Context analysis ISO 9001: clause 4 explained
The context analysis is the starting point of your ISO 9001 quality management system. In clause 4, the NEN-EN-ISO 9001:2015 standard requires you to understand which factors affect your organisation and who has an interest in it. Without that context, you cannot set suitable objectives or identify meaningful risks. The certification body, an accredited body , checks whether this part is really alive in your organisation. This page explains it step by step, with a concrete example table.
Clause 4 is deliberately placed as the first real requirement. Everything that follows, such as policy, risks and objectives, builds on your understanding of your own context.
On this page
The definition and purpose of clause 4.
What is a context analysis?Example table with concrete factors.
Internal and external factorsWho are the parties involved and what do they expect?
Stakeholder analysisOverlap and difference explained.
Link with SWOTWhat does your system cover?
Defining the scopeWhat is a context analysis under ISO 9001?
The context analysis maps the factors from outside (external) and inside (internal) your organisation that affect it. You record what is relevant to the purpose of the organisation and to your quality management system.
That sounds abstract. In practice, it means writing down which things outside your business matter (market, legislation, technology, competition) and which things inside your business matter (culture, systems, people, processes). Also consider how they affect your quality objectives.
A plumbing company, for example, writes down:
- External: rising material prices, a shortage of technical staff, new nitrogen legislation.
- Internal: high sickness absence, a good reputation with regular clients, an outdated planning system.
That analysis later determines which risks and opportunities you identify in clause 6. You can read more about translating this into risks on the page risk management ISO 9001, and the full structure of the standard is on the page requirements of ISO 9001.
Internal and external factors in ISO 9001
Clause 4.1: what the standard asks
The standard asks you to determine the “external and internal issues” that are relevant to your organisation’s purpose and your system. You record these and keep them up to date.
This can take any form: a table, a text, a mind map or part of a handbook. As long as it is available and current, it works.
Example table of internal and external factors
| Factor | Type | Description | Impact on quality | Measure |
|---|---|---|---|---|
| Shortage of technical staff | External | Difficult to find fitters | Longer lead times, pressure on quality | Own training programme |
| New energy performance standard | External | Building regulations are changing | New requirements for handovers | Train the team and update the way of working |
| Ageing workforce | Internal | Average age 52 years | Risk to knowledge transfer | Set up knowledge retention |
| High client loyalty | Internal | 70% repeat purchases | Client satisfaction already well secured | Maintain and measure |
| Supplier problems | External | Material shortage after a supplier went bankrupt | Uncertain lead times | Qualify a second supplier |
| Outdated IT systems | Internal | Order registration partly manual | Errors in administration | Replacement planned for next year |
There is no minimum number of factors required. An installation company with twelve employees can manage with a table of eight rows. An organisation with fifty people and five locations will have more. It is about relevance, not completeness.
Stakeholder analysis (clause 4.2)
Besides the factors, you must also record who the “relevant interested parties” are and what they expect from you.
Who are your interested parties?
Interested parties are all parties that affect your organisation or have an interest in what you do. Do not think only of clients. A more extensive approach, with prioritisation and the addition from ISO 9001:2026, is on the page mapping interested parties.
Example table of interested parties
| Interested party | Relationship | Expectation | How we secure this |
|---|---|---|---|
| Clients | Client | Quality, timeliness, service | Client satisfaction survey, complaints process |
| Employees | Staff | Safe environment, clarity, career opportunities | Performance reviews, training |
| Suppliers | Subcontractor | Timely payment, clear purchase orders | Purchasing procedure, evaluation |
| Government | Regulator | Compliance with legislation, safety | Keep a compliance overview |
| Shareholders / owners | Owner | Profitability, continuity | Financial reporting, strategy |
| Certification body | External auditor | Demonstrable compliance with ISO 9001 | This quality management system |
The standard does not require you to meet every expectation of every interested party. You must identify them and assess which are relevant to your quality system. Some expectations are contractual, others are legal, and still others are “good to know”.
Relationship between the context analysis and SWOT
A SWOT analysis (Strengths, Weaknesses, Opportunities, Threats) looks a lot like what ISO 9001 asks for. The overlap is large:
| SWOT | ISO 9001 context analysis |
|---|---|
| Strengths (internal) | Internal factors: positive |
| Weaknesses (internal) | Internal factors: negative |
| Opportunities (external) | External factors: positive |
| Threats (external) | External factors: negative |
If you already have a SWOT analysis, you can use it as the basis for your context analysis. Then add how each factor affects your quality objectives. That makes the link with clause 6 (planning) concrete.
The difference is that ISO 9001 goes further: you must also name the impact on your quality system and link measures to it. A SWOT on its own is not enough for the auditor.
Scope of the quality management system (clause 4.3)
After the context, you determine the scope: what exactly does your quality management system cover?
You record the scope in writing, and it is a mandatory document (see mandatory documents for ISO 9001).
Example scope:
“The quality management system of Installatiebedrijf De Vries B.V. covers the design, installation and maintenance of electrical installations for business clients in the Noord-Holland region. Staff secondment falls outside the scope.”
Exclusions from the standard are sometimes possible (for example clause 8.3 on design, if you do no design work), but you must justify them. You cannot simply leave out requirements.
How do you keep the context analysis up to date?
The standard requires you to monitor the context and update it when things change. Link this to your annual management review: discuss whether the context is still accurate and whether new factors have emerged.
A common mistake is making the context analysis once and never touching it again. An auditor who sees the same table at recertification as three years ago will ask: “Has anyone actually looked at this?”
Next step
Now that you have described the context, move on to quality objectives (6.2), or review the full ISO 9001 step-by-step plan to certification. The requirements of all clauses are on the requirements of ISO 9001.