ISO 9001:2015: every control, and what you already have

58 controls 84 frameworks share controls with it International verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

ISO 9001 Evidence & Implementation Kit

58 controls is the documentation set somebody has to write. This is that set, already written: an adopt-ready artifact for every control in policy and procedure text you edit rather than draft, and the evidence checklist an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
ISO 22000:2018	45	measure it →
ISO 27701:2019	43	measure it →
ISO 22301:2019	38	measure it →
ISO 37301:2021	31	measure it →
ISO 37001:2016	30	measure it →
ISO 50001:2018	30	measure it →
AS9100D	29	measure it →
ISO 9001	29	measure it →
ISO/IEC 42001:2023	27	measure it →
ISO 14001:2015	26	measure it →
ISO 45001:2018	26	measure it →
ISO 55001:2014	22	measure it →

Every control

Code	Control	Also in
`10.2`	Nonconformity and corrective action	30
`10.3`	Continual improvement	36
`4.1`	Understanding the organization and its context	26
`4.2`	Understanding the needs and expectations of interested parties	21
`4.3`	Determining the scope of the quality management system	12
`4.4`	Quality management system and its processes	13
`5.1`	Leadership and commitment	34
`5.1.2`	Customer focus	6
`5.2`	Policy	11
`5.2.1`	Establishing the quality policy	2
`5.2.2`	Communicating the quality policy	2
`5.3`	Organizational roles, responsibilities and authorities	31
`6.1`	Actions to address risks and opportunities	27
`6.2`	Quality objectives and planning to achieve them	16
`6.3`	Planning of changes	10
`7.1`	Resources	9
`7.1.2`	People	1
`7.1.3`	Infrastructure	4
`7.1.4`	Environment for the operation of processes	1
`7.1.5`	Monitoring and measuring resources	5
`7.1.6`	Organizational knowledge	3
`7.2`	Competence	12
`7.3`	Awareness	10
`7.4`	Communication	42
`7.5`	Documented information	28
`7.5.2`	Creating and updating	10
`7.5.3`	Control of documented information	11
`8.1`	Operational planning and control	25
`8.2`	Requirements for products and services	19
`8.2.1`	Customer communication	4
`8.2.2`	Determining the requirements for products and services	3
`8.2.3`	Review of the requirements for products and services	3
`8.2.4`	Changes to requirements for products and services	9
`8.3`	Design and development of products and services	12
`8.3.2`	Design and development planning	9
`8.3.3`	Design and development inputs	8
`8.3.4`	Design and development controls	14
`8.3.5`	Design and development outputs	8
`8.3.6`	Design and development changes	7
`8.4`	Control of externally provided processes, products and services	14
`8.4.2`	Type and extent of control	5
`8.4.3`	Information for external providers	4
`8.5`	Production and service provision	15
`8.5.1`	Control of production and service provision	6
`8.5.2`	Identification and traceability	8
`8.5.3`	Property belonging to customers or external providers	3
`8.5.4`	Preservation	7
`8.5.5`	Post-delivery activities	3
`8.5.6`	Control of changes	3
`8.6`	Release of products and services	6
`8.7`	Control of nonconforming outputs	6
`9.1`	Monitoring, measurement, analysis and evaluation	26
`9.1.2`	Customer satisfaction	14
`9.1.3`	Analysis and evaluation	5
`9.2`	Internal audit	32
`9.3`	Management review	31
`9.3.2`	Management review inputs	31
`9.3.3`	Management review outputs	31

Tell me when ISO 9001:2015 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Index of asset management system documentation
Document control procedure
Master list of system documents and records
Mapping of documented information to requirements
Rationale for the extent of documentation
Document index and control procedure
Corrective action procedure
CAPA tracker with root cause and effectiveness
Root cause analysis templates
Trend analysis of nonconformities

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

Required records not identified named by 3 frameworks
Root cause analysis superficial named by 3 frameworks
Opportunities never identified named by 3 frameworks
Data collected but not analysed named by 3 frameworks
Minutes record discussion but no decisions named by 3 frameworks
Auditors auditing their own work named by 3 frameworks

What this page is

A control-level reference for ISO 9001:2015, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition