ISO9001 System Document Package (5) | Organizational Environment and Stakeholder Management Procedures (4.1/4.2)

Document Description: This procedure corresponds to Chapter 4 "Organizational Environment" of ISO 9001:2015, specifically sections 4.1 "Understanding the Organization and its Context" and 4.2 "Understanding the Needs and Expectations of Interested Parties." These are core requirements added in the 2015 version of the standard, positioned at the forefront of the quality management system (QMS). They provide input for determining strategic direction, identifying risks and opportunities, and setting quality objectives. This document specifies the responsibilities, methods, and frequency for identifying, analyzing, reviewing, and updating internal and external environmental factors and stakeholder needs and expectations, ensuring that the system remains aligned with the company's operational realities. It is applicable to all types of organizations implementing the ISO 9001 system, particularly those in manufacturing and service sectors that are growing and face rapid market changes and complex customer groups. It is also suitable for certified organizations that need to upgrade to meet the 4.1/4.2 requirements for the first time. The following is a template for the procedure document that can be directly applied; when using it, replace "本公司" with the actual name of the organization.

1. Purpose

To systematically identify, analyze, and continuously update the internal and external environmental factors of the organization, determine the relevant stakeholders and their needs and expectations, and provide input for determining strategic direction, identifying risks and opportunities, setting quality objectives, and planning the quality management system. This ensures that the QMS can adapt to environmental changes and achieve the expected results.

2. Scope

This procedure applies to the following within the scope of the organization's QMS:

1. Identification, analysis, evaluation, and updating of internal and external environmental factors (including favorable and unfavorable factors).
2. Identification of stakeholders relevant to the QMS (such as customers, employees, suppliers, shareholders, government regulatory bodies, and the general public).
3. Determination, review, transformation, and monitoring of stakeholder needs and expectations.

This procedure does not apply to the management of general business information unrelated to the QMS, but it is encouraged for departments to refer to this procedure for daily business environment analysis.

3. Responsibilities

1. General Manager: Approve the "Organizational Environment Factors Identification and Evaluation Form" and the "Stakeholder Needs and Expectations Identification Form"; chair the annual environmental and stakeholder analysis review meeting; make decisions on significant environmental factors and stakeholder requirements, and determine the response direction.
2. Management Representative (or System Principal Department): Oversee the implementation of this procedure; organize the annual identification, analysis, and evaluation of environmental factors and stakeholder needs; compile and summarize relevant records; track the implementation of response measures; and use the analysis results as input for management review.
3. Department Heads: Identify the internal and external environmental factors and stakeholder needs related to their departments; fill out the corresponding forms; participate in the annual review meeting; and implement response measures within their departmental responsibilities.
4. All Employees: When new environmental factors or significant changes in stakeholder needs are discovered in daily work, they should promptly report to their department head or the system principal department.

4. Work Procedures

4.1 Identification of Organizational Environment Information

The organizational environment is divided into internal and external environmental factors, and both favorable and unfavorable factors should be considered during identification.

1. External Environmental Factors, including but not limited to:
   • Political factors: national industrial policies, industry entry requirements, import and export controls, local support or restriction policies.
   • Economic factors: macroeconomic conditions, exchange rate fluctuations, raw material price volatility, financing environment, industry prosperity.
   • Social factors: changes in consumer habits, population structure, labor supply, societal attention to product quality and environmental protection.
   • Technological factors: new technologies, processes, materials, and trends in automation and digitalization in the industry.
   • Legal and regulatory factors: changes in laws, regulations, and standards related to products, services, environmental protection, safety, and labor.
   • Market and competition factors: changes in market demand, competitor dynamics, changes in customer structure, and the emergence of substitute products.
2. Internal Environmental Factors, including but not limited to:
   • Corporate governance and organizational structure, development strategy, and business objectives.
   • Corporate values, quality culture, employee competence, and morale.
   • Personnel capabilities, equipment and facility capabilities, technological and process levels.
   • Knowledge resources, information systems, and data management capabilities.
   • Product structure, market position, financial and operational performance.
3. Identification Methods: The system principal department should organize at least one systematic identification annually, which can be conducted through departmental seminars, questionnaire surveys, data collection, and data analysis. Departments should supplement and report new significant factors as they are discovered in daily work.
4. Identification results should be filled into the "Organizational Environment Factors Identification and Evaluation Form," noting the factor category (external/internal), specific content, source, impact direction (favorable/unfavorable), and relevant clauses.

4.2 Analysis and Evaluation of Environmental Factors

1. The system principal department should organize the analysis and evaluation of identified environmental factors, which can be conducted using SWOT analysis (strengths, weaknesses, opportunities, threats), PEST analysis, or a risk matrix, to assess their impact on achieving the expected results of the QMS.
2. Evaluation dimensions generally include: impact level (high/medium/low), likelihood of occurrence (high/medium/low), and urgency. Factors with a comprehensive evaluation of "high" are listed as significant environmental factors, and response measures must be developed with clear responsibilities and completion timelines.
3. Analysis and evaluation conclusions should be filled into the "SWOT Analysis Form" and used as important input for determining strategic direction, identifying risks and opportunities (see the "Risk and Opportunity Management Procedure"), and setting quality objectives.

4.3 Identification and Determination of Stakeholder Needs and Expectations

1. The system principal department should organize the identification of stakeholders relevant to the QMS, typically including:
   • Customers (direct customers, end-users, dealers, and agents).
   • Employees and employee representative organizations.
   • Suppliers, subcontractors, and service providers.
   • Shareholders and investors.
   • Government regulatory bodies (market regulation, environmental protection, safety supervision, taxation, etc.).
   • The general public, communities, and non-governmental organizations.
   • Industry associations, certification bodies, financial institutions, etc.
2. For each stakeholder, determine their needs and expectations related to the organization's QMS, for example:
   • Customers: products meeting requirements, timely delivery, rapid service response, reasonable prices.
   • Employees: occupational safety, training and development, reasonable compensation, open communication channels.
   • Suppliers: stable cooperation, timely settlement, transparent information.
   • Shareholders: business performance, controllable risks, sustainable development.
   • Regulatory bodies: legal compliance, quality and safety, environmental standards.
   • The general public: product quality and safety, environmental protection, social responsibility.
3. Identification results should be filled into the "Stakeholder Needs and Expectations Identification Form," noting the stakeholder name (category), main needs and expectations, impact on the organization, and corresponding control measures.

4.4 Review and Transformation of Needs and Expectations

1. The system principal department should review the identified stakeholder needs and expectations to determine:
   • Whether they are related to the QMS.
   • Whether they have been met or can be met.
   • Whether they constitute mandatory compliance obligations.
   • Whether they need to be transformed into internal requirements (such as quality objectives, product requirements, process requirements, resource needs).
2. Confirmed needs and expectations that require a response should be transformed and implemented through the following channels:
   • Those involving strategic and risk levels should be included in the "Risk and Opportunity Management Procedure" for comprehensive response.
   • Those involving objective levels should be included in the formulation and breakdown of annual quality objectives.
   • Those involving product and service requirements should be included in contract reviews and design and development inputs.
   • Those involving resource levels should be included in the planning of human resources, infrastructure, and monitoring and measurement resources.
3. For significant changes such as changes in customer requirements or updates in laws and regulations, the system principal department should promptly organize supplementary reviews to ensure the system continues to meet requirements.

4.5 Monitoring and Updating

1. The system principal department should organize a comprehensive review of environmental factors and stakeholder needs and expectations at least once a year (usually before the annual management review) and update the relevant forms.
2. Updates should be initiated immediately in the following situations:
   • Significant adjustments in the company's strategy, organizational structure, or business scope.
   • Major changes in laws, regulations, or industry standards.
   • Significant changes in customer structure or key customer requirements.
   • Occurrence of major quality incidents, major complaints, or major environmental changes.
   • Management review or internal audit proposes related improvement requirements.
3. The results of environmental and stakeholder analysis should be used as input for management review (see the "Management Review Procedure") to ensure that top management has a comprehensive understanding of the system's operating environment.

4.6 Work Flow Diagram (Text Version)

At the beginning of each year (or when significant changes occur)
        ↓
Departments identify internal and external environmental factors and stakeholder needs
        ↓
Fill out the "Organizational Environment Factors Identification and Evaluation Form" and the "Stakeholder Needs and Expectations Identification Form"
        ↓
System principal department compiles, analyzes, and evaluates (SWOT/risk matrix)
        ↓
General Manager chairs the review meeting, determines significant factors and response direction
        ↓
Develop and implement response measures (incorporated into risk, objective, and resource planning)
        ↓
Daily monitoring + annual review and update
        ↓
Results used as input for management review

5. Related Records

Form filling requirements: Factor descriptions should be specific and verifiable, avoiding generalizations (e.g., "raw material price increase" is better than "market fluctuation"); impact levels and response measures must be filled out correspondingly; forms become effective after review by the department head and approval by the management representative.

6. Related Documents

1. ISO 9001:2015 "Quality Management System Requirements" sections 4.1 and 4.2.
2. "Risk and Opportunity Management Procedure" (corresponding to standard 6.1).
3. "Quality Policy and Quality Objective Management Procedure" (corresponding to standard 5.2/6.2).
4. "Management Review Procedure" (corresponding to standard 9.3).
5. "Document Control Procedure" and "Record Control Procedure".

Usage Instructions

1. How to Modify According to the Organization's Actual Situation

1. Organizational Structure Adaptation: The responsibilities of the "Management Representative (or System Principal Department)" in the template can be combined and handled by the quality manager in small organizations, or a system promotion team led by the enterprise management department with participation from various departments can be established in medium-sized organizations. The responsibility allocation table should be consistent with the descriptions in the "Quality Manual."
2. Industry Characteristics Adaptation: Manufacturing organizations should focus on identifying internal factors such as raw material supply, equipment capability, and process stability, as well as external regulatory requirements such as environmental protection and safety supervision. Service organizations should focus on customer experience, employee turnover rates, and digital platforms. Trading organizations should focus on supply chain and exchange rate risks. Categories of factors can be added or deleted as needed, without being limited to those listed in the template.
3. Identification Frequency Adaptation: Start-up or rapidly growing organizations are advised to identify factors every six months; mature and stable organizations can do so annually. Organizations undergoing significant transformations (such as mergers and acquisitions, expansion, or new product lines) should initiate supplementary identification as needed.
4. Form Customization: For smaller organizations, the "Organizational Environment Factors Identification and Evaluation Form" and the "Stakeholder Needs and Expectations Identification Form" can be combined into a single "Environmental and Stakeholder Analysis Form," but all fields (category, content, impact evaluation, and response measures) must be retained.

2. Audit Focus Points

1. Auditors will verify whether there is documented information proving that the organization has identified internal and external environmental factors and stakeholder needs—verbal explanations without records are typically considered nonconformities.
2. The logical chain between environmental factors and risk analysis, and quality objectives, will be a key focus: whether significant adverse factors identified are included in the risk list, and whether stakeholder requirements are transformed into objectives or process requirements.
3. The update mechanism will be checked: only initial identification without updates over three years is a common evidence of system failure.
4. Management review records will be checked to ensure they include the results and conclusions of environmental and stakeholder analysis.

3. Common Errors

1. Equating Stakeholders with Customers: Identifying only customer needs and ignoring those of employees, suppliers, regulatory bodies, etc., can lead to missing compliance obligations.
2. Disconnection Between Identification and Analysis: Filling out forms without conducting impact evaluations, or evaluating without developing response measures, can result in a "two-skin" situation.
3. Focusing Only on Favorable Factors: Avoiding unfavorable factors and threats can render the analysis valueless for decision-making.
4. Untimely Updates: Failing to update identification results after strategic adjustments or regulatory changes.
5. Confusion with Risk Clauses: Sections 4.1/4.2 are about "identifying the environment and stakeholders," while section 6.1 is about "planning for risks and opportunities." They are input and output relationships and cannot be substituted for each other.
6. Copying Templates Without Application: Directly using generic analysis forms downloaded from the internet, which are not relevant to the organization's actual operations, can easily be exposed during audits.

Understand the environment, clarify stakeholders, and the system can take root in operations.

Knowledge code: 2.3.1

Version: v20260809

Author: Quality Think Tank Quality Think Tank is dedicated to providing systematic professional knowledge, methodologies, and practical tools to quality management practitioners, helping organizations continuously improve their quality capabilities.