ISO 9001:2026 Requirements for a Quality Management System
This domain tests clauses 4 to 10: your ability to read a scenario and name the clause, the required evidence and the gap. The 2026 edition retains the harmonized structure and the 2015 clause architecture, so the logic below is what items probe; confirm wording against the published final text.
Clause map
- 4 Context – internal and external issues (including whether climate change is a relevant issue, added by Amendment 1:2024), interested parties and their relevant requirements, scope with justification for anything declared not applicable, processes and their interactions.
- 5 Leadership – top management accountability for QMS effectiveness, policy, customer focus, assigned roles and authorities.
- 6 Planning – risks and opportunities, quality objectives that are measurable, monitored, communicated and updated, and planned changes.
- 7 Support – resources, monitoring and measuring resources with traceability, organizational knowledge, competence, awareness, communication, documented information.
- 8 Operation – operational planning, requirements for products and services, design and development, externally provided processes, production and service provision, release, nonconforming outputs.
- 9 Performance evaluation – monitoring, measurement, analysis and evaluation, customer satisfaction, internal audit, management review.
- 10 Improvement – nonconformity and corrective action, continual improvement.
Documented information
"Maintain" means keep a document describing what is done; "retain" means keep evidence that it was done. Document only what the standard requires or what is necessary for effectiveness.
Worked example
A batch of 500 labels carries a wrong expiry date. Staff destroy and reprint them. Under 8.7 you retain a description of the nonconformity, the action taken, any concession and who authorized it. That is a correction. Only if the error recurs does 10.2 require cause analysis, action on the cause, and review of risks in 6.1. Reasoning: 8.7 handles the output; 10.2 handles the system.
Traps that cost marks
- Only clause 8.3 (design and development) may be declared not applicable, and only with justification in 4.3.
- Outsourcing never removes a process from QMS scope; 8.4 controls external providers.
- Internal audits need objectivity and impartiality, not an external certification body.
- "Documented procedure" is obsolete terminology.