resources |
| iso-9001-2015::7.1.6 | Organizational knowledge |
| iso-9001-2015::7.2 | Competence |
| iso-9001-2015::7.3 | Awareness |
| iso-9001-2015::7.4 | Communication |
| iso-9001-2015::7.5 | Documented information |
| iso-9001-2015::7.5.1 | General |
| iso-9001-2015::7.5.2 | Creating and updating |
| iso-9001-2015::7.5.3 | Control of documented information |
Your Compliance Coverage
If you comply with ISO 9001:2015, you already cover:
ISO 22000:2018
79%
56 controls mapped
Compare →ISO 27701:2019
68%
48 controls mapped
Compare →ISO 22301:2019
59%
42 controls mapped
Compare →+ 83 more: ISO 37301:2021 (51%), ISO 50001:2018 - Energy Management Systems (49%)
See all 86 mapped frameworks ↓Maps to 86 other frameworks
71 total controls
ISO 22000:2018
56 source controls mapped|55 target controls covered
79%
ISO 27701:2019
48 source controls mapped|49 target controls covered
68%
ISO 22301:2019
42 source controls mapped|39 target controls covered
59%
ISO 37301:2021
36 source controls mapped|36 target controls covered
51%
ISO 50001:2018 - Energy Management Systems
35 source controls mapped|31 target controls covered
49%
ISO 37001:2016
34 source controls mapped|32 target controls covered
48%
ISO 45001:2018
33 source controls mapped|33 target controls covered
46%
ISO/IEC 42001:2023
32 source controls mapped|31 target controls covered
45%
ISO 14001:2015
32 source controls mapped|31 target controls covered
45%
AS9100D - Aerospace Quality Management System
30 source controls mapped|38 target controls covered
42%
ISO 9001
29 source controls mapped|27 target controls covered
41%
ISO 13485:2016
28 source controls mapped|16 target controls covered
39%
ISO 14004:2016
24 source controls mapped|13 target controls covered
34%
ISO 55001:2014
23 source controls mapped|21 target controls covered
32%
ISO 39001:2012 - Road Traffic Safety Management
23 source controls mapped|85 target controls covered
32%
ISO 41001:2018 - Facility Management Systems
22 source controls mapped|86 target controls covered
31%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
22 source controls mapped|76 target controls covered
31%
ISO/IEC 27003:2017
22 source controls mapped|41 target controls covered
31%
AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence
21 source controls mapped|25 target controls covered
30%
ISO 37301
20 source controls mapped|20 target controls covered
28%
ISO 31000:2018
19 source controls mapped|6 target controls covered
27%
ISO 55001
19 source controls mapped|19 target controls covered
27%
ISO 30401
18 source controls mapped|19 target controls covered
25%
ISO 56002
17 source controls mapped|81 target controls covered
24%
ISO 27001:2022
17 source controls mapped|16 target controls covered
24%
ISO 37002:2021 - Whistleblowing Management Systems
16 source controls mapped|78 target controls covered
23%
ISO 37001
14 source controls mapped|13 target controls covered
20%
ISO 22000
13 source controls mapped|11 target controls covered
18%
ISO 19011:2018
13 source controls mapped|18 target controls covered
18%
ISO 10005:2005
13 source controls mapped|7 target controls covered
18%
ISO 45001
12 source controls mapped|10 target controls covered
17%
ISO/IEC 23894:2023
10 source controls mapped|12 target controls covered
14%
ISO/IEC TR 24028:2020
10 source controls mapped|1 target controls covered
14%
ISO 19011
10 source controls mapped|9 target controls covered
14%
ISO 27005:2022
7 source controls mapped|7 target controls covered
10%
ASIS SPC.1-2009 - Organizational Resilience Standard
7 source controls mapped|7 target controls covered
10%
ISO/IEC 27701:2019
6 source controls mapped|6 target controls covered
8%
ISO/IEC 27031:2011
6 source controls mapped|4 target controls covered
8%
ISO 28001:2007 Supply Chain Security Management
6 source controls mapped|4 target controls covered
8%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
3 source controls mapped|3 target controls covered
4%
ISO 22320:2018
3 source controls mapped|4 target controls covered
4%
ISO 31000
2 source controls mapped|2 target controls covered
3%
BS 65000:2014 - Guidance on Organizational Resilience
2 source controls mapped|2 target controls covered
3%
ISO 20400:2017 - Sustainable Procurement
2 source controls mapped|2 target controls covered
3%
CSA STAR (Security, Trust, Assurance, and Risk)
2 source controls mapped|2 target controls covered
3%
ISO/IEC 27004:2016
2 source controls mapped|2 target controls covered
3%
ITIL 4
2 source controls mapped|2 target controls covered
3%
ISO 10006:2003
2 source controls mapped|2 target controls covered
3%
IEC 62304:2015 Medical Device Software Lifecycle Processes
1 source controls mapped|1 target controls covered
1%
ISO/IEC 38500:2024
1 source controls mapped|2 target controls covered
1%
NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management
1 source controls mapped|1 target controls covered
1%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|2 target controls covered
1%
ISO/SAE 21434
1 source controls mapped|1 target controls covered
1%
CMMC 2.0
1 source controls mapped|1 target controls covered
1%
DORA
1 source controls mapped|1 target controls covered
1%
CMMC 2.0 Level 1
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27050 - Electronic Discovery (Parts 1-4)
1 source controls mapped|1 target controls covered
1%
EU AI Liability Directive
1 source controls mapped|1 target controls covered
1%
APRA CPS 220 Risk Management
1 source controls mapped|1 target controls covered
1%
SOC 1 (SSAE 18 / ISAE 3402)
1 source controls mapped|1 target controls covered
1%
NIST SP 800-160
1 source controls mapped|1 target controls covered
1%
ISO 10007:2017
1 source controls mapped|1 target controls covered
1%
Australia NHMRC National Statement on Ethical Conduct in Human Research
1 source controls mapped|1 target controls covered
1%
ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)
1 source controls mapped|1 target controls covered
1%
ISO 22318
1 source controls mapped|2 target controls covered
1%
UK Bribery Act 2010
1 source controls mapped|1 target controls covered
1%
ISO 22316
1 source controls mapped|1 target controls covered
1%
Brazil AI Framework
1 source controls mapped|1 target controls covered
1%
NIST SP 1800-32
1 source controls mapped|1 target controls covered
1%
PCI PIN Security
1 source controls mapped|1 target controls covered
1%
ISO 22317
1 source controls mapped|1 target controls covered
1%
ISO 26000:2010
1 source controls mapped|1 target controls covered
1%
OWASP ASVS
1 source controls mapped|1 target controls covered
1%
ISO/IEC 29147:2018
1 source controls mapped|2 target controls covered
1%
ISO/IEC 30111:2019
1 source controls mapped|1 target controls covered
1%
FFIEC IT Examination Handbook
1 source controls mapped|1 target controls covered
1%
NSA Guidance for Transition to Quantum-Resistant Cryptography
1 source controls mapped|1 target controls covered
1%
PCI SSF
1 source controls mapped|1 target controls covered
1%
NIST SP 800-183
1 source controls mapped|2 target controls covered
1%
PCI P2PE
1 source controls mapped|1 target controls covered
1%
APRA CPS 230 Operational Risk Management
1 source controls mapped|1 target controls covered
1%
ISAE 3402 - Assurance Reports on Controls at a Service Organisation
1 source controls mapped|1 target controls covered
1%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
1 source controls mapped|1 target controls covered
1%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration Laboratories
1 source controls mapped|2 target controls covered
1%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
1 source controls mapped|1 target controls covered
1%
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
1 source controls mapped|1 target controls covered
1%
Frequently Asked Questions
What is ISO 9001:2015?
ISO 9001:2015 is a compliance framework from International with 8 domains and 71 controls. ISO 9001:2015 Quality Management Systems Requirements. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does ISO 9001:2015 have?
ISO 9001:2015 has 71 controls organised across 8 domains. The largest domains are Operation – ISO 9001:2015 (26 controls), Support – ISO 9001:2015 (14 controls), Performance evaluation – ISO 9001:2015 (9 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does ISO 9001:2015 map to?
ISO 9001:2015 maps to 86 other compliance frameworks. The top mapping partners are ISO 22000:2018 (79% coverage), ISO 27701:2019 (68% coverage), ISO 22301:2019 (59% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I get started with ISO 9001:2015 compliance?
Start your ISO 9001:2015 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 9001:2015 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 71 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.
Get Started Free →Free forever — no credit card required