Integrated management systems · Basic · 12 min lesson
ISO 9001 basics 3 - Operation, evaluation and improvement
ISO 9001:2015 clauses 8 to 10
What you will learn
- Describe how clause 8 controls requirements, design, suppliers, production, release and nonconforming outputs.
- Explain monitoring, internal audit and management review under clause 9, and what each must contain.
- Run corrective action and continual improvement under clause 10 and tell correction from corrective action.
Key takeaways
- 8.6 needs evidence and a named releaser; 8.7 requires nonconforming outputs to be identified, controlled, acted on and recorded.
- 8.4 requires criteria to evaluate, select, monitor and re-evaluate suppliers, and clear requirements sent to them.
- 9.2 audits must be planned, risk-based and impartial; 9.3 management review needs data inputs and decisions.
- 10.2 separates correction from corrective action: remove the cause, check effectiveness; 10.3 requires continual improvement.
Free practice question
A fictional chair maker buys foam from one supplier approved in 2019 on a phone call. There is no performance data, and the supplier changed its flame retardant last year without telling anyone.
What is missing against clause 8.4?
Evaluation criteria, monitoring and re-evaluation of the provider, and a requirement to be told about changes.
Correct. Clause 8.4.1 asks for criteria and re-evaluation, and clause 8.4.3 asks you to communicate requirements including approvals.
A certificate of ISO 9001 from the supplier.
Not quite. Clause 8.4 does not require provider certification; it requires the organization to determine and apply its own controls.
Nothing: a long relationship is enough evidence.
Not quite. Clause 8.4.1 requires documented evaluation and monitoring, which a relationship alone does not give.
Only a price comparison each year.
Not quite. Clause 8.4.1 criteria cover ability to meet requirements and performance, not price alone.
Key terms
- verification: Confirmation that specified requirements have been fulfilled, such as design outputs meeting design inputs (clause 8.3.4).
- validation: Confirmation that a product or service meets the requirements for its intended use (clause 8.3.4).
- nonconformity: Non-fulfilment of a requirement (ISO 9000).
- concession: Permission to use or release a product that does not conform to specified requirements (clause 8.7.1).
- correction: Action to eliminate a detected nonconformity itself (ISO 9000).
- corrective action: Action to eliminate the cause of a nonconformity and prevent recurrence (clause 10.2).
- management review: Top management's review at planned intervals of the suitability, adequacy and effectiveness of the system (clause 9.3).
- internal audit: A systematic, independent audit of the system by or for the organization (clause 9.2).
Official sources
- ISO 9001:2015 Quality management systems - Requirements (ISO)
- ISO 9001:2015/Amd 1:2024 Climate action changes (iTeh catalogue entry)
- Climate change becomes focus of management system standards (Quality Austria)
Go further
The full lesson has narrated slides, more scenario questions with explained answers and a simulation.
Open the AcademyWatch on YouTubeIllustrative example. Educational only, not legal advice.