The business context
Key takeaways
- External issues are factors outside the organisation's control, such as regulation, market competition, technology change and the economy; internal issues are factors within it, such as its culture, resources, knowledge and existing performance.
- External and internal issues are reviewed at planned intervals, or when a significant change occurs, so the quality management system keeps reflecting the environment the organisation actually operates in.
- Interested parties include customers, employees, suppliers, regulators, owners and investors, and the wider community, and the system accounts for each one's requirements, not only the paying customer's.
- Interested parties' requirements change over time, so they are tracked deliberately rather than assumed to stay valid once identified.
- The scope statement defines which products, services, sites and processes the system covers; a clearly bounded scope is what makes the system auditable and its claims credible.
A quality management system is never built in a vacuum, it has to fit the organisation's own circumstances and the people who have a stake in it, so this unit opens with understanding that context before any process or document (the next two chapters) is designed around it.
External and internal issues
Reviewing external and internal issues
Context does not stay fixed once identified: an organisation reviews its external and internal issues at planned intervals, or when a significant change occurs, so the quality management system continues to reflect the environment it actually operates in.
Interested parties
- Customers, who receive the organisation's products or services
- Employees, who deliver the work the system governs
- Suppliers, who provide inputs the organisation depends on
- Regulators, who set legal and compliance requirements
- Owners and investors, who bear the financial stake in the organisation's performance
- The wider community, affected by the organisation's operations
Interested parties' requirements
Each interested party brings its own expectations, a customer wants a conforming product delivered reliably, a regulator wants legal compliance, an employee wants a safe and fair workplace, and the quality management system has to account for all of them, not only the paying customer's.
Reviewing interested parties' requirements
As with the wider context, interested parties' requirements change over time, a regulation is amended, a customer's expectations shift, and the organisation tracks these changes deliberately rather than assuming a requirement identified once stays valid indefinitely.
Scope of the system
The scope statement defines which products, services, sites and processes the quality management system actually covers, taking into account the issues and interested-party requirements identified above. A clearly bounded scope is what makes the system auditable (Quality Audit) and its claims credible.
Self-check
(a) Distinguish external issues from internal issues affecting an organisation, with one example of each. (2 marks)
(b) Name four interested parties relevant to an organisation and state one distinct requirement each brings. (4 marks)
(c) Explain why the requirements of interested parties are monitored and reviewed rather than fixed once identified. (2 marks)
(d) Explain what a scope statement defines and why a clearly bounded scope matters. (3 marks)
(e) A retailer's quality management system scope statement lists only its Nairobi warehouse, but the company has since opened a Mombasa branch handling the same products. Explain the risk this creates. (2 marks)
Show worked answer
(a) External issues are factors outside the organisation's control, such as the regulatory environment. Internal issues are factors within the organisation, such as its culture or resources.
(b) Customers want a conforming product delivered reliably; employees want a safe and fair workplace; suppliers want reliable payment and clear specifications; regulators want legal compliance. Any four.
(c) Requirements change over time as regulations are amended or customer expectations shift, so an organisation reviews them deliberately rather than assuming a requirement identified once stays valid indefinitely.
(d) A scope statement defines which products, services, sites and processes the quality management system actually covers. A clearly bounded scope matters because it is what makes the system auditable and its claims credible.
(e) The Mombasa branch falls outside the documented scope, so any certification or audit based on that scope statement would not actually cover it, meaning non-conformances there could go undetected and the certification could misrepresent what is actually being managed.
Exam tip
Interested parties and their requirements are usually tested together as a table-completion or matching question, pairing each interested party with its own distinct requirement rather than a generic one, a regulator's requirement is compliance, not satisfaction.