Management system guidance

8.0 Operation

ISO Navigator Pro™ is a free tool that provides practical, expert guidance for businesses wishing to interpret and better implement the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018.

Our range of ISO templates cover the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018, and offer an easy way to implement your next management system.

8.4 Control of externally provided processes, products and services

|

Organizations need to identify which processes, materials and services they obtain from external providers that affect the quality of their products and services the most. Based upon this information, establish criteria for selection and monitoring of the suppliers.

If climate change has been determined to be a relevant issue (see 4.1), or interested parties have climate-related requirements that you have decided to address through your QMS (see 4.2), consider whether those requirements need to be passed on to external providers and reflected in the controls you apply to them. ISO 9001:2026 does not add a separate climate change requirement to clause 8.4.

The standard requires external providers to be evaluated and selected against criteria determined by the organization, and then monitored and re-evaluated. The criteria will depend upon the type of product or service and its effect on other processes and on the final output. Clause 8.4 is unchanged in ISO 9001:2026 apart from two additions to 8.4.3: requirements for the provider’s interactions can now extend to your customers and other relevant interested parties, and verification at the provider’s premises can also take place at another location. See 8.4.1, 8.4.2 and 8.4.3 for more information:

If you need a procedure and forms to help control your business's purchasing and procurement process, click here.

More information on PDCA

Planning

Context

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
4.1 Organizational Context 4.1 Organizational Context 4.1 Organizational Context
4.2 Relevant Interested Parties 4.2 Relevant Interested Parties 4.2 Workers & Interested Parties
4.3 Management System Scope 4.3 EMS Scope 4.3 OH&S Management System Scope
4.4 QMS Processes 4.4 Environmental Management System 4.4 OH&S Management System

Planning

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
5.1 Leadership & Commitment 5.1 Leadership & Commitment 5.1 Leadership & Commitment
5.2 Quality Policy 5.2 Environmental Policy 5.2 OH&S Policy
5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities
    5.4 Consultation & Participation

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
6.1 Risks & Opportunities (6.1.1–6.1.3) 6.1.1 Risks & Opportunities - General 6.1.1 Risks & Opportunities - General
6.2.1 Quality Objectives 6.1.2 Environmental Aspects 6.1.2 Hazard Identification & Assessment
6.2.2 Planning to Achieve Objectives 6.1.3 Compliance Obligations 6.1.3 Legal & Other Requirements
6.3 Planning of Changes 6.1.4 Risks & Opportunities 6.1.4 Planning Action
  6.1.5 Planning Action 6.2.1 OH&S Objectives
  6.2.1 Environmental Objectives 6.2.2 Planning to Achieve Objectives
  6.2.2 Planning to Achieve Objectives  
  6.3 Planning of Changes  
 

Doing

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
7.1 Resources 7.1 Resources 7.1 Resources
7.2 Competence 7.2 Competence 7.2 Competence
7.3 Awareness 7.3 Awareness 7.3 Awareness
7.4 Communication 7.4.1 Communication - General 7.4.1 Communication - General
7.5 Documented Information 7.4.2 Internal Communication 7.4.2 Internal Communication
  7.4.3 External Communication 7.4.3 External Communication
  7.5 Documented Information 7.5 Documented Information

Operations

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
8.1 Operational Planning & Control 8.1 Operational Planning & Control 8.1.1 General
8.2 Customer Requirements 8.2 Emergency Preparedness & Response 8.1.2 Eliminating Hazards
8.3 Design & Development   8.1.3 Management of Change
8.4 Purchasing   8.1.4 Procurement
8.5 Product & Service Provision   8.2 Emergency Preparedness
8.6 Release of Products & Services    
8.7 Nonconforming Outputs    
 

Checking

Monitoring, measurement, analysis and evaluation

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
9.1 Monitoring & Measurement 9.1.1 Performance Evaluation 9.1.1 Performance Evaluation
9.2 Internal Audit 9.1.2 Evaluation of Compliance 9.1.2 Evaluation of Compliance
9.3 Management Review 9.2 Internal Audit 9.2 Internal Audit
  9.3 Management Review 9.3 Management Review
 

Acting

Improvement

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
10.1 Continual Improvement 10.1 Continual Improvement 10.1 Improvement - General
10.2 Nonconformity & Corrective Action 10.2 Nonconformity & Corrective Action 10.2 Incident, Nonconformity & Corrective Action
    10.3 Continual Improvement
 

Want to know more?

SSL certification

A certificate guarantees the information your internet browser is receiving now originates from the expected domain - https://www.iso9001help.co.uk. It guarantees that when you make a purchase, sensitive data is encrypted and sent to the right place, and not to a malicious third-party.

Free PDCA guidance

ISO Navigator™ is our FREE online training tool that shows you how to apply the principles of PDCA to your operations. We also offer many helpful templates that get you on the road to documenting your management system, please visit the download page.