The company and its environment

In plain words

This clause asks you to be conscious of the environment your company operates in — and which parts of it affect your quality. External issues: market and competition, customer industries, regulation, technology, the labour market, supply chains. Internal issues: the knowledge and skills in the house, the machine park, culture, age structure, financial position. Determine them, keep an eye on them, review them now and then — the clause says no more than that.

It explicitly demands no strategy paper and no market study, not even necessarily a document. But it is the starting point of everything that follows: from the context flow the interested parties (4.2), the scope (4.3) and above all the risks and opportunities (6.1). Skip the context, and the QMS gets built for a company that doesn’t exist.

Since amendment A1:2024 one question is mandatory: Is climate change a relevant issue for us? The question is a duty — the answer is yours. A justified “secondary for our business” is a valid answer; no answer is not.

Why this requirement exists

The clause exists because a template QMS regularly fails: it describes an average company, not yours. The context forces the system onto reality — your customers, your bottlenecks, your strengths. Only then does the QMS become proportionate: a medical-technology supplier needs depth in different places than a painting business.

The second reason is foresight. Most quality problems announce themselves in the environment — a customer tightens supplier requirements, a key technology shifts, the labour market dries up. Whoever looks at their environment regularly sees them coming. That is exactly why 4.1 and 6.1 belong so closely together.

What good looks like

In a company of 12 people: one page, two columns — external and internal. Five to eight issues per column, concrete instead of general: not “digitalisation”, but “our two biggest customers require electronic delivery notes from 2027”. Worked out in the leadership circle, reviewed once a year in the management review (“What has changed?”) and updated on real occasions.

You recognise a good context sheet by its consequences: every important issue reappears either in the risks and opportunities (6.1), in the objectives (6.2) or in the scope (4.3). A context nothing follows from is decoration.

What changes as you grow: From around 50 people the context joins a real strategy process — market segments considered separately, a technology roadmap, competitor watching with an owner. From 100–250 people structured methods (a PESTEL analysis, say) earn their keep — but only if they are lived yearly. The core remains: few issues that really touch your business, with visible consequences.

The minimum to pass

• A traceable overview of the external and internal issues — as a section in the scope or strategy document, a table in the management review, or a short standalone sheet.
• The issues are recognisably yours, not a template’s.
• Evidence that the overview is monitored and reviewed — most naturally as a standing item of the management review.
• Since A1:2024: the climate question is answered — relevant, or secondary with a reason.

What an auditor asks for

• The context overview itself, with a visible date.
• The management-review minutes in which changes to the external and internal issues were discussed.
• The trail from issue to consequence: “You name the skilled-labour shortage — where does it appear in your risks or objectives?”
• In conversation: do leadership and the team tell the same story about the environment that the paper tells?
• The answer to the climate question — and its reasoning.

Common traps

• Platitudes. “Globalisation, digitalisation, cost pressure” — true of every company on earth, descriptive of none. Concrete issues carry names, numbers or dates.
• The copied consultant list. A context sheet that could hang just as well next door tells the auditor one thing above all: nobody thought here.
• The 30-page analysis. A PESTEL study nobody reads any more is not a better context — it is a more expensive one.
• Written once, never reviewed. The clause explicitly requires monitoring and reviewing; a sheet from three years ago with an outdated customer base stands out in an audit immediately.
• Ignoring the climate question. Since 2024 auditors ask. The answer may be plain — missing it may not.
• Confusing context with marketing. This is not a SWOT for the website; it is about the issues that affect your ability to deliver quality reliably.

Worked example

Berger Präzisionsteile GmbH (12 people, CNC machining for medical technology and machine building) keeps its context on one page inside the scope document:

The consequences are not on this sheet — they are where they belong: the machinist shortage and the knowledge monopoly are entries in the risk overview (6.1), the CO₂ questionnaires became the opportunity “capture energy data cleanly and be first in the segment to report it”, and the retirements feed the competence topic (7.2). At the yearly pass in the management review, one issue moves in, one moves out — the sheet lives.

<!-- easo:worked_example profile=service -->

At Klarwerk GmbH (IT services, 8 people) the same page looks different: externally the dependence on two cloud platforms, price pressure from big providers’ subscription models, and customers demanding security evidence; internally the remote team across two time zones and the certification of the only cloud engineer. Klarwerk answers the climate question, with reasons, as secondary — a low-energy service, data centres at the platform partner — and notes exactly that in one sentence. Same mechanics, different business.

← All ISO 9001 topics · To the knowledge hub