Frameworks · Global standards
ISO 9001:2015
ISO 9001:2015 is the international standard for quality management systems. It requires an organisation to define its context and interested parties, lead and plan the system, control its operations, evaluate performance and improve. It also requires documented information, internal audit and management review.
Who it applies to
It applies to any organisation certifying its quality management system. It is especially useful for organisations that already hold ISO/IEC 27001 and want one integrated management system audited on one cycle.
Main requirements
Context & leadership
The organisation defines its scope, interested parties, quality policy, objectives, roles and responsibilities.
Operation
The organisation controls its processes, products and services, including externally provided processes.
Evaluation
The organisation monitors and measures performance, audits internally and holds management reviews.
Improvement
Nonconformities lead to corrective actions, with evidence kept through to closure.
How xmodo supports it
- 1
Nonconformities and corrective actions use the same audit and CAPA workflow as security findings, with owners, due dates and closure evidence.
- 2
Shared management-system clauses are implemented once for ISO 9001, ISO/IEC 27001 and ISO 22301. These cover context, leadership, documented information, audit and review.
- 3
Suppliers are assessed in the third-party module against quality and security requirements together.
Related frameworks
ISO 9001:2015 shares requirements with the frameworks below. Controls you already run for any of them count towards ISO 9001:2015 as well.
Frequently asked questions
Can one integrated audit cover 9001 and 27001?
Yes, if the certification body offers integrated audits. xmodo's shared management-system controls and single evidence base make this practical.