CORAA
University · ISO management systems

ISO Management System Readiness Scorecard.

Answer a few questions per clause, from context to improvement, and see where you are strong and where the gaps are before an internal audit or certification audit. A self-check for ISO 9001, 14001, 45001 and similar standards.

Clause 4 Context of the organisation
We have written down the internal and external issues that affect the system, and review them
We know which interested parties matter and what they require
The scope of the system is defined and available
Clause 5 Leadership
Top management takes part in the system and can show it
A policy exists, is communicated and is understood by staff
Roles, responsibilities and authorities are assigned
Clause 6 Planning
Risks and opportunities are identified and acted on
Objectives are measurable, owned and tracked
Changes to the system are planned, not ad hoc
Clause 7 Support
People have the competence for their roles, with records
Staff are aware of the policy and how they contribute
Documented information is controlled: current, approved and findable
Clause 8 Operation
Processes are planned and controlled, and the controls are followed in practice
Outsourced processes and external providers are controlled
Records show the requirements were met
Clause 9 Performance evaluation
Monitoring and measurement results are analysed and used
Internal audits are planned, impartial and reported
Management review is held with the required inputs and recorded outputs
Clause 10 Improvement
Nonconformities are corrected and the cause is analysed
Corrective actions are checked for effectiveness
There is evidence of continual improvement
Result
Questions answered0 of 21
Clause 4—
Clause 5—
Clause 6—
Clause 7—
Clause 8—
Clause 9—
Clause 10—
Overall—
Answer all questions for the full picture.

The bands are this tool’s own aid, not a certification outcome. ISO standards are paid documents; read the current edition for exact requirements.

Why clauses 4 to 10.

Many ISO management-system standards, including ISO 9001, ISO 14001 and ISO 45001, share a common clause structure from context of the organisation (clause 4) through to improvement (clause 10). That makes a single readiness check useful across standards. Topic-specific requirements, such as environmental aspects or health and safety hazards, sit on top of this shared structure, so add questions for your own standard.

Internal audit checklist (Word)Nonconformity register

How the scorecard works

The scorecard asks three questions for each clause from 4 (context of the organisation) to 10 (improvement), the common structure of many ISO management-system standards. For each you answer No, Partly, or Yes with evidence. Yes counts only when you can show the record or observation behind it.

Each clause gets a percentage, and the overall score shows where you stand. The bands, close to ready, partly ready and significant gaps, are the tool's own aid to prioritise work. They do not predict a certification result.

Use the gaps to plan a proper gap assessment and internal audit, and read the exact requirements in the current edition of your standard.

Worked example — a small manufacturer before certification

A manufacturer answers all 21 questions. Leadership and operation are strong. Management review has never been held, and corrective actions are closed without checking they worked.

Inputs
Clause 9 answersManagement review: No; internal audit: Partly; monitoring: Yes
Clause 10 answersCause analysis: Partly; effectiveness check: No; improvement: Partly
Output
Clause 950%
Clause 1033%
Next stepHold a management review and add effectiveness checks
The low scores point to two concrete actions that auditors commonly look for evidence of, and both are quick to put in place.

Common mistakes

Answering Yes without evidence
A Yes should mean a record or observation exists. If you cannot show it, answer Partly.
Assuming a high score means certification-ready
The score is a rough guide. A proper gap assessment against the exact standard is still needed.
Skipping standard-specific requirements
Environmental, safety and information-security topics add requirements beyond the shared clauses.

Frequently asked questions

Which standards does this cover?+
It follows the common clause structure used by many ISO management-system standards, such as ISO 9001, 14001 and 45001. Add questions for topic-specific requirements.
Does a high score mean I will pass certification?+
No. The score is a self-check aid. Certification depends on the certification body's audit against the standard.
Who should answer the questions?+
Ideally the people who run each process, with the management representative or internal auditor challenging the answers.

Authoritative sources

ISO — Management system standards — ISO standards are paid documents; read the current edition.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
ISO internal audit checklist (Word) →ISO audit programme (Word) →COSO self-assessment →ISO 42001 internal audit checklist →
Share this tool
Last reviewed: 2026-10-17 · For informational purposes only — not professional advice.