At a glance
ISO 9001 scope statement guide: define QMS boundaries, covered products and services, applicability decisions, and defensible evidence.
- Focus: ISO 9001 scope statement · ISO 9001 Clause 4.3
- Read time: 11 minutes
- Updated: August 30, 2026
The Short Answer: Define the Boundary Before You Defend It
An ISO 9001 scope statement should make the boundary of the quality management system understandable to the people who use it, audit it, buy from the organization, or rely on its results. Under the current published edition, ISO 9001:2015 Clause 4.3 addresses determining the scope of the quality management system. The useful question is not “How short can this statement be?” It is: which products, services, activities, locations, and process interfaces must the QMS reliably govern—and why?
ISO identifies ISO 9001:2015 as the current published edition and describes ISO 9001 as a framework that sets QMS requirements without prescribing one operating method. Use the controlled current edition and the organization’s applicable customer, statutory, regulatory, and sector requirements for scope decisions. A revised ISO 9001 edition is expected in September 2026; do not describe anticipated wording as a present requirement before the published text is available. ISO’s current ISO 9001 overviewISO’s current ISO 9001 overviewhttps://www.iso.org/standard/62085.html is the public reference point.
Reader snapshot: A defensible QMS scope connects the organization’s real operating boundary to its products and services, relevant requirements, process interfaces, and any reasoned applicability decision. Start with evidence, not a marketing sentence.
What a QMS Scope Decision Needs to Answer
The scope statement is a concise output of a wider decision. It should not be drafted in isolation from the organization’s context, interested parties, process map, and customer commitments. A statement can be brief while the underlying reasoning is careful.
| Decision area | Question to test | Evidence that may help |
|---|---|---|
| Organizational boundary | Which legal entity, business unit, location, remote activity, or shared service is within the QMS boundary? | Organization chart, site list, process ownership, service agreements, certification scope where relevant. |
| Products and services | What does the organization actually provide that the QMS is intended to control? | Product and service catalogue, contracts, order review, process map, customer commitments. |
| Relevant requirements | Which customer, statutory, regulatory, industry, or internal requirements shape the QMS boundary? | Requirement register, contract review, regulatory assessment, customer specifications. |
| Process interfaces | Which outsourced, shared, upstream, or downstream activities can affect the intended result? | Supplier controls, handoff map, responsibility matrix, service-level agreements. |
| Applicability reasoning | If a requirement is considered not applicable, what factual basis supports that conclusion without affecting conformity of products and services? | Process analysis, product or service characteristics, customer requirements, documented rationale. |
This is a practical decision record, not a mandated form or wording pattern. ISO’s public explanation emphasizes that ISO 9001 provides a framework rather than a prescribed operating method. The level of documentation should fit the organization’s complexity and risk, while still allowing a competent reader to understand the boundary and the reasoning behind it.
A Four-Part Scope Record That Prevents Ambiguity
Stay Current
ISO expects the next edition in September 2026. Get source-checked weekly briefings.
Use four connected records before approving a scope statement. This approach helps avoid two common failures: a statement that sounds polished but does not match actual operations, and a long explanation that never reaches a clear boundary.
1. Map the operating boundary
Start with what the organization controls in practice. Identify sites, remote teams, shared functions, and externally provided processes that can affect the products or services within scope. Do not assume that an activity is outside the QMS merely because it is off-site, automated, performed by another legal entity, or supported by an external provider. The relevant question is whether the organization must control the interface to achieve intended results and meet applicable requirements.
2. Name the covered products and services
Use the words customers and operational teams use. A scope statement that says “quality services” gives little help. A statement that identifies the actual service family, manufactured product range, or defined support activity gives a reader something that can be traced to processes, customer requirements, and performance evidence.
Avoid turning the statement into a catalogue. The goal is enough precision to show the nature of the covered outputs and their boundary, not every product code or every internal task.
3. Test relevant requirements and interfaces
Compare the proposed scope with real commitments. Check contracts, tenders, regulated activities, customer specifications, outsourced processes, and shared services. An interface does not disappear because another party performs work; the organization still needs a way to manage the effect that interface has on its own QMS results.
The ISO 9001 supplier-management guideISO 9001 supplier-management guide/article/iso-9001-2026-supplier-management-clause-8-4 can help a team examine how external-provider controls connect to a scope decision. Use it as current-edition preparation rather than a prediction of final 2026 requirements.
4. Record applicability reasoning separately from the headline statement
Where the organization concludes that a requirement is not applicable, retain the reason with the supporting process evidence. A blanket statement such as “not relevant to us” is usually less useful than a short explanation tied to the organization’s products, services, process responsibilities, and ability to provide conforming outputs. Recheck the conclusion when the operating model, customer commitments, technology, or product and service range changes.
| Weak shortcut | Better decision test | Practical output |
|---|---|---|
| “This department is outside the scope because it is small.” | Can its work affect the product, service, customer commitment, or QMS process result? | Defined boundary and interface control. |
| “The supplier owns that activity, so it is outside our QMS.” | What effect can the external activity have on the organization’s intended result, and how is the interface controlled? | Supplier and process-interface evidence. |
| “This requirement does not apply.” | What factual feature of the products, services, and processes makes it not applicable, and can conformity still be achieved? | Dated applicability rationale. |
| “The certificate scope is the QMS scope.” | Does the public certification wording match actual controlled processes and current commitments? | Reconciled scope statement and process map. |
Draft the Statement Only After the Evidence Is Clear
Once the boundary is understood, draft a short statement that names the organization or operating unit, the covered product or service activity, and the main boundary where helpful. Then test it against a real customer order, service delivery, production route, or process handoff.
For example, a service organization might state that its QMS covers the delivery of a defined professional service from named operating locations. The supporting record would then identify how it controls remote delivery, customer-specific requirements, externally provided tools, and activities not included in the boundary. The wording itself is not an assurance of conformity; the evidence behind it is what makes the statement credible.
Warning
Do not turn future-edition expectations into scope criteria:: Until ISO 9001:2026 is published, do not use reported draft changes as the basis for a conformity claim, certification decision, or statement that a current QMS “meets” future requirements. Use the current edition and update the impact assessment after the final text is available.
Audit Questions That Follow the Scope Into Real Work
Use these prompts to test whether the declared scope matches how the organization operates. They are adaptable questions, not an audit checklist prescribed by ISO.
| Audit focus | Question | Evidence path |
|---|---|---|
| Boundary | “Show me one activity included in the QMS and one interface at its edge.” | Trace the process map, site or team responsibility, and handoff controls. |
| Products and services | “How does the scope wording relate to what customers actually receive?” | Compare the statement with contracts, orders, catalogues, service descriptions, and delivery records. |
| Requirements | “Which relevant requirements influenced this boundary?” | Review contract or regulatory assessment, customer-specific controls, and applicable obligation records. |
| External processes | “How is an external or shared activity controlled where it affects the intended result?” | Follow the supplier, shared-service, or outsourced-process interface into evidence. |
| Applicability | “What is the factual basis for any requirement judged not applicable?” | Review the rationale, underlying process facts, and whether customer or conformity obligations remain protected. |
The ISO 9001 internal audit questions guideISO 9001 internal audit questions guide/article/iso-9001-internal-audit-questions-guide provides broader process-based prompts. For a controlled starting point, the email-gated ISO 9001 Gap Analysis TemplateISO 9001 Gap Analysis Template/resources/gap-analysis-template can help a team locate context, process, and evidence records before a review.
When to Revisit the Scope
Treat the scope as a controlled decision that may need review when facts change. A new site, acquired business, removed service, changed customer commitment, new regulated activity, redesigned product, material outsourcing arrangement, or substantial change in shared services can all justify revisiting the boundary. The ISO 9001 planning-of-changes guideISO 9001 planning-of-changes guide/article/iso-9001-planning-of-changes-guide explains how to record that review around the result at risk rather than treating it as a document-only update.
The current ISO 9001 version guidecurrent ISO 9001 version guide/article/iso-9001-current-version-2026 and ISO 9001 transition guideISO 9001 transition guide/article/how-to-transition-iso-9001-2015-to-2026 explain how to keep that review grounded in current published criteria while preparing a controlled impact assessment for a future edition.
Frequently Asked Questions
What is an ISO 9001 scope statement?
It is the documented expression of the boundaries of an organization’s quality management system. A useful statement identifies what the QMS covers and is supported by evidence about products and services, operating context, relevant requirements, process interfaces, and applicability decisions.
Does ISO 9001 require a specific scope-statement template?
Do not assume one wording template is mandatory. ISO 9001 provides a QMS framework rather than a prescribed operating method. The statement and supporting evidence should be appropriate to the organization’s actual operations and applicable requirements.
Can an outsourced process be outside the ISO 9001 scope?
The answer depends on the actual boundary and the effect of that process on the organization’s products, services, and intended QMS results. Do not treat outsourcing alone as a reason to ignore the interface; document how its relevant effect is controlled.
How often should a QMS scope be reviewed?
Review it when facts that support the boundary change, such as the products or services offered, sites, customer commitments, responsibilities, process interfaces, or applicable requirements. A fixed interval may be useful internally, but the necessary review should follow meaningful change.
Will ISO 9001:2026 change scope requirements?
The final published wording is not yet available. Use ISO 9001:2015 for current clause-level decisions and conduct a controlled impact assessment only after the new edition and relevant guidance are published.
Official Sources and Related Resources
- ISO 9001:2015 catalogue record and current-edition overviewISO 9001:2015 catalogue record and current-edition overviewhttps://www.iso.org/standard/62085.html.
- ISO: ISO 9001 explainedISO: ISO 9001 explainedhttps://www.iso.org/home/insights-news/resources/iso-9001-explained.html.
- ISO/TC 176 quality management and quality assurance committeeISO/TC 176 quality management and quality assurance committeehttps://www.iso.org/committee/53882.html.
- ISO 9001 supplier-management guideISO 9001 supplier-management guide/article/iso-9001-2026-supplier-management-clause-8-4.
- ISO 9001 planning-of-changes guideISO 9001 planning-of-changes guide/article/iso-9001-planning-of-changes-guide.
- ISO 9001 internal audit questions guideISO 9001 internal audit questions guide/article/iso-9001-internal-audit-questions-guide.
- ISO 9001 current-version guideISO 9001 current-version guide/article/iso-9001-current-version-2026.
- ISO 9001 transition guideISO 9001 transition guide/article/how-to-transition-iso-9001-2015-to-2026.
- Free ISO 9001 Gap Analysis TemplateFree ISO 9001 Gap Analysis Template/resources/gap-analysis-template.