Yes. ISO 9001 is deliberately generic and applies to any organisation providing products or services. The standard uses the term 'outputs' which covers both. Service businesses can exclude Clause 8.3 (Design and Development) if they do not design their service offering. For most service businesses, Clauses 8.2 (customer requirements) and 9.1.2 (customer satisfaction) are the most scrutinised.

A Quality Assurance Plan (QAP) is a project-specific document — common in construction and engineering — describing how quality requirements will be met for a particular contract. A Quality Management System (QMS) is the organisation-wide system of policies, procedures and processes. ISO 9001 requires a QMS. Your clients may additionally require a QAP for specific projects. The QMS-MAN-001 is your QMS plan; a QAP is derived from it for each project.

These documents give you a solid foundation but they are NOT exhaustive. ISO certification requires your system to reflect YOUR organisation — your specific context, risks, processes and customers. Every document in this library has placeholder fields marked [like this] that you must complete with your actual details. An auditor will check that the procedures are followed, not just that they exist.

Absolutely — and you should. The ISO standards do not require any specific form number or template. What matters is that you have documented information where the standard requires it, that people follow it, and that you retain evidence. If your existing forms work for your business, keep using them. Add them to the Document Register so they are controlled.

No. Some documents are mandatory (the policy, scope, objectives register, and the records listed in each clause). Others are strongly recommended best practice. Your certifier will assess whether you meet each clause requirement — not whether you have a specific document number. Use the Clause Mapping page to see exactly which documents satisfy which clauses.

Auditors look for evidence of implementation — not just documentation. They interview people, observe processes and sample records. They will ask workers to describe the procedure they follow, then check that what is described matches what the procedure says, and that records confirm it happened. A beautiful procedure nobody follows will fail. A simple working system will pass.

A Major NC means a clause requirement is absent or has completely failed — it directly threatens certification. A Minor NC is an isolated lapse or partial conformance — it needs correction but does not prevent certification. An Observation is a potential risk without a current NC. An OFI (Opportunity for Improvement) is a suggestion — not a nonconformity.

Typically 3–12 months. You need to demonstrate that the system has been operational for a period (usually at least 3 months) before a Stage 2 certification audit. The Stage 1 audit reviews your documentation. Stage 2 audits implementation. After certification you enter a 3-year surveillance cycle — annual surveillance audits in Years 1 and 2, full recertification in Year 3.

After initial certification you receive annual surveillance audits — typically covering a selection of clauses each year. In Year 3 you undergo a full recertification audit covering all clauses. Missing a surveillance audit without prior agreement with your certification body will result in suspension of your certificate.

Raise a Corrective Action Request (CAR) using IMS-FRM-CAR-001. Document the root cause — not just the symptom. Define corrective actions with owners and due dates. Verify effectiveness before closing. For a Major NC you typically have 90 days to demonstrate correction to your certifier before they will issue the certificate.

ISO 9001 requires a planned internal audit programme but does not specify a minimum number. All clauses must be covered within a 12-month cycle. For a small organisation, one comprehensive annual audit covering all clauses is typically acceptable. For larger or complex operations, a rolling programme auditing different areas quarterly is better practice. Every clause must be audited at least once per 3-year certification cycle, with higher-risk processes covered more frequently.

A Major NC is a systemic failure affecting multiple processes or the QMS's ability to achieve its intended results. It will normally prevent or delay certification. A Minor NC is an isolated failure that does not affect the overall QMS. You must submit a corrective action plan for both, but a Minor NC typically allows the audit to close with follow-up evidence. For your internal audits: use Major for systemic problems needing root cause and a CAR; use Minor for isolated lapses needing correction and monitoring.

The Welding ITP (QMS-ITP-WLD-001) directly addresses the Cl.8.5.1 requirement for controlled production conditions — but it must be supported by the full package. Auditors will check: (1) a current approved WPS is available at the workstation; (2) welders hold current WPQR tickets in the Training Register; (3) measuring equipment is calibrated and in the Calibration Register; and (4) all H hold points are signed before proceeding. The ITP is the framework; the WPS, welder certs and calibration records are the evidence.

After initial certification, most bodies conduct annual surveillance audits (Year 1 and Year 2) then a full recertification audit in Year 3. Surveillance audits focus on: (1) your CAR and internal audit processes; (2) progress against quality objectives; (3) a sample of operational clauses (usually Cl.8 and Cl.9); and (4) any major NCs from the previous audit. Best preparation: all CARs closed, objectives tracked and current, internal audit complete for the year, management review conducted. The live registers in this portal give you everything for a surveillance audit walkthrough.

Log the complaint in the Customer Complaints Register with a reference number, date and description. If it indicates a systemic quality failure (not a one-off), raise a Corrective Action Request linked to the complaint. The CAR process requires: (1) define the problem clearly; (2) contain the immediate issue; (3) conduct root cause analysis (5 Whys or fishbone); (4) implement the corrective action; (5) verify effectiveness within the agreed timeframe; (6) update the risk register if the issue could affect other products or customers. The complaint and linked CAR must both be closed with evidence before an auditor will accept them as resolved.