_1762866128417-DS2_OO1j.png)
Internal and external issues
| Type | Examples |
|---|---|
| External | Market and competition, laws and standards, technology, economic situation, supply chains, social expectations, climate change |
| Internal | Values and culture, knowledge and competence, resources, organisational structure, IT landscape, process performance |
Only issues that actually influence results are relevant. A list of generic keywords such as “digitalisation” does not help much. A specific statement is better, for example: “Two key accounts require electronic delivery documents from 2027.”
Methods
- SWOT: strengths and weaknesses (internal) and opportunities and threats (external) in four quadrants. Simple and sufficient for most SMEs.
- PESTEL: go systematically through political, economic, social, technological, environmental and legal influences.
- Workshop with management: one or two hours a year are often enough if the results are recorded and used.
The standard does not prescribe a method. What matters is that the result is traceable and feeds into planning of risks and opportunities and objectives.
Climate change as an issue
Since Amendment 1:2024, organizations must explicitly determine whether climate change is a relevant issue; in the 2026 edition this is part of the main text. What is required is a justified decision, not a carbon footprint. Details are under ISO 9001:2026 climate change.
Common mistakes
- Creating the analysis once for certification and never looking at it again.
- Listing issues without deriving risks, opportunities or objectives.
- Leaving the analysis to the quality department without involving management.
Implementing it in docxpert
The “Context and interested parties” template in the template library has sections for internal and external issues, interested parties and, for the 2026 edition, the climate change review. After approval you map the document to clause 4.1 and see coverage in the gap analysis.
Frequently asked questions
Does the context have to be documented?
ISO 9001 does not require documented information for 4.1. Without a written result, however, it is hard to show in an audit that issues are determined and monitored.
How often should the context analysis be updated?
The standard sets no interval. A review before management review and when significant changes occur is common practice.
What is the difference between context and interested parties?
Context describes issues and influences; [interested parties](content:term-interested-parties) are people or organizations with requirements. Both are closely linked and often analysed together.
Is a SWOT analysis enough?
For many small and medium-sized companies yes, if it is specific, updated regularly and feeds into risks, opportunities and objectives.