How to Conduct an ISO 9001 Assessment Before Your Audit

What the ISO 9001 assessment requirement is, and why it exists

An ISO 9001 assessment is a systematic evaluation of an organisation's processes against the ISO 9001 standard requirements to identify operational gaps before a formal audit. Conducting an effective ISO 9001 assessment enables quality managers, compliance leads, and internal auditors to verify process performance, ensure risk-based thinking, and confirm that documented information meets standard requirements. This evaluation applies to any organisation regardless of its size, sector, or output, establishing whether quality management practices align with ISO 9001:2015.

The strategic purpose of an assessment is to ensure the organisation can consistently provide products and services that fulfill customer, statutory, and regulatory demands. Under Clause 4.4, organisations must establish, maintain, and continually improve a quality management system alongside its required process interactions. Conducting a gap analysis before a certification audit prevents unexpected nonconformities, protects operational integrity, and ensures top management actively drives quality management system effectiveness.

Step-by-step procedure for conducting an ISO 9001 assessment

Executing a gap assessment requires internal auditors to review process criteria, evaluate operational controls, and inspect retained evidence systematically across all clauses. Compliance leads must adopt the Plan-Do-Check-Act cycle to structure the assessment methodology.

• Establish the assessment scope and context: Define the boundaries of the quality management system under Clause 4.3 while reviewing external and internal issues identified under Clause 4.1 and interested party requirements under Clause 4.2.
• Map processes and operational criteria: Review Clause 4.4 requirements to confirm that process inputs, expected outputs, process sequences, performance indicators, and assigned responsibilities are explicitly defined.
• Audit leadership and planning commitment: Interview top management to verify accountability under Subclause 5.1.1, inspect the quality policy under Subclause 5.2.2, and evaluate risk-based actions under Subclause 6.1.2.
• Evaluate operational controls and resources: Examine support mechanisms under Clause 7.1, competence records under Clause 7.2, and operational controls for product or service delivery under Subclause 8.1.
• Inspect performance evaluation evidence: Review internal audit results under Clause 9.2, customer perception metrics under Subclause 9.1.2, and management review outputs under Subclause 9.3.3.
• Log gaps and initiate corrective action: Document every nonconformity, analyze root causes under Subclause 10.2.1, and assign corrective measures prior to final external audit scheduling.

Evaluating core clause requirements against audit evidence

Auditors check specific documented information and operational practices across each standard clause to verify compliance. Organisations must maintain documented information to support process operations and retain documented information to prove processes run as planned.

Practical audit scenario and common gap findings

Example

During a gap assessment at a precision component facility, an internal auditor evaluated Subclause 8.2.3, which mandates reviewing product requirements prior to delivery commitment. The auditor observed that sales teams accepted customized orders via email without verifying if internal manufacturing specifications or applicable statutory regulations had changed. Furthermore, the organisation lacked retained documented information showing order review results as required by Subclause 8.2.3.2. To resolve this gap, the compliance lead updated the contract review procedure, introduced a mandatory sign-off workflow, and trained sales personnel under Clause 7.3 to maintain required records.

Before your audit

• Verify that the quality management system scope is maintained as documented information under Clause 4.3.
• Confirm top management has established and communicated the quality policy under Clause 5.2.
• Ensure measurable quality objectives are monitored and updated across functions under Clause 6.2.
• Retain documented evidence of competence for all personnel performing work affecting quality under Clause 7.2.
• Check that measuring equipment is calibrated or verified against traceable standards under Subclause 7.1.5.2.
• Inspect evaluation records for all external providers of processes, products, and services under Clause 8.4.
• Conduct a full internal audit cycle and report findings to management under Clause 9.2.
• Retain documented outputs from top management review meetings under Clause 9.3.

Questions people ask

What is an iso 9001 assessment?

An iso 9001 assessment is an evaluation process that checks an organisation's processes and documented information against ISO 9001:2015 requirements. It identifies compliance gaps, verifies process controls, and prepares the business for certification.

Is a gap assessment mandatory before an ISO 9001 audit?

Conducting a gap assessment is not explicitly mandatory under ISO 9001:2015, but organisations must conduct internal audits under Clause 9.2. A pre-audit assessment ensures all mandatory clauses are satisfied before external auditors evaluate the system.

What documents are required for an ISO 9001 assessment?

Organisations must maintain documented information including the system scope, quality policy, and quality objectives. They must also retain records of competence, monitoring resource calibration, order reviews, supplier evaluations, internal audits, and management reviews.

Who can perform an internal ISO 9001 assessment?

Internal audits and gap assessments must be conducted by selected auditors who ensure objectivity and impartiality under Subclause 9.2.2. Auditors may be trained internal staff or external quality consultants who are not directly responsible for the audited process.

Reference documents

• ISO 9001:2015 Quality management systems — Requirements