ISO 9001:2015

International

v2015

7 domains

56 controls

ISO 9001:2015 Quality Management Systems Requirements.

Verified

ISO 9001:2015 is a compliance framework from International with 7 domains and 56 controls that map to 70 other frameworks. The largest domains are Operation – ISO 9001:2015 (22 controls), Support – ISO 9001:2015 (12 controls), Performance evaluation – ISO 9001:2015 (7 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

Context of the organization – ISO 9001:2015

4 controls

Controls in the Context of the organization – ISO 9001:2015 domain of ISO 9001:2015 — 4 controls
Code	Title	Description
iso-9001-2015::4.1	Understanding the organization and its context	The organization identifies the internal and external issues that bear on its purpose and strategic direction and that i...
iso-9001-2015::4.2	Understanding the needs and expectations of interested parties	Since they affect, or could affect, whether the organization can reliably supply products and services that satisfy cust...
iso-9001-2015::4.3	Determining the scope of the quality management system	The organization sets the scope of its QMS by deciding where the system's boundaries lie and what it applies to, taking...
iso-9001-2015::4.4	Quality management system and its processes	The organization sets up, operates, keeps up to date and continually improves its QMS, together with the processes the s...

Improvement – ISO 9001:2015

3 controls

Controls in the Improvement – ISO 9001:2015 domain of ISO 9001:2015 — 3 controls
Code	Title	Description
iso-9001-2015::10.1	General	The organization identifies and chooses opportunities to improve and carries out the actions needed to satisfy customer...
iso-9001-2015::10.2	Nonconformity and corrective action	Whenever a nonconformity arises, complaints included, the organization responds to it: as applicable it acts to control...
iso-9001-2015::10.3	Continual improvement	The organization keeps improving how suitable, adequate and effective its QMS is. It uses what analysis and evaluation s...

Leadership – ISO 9001:2015

5 controls

Controls in the Leadership – ISO 9001:2015 domain of ISO 9001:2015 — 5 controls
Code	Title	Description
iso-9001-2015::5.1.1	General	Top management shows leadership and commitment towards the QMS by: being accountable for how effective the system is; ma...
iso-9001-2015::5.1.2	Customer focus	Top management shows leadership and commitment on customer focus by making sure that: customer requirements, and the law...
iso-9001-2015::5.2.1	Establishing the quality policy	Top management sets, puts into effect and keeps up to date a quality policy that fits the organization's purpose and con...
iso-9001-2015::5.2.2	Communicating the quality policy	The quality policy is kept as documented information and maintained; it is made known inside the organization so that pe...
iso-9001-2015::5.3	Organizational roles, responsibilities and authorities	Top management makes sure that the responsibilities and authorities of relevant roles are allocated, made known and unde...

Operation – ISO 9001:2015

22 controls

Controls in the Operation – ISO 9001:2015 domain of ISO 9001:2015 — 22 controls
Code	Title	Description
iso-9001-2015::8.1	Operational planning and control	The organization plans, carries out and controls the processes required to meet the requirements for supplying its produ...
iso-9001-2015::8.2.1	Customer communication	The organization's communication with customers covers: giving information about its products and services; dealing with...
iso-9001-2015::8.2.2	Determining the requirements for products and services	In setting what is required of the products and services it will offer customers, the organization makes sure those requ...
iso-9001-2015::8.2.3	Review of the requirements for products and services	The organization makes sure it is able to satisfy what is required of the products and services it plans to offer, and r...
iso-9001-2015::8.2.4	Changes to requirements for products and services	Whenever requirements for products and services change, the organization makes sure the documented information affected...
iso-9001-2015::8.3.1	General	The organization sets up, operates and keeps up to date a process for design and development that is suited to making su...
iso-9001-2015::8.3.2	Design and development planning	When deciding the stages of design and development and how they are controlled, the organization takes into account: wha...
iso-9001-2015::8.3.3	Design and development inputs	For each kind of product or service being designed and developed, the organization identifies the requirements that are...
iso-9001-2015::8.3.4	Design and development controls	The organization controls its design and development process so that: the results sought are defined; reviews are held t...
iso-9001-2015::8.3.5	Design and development outputs	The organization makes sure that what design and development produces satisfies the input requirements; is sufficient fo...
iso-9001-2015::8.3.6	Design and development changes	The organization identifies, reviews and controls changes made to products and services while they are being designed an...
iso-9001-2015::8.4.1	General	The organization makes sure that what external providers supply (processes, products and services) meets requirements. I...
iso-9001-2015::8.4.2	Type and extent of control	The organization makes sure that what external providers supply (processes, products and services) does not undermine it...
iso-9001-2015::8.4.3	Information for external providers	Before it passes requirements to an external provider, the organization makes sure they are adequate. It tells the provi...
iso-9001-2015::8.5.1	Control of production and service provision	Production and service provision are carried out under conditions the organization keeps controlled. Where they apply, t...
iso-9001-2015::8.5.2	Identification and traceability	Where needed to make products and services conform, the organization uses suitable means to identify its outputs. Throug...
iso-9001-2015::8.5.3	Property belonging to customers or external providers	The organization takes care of property owned by customers or external providers while that property is in its control o...
iso-9001-2015::8.5.4	Preservation	While production and service provision are under way, the organization protects its outputs as far as needed to keep the...
iso-9001-2015::8.5.5	Post-delivery activities	The organization fulfils what is required of it after delivery of its products and services. In deciding how far those p...
iso-9001-2015::8.5.6	Control of changes	The organization reviews and controls changes to production or service provision as far as needed to keep conformity to...
iso-9001-2015::8.6	Release of products and services	At suitable stages the organization carries out the arrangements it has planned for checking that products and services...
iso-9001-2015::8.7	Control of nonconforming outputs	The organization makes sure that any output failing to meet its requirements is identified and controlled so that it is...

Performance evaluation – ISO 9001:2015

7 controls

Controls in the Performance evaluation – ISO 9001:2015 domain of ISO 9001:2015 — 7 controls
Code	Title	Description
iso-9001-2015::9.1.1	General	The organization decides what it will monitor and measure; which methods of monitoring, measurement, analysis and evalua...
iso-9001-2015::9.1.2	Customer satisfaction	The organization monitors how customers perceive the extent to which their needs and expectations are being met, and dec...
iso-9001-2015::9.1.3	Analysis and evaluation	The organization analyses and evaluates the relevant data and information that monitoring and measurement produce, and u...
iso-9001-2015::9.2	Internal audit	At planned intervals the organization carries out internal audits that tell it whether its QMS meets both its own requir...
iso-9001-2015::9.3.1	General	At planned intervals top management reviews the QMS to confirm that it remains suitable, adequate and effective and that...
iso-9001-2015::9.3.2	Management review inputs	Management review is planned and held with attention to: how actions from earlier reviews stand; changes in the internal...
iso-9001-2015::9.3.3	Management review outputs	Management review produces decisions and actions on opportunities to improve, on whether the QMS needs changing, and on...

Planning – ISO 9001:2015

3 controls

Controls in the Planning – ISO 9001:2015 domain of ISO 9001:2015 — 3 controls
Code	Title	Description
iso-9001-2015::6.1	Actions to address risks and opportunities	When it plans its QMS, the organization takes into account the issues from 4.1 and the requirements from 4.2 and identif...
iso-9001-2015::6.2	Quality objectives and planning to achieve them	The organization sets quality objectives for the functions, levels and processes of its QMS where they are relevant. The...
iso-9001-2015::6.3	Planning of changes	Where the organization decides its QMS needs to change, it makes the change in a planned way, taking into account why th...

Support – ISO 9001:2015

12 controls

Controls in the Support – ISO 9001:2015 domain of ISO 9001:2015 — 12 controls
Code	Title	Description
iso-9001-2015::7.1.1	General	The organization identifies and provides the resources it needs to set up, operate, keep up to date and continually impr...
iso-9001-2015::7.1.2	People	The organization identifies and provides the people it needs to implement its QMS effectively and to run and control its...
iso-9001-2015::7.1.3	Infrastructure	The organization identifies, provides and maintains the infrastructure its processes need to run and to make products an...
iso-9001-2015::7.1.4	Environment for the operation of processes	The organization identifies, provides and maintains the environment its processes need to run and to make products and s...
iso-9001-2015::7.1.5	Monitoring and measuring resources	Where monitoring or measurement is used to check that products and services conform, the organization identifies and pro...
iso-9001-2015::7.1.6	Organizational knowledge	The organization identifies the knowledge its processes need to run and to make products and services conform, keeps tha...
iso-9001-2015::7.2	Competence	The organization decides what competence is needed by the people doing work under its control whose work affects how the...
iso-9001-2015::7.3	Awareness	The organization makes sure the people doing work under its control know the quality policy and the quality objectives t...
iso-9001-2015::7.4	Communication	The organization decides which internal and external communications matter to its QMS: what it will communicate, when, t...
iso-9001-2015::7.5.1	General	The QMS holds two kinds of documented information: what the standard itself requires, and whatever else the organization...
iso-9001-2015::7.5.2	Creating and updating	Whenever documented information is created or updated, the organization makes sure it is suitably identified and describ...
iso-9001-2015::7.5.3	Control of documented information	Documented information that the QMS and the standard call for is controlled so that it is on hand and fit for use wherev...

Your Compliance Coverage

If you comply with ISO 9001:2015, you already cover:

ISO 21001:2025

98%

55 controls mapped

Compare →

ISO 21001:2018

98%

55 controls mapped

Compare →

ISO 22000:2018

71%

40 controls mapped

Compare →

+ 67 more: ISO 22301:2019 (57%), ISO 27701:2019 (50%)

See all 70 mapped frameworks ↓

Maps to 70 other frameworks

56 total controls

ISO 21001:2025

55 source controls mapped|71 target controls covered

98%

ISO 21001:2018

55 source controls mapped|71 target controls covered

98%

ISO 22000:2018

40 source controls mapped|39 target controls covered

71%

ISO 22301:2019

32 source controls mapped|30 target controls covered

57%

ISO 27701:2019

28 source controls mapped|26 target controls covered

50%

ISO 50001:2018 - Energy Management Systems

26 source controls mapped|28 target controls covered

46%

ISO 10002:2018

25 source controls mapped|32 target controls covered

45%

ISO 37301:2021

25 source controls mapped|24 target controls covered

45%

COBIT 2019

23 source controls mapped|38 target controls covered

41%

ISO 37001:2016

22 source controls mapped|21 target controls covered

39%

AS9100D - Aerospace Quality Management System

21 source controls mapped|21 target controls covered

38%

ISO 14001:2015

19 source controls mapped|18 target controls covered

34%

Australia Standards for Registered Training Organisations 2025

19 source controls mapped|23 target controls covered

34%

ISO 45001:2018

18 source controls mapped|17 target controls covered

32%

ISO 13485:2016

18 source controls mapped|11 target controls covered

32%

ISO 14004:2016

15 source controls mapped|7 target controls covered

27%

ISO 55001:2014

15 source controls mapped|14 target controls covered

27%

ISO 41001:2018 - Facility Management Systems

13 source controls mapped|21 target controls covered

23%

ISO 39001:2012 - Road Traffic Safety Management

11 source controls mapped|17 target controls covered

20%

ISO 30401

11 source controls mapped|13 target controls covered

20%

ISO/IEC 27003:2017

10 source controls mapped|16 target controls covered

18%

ISO 22313:2020 - Guidance on Business Continuity Management Systems

10 source controls mapped|11 target controls covered

18%

ISO 56002

10 source controls mapped|17 target controls covered

18%

ISO 37002:2021 - Whistleblowing Management Systems

9 source controls mapped|14 target controls covered

16%

ISO 19011:2018

8 source controls mapped|12 target controls covered

14%

ISO/IEC TR 24028:2020

8 source controls mapped|1 target controls covered

14%

ISO 27001:2022

7 source controls mapped|7 target controls covered

13%

ASIS SPC.1-2009 - Organizational Resilience Standard

6 source controls mapped|7 target controls covered

11%

ISO 10005:2005

5 source controls mapped|5 target controls covered

ISO/IEC 27031:2011

5 source controls mapped|4 target controls covered

ISO 28001:2007 Supply Chain Security Management

5 source controls mapped|4 target controls covered

ISO/IEC 23894:2023

4 source controls mapped|8 target controls covered

ISO 27005:2022

4 source controls mapped|3 target controls covered

ISO 31000:2018

3 source controls mapped|3 target controls covered

ISO 22320:2018

3 source controls mapped|4 target controls covered

CSA STAR (Security, Trust, Assurance, and Risk)

2 source controls mapped|2 target controls covered

ISO/IEC 27004:2016

2 source controls mapped|2 target controls covered

ITIL 4

2 source controls mapped|2 target controls covered

ISO/IEC 27557:2022 - Organisational Privacy Risk Management

2 source controls mapped|2 target controls covered

IEC 62304:2015 Medical Device Software Lifecycle Processes