Quality management fundamentals and ISO 9001 requirements
What ISO 9001:2015 actually demands
ISO 9001:2015 follows the Annex SL high-level structure - clauses 4 to 10: context of the organization, leadership, planning, support, operation, performance evaluation, improvement. It rests on the seven quality management principles: customer focus, leadership, engagement of people, process approach, improvement, evidence-based decision making and relationship management.
Concepts a candidate must hold securely: the standard distinguishes requirements ("shall") from notes and guidance; documented information covers both documents and records; and clause 4.3 allows a requirement to be declared not applicable only when it does not affect the ability to provide conforming products and services - never for convenience.
Traps that appear in questions
- ISO 9001:2015 does not require a quality manual, a management representative, a written procedure for every clause, or a formal risk register.
- Risk-based thinking sits in clause 6.1; there is no "preventive action" clause - 10.2 addresses corrective action only.
- "Process approach" means managing inputs, outputs and interactions, not merely owning procedure documents.
- Outsourced processes remain the organization's responsibility (8.4).
- Audit criteria for a certification audit are the standard's requirements plus the organization's own requirements and applicable statutory/regulatory requirements.
Rule of thumb
When a clause says "as applicable" or "as appropriate", the requirement still applies; the phrase relaxes only the form and extent of what is done or documented, never the obligation itself. So "we don't calibrate because we are a service company" fails 7.1.5.2 whenever a measuring resource is used to verify conformity - for example a torque wrench used to confirm a service meets specification.