Skip to content
State of Infosec Report 2026
Read the new report
Read the report

ISO 9001:2015 clause 8.1, Operational planning and control, requires an organisation to plan, carry out and control the processes it needs to deliver its products and services. That means setting requirements and criteria, working out the resources needed, controlling processes, keeping records, controlling changes and outsourced work, and putting into practice the actions planned under clause 6.

What does ISO 9001 clause 8.1 require?

Clause 8.1 asks you to plan and control your operational processes by doing the following:

Flow of ISO 9001 clause 8.1: set requirements and criteria, work out resources, control processes and keep records.
  • Set the requirements for your products and services.
  • Set criteria for your processes, and for deciding when a product or service is acceptable.
  • Work out the resources you need to meet the product and service requirements.
  • Control your processes in line with those criteria.
  • Keep records to the extent necessary to be confident processes ran as planned and to show that products and services meet their requirements.

The clause also says the output of this planning must suit the way your organisation operates, that planned changes are controlled and the effects of unplanned changes are reviewed and acted on, and that outsourced processes are controlled (with the detail in clause 8.4). It sits within ISO 9001 clause 8 operation, which covers the whole operational part of the standard.

Clause 8.1 requirements, what they mean and example evidence

What clause 8.1 asks for What it means in practice Example evidence
Set requirements for products and services Agree what each product or service must do or include before you start work. Specifications, contracts, order confirmations
Set criteria for processes Decide how each process should run, for example methods, settings, timings and skills. Work instructions, process maps, control plans
Set criteria for accepting products and services Define what “good” looks like before anything is released to a customer. Inspection criteria, acceptance checklists, test specifications
Work out the resources needed Make sure people, equipment, materials and time are available to meet the requirements. Capacity plans, rotas, equipment lists
Control processes against the criteria Run each process as planned and check it against the criteria you set. Completed checklists, inspection results, monitoring logs
Keep records to the extent necessary Keep enough records to show processes ran as planned and outputs met requirements. Job or batch records, test results, release approvals
Make the planning output suit your operations Use a plan format that fits how you work. Production plan, service schedule, project plan
Control planned changes and review unplanned ones Approve changes before they happen; when something changes unexpectedly, check the effects and act to limit any harm. Change requests, impact reviews, deviation records
Control outsourced processes Stay in control of work that another organisation does for you (see clause 8.4). Supplier agreements, supplier performance reviews

Clause 8.1’s Role in QMS Effectiveness

Clause 8.1 is where your quality management system (QMS) meets day-to-day work. Processes are planned, carried out under controlled conditions and adjusted when changes happen, which supports continual improvement.

ISMS.online gives you a single place to plan, record and evidence these controls.

Book a demo

How does clause 8.1 link to risks and opportunities?

Clause 8.1 is where the actions you planned under clause 6, including actions on risks and opportunities, are put into practice in your day-to-day processes. Planning in clause 6 decides what to do; clause 8.1 makes sure it happens in operations.

Why a risk-based approach helps operational control

Thinking about what could go wrong, and what could go better, helps you decide where controls are needed most. It also helps you put effort into the checks that protect product and service quality, rather than spreading it evenly.

Records that show risk actions are in place

Useful records include risk assessments, the actions agreed to address them, and any changes made to operational processes as a result.




In ISMS.online, we’ve done the hard work for you, giving you an 81% Headstart from the moment you log on.

ISO 9001 made easy

We’ve done the hard work for you, giving you an 81% Headstart from the moment you log on. All you have to do is fill in the blanks.




What records do you need for clause 8.1?

Clause 8.1 does not list fixed documents. Records form part of the documented information in your Quality Management System (QMS).

Examples of evidence an auditor or customer may ask to see

What you keep depends on your processes. Common examples include:

  • Operational plans: how you intend to carry out and monitor your processes.
  • Control records: the acceptance criteria, the checks carried out and their results.
  • Change records: planned changes, how they were approved and how they were communicated.

Keeping records under control

Whatever system you use, it helps to have:

  • Secure storage and easy retrieval of records.
  • Tracking of revisions and approvals.
  • Simple sharing across the teams that need the records.

How do customer requirements feed into clause 8.1?

The first step in clause 8.1 is setting the requirements for your products and services, and customers are a main source of those requirements. Customer communication and the detail of setting requirements sit in clause 8.2, covered in the clause 8 guide linked above, and monitoring customer satisfaction sits in clause 9.1.2.

How do you control changes and outsourced processes?

Clause 8.1 asks you to control planned changes, to review the effects of changes you did not plan and act to limit any harm, and to keep outsourced processes under control. Changes to the QMS itself are covered separately under planning of changes to the quality management system.

Managing planned and unplanned changes

To manage changes well, you can:

  • Plan the change: set out the steps, who is told and when.
  • Assess the impact: check how the change affects current operations and quality objectives.
  • Approve and record it: agree who can authorise changes and keep a record, so each change can be traced.

Keeping outsourced processes under control

Clause 8.4 sets out the detail. In practice, control often includes:

  • Clear agreements: quality requirements and responsibilities written into contracts with the supplier.
  • Checking performance: reviewing or auditing the outsourced process to confirm it meets your requirements.

Why change control protects service quality

Planning changes carefully reduces the chance of interrupting service, and keeps your operations within the arrangements your QMS has set.




ISMS.online supports over 100 standards and regulations, giving you a single platform for all your compliance needs.

ISMS.online supports over 100 standards and regulations, giving you a single platform for all your compliance needs.




How does clause 8.1 relate to quality objectives?

Quality objectives, and the plans to achieve them, are set under clause 6.2; clause 8.1 is where those plans are carried out in your operations. For how to set and plan objectives, see quality objectives and planning to achieve them.

How is clause 8.1 checked in an audit?

Clause 8.1 asks you to keep records showing that your processes ran as planned, so those records are the main evidence you can show in an audit. Internal audits are covered by clause 9.2.

An internal auditor, a certification body auditor or a customer doing due diligence may ask:

  • What are the requirements and acceptance criteria for this product or service?
  • How do you know this process ran as planned?
  • How was a recent change approved, and what happened when something changed unexpectedly?
  • How do you control the work your suppliers do for you?

What are all the ISO 9001 clauses?

For the rest of the standard, see all ISO 9001 clauses explained.

Why choose ISMS.online for clause 8.1?

ISMS.online gives you a single place to plan, record and evidence your clause 8.1 controls. It helps you:

  • Keep your QMS documentation and records in one place.
  • Update and share documents with version control.
  • Track actions through to completion.
  • Identify, assess and manage risks, so the actions you planned under clause 6 reach your day-to-day processes.
  • Record and track changes, with a clear audit trail.
  • Find the documents you need for an audit in one secure location.

To see how ISMS.online can help you plan and control your operations for ISO 9001, book a demo.

FAQs

Does clause 8.1 require a written procedure?

No. Clause 8.1 asks for records to the extent necessary, not a set procedure. A small organisation with simple processes may need far less written down than a large manufacturer, as long as it can show processes ran as planned and outputs met their requirements.


How do you plan resources and timelines under clause 8.1?

When planning resources, check capacity (can you meet demand?), skills (do people match the complexity of the work?) and availability (will resources be there when needed?). Clear deadlines help you prioritise and track progress. Useful measures include keeping to schedule, using resources without waste and meeting quality targets.


Does clause 8.1 apply to service organisations?

Yes. Clause 8.1 refers to both products and services, so a consultancy, software company or care provider plans and controls its service delivery in the same way a manufacturer plans production. The plan might be a project plan or a service schedule rather than a production plan.



This article is part of our IO educational content range and was produced using AI.

We’re a Leader in our Field

4.5/5 Stars
Users Love Us
Leader - Fall 2026
Best Software - Top 50 2026
Regional Leader - Fall 2026 UK
Regional Leader - Fall 2026 EU
Regional Leader - Summer 2026 EMEA

"ISMS.Online, Outstanding tool for Regulatory Compliance"

— Jim M.

"Makes external audits a breeze and links all aspects of your ISMS together seamlessly"

— Karen C.

"Innovative solution to managing ISO and other accreditations"

— Ben H.

Watch a platform demo

See how 1,000+ teams run their compliance frameworks in a 3-minute platform tour

platform dashboard full on mint

Ready to get started?