Management system guidance

4.0 Context of the Organization

ISO Navigator Pro™ is a free tool that provides practical, expert guidance for businesses wishing to interpret and better implement the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018.

Our range of ISO templates cover the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018, and offer an easy way to implement your next management system.

4.3 Determining the scope of the quality management system

« Previous |

Defining the scope of your quality management system (QMS) is a key step when developing any management system. The scope should concisely describe the types of activities, products and services covered by the QMS and the sites where those activities are carried out. The ISO 9001:2026 requirements for scope are essentially unchanged from 2015.

The scope of registration and certification will need to reflect precisely and clearly the activities covered by your organization's management system. The scope must state the types of products and services covered and must include a justification for any requirement of ISO 9001 that your organization determines is not applicable. ISO 9001 does not use the term 'exclusions'; instead a requirement can be determined as not applicable, with justification. No single business-related activity should exist outside of the scope. You should discuss the scope of registration very early in your contact with the registrar, prior to or during the selection process.

From a review of the nature of your business's operations, products and services, the scope of the management system should be apparent by the extent of the processes and controls that your organization has already established. If you need a procedure to help determine and document your organization's scope, click here.

Look for confirmation that your organization has determined the boundaries and applicability of the management system to establish its scope with reference to any external and internal issues (Clause 4.1), the requirements of relevant interested parties (Clause 4.2), and the nature of your organization's products and services. Consideration of the boundaries and applicability of the management system can include:

  1. The range of products and services;
  2. Different sites and activities;
  3. External provision of processes, products and services;
  4. Common support provided by centralised functions;
  5. Processes, procedures, instructions, or site-specific requirements.

The scope of your management system may include the whole of the organization, specific and identified functions within the organization, specific sections of the organization, or one or more functions shared across a group of organizations. Auditors will challenge your organization if any activities, products or services that affect product and service conformity or customer satisfaction are omitted from the scope. Your organization’s scope determinations should be reasonable and consistently applied.

Remember that the boundaries of the QMS can be influenced by specific customer requirements. If your organization is part of a larger entity, define the organizational boundaries of the system clearly, as these can affect how the QMS operates. Individual sites can have their own specific scopes where this is appropriate.

Your organization must apply every requirement of ISO 9001 that is applicable within its scope. A requirement can only be determined as not applicable if this does not affect your organization’s ability or responsibility to ensure that its products and services conform and to enhance customer satisfaction; otherwise conformity to ISO 9001 cannot be claimed.

The management system scope must be available as documented information (see Clause 7.5), often within the management system manual. The scope statement is normally shown on the certificate, for most registrars, 15 words or less, is generally sufficient. Here are two examples shown below:

'provision of marketing, sales, support, development and implementation of software solutions, located at...'

'manufacture of precision machined components for aerospace and industrial customers, including the delivery of these activities to requirements, located at...'

You may not design your products because your customers supply product specifications and drawings. In that case you may determine that the design and development requirements (Clause 8.3) are not applicable, provided that you state the justification in your scope.

« Previous |

More information on PDCA

Planning

Context

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
4.1 Organizational Context 4.1 Organizational Context 4.1 Organizational Context
4.2 Relevant Interested Parties 4.2 Relevant Interested Parties 4.2 Workers & Interested Parties
4.3 Management System Scope 4.3 EMS Scope 4.3 OH&S Management System Scope
4.4 QMS Processes 4.4 Environmental Management System 4.4 OH&S Management System

Planning

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
5.1 Leadership & Commitment 5.1 Leadership & Commitment 5.1 Leadership & Commitment
5.2 Quality Policy 5.2 Environmental Policy 5.2 OH&S Policy
5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities
    5.4 Consultation & Participation

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
6.1 Risks & Opportunities (6.1.1–6.1.3) 6.1.1 Risks & Opportunities - General 6.1.1 Risks & Opportunities - General
6.2.1 Quality Objectives 6.1.2 Environmental Aspects 6.1.2 Hazard Identification & Assessment
6.2.2 Planning to Achieve Objectives 6.1.3 Compliance Obligations 6.1.3 Legal & Other Requirements
6.3 Planning of Changes 6.1.4 Risks & Opportunities 6.1.4 Planning Action
  6.1.5 Planning Action 6.2.1 OH&S Objectives
  6.2.1 Environmental Objectives 6.2.2 Planning to Achieve Objectives
  6.2.2 Planning to Achieve Objectives  
  6.3 Planning of Changes  
 

Doing

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
7.1 Resources 7.1 Resources 7.1 Resources
7.2 Competence 7.2 Competence 7.2 Competence
7.3 Awareness 7.3 Awareness 7.3 Awareness
7.4 Communication 7.4.1 Communication - General 7.4.1 Communication - General
7.5 Documented Information 7.4.2 Internal Communication 7.4.2 Internal Communication
  7.4.3 External Communication 7.4.3 External Communication
  7.5 Documented Information 7.5 Documented Information

Operations

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
8.1 Operational Planning & Control 8.1 Operational Planning & Control 8.1.1 General
8.2 Customer Requirements 8.2 Emergency Preparedness & Response 8.1.2 Eliminating Hazards
8.3 Design & Development   8.1.3 Management of Change
8.4 Purchasing   8.1.4 Procurement
8.5 Product & Service Provision   8.2 Emergency Preparedness
8.6 Release of Products & Services    
8.7 Nonconforming Outputs    
 

Checking

Monitoring, measurement, analysis and evaluation

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
9.1 Monitoring & Measurement 9.1.1 Performance Evaluation 9.1.1 Performance Evaluation
9.2 Internal Audit 9.1.2 Evaluation of Compliance 9.1.2 Evaluation of Compliance
9.3 Management Review 9.2 Internal Audit 9.2 Internal Audit
  9.3 Management Review 9.3 Management Review
 

Acting

Improvement

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
10.1 Continual Improvement 10.1 Continual Improvement 10.1 Improvement - General
10.2 Nonconformity & Corrective Action 10.2 Nonconformity & Corrective Action 10.2 Incident, Nonconformity & Corrective Action
    10.3 Continual Improvement
 

Want to know more?

SSL certification

A certificate guarantees the information your internet browser is receiving now originates from the expected domain - https://www.iso9001help.co.uk. It guarantees that when you make a purchase, sensitive data is encrypted and sent to the right place, and not to a malicious third-party.

Free PDCA guidance

ISO Navigator™ is our FREE online training tool that shows you how to apply the principles of PDCA to your operations. We also offer many helpful templates that get you on the road to documenting your management system, please visit the download page.