ISO 9001 Clause 4.3, titled “Determining the Scope of the Quality Management System,” focuses on defining the organization’s boundaries and the extent of the quality management system (QMS). It is a fundamental step in establishing and documenting the QMS, as it clarifies the quality system’s purpose, applicability, and boundaries.
Here’s what ISO 9001 Clause 4.3 Means
The scope describes what processes or parts of the company are in-bounds and out-of-bounds. This information is useful for internal auditors, registrars, and customers. Basically, anybody performing an audit is interested in the scope of the QMS.
Defining the QMS Scope
The organization needs to define the scope of its QMS, which means what parts of the organization, processes, and functions are included in the QMS. The scope should be documented and communicated within the organization. The QMS scope is a required element of documented information.
- Understanding External and Internal Factors: To determine the scope, the organization must take into account the external and internal issues referred to in Clause 4.1 of ISO 9001 that can affect its ability to achieve the QMS’s intended outcomes. These factors can include the organization’s size, industry, regulatory requirements, and the expectations of interested parties.
- The Boundaries of the QMS: The scope defines the boundaries of what is and isn’t covered by the QMS. It may exclude certain processes or functions if they are not deemed relevant to the organization’s quality management or if they are outsourced to external parties.
- Alignment with the Organization’s Purpose: The QMS scope should align with the organization’s purpose (products or services it provides) and the results it intends to achieve. It should also align with the requirements of its interested parties (customers, employees, stakeholders, etc.), as determined in clause 4.2 of ISO 9001.
- Documentation and Communication: The scope of the QMS should be documented, and this documented information should be maintained and communicated to relevant stakeholders, both within and outside the organization (see clause 7.4 communication).
- Flexibility for Change: The scope is not fixed and can be adjusted as the organization’s circumstances change. It’s important to review and, if necessary, revise the scope to ensure it remains appropriate for the organization’s objectives.
- Scope Statement: It’s common for organizations to create a formal scope statement that outlines the QMS’s boundaries, objectives, and applicable processes. This statement provides a clear and concise description of what the QMS encompasses.
Justification or Exclusions to Scope
ISO 9001 Clause 4.3 allows organizations to exclude certain standard requirements from the scope of their QMS under specific conditions. However, these exclusions must be justified and documented. Justification for exclusions typically arises when requirements do not apply to the organization’s processes or when they fall outside the scope of the QMS.
Some key points regarding justifications for exclusions include:
- Not Applicable Requirements: If certain requirements of ISO 9001 are irrelevant to the organization’s operations, products, or services, they can be excluded. For example, if a requirement applies to service organizations but not manufacturing, a manufacturing company can justify the exclusion of that requirement.
- Outsourced Processes: If an organization outsources a process or function, it can exclude the corresponding requirements from its QMS. However, the organization remains responsible for ensuring the quality of outsourced processes.
- Legal or Regulatory Exemptions: In some cases, legal or regulatory requirements might conflict with ISO 9001. In such instances, an organization can exclude ISO 9001 requirements that cannot be reconciled with legal obligations.
- Justification Documentation: To justify an exclusion, the organization must provide documented evidence of why a specific requirement is not applicable and why it is in the organization’s best interest to exclude it.
What are Valid Justifications or Exclusions to Scope?
Justification or exclusions to the scope of the Quality Management System (QMS) in ISO 9001 are important considerations that organizations must address when defining the scope of their QMS. The standard provides guidelines on how and when justifications or exclusions can be made.
- Scope Statement: When defining the scope of the QMS, organizations often include a statement that specifies the system’s boundaries and may detail any justified exclusions. This scope statement clearly and concisely describes what is included and what is excluded within the QMS.
- Implications of Exclusions: Organizations must understand that exclusions should not affect their ability to provide products or services that meet customer or statutory and regulatory requirements. They are still responsible for ensuring quality, even in areas excluded from the QMS.
- Maintaining Customer Confidence: While exclusions are allowed under ISO 9001, organizations should be cautious when considering them. Excessive or unjustified exclusions can erode customer confidence, and organizations should aim to have the broadest possible QMS coverage while ensuring effectiveness.
- External Auditing: During external audits, certification bodies review and evaluate the justification for any exclusions. If the justification is deemed valid, the certification may proceed. However, if it is insufficient or unjustified, it could lead to non-conformities.
ISO 9001 Clause 4.3 allows organizations to justify and exclude certain requirements from the QMS, but this should be done cautiously, with proper documentation and clear justification. The primary aim of exclusions is to ensure that the QMS remains relevant and applicable to the organization’s specific context and processes while maintaining a commitment to quality.
How to Audit Clause 4.3 Define & Document the QMS Scope
Auditing ISO 9001 Clause 4.3, which focuses on defining and documenting the Quality Management System (QMS) scope, involves several key steps:
- Review Documentation: Review the organization’s documented information related to the QMS scope. This may include the Quality Manual, documented procedures, process maps, and other relevant documents. If the scope is not documented, then this is a non-conformance.
- Interview Stakeholders: Interview key organizational stakeholders to understand their perspective of the QMS scope and how it aligns with their roles and responsibilities.
- Assess Consistency: Evaluate the consistency of the documented QMS scope with the organization’s products, services, processes, and objectives. Ensure that the scope accurately reflects the organization’s activities and the boundaries of its QMS.
- Alignment with Requirements: Verify that the documented information for the QMS scope aligns with ISO 9001:2015 and any other applicable standards or regulatory requirements.
- Identification of Exclusions: Determine if the organization has identified any exclusions to the QMS scope and assess the justification for these exclusions. Ensure that any exclusions are documented and aligned with the requirements of ISO 9001.
- Assessment of Clarity: Evaluate the clarity and comprehensibility of the documented QMS scope to ensure it is easily understood by relevant stakeholders within and outside the organization.
- Validation: Validate the accuracy and appropriateness of the documented QMS scope by comparing it with actual organizational practices and processes observed during the audit.
- Recommendations for Improvement: Based on the audit findings, provide recommendations for improving the clarity, accuracy, and alignment of the documented QMS scope with organizational practices and ISO 9001 requirements.
- Follow-Up: Monitor the implementation of any recommended improvements and conduct follow-up audits as necessary to verify that the documented QMS scope has been updated and improved effectively.
ISO 9001 Clause 4.3 Define & Document the QMS Scope
ISO 9001 Clause 4.3 defines and documents the scope of the QMS, including the processes, functions, and boundaries that will be covered by the system. The scope tells an ISO auditor what processes or parts of the company are in- and out-of-bounds for an audit.
The scope should be aligned with the organization’s context and purpose, and internal and external factors should be considered. It’s a fundamental step in building a quality management system that is effective and relevant to the organization’s goals and circumstances.






