ISO 9001 has ten clauses. Clauses 1 to 3 explain scope and words, and clauses 4 to 10 hold the requirements a company must meet and an auditor will test. This guide explains each clause in everyday words, using the headings of the 2015 edition, which is the layout most certified companies still use.
Last reviewed: 17 October 2026. Facts checked. We opened the Wikipedia page on the ISO 9000 family and the ISO TC 176 news page. The ten clause headings below come from the Wikipedia page. ISO 9001 is a paid document, so we have not read the clause text and do not quote it. The plain-English meanings and evidence examples follow our own published ISO 9001 audit checklist and general practice, not the standard's wording. We did not confirm whether the 2026 edition, published 16 September 2026, keeps the same numbering. Check the new text before you map your documents to it.
The ten clauses at a glance
| Clause | Heading | In one line |
|---|---|---|
| 1 | Scope | What the standard covers |
| 2 | Normative references | Other documents it relies on |
| 3 | Terms and definitions | What the words mean |
| 4 | Context of the organization | Know your situation |
| 5 | Leadership | Management owns the system |
| 6 | Planning | Think ahead about risk and goals |
| 7 | Support | Give people what they need to work |
| 8 | Operation | Do the work under control |
| 9 | Performance evaluation | Check how you are doing |
| 10 | Improvement | Fix and get better |
The clauses follow a Plan-Do-Check-Act flow. Planning is clauses 4 to 6, support and doing is 7 and 8, checking is 9 and acting is 10.
Clauses 1 to 3: read them, do not audit them
These set the scope, name related documents and define terms. An auditor does not ask for evidence against them. You should still read the definitions, because ISO uses ordinary words in a specific way.
Clause 4: Context of the organization
Plain English: Before you build a quality system, understand your business. Who are your customers, regulators and suppliers? What outside and inside issues affect your quality? What does your system cover?
Evidence: a written scope, a list of interested parties, a process map.
Clause 5: Leadership
Plain English: Top management cannot hand quality to someone else. They set the policy, give roles clear authority and keep customers in view.
Evidence: a policy that staff can explain, management meeting records, named responsibilities.
Clause 6: Planning
Plain English: Work out what could go wrong and what could go right, set measurable objectives, and plan changes to the system rather than making them by accident.
Evidence: a risk and opportunity record, objectives with owners and progress, change records.
Clause 7: Support
Plain English: A system needs people, tools, a suitable workplace, skills, awareness and controlled documents. If a procedure exists, the right version must reach the right person.
Evidence: training and competence records, equipment and calibration records, a document list with versions.
Clause 8: Operation
Plain English: This is the doing. Plan how you deliver, understand customer requirements, control design where it applies, control suppliers, deliver, and deal with anything that does not meet requirements.
Evidence: job or order records, purchase approvals, inspection results, records of rejected product and what was done about it.
Clause 9: Performance evaluation
Plain English: Measure results, listen to customers, audit yourself and have management review the whole picture. Our existing guide notes that the internal audit requirement is in clause 9.2.
Evidence: customer feedback, performance data, an audit programme and reports, management review minutes.
Clause 10: Improvement
Plain English: When something goes wrong, fix the cause, not only the symptom. Check the fix worked. Keep improving.
Evidence: a corrective action log with closed items and effectiveness checks.
How auditors use the clauses
Auditors do not read the standard to you. They pick a process, follow one real example from start to finish and ask for the record at each step. A finding states the requirement, the evidence seen and the gap. Our internal audit checklist turns each clause into questions. Use the ISO internal audit checklist template to record your work and the internal audit report template to write it up.
Common misreadings
- "We need a procedure for everything." Check the standard text to see which documents are actually required.
- "Clause 8 is only for factories." Our guide treats it as covering service delivery too.
- "Risk means a big register." The aim is that the company has thought about risk and acted on it.
Frequently Asked Questions
How many clauses does ISO 9001 have?
Ten, in the 2015 edition. Clauses 4 to 10 are the requirements.
Which clause is the hardest to meet?
We have no data on that, and it depends on the company. Clause 8 touches every step of delivery, so it usually needs the most evidence. Weak records are a common source of findings under clauses 9 and 10, as our audit checklist notes.
Do the 2026 clause numbers match the 2015 ones?
We could not confirm that. Read the 2026 text.
Is clause 9.2 the internal audit clause?
Yes, in the 2015 layout, as our existing audit guide states. We did not check this against the standard text for this article.
Who decides whether I meet the clauses?
An accredited certification body for certification. Your own internal auditors for internal audits.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error