ISO 9001 Context of the Organization: 2026 Examples and Changes

ISO 9001 Context of the Organization: 2026 Examples and Changes

Defining the context of your organization is where every ISO 9001 quality management system starts, and in the 2026 edition it carries more weight than before. ISO 9001:2026, published in September 2026, keeps Clause 4 in the same four parts but adds two things auditors will now look for: a documented decision on whether climate change is relevant to you, and a clear statement of which interested party requirements your QMS will actually address. This guide walks through Clause 4 of ISO 9001:2026 with practical ISO 9001 context of the organization examples you can adapt, and shows what to update if your context analysis was written for the previous edition.

What changed in Clause 4 in ISO 9001:2026

If your context of the organization was built for ISO 9001:2015, most of it still holds. The structure is unchanged: 4.1 issues, 4.2 interested parties, 4.3 scope, 4.4 the QMS and its processes. The changes are targeted:

  • 4.1, climate change: you must decide whether climate change is a relevant issue for your organization. This came from the 2024 amendment and is now part of the requirement text itself. A decision of "not relevant" is acceptable, but you need to have made it and be able to show the reasoning.

  • 4.2 c), requirements the QMS will address: identifying interested parties and their requirements is no longer enough. You must also decide which of those requirements your QMS will take on. That turns the stakeholder list into a set of explicit commitments.

  • Monitoring and review: both issues and interested party information still need to be monitored and reviewed, and changes in interested party needs are now a named input to management review (9.3.2 c).

  • Knock-on effects: risks and opportunities are now handled separately (6.1.2 for risks, 6.1.3 for opportunities), and both are fed by your context. Quality culture, a new leadership requirement in 5.1.1 i), is also something your internal issues analysis should cover.

For the full list of revisions, see our ISO 9001:2026 clause by clause guide.

Why the context of the organization matters

Your context analysis answers three questions: what is going on inside and around the organization, who depends on or influences your quality performance, and where the boundaries of the QMS sit. Everything downstream draws on those answers, from the risks you plan for to the objectives you set and the scope an auditor will assess.

A context written once to satisfy an auditor and then filed away produces a QMS that drifts away from the business. A context that is reviewed and used becomes the input that keeps your risk register, audit programme and management review pointed at what actually matters.

Clause 4.1: understanding the organization and its context, with examples

Clause 4.1 asks you to determine the internal and external issues that are relevant to your purpose and strategic direction and that affect your ability to achieve the intended results of the QMS. Issues can be positive or negative. SWOT and PESTLE remain the most common tools, but the format is your choice.

Internal issue examples

  • Values and quality culture: a strong "right first time" culture on the shop floor, or a habit of working around procedures under deadline pressure. With quality culture and ethical behaviour now in 5.1.1 i) and 7.3 e), this belongs in your internal issues.

  • Knowledge: critical know-how held by two senior technicians close to retirement (links to 7.1.6, which now requires knowledge to be retained, applied and shared).

  • Resources: outdated ERP, limited calibration capacity, a small quality team covering three sites.

  • Performance: rising customer complaints on one product line, or on-time delivery consistently above 98 percent.

  • Strategic direction: a plan to enter a regulated sector such as medical devices or aerospace.

External issue examples

  • Market and competition: a major customer consolidating suppliers, or low-cost competitors entering your market.

  • Legal and regulatory: new product safety rules, data protection obligations, export controls.

  • Technological: customers expecting digital certificates of conformity, or AI tools changing how your competitors design and inspect.

  • Economic: raw material price volatility, currency exposure on imported components.

  • Disruption: dependence on a single port or a single-source supplier. ISO 9001:2026 explicitly expects you to think about delivering conforming products during and after disruptions.

Climate change: worked examples of the 4.1 determination

Auditors will expect to see the decision and the reasoning, not just a tick box. Two examples:

  • Relevant: "Climate change is relevant. Summer heat above 40°C affects curing times in our coating process and has caused two late deliveries in the past year. Our two largest customers now require product carbon data in tenders. Addressed through risk R-14 and objective Q-2026-03."

  • Not relevant: "We have assessed climate change and determined it is not currently a relevant issue for the QMS of our two-person software consultancy: operations are remote, there is no physical product or supply chain, and no customer has raised climate-related requirements. We will reassess at each management review."

Clause 4.2: interested parties and the requirements your QMS will address

Clause 4.2 now has three steps: determine the relevant interested parties, determine their relevant requirements, and decide which of those requirements the QMS will address. The third step is new and is where most legacy registers fall short.

Interested parties register example

Interested party

Relevant requirement

Addressed through the QMS?

How

Customers

On-time delivery, conforming product, certificates of conformity

Yes

Production planning, final inspection, release (8.6)

Key customer A

Product carbon footprint data in tenders

Yes

Objective Q-2026-03, supplier data requests (8.4.3)

Employees

Clear roles, training, a workplace where concerns can be raised

Yes

Roles (5.3), competence (7.2), awareness of quality culture (7.3)

Regulators

Product safety and labelling compliance

Yes

Requirements review (8.2.2), release criteria

Shareholders

Return on investment

No

Managed through financial governance, outside the QMS

Local community

Noise outside working hours

No

Handled by the environmental management system

The "No" rows matter as much as the "Yes" rows. Recording that a requirement is managed elsewhere shows an auditor you made a deliberate decision rather than an omission. Relevant interested parties can also have climate-related requirements, so check your customer contracts and tender documents.

When a requirement you have committed to is not met, it should flow into your nonconformity and corrective action process like any other.

Clause 4.3: scope of the QMS, with examples

The scope sets the boundaries and applicability of the QMS, taking 4.1, 4.2 and your products and services into account. It must state the types of products and services covered, justify any requirement you consider not applicable, and be available as documented information. Annex A of the 2026 edition also notes that the sites where activities are performed form part of a clear scope, and that individual sites can have their own scopes.

  • Good example: "Design, manufacture and after-sales service of hydraulic pumps for industrial and marine customers, at our Casablanca plant and Tangier service centre. Clause 8.3 applies. Clause 7.1.5.2 applies to the Casablanca test bench only."

  • Weak example: "Manufacture of our products."

A requirement can only be declared not applicable if that does not affect your ability to ensure conforming products and services or to enhance customer satisfaction. A build-to-print subcontractor that never designs products can justify 8.3 as not applicable. A company that adapts customer designs usually cannot.

Clause 4.4: the QMS and its processes

Clause 4.4 turns the analysis into a working system: determine your processes, their inputs and outputs, sequence and interaction, the criteria, methods and performance indicators that control them, resources, responsibilities, the risks and opportunities determined under 6.1, and how processes are evaluated and improved. Documented information is required to the extent needed to support operations and show processes run as planned.

A practical approach is a process map with one card per process listing owner, inputs, outputs, KPIs and linked risks. An ISO 9001 software platform makes that map live, so a change to one process shows its effect on others.

From context to action: where Clause 4 feeds the 2026 QMS

  • 6.1.1 to 6.1.3, risks and opportunities: issues and interested party requirements are the main inputs. In ISO 9001:2026 you analyse and evaluate risks (6.1.2) and opportunities (6.1.3) separately, plan actions for each and evaluate their effectiveness. A single combined "risks and opportunities" list is no longer the best fit.

  • 6.3, planning of changes: when your context shifts enough to change the QMS, the change must be planned, including how it is communicated and how its effectiveness and results will be reviewed.

  • 9.2, internal audit: the audit programme must consider process importance, previous results and changes affecting the organization, which your context review supplies. ISO audit software helps tie audit frequency to those risks.

  • 9.3, management review: changes in internal and external issues (9.3.2 b) and changes in interested party needs (9.3.2 c) are separate required inputs.

  • 10.2, corrective action: after a significant nonconformity, update the risks and opportunities you identified during planning where needed, which often means revisiting the context.

Updating a 2015-era context analysis: a quick checklist

  • Add a dated climate change determination with reasoning to your 4.1 record.

  • Add an "addressed through the QMS" column and a rationale to your interested parties register.

  • Add quality culture, ethical behaviour, knowledge and disruption to the internal and external issues you review.

  • Split your combined risk and opportunity list so each feeds 6.1.2 or 6.1.3.

  • Add "changes in interested party needs" to your management review agenda.

  • Confirm your scope names the product and service types, sites and justified non-applicable requirements.

Keeping these records in one document control system means each revision is versioned and the evidence is ready when your certification body schedules the transition audit.

Frequently asked questions about ISO 9001 context of the organization examples

Is the climate change requirement new in ISO 9001:2026?

It first appeared in the 2024 amendment to the previous edition and is now built into clause 4.1 of ISO 9001:2026. You must determine whether climate change is relevant. If it is not, record that decision and the reasoning, and revisit it periodically.

How often should we review the context of the organization?

The standard requires monitoring and review but sets no frequency. Most organizations review it at each management review, at least annually, and also after significant events such as losing a major customer, a new regulation or a supply disruption.

Do we need to address every interested party requirement?

No. Clause 4.2 c) asks you to decide which requirements the QMS will address. Some are better handled by finance, HR or an environmental system. Record the decision either way.

Is our ISO 9001:2015 certificate still valid?

Yes, during the transition period set by IAF and the certification bodies. Confirm the exact deadline with your certification body and plan your Clause 4 updates as part of your transition gap assessment.

What is the best way to document the context of the organization?

The standard does not prescribe a format. A SWOT or PESTLE record with the climate determination, an interested parties register with an "addressed by the QMS" column, and a controlled scope statement cover the requirements. Managing them in ISO management software lets you link each issue directly to the risks, opportunities and objectives it drives.