Q#        ISO 9001:2015 Clause                                     Audit Question                                Audit Evidence
8.1q1     The organization shall plan, implement and control       How are processes needed to meet              Documented information to show processes have been
          the processes, as outlined in 4.4, needed to meet        requirements for provision of products and    carried out as planned and can demonstrate conformity of
          requirements for the provision of products and           services planned, implemented and             products and services.
          services and to implement the actions determined         controlled?
          in 6.1, by:                                              How are requirements for products and
          a) determining requirements for the product and          services determined?
          services;                                                How is criteria for processes and
          b) establishing criteria for the processes and for the   acceptance for products and services
          acceptance of products and services;                     determined?
          c) determining the resources needed to achieve           How are resources determined?
          conformity to product and service requirements;          How is process control implemented?
          d) implementing control of the processes in              Show me the documented information
          accordance with the criteria;                            that shows confidence in that the processes
          e) retaining documented information to the extent        have been carried out as planned and can
          necessary to have confidence that the processes          demonstrate conformity of products and
          have been carried out as planned and to                  services.
          demonstrate conformity of products and services to
          requirements.
8.1q2     The output of this planning shall be suitable for the    How have you determined that the output
          organization's operations.                               from the planning process is suitable for
                                                                   your operations?
8.1q3     The organization shall control planned changes           How do you control planned changes? How
          and review the consequences of unintended                do you review the consequences of
          changes, taking action to mitigate any adverse           unintended changes? What action is taken
          effects, as necessary.                                   to mitigate any adverse effects?
8.1q4     The organization shall ensure that outsourced            How do you control outsourced processes?
          processes are controlled in accordance with 8.4.
          8.2 Determination of requirements for products and services
          8.2.1 Customer communication
8.2.1q1   The organization shall establish the processes for       What are your processes for communicating
          communicating with customers in relation to:             with customers? How do you communicate
          a) information relating to products and services;        information relating to:
          b) enquiries, contracts or order handling, including     Products;
          changes;                                                 Services;
          c) obtaining customer views and perceptions,             Enquiries;
          including customer complaints;                           Contracts;
          d) the handling or treatment of customer property, if    Order handling;
          applicable;                                              Customer views, perceptions and
          e) specific requirements for contingency actions,        complaints;
          when relevant.                                           Handling or treatment of customer property;
                                                                   Specific requirements for contingency
                                                                   actions?
          8.2.2 Determination of requirements related to products and services
                                                                                             Page 12