Your computer and eiso: how data is created and kept, and how the functions connect (diagram) Expand
① Overview: what your computer and eiso each do
Your computer (or in-house server)
- Create and keep basic data: records, results, inspections and measurement results from actual work
- Current documents and forms: manuals, procedures, guidelines and forms
- Keep outputs: Word and Excel files of eiso results (step folder\Output)
- The original files are always held and managed by your company
eiso (web and AI)
- AI writing and analysis: plans, forms, evaluations and analysis results are created and shown on screen
- Consent to save: your company chooses whether to save and where to save
- Past work: find results saved in this browser (10 per step) by date or evaluation subject and view them again
- Company Workspace (optional): stored on the server, encrypted per company, with sharing, review and approval among staff members
② How to create folders on your computer (recommended)
You only need to do this once. The folders your company creates hold the original documents and records, and the Output folders are created automatically when eiso saves.
1Create one storage folder
In File Explorer (⊞ Win + E), open "Documents", the D: drive or an in-house shared folder, create a new folder (Ctrl + Shift + N) and name it eiso Storage Folder.
2Create your company's data folders
Inside it, create a Management System folder, and inside that a 00_Documents folder and a folder for each step you operate (e.g. Context of the Organization, Risk Assessment); in each step folder, create Forms and Records.
3Choose it once in eiso
The first time you select "Save to a folder on my computer" in the operation results, choose the eiso Storage Folder, and allow the browser's request to view and save to the folder. From then on, it saves without asking.
How it looks when finished
- Storage folder you choose once
- Folders your company creates (original documents and records)
- Folders eiso creates automatically when saving (Output)
- eiso Storage FolderAnywhere: "Documents", the D: drive or an in-house shared folder
- Management SystemYour originals and records (same names as the "Recommended folder structure" in the operation guide)
- 00_DocumentsManual, procedures and guidelines (current versions)
- Context of the OrganizationSame layout for every step
- FormsCurrent forms (keep the forms and change proposals created by eiso here)
- RecordsBasic data (records, results, inspections, measurements). Designate this folder when you operate
- risk assessment
- Forms
- Records
- … for each step you operate
- Management System Operationeiso results
- risk assessment
- OutputExample: RiskAssessment_Line A press regular assessment_2026-10-22_143000.xlsx
- … for each step you save
- risk assessment
- Management system establishment · Operational data · Training materialsResults of other functions are also stored by function
- Management SystemYour originals and records (same names as the "Recommended folder structure" in the operation guide)
Creating a new folder in Windows
- Desktop
- Documents
- Local Disk (D:)
- Company Forms
- 2026 Business Plan
- eiso Storage Folder
- ① On the left, click where to put it (Documents, D: drive or a shared folder).
- ② At the top, click "New" › "Folder".
- ③ Type a name and press Enter.
| What you do | Keyboard |
|---|---|
| Open File Explorer | ⊞ Win + E |
| New folder | Ctrl + Shift + N |
| Rename | F2 |
| Copy and paste a step folder | Ctrl + C → Ctrl + V |
| Mac (Finder) new folder | ⌘ + Shift + N |
Quick way: create one step folder (including forms and records), copy and paste it, and change only the names. If several people share it, place it on an in-house shared folder (NAS). If you already use a folder, do not create a new one; choose that folder.
③ What is kept where
| Material | Where it is created | Where it is kept | Relationship with eiso |
|---|---|---|---|
| Basic data (records, results, inspections, measurements) | Your company's work | Your computer: step\Records | When you operate, designate the folder and eiso reads, processes and analyzes it (materials designated as files are not stored) |
| Operational data (records, measured values, evaluations and actions entered in or imported into the register) | Your company (register screen) | Company Workspace on the eiso server (names and content are encrypted with a per-company key; numbers, dates, measured values and judgements are kept as they are for analysis) | Status and indicators are calculated and used in the register, the operation calendar and the operational data summary of AI writing. Original files stay in your own folder. |
| Current documents and forms | Management System Establishment (eiso) → approved by your company | Your computer: 00_Documents · step\Forms | In the Documented Information Management step, the list and revision history are organized |
| eiso output (plans, evaluations, analyses, reports) | eiso(AI) | Screen → on consent to save: step\Output (Word and Excel) · saved copy in this browser · Company Workspace | What is saved in this browser or the Company Workspace is carried over by the next step, and the copy saved in this browser can be viewed again in "Past work" |
| Content being entered | Your company (input fields) | This browser (automatic, not stored on the server) | Continue writing with "Load previous input" |
④ The order for operating one step
- Accumulate the basic data of your daily work in each step folder's Records folder.
- In Operate, select a step and designate that folder (or files). In the Risk Assessment step, entering the evaluation subject name makes it easier to find later.
- Click "Write with AI" and the result appears on screen. Review the content.
- Consent to save: choose among Save in this browser, Save to a folder on my computer and Save to Company Workspace (you do not have to save).
- If needed, distribute by print, PDF or Word, and next time find it again in "Past work" by date or evaluation subject.
⑤ Download the follow-along material (PPT)
A 20-page guide to print, keep beside your computer and follow page by page. The order is creating folders (steps 1 to 8) → connecting with eiso (9 to 17) → checklist, with a confirmation box on each page.
⬇ Download the step-by-step PPT (20 pages, Korean)
On a shared PC, click "Clear all" in "Past work" when you finish. Saving to a chosen folder works in Chrome and Edge; other browsers save to the download folder. The folder names are recommendations; if you already use a folder, choose it as it is.
Following the chapter structure common to ISO standards (the Harmonized Structure, HS), AI drafts each step of the annual operation.
The steps fall into three groups: planning (context of the organization → legal requirements → risk assessment → objectives), support and operation (12 steps from measuring equipment management to compliance evaluation, including process control), and evaluation and improvement (internal audit → management review → nonconformity and corrective action).
The selected standards and industry apply to every step, and the result of a previous step becomes the input of the next.
Economic Prosperity operation 20 steps
A management system based on ISO 9001: operated along the flow of product and service realization from customer requirements (contracts) through design, purchasing, processes and nonconforming products (ISO 9001 Clause 8), and evaluated by customer satisfaction, product conformity and process performance.
Standards: ISO 9001 · ISO 22000 · ISO 13485 · ISO 19443 · IATF 16949 · ISO 21001
Steps only in this track: Contract management · Design and development management · Nonconforming product management
The detailed operation guide opens after you choose an operation track. If you choose one from the track cards above (Economic Prosperity · Social Value · ICT) or from "Operation track" below, only that track's related standards, operation points, role allocation, operation steps, what is done and produced at each step, relationship map and recommended folders are shown.
View the operation guide in detail Related standards · Role allocation · 20 operation steps (two tracks) · What is done and produced at each step · Usage examples · Fees Expand
When operating two or more standards together: choose an operation method Management system standards with the Harmonized Structure (HS)
Choose only when you operate two or more standards. If you operate a single standard, you do not need to choose, and the guide below applies as it is. Because the standards share the same Harmonized Structure (HS), you can operate them together or separately for each standard. The fee is the same either way.
- The selected standards are run as one flow using this track's 20 steps.
- Standards from two tracks (for example, ISO 9001 + ISO 45001) are used together as an "integrated management system" in the common steps only, while the Clause 8 operation steps are used separately for each track.
- Common requirements (Harmonized Structure) are written once, and requirements specific to a standard are written with the [standard name] attached.
- Registers (issues, risks, objectives, legal requirements, nonconformities) are kept as one, and each line shows the standard it applies to.
- How to use each standard separately is added at the end of the result.
- A tab for each standard's operation platform appears above Operate, and you operate one standard at a time.
- Documents, registers, numbers and the results kept in this browser are separate for each standard.
- Common requirements (Clauses 4 to 7, 9 and 10) are also written under that standard's name and scope.
- Operation results of other standards are used for reference only.
If you do not choose, the integrated operation guide is shown.
Independent operation by standard: each standard is operated separately
In Operate, if you select two or more standards and set the operation method to independent operation by standard, a tab for each standard's operation platform appears, and each platform uses that standard's 20 steps separately. If you select a standard below, that standard's operation guide is shown (the operation steps, what is done and produced at each step, and the relationship map above are the same for all standards on this track).
- Outputs and storage: Document numbers, registers and forms are separate for each standard. Step results kept in this browser are also kept separately for each standard, so the result of one standard is never carried over to a step of another standard.
- Common requirements: The common requirements of the Harmonized Structure (HS) (clauses 4 to 7, 9 and 10) are also written under the name and scope of that standard. Content that is the same as in another standard is noted in one line as "see the operation results of the other standard".
- Usage fee: Same as integrated operation. TBA for the first standard and TBA for each additional standard (one year from the payment date, excluding VAT).
- Switching to integrated operation: If you choose integrated operation above, the chosen standards are continued as one flow. A result written for a single standard is in that standard's storage, and a result written as an integration of two or more standards is in the track's common storage, so paste in the results you need and continue.
- Company Workspace: When you save to the workspace, the standard of that result is saved with it, and in independent operation the next step takes over only results saved under the same standard.
- Differences from ICT Management System Operation: How to choose the method, the operation platform tabs by standard and the storage rules are the same as for ICT. However, the standards of this track share the same 20 steps, so the operation steps, the work and outputs of each step and the relation diagram use the common guide above as they are, and only what differs by standard (the subject of management, the steps given weight, and unique requirements) is shown below. For ICT, the step names and tasks differ between ISO/IEC 42001 and ISO/IEC 27001, so a separate operation step guide for ISO/IEC 27001 is provided.
ISO 9001 (Quality) operation guide
- What is managed
- Consistently provides products and services that meet customer and legal requirements, and increases customer satisfaction.
- Steps given weight
- Specific requirements to address
- 8.2 Determination and review of requirements for products and services · 8.3 Design and development (inputs, reviews, verification, validation, changes) · 8.4 Evaluation, selection and monitoring of external providers · 8.5 Production and service provision (identification, traceability, customer property, preservation, post-delivery activities, change control) · 8.6 Release approval · 8.7 Nonconforming outputs · 7.1.5 Monitoring and measuring resources · 9.1.2 Customer satisfaction
In independent operation, add "ISO 9001" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 9001 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 22000 (Food Safety) operation guide
- What is managed
- Controls the hazards that can arise in the food chain to provide safe food.
- Steps given weight
- Specific requirements to address
- 8.2 Prerequisite programs (PRP) · 8.5 Hazard analysis and the hazard control plan (CCPs and OPRPs in HACCP) · 8.3 Traceability · 8.4 Emergency preparedness and response · 8.7 Control of monitoring and measuring · 8.8 Verification of PRPs and the hazard control plan · 8.9 Control of nonconforming products and processes (including withdrawal and recall) · 7.4.2 External communication
In independent operation, add "ISO 22000" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 22000 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 13485 (Medical Devices) operation guide
- What is managed
- Designs, produces and supplies safe and effective medical devices that meet regulatory requirements.
- Steps given weight
- Specific requirements to address
- 4.2.3 Medical device file · 7.1 Planning of product realization and risk management (ISO 14971) · 7.3 Design and development (design transfer, 7.3.9 design changes) · 7.4 Purchasing · 7.5.6 Process validation · 7.5.7 Validation of sterilization and sterile barrier systems · 7.5.8 to 7.5.9 Identification and traceability · 7.6 Monitoring and measuring equipment · 8.2.2 Complaint handling · 8.2.3 Reporting to regulatory authorities · 8.3 Nonconforming product. This standard does not follow the Harmonized Structure (HS), so the clause numbers differ.
In independent operation, add "ISO 13485" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 13485 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 19443 (Nuclear) operation guide
- What is managed
- Supplies items and services important to nuclear safety with the same quality throughout the entire supply chain.
- Steps given weight
- Specific requirements to address
- Adds nuclear sector requirements to the ISO 9001 requirements: nuclear safety culture · identification and graded control of items and services important to nuclear safety · prevention and detection of counterfeit, fraudulent and suspect items (CFSI) · flow-down of requirements to each stage of the supply chain · control of special processes and competence. Clause numbers are checked against the original text.
In independent operation, add "ISO 19443" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 19443 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
IATF 16949 (Automotive) operation guide
- What is managed
- Adds automotive customer-specific requirements (CSR) and Core Tools to ISO 9001 to prevent defects and reduce variation and waste in the supply chain.
- Steps given weight
- Specific requirements to address
- 4.4.1.2 Product safety · 6.1.2.3 Contingency plans · 7.1.5.1.1 Measurement systems analysis (MSA) · 7.2.3 Internal auditor competency · 8.3.3.3 Special characteristics · 8.3.4.4 Production part approval process (PPAP) · 8.5.1.1 Control plan · 8.5.6.1.1 Temporary change of process controls · 9.1.1.1 Monitoring and measurement of manufacturing processes · 9.1.1.2 Statistical tools (SPC) · 9.2.2.2 to 9.2.2.4 System, manufacturing process and product audits · 10.2.3 Problem solving · 10.2.4 Error proofing. Core Tools: APQP · PPAP · FMEA · SPC · MSA
In independent operation, add "IATF 16949" to document numbers, register names and table titles so that only this standard's records are used (for example, "IATF 16949 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 21001 (Educational Organizations) operation guide
- What is managed
- Provides educational products and services that meet the needs of learners and other beneficiaries.
- Steps given weight
- Specific requirements to address
- Focus on learners and other beneficiaries (4.2 · 5.1.2) · 8.2 Requirements for educational products and services (guidance on admission and enrolment conditions) · 8.3 Design and development of curricula · 8.5 Delivery of education and assessment of learning · 8.7 Nonconforming educational outputs · 7.2 Competence of faculty and instructors · 9.1.2 Satisfaction of learners, other beneficiaries and staff · Consideration for learners who need special support
In independent operation, add "ISO 21001" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 21001 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
Independent operation by standard: each standard is operated separately
In Operate, if you select two or more standards and set the operation method to independent operation by standard, a tab for each standard's operation platform appears, and each platform uses that standard's 20 steps separately. If you select a standard below, that standard's operation guide is shown (the operation steps, what is done and produced at each step, and the relationship map above are the same for all standards on this track).
- Outputs and storage: Document numbers, registers and forms are separate for each standard. Step results kept in this browser are also kept separately for each standard, so the result of one standard is never carried over to a step of another standard.
- Common requirements: The common requirements of the Harmonized Structure (HS) (clauses 4 to 7, 9 and 10) are also written under the name and scope of that standard. Content that is the same as in another standard is noted in one line as "see the operation results of the other standard".
- Usage fee: Same as integrated operation. TBA for the first standard and TBA for each additional standard (one year from the payment date, excluding VAT).
- Switching to integrated operation: If you choose integrated operation above, the chosen standards are continued as one flow. A result written for a single standard is in that standard's storage, and a result written as an integration of two or more standards is in the track's common storage, so paste in the results you need and continue.
- Company Workspace: When you save to the workspace, the standard of that result is saved with it, and in independent operation the next step takes over only results saved under the same standard.
- Differences from ICT Management System Operation: How to choose the method, the operation platform tabs by standard and the storage rules are the same as for ICT. However, the standards of this track share the same 20 steps, so the operation steps, the work and outputs of each step and the relation diagram use the common guide above as they are, and only what differs by standard (the subject of management, the steps given weight, and unique requirements) is shown below. For ICT, the step names and tasks differ between ISO/IEC 42001 and ISO/IEC 27001, so a separate operation step guide for ISO/IEC 27001 is provided.
ISO 14001 (Environment) operation guide
- What is managed
- Manages environmental aspects and compliance obligations to improve environmental performance and prevent pollution.
- Steps given weight
- Specific requirements to address
- 4.1 Environmental conditions (pollution level, availability of natural resources, climate change, biodiversity, ecosystem health) · 6.1.2 Environmental aspects (normal, abnormal and potential emergency situations, life cycle perspective, significant environmental aspects) · 6.1.3 Compliance obligations · 6.1.4 Risks and opportunities · 6.3 Planning of changes · 8.1 Operational planning and control (life cycle perspective, control of outsourced processes) · 8.2 Emergency preparedness and response (periodic testing where practicable) · 9.1.1 Monitoring (calibrated and verified equipment) · 9.1.2 Compliance evaluation
In independent operation, add "ISO 14001" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 14001 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 50001 (Energy) operation guide
- What is managed
- Continually improves energy performance, including energy efficiency, use and consumption.
- Steps given weight
- Specific requirements to address
- 6.3 Energy review (significant energy uses, SEU) · 6.4 Energy performance indicators (EnPI) · 6.5 Energy baseline (EnB) · 6.6 Planning for collection of energy data · 8.1 Operational control (operating criteria for SEUs) · 8.2 Design · 8.3 Procurement · 9.1 Demonstration of improvement in energy performance
In independent operation, add "ISO 50001" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 50001 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 45001 (Occupational Health and Safety) operation guide
- What is managed
- Prevents work-related injury and ill health and creates a safe and healthy workplace.
- Steps given weight
- Specific requirements to address
- 5.4 Consultation and participation of workers · 6.1.2 Hazard identification and assessment of risks · 6.1.3 Legal requirements · 8.1.2 Eliminating hazards and reducing OH&S risks (hierarchy of controls: elimination → substitution → engineering → administrative → personal protective equipment) · 8.1.3 Management of change · 8.1.4 Procurement (contractors and outsourcing) · 8.2 Emergency preparedness and response · 9.1.2 Compliance evaluation · 10.2 Incidents, nonconformities and corrective action (investigation with worker participation)
In independent operation, add "ISO 45001" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 45001 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 37001 (Anti-bribery) operation guide
- What is managed
- Establishes a system to prevent, detect and respond to bribery.
- Steps given weight
- Specific requirements to address
- Bribery risk assessment · Anti-bribery compliance function (independence and authority) · Employment procedures and due diligence on personnel · Anti-bribery training and awareness · Due diligence on business associates · Financial and non-financial controls · Management of gifts, hospitality and donations · Raising concerns (reporting) and prohibition of retaliation · Investigation and handling. Clause numbers differ by edition (2016 · 2025), so they are checked against the original text.
In independent operation, add "ISO 37001" to document numbers, register names and table titles so that only this standard's records are used (for example, "ISO 37001 Risk and Opportunity Register"). Results of other standards operated by the same organization are used for reference only.
ISO 37301 (Compliance) operation guide
- What is managed
- Meets compliance obligations and builds a compliance culture to prevent violations.
- Steps given weight
- Specific requirements to address
- 4.5 Compliance obligations · 4.6 Compliance risk assessment · 5.1.2 Compliance culture · 5.3.2 Compliance function · 7.3 Awareness · 8.3 Raising concerns · 8.4 Investigation processes · 9.1 Monitoring compliance performance
In independent operation, add "ISO 37301" to document numbers, registers and table titles and use only this standard's own items (for example, "ISO 37301 Risks and opportunities register"). Results from other standards operated by the same organization are used for reference only.
ISO 22301 (Business Continuity) Operation Guide
- What is managed
- Even if business is disrupted, the organization continues and recovers its key products and services at a defined level.
- Steps given weight
- Specific requirements to address
- 8.2 Business impact analysis (BIA) and risk assessment · 8.3 Business continuity strategies and solutions · 8.4 Business continuity plans and procedures (response structure, warning, communication, recovery) · 8.5 Exercise program · 8.6 Evaluation of business continuity documentation and capabilities (including partners and suppliers)
In independent operation, add "ISO 22301" to document numbers, registers and table titles and use only this standard's own items (for example, "ISO 22301 Risks and opportunities register"). Results from other standards operated by the same organization are used for reference only.
Economic Prosperity Operation: Related Standards and Operating Points
The Economic Prosperity track is based on ISO 9001 (quality) and operates the flow of creating products and services from customer requirements through to delivery and after delivery (Clause 8, product and service realization). Food safety (ISO 22000), medical devices (ISO 13485), nuclear (ISO 19443), automotive (IATF 16949) and educational organizations (ISO 21001) are standards that add sector requirements to this flow, so within the same 20 steps the requirements specific to each standard are handled together. Performance is viewed through customer satisfaction, product conformity and process performance.
Operation flow
- Planning (1-6) 1 Context of the Organization · 2 Policy · 3 Roles and Responsibilities (R&R) · 4 Legal Requirements · 5 Risk Assessment · 6 Objectives
- Support (7-10) 7 Monitoring and Measuring Equipment · 8 Competence · 9 Control of Documented Information · 10 Control of Documented Information of External Origin
- Operation · ISO 9001 Clause 8 (11-15) 11 Contract Management · 12 Design and Development · 13 Supplier Management · 14 Process Control · 15 Control of Nonconforming Outputs
- Evaluation and improvement (16-20) 16 Analysis and Evaluation · 17 Internal Audit · 18 Management Review · 19 Nonconformity and Corrective Action · 20 Improvement
| Standard | What it manages | Steps given weight | Requirements specific to the standard to handle at each step (clauses) |
|---|---|---|---|
| ISO 9001Quality | Consistently provides products and services that meet customer and legal requirements, and increases customer satisfaction. | 7 Monitoring and Measuring Equipment 11 Contract Management 12 Design and Development 13 Supplier Management 14 Process Control 15 Control of Nonconforming Outputs 16 Analysis and Evaluation | 8.2 Determination and review of requirements for products and services · 8.3 Design and development (inputs, reviews, verification, validation, changes) · 8.4 Evaluation, selection and monitoring of external providers · 8.5 Production and service provision (identification, traceability, customer property, preservation, post-delivery activities, change control) · 8.6 Release approval · 8.7 Nonconforming outputs · 7.1.5 Monitoring and measuring resources · 9.1.2 Customer satisfaction |
| ISO 22000Food safety | Controls the hazards that can arise in the food chain to provide safe food. | 5 Risk Assessment 7 Monitoring and Measuring Equipment 13 Supplier Management 14 Process Control 15 Control of Nonconforming Outputs 16 Analysis and Evaluation | 8.2 Prerequisite programs (PRP) · 8.5 Hazard analysis and the hazard control plan (CCPs and OPRPs in HACCP) · 8.3 Traceability · 8.4 Emergency preparedness and response · 8.7 Control of monitoring and measuring · 8.8 Verification of PRPs and the hazard control plan · 8.9 Control of nonconforming products and processes (including withdrawal and recall) · 7.4.2 External communication |
| ISO 13485Medical devices | Designs, produces and supplies safe and effective medical devices that meet regulatory requirements. | 4 Legal Requirements 7 Monitoring and Measuring Equipment 12 Design and Development 13 Supplier Management 14 Process Control 15 Control of Nonconforming Outputs | 4.2.3 Medical device file · 7.1 Planning of product realization and risk management (ISO 14971) · 7.3 Design and development (design transfer, 7.3.9 design changes) · 7.4 Purchasing · 7.5.6 Process validation · 7.5.7 Validation of sterilization and sterile barrier systems · 7.5.8 to 7.5.9 Identification and traceability · 7.6 Monitoring and measuring equipment · 8.2.2 Complaint handling · 8.2.3 Reporting to regulatory authorities · 8.3 Nonconforming product. This standard does not follow the Harmonized Structure (HS), so the clause numbers differ. |
| ISO 19443Nuclear | Supplies items and services important to nuclear safety with the same quality throughout the entire supply chain. | 1 Context of the Organization 8 Competence 13 Supplier Management 14 Process Control 15 Control of Nonconforming Outputs | Adds nuclear sector requirements to the ISO 9001 requirements: nuclear safety culture · identification and graded control of items and services important to nuclear safety · prevention and detection of counterfeit, fraudulent and suspect items (CFSI) · flow-down of requirements to each stage of the supply chain · control of special processes and competence. Clause numbers are checked against the original text. |
| IATF 16949Automotive | Adds automotive customer-specific requirements (CSR) and Core Tools to ISO 9001 to prevent defects and reduce variation and waste in the supply chain. | 7 Monitoring and Measuring Equipment 12 Design and Development 13 Supplier Management 14 Process Control 15 Control of Nonconforming Outputs 17 Internal Audit | 4.4.1.2 Product safety · 6.1.2.3 Contingency plans · 7.1.5.1.1 Measurement systems analysis (MSA) · 7.2.3 Internal auditor competency · 8.3.3.3 Special characteristics · 8.3.4.4 Production part approval process (PPAP) · 8.5.1.1 Control plan · 8.5.6.1.1 Temporary change of process controls · 9.1.1.1 Monitoring and measurement of manufacturing processes · 9.1.1.2 Statistical tools (SPC) · 9.2.2.2 to 9.2.2.4 System, manufacturing process and product audits · 10.2.3 Problem solving · 10.2.4 Error proofing. Core Tools: APQP · PPAP · FMEA · SPC · MSA |
| ISO 21001Educational organizations | Provides educational products and services that meet the needs of learners and other beneficiaries. | 1 Context of the Organization 8 Competence 11 Contract Management 12 Design and Development 14 Process Control 15 Control of Nonconforming Outputs 16 Analysis and Evaluation | Focus on learners and other beneficiaries (4.2 · 5.1.2) · 8.2 Requirements for educational products and services (guidance on admission and enrolment conditions) · 8.3 Design and development of curricula · 8.5 Delivery of education and assessment of learning · 8.7 Nonconforming educational outputs · 7.2 Competence of faculty and instructors · 9.1.2 Satisfaction of learners, other beneficiaries and staff · Consideration for learners who need special support |
This track has no Emergency Preparedness and Response or Compliance Evaluation step. ISO 22000 emergency preparedness and response (8.4) and IATF 16949 contingency plans (6.1.2.3) are handled in 14 Process Control, and confirmation that legal and regulatory requirements (ISO 13485 regulatory requirements, food-related laws and regulations) are met is handled in 4 Legal Requirements and 16 Analysis and Evaluation.
When several standards are selected together, common requirements are written once, and lines that apply to only one standard are prefixed with the standard name, as in [ISO 22000]. 15 Control of Nonconforming Outputs covers the nonconforming outputs (products and services) of the standards in this track: nonconforming product for ISO 13485 (8.3), potentially unsafe products and withdrawal/recall for ISO 22000 (8.9), and nonconforming educational outputs for ISO 21001 (8.7).
Points often missed
- Contract review (11) is done before accepting an order and again when the contract changes. Keep confirmation records for telephone and verbal orders as well.
- A company that does not carry out design and development (12) keeps the justification for excluding it from the scope.
- For external providers (13), do not stop at the initial evaluation; define the re-evaluation cycle and performance monitoring.
- Nonconforming products (15) are dealt with through to disposition (rework, concession, scrap); cause analysis and prevention of recurrence are done in 19 Nonconformity and Corrective Action.
- If a measuring instrument (7) is found faulty, evaluate whether earlier results measured with it are still valid.
Clause numbers may differ depending on the edition of the standard. Check them against the text of the standard. Step numbers are the numbers within this track.
Social Value Operation: Related Standards and Operating Points
The Social Value track combines environmental protection and social justice and operates mainly around compliance obligations and the risks of environmental aspects, hazards, corruption, compliance and business disruption. Participation and consultation of workers and interested parties (ISO 45001 5.4), operational control (ISO 14001 and 45001 8.1), emergency response (8.2) and compliance evaluation (9.1.2) are the pillars of operation, and performance is viewed through legal compliance, environmental performance, incidents and accidents, and interested parties' trust.
Operation flow
- Planning (1-6) 1 Context of the Organization · 2 Policy · 3 Roles and Responsibilities (R&R) · 4 Legal Requirements · 5 Risk Assessment · 6 Objectives
- Participation and support (7-11) 7 Participation, Consultation and Communication · 8 Monitoring and Measuring Equipment · 9 Competence · 10 Control of Documented Information · 11 Control of Documented Information of External Origin
- Operation · ISO 14001 and 45001 Clause 8 (12-14) 12 Supplier and Contractor Management · 13 Operational Control · 14 Emergency Preparedness and Response
- Evaluation and improvement (15-20) 15 Analysis and Evaluation · 16 Compliance Evaluation · 17 Internal Audit · 18 Management Review · 19 Nonconformity and Corrective Action · 20 Improvement
| Standard | What it manages | Steps given weight | Requirements specific to the standard to handle at each step (clauses) |
|---|---|---|---|
| ISO 14001Environment | Manages environmental aspects and compliance obligations to improve environmental performance and prevent pollution. | 1 Context of the Organization 4 Legal Requirements 5 Risk Assessment 12 Supplier and Contractor Management 13 Operational Control 14 Emergency Preparedness and Response 16 Compliance Evaluation | 4.1 Environmental conditions (pollution level, availability of natural resources, climate change, biodiversity, ecosystem health) · 6.1.2 Environmental aspects (normal, abnormal and potential emergency situations, life cycle perspective, significant environmental aspects) · 6.1.3 Compliance obligations · 6.1.4 Risks and opportunities · 6.3 Planning of changes · 8.1 Operational planning and control (life cycle perspective, control of outsourced processes) · 8.2 Emergency preparedness and response (periodic testing where practicable) · 9.1.1 Monitoring (calibrated and verified equipment) · 9.1.2 Compliance evaluation |
| ISO 50001Energy | Continually improves energy performance, including energy efficiency, use and consumption. | 5 Risk Assessment 6 Objectives 8 Monitoring and Measuring Equipment 12 Supplier and Contractor Management 13 Operational Control 15 Analysis and Evaluation | 6.3 Energy review (significant energy uses, SEU) · 6.4 Energy performance indicators (EnPI) · 6.5 Energy baseline (EnB) · 6.6 Planning for collection of energy data · 8.1 Operational control (operating criteria for SEUs) · 8.2 Design · 8.3 Procurement · 9.1 Demonstration of improvement in energy performance |
| ISO 45001Occupational health and safety | Prevents work-related injury and ill health and creates a safe and healthy workplace. | 5 Risk Assessment 7 Participation, Consultation and Communication 12 Supplier and Contractor Management 13 Operational Control 14 Emergency Preparedness and Response 16 Compliance Evaluation 19 Nonconformity and Corrective Action | 5.4 Consultation and participation of workers · 6.1.2 Hazard identification and assessment of risks · 6.1.3 Legal requirements · 8.1.2 Eliminating hazards and reducing OH&S risks (hierarchy of controls: elimination → substitution → engineering → administrative → personal protective equipment) · 8.1.3 Management of change · 8.1.4 Procurement (contractors and outsourcing) · 8.2 Emergency preparedness and response · 9.1.2 Compliance evaluation · 10.2 Incidents, nonconformities and corrective action (investigation with worker participation) |
| ISO 37001Anti-bribery | Establishes a system to prevent, detect and respond to bribery. | 5 Risk Assessment 7 Participation, Consultation and Communication 9 Competence 12 Supplier and Contractor Management 13 Operational Control 19 Nonconformity and Corrective Action | Bribery risk assessment · Anti-bribery compliance function (independence and authority) · Employment procedures and due diligence on personnel · Anti-bribery training and awareness · Due diligence on business associates · Financial and non-financial controls · Management of gifts, hospitality and donations · Raising concerns (reporting) and prohibition of retaliation · Investigation and handling. Clause numbers differ by edition (2016 · 2025), so they are checked against the original text. |
| ISO 37301Compliance | Meets compliance obligations and builds a compliance culture to prevent violations. | 4 Legal Requirements 5 Risk Assessment 7 Participation, Consultation and Communication 9 Competence 16 Compliance Evaluation 19 Nonconformity and Corrective Action | 4.5 Compliance obligations · 4.6 Compliance risk assessment · 5.1.2 Compliance culture · 5.3.2 Compliance function · 7.3 Awareness · 8.3 Raising concerns · 8.4 Investigation processes · 9.1 Monitoring compliance performance |
| ISO 22301Business continuity | Even if business is disrupted, the organization continues and recovers its key products and services at a defined level. | 5 Risk Assessment 12 Supplier and Contractor Management 13 Operational Control 14 Emergency Preparedness and Response 15 Analysis and Evaluation | 8.2 Business impact analysis (BIA) and risk assessment · 8.3 Business continuity strategies and solutions · 8.4 Business continuity plans and procedures (response structure, warning, communication, recovery) · 8.5 Exercise program · 8.6 Evaluation of business continuity documentation and capabilities (including partners and suppliers) |
This track has no Contract Management, Design and Development or Control of Nonconforming Outputs step. Customer and interested-party requirements are handled in 1 Context of the Organization and 4 Legal Requirements; the life cycle perspective of ISO 14001 and 45001, elimination of hazards at the design stage (8.1) and ISO 50001 design (8.2) are handled in 13 Operational Control; and deviations from operating criteria, accidents and incidents are handled in 19 Nonconformity and Corrective Action.
When several standards are selected together, common requirements are written once, and lines that apply to only one standard are prefixed with the standard name, as in [ISO 45001]. If a social justice standard (ISO 37001, 37301 or 22301) is selected, the Clause 8 controls and procedures of that standard are used as the operating criteria in 13 Operational Control, and if ISO 37001 or 37301 is selected, a channel for raising concerns (reporting) must be included in 7 Participation, Consultation and Communication.
Points often missed
- For environmental aspects (5), consider not only normal operation but also abnormal and emergency situations and the life cycle (from raw material purchase to disposal).
- Workers take part in occupational health and safety risk assessment (5), and countermeasures are set in the order of the hierarchy of controls (starting with elimination).
- Consultation (7) means hearing workers' opinions before a decision; participation means taking part in the decision together. Keep records of both.
- Do not stop at having an emergency response (14) procedure: conduct drills and revise the procedure based on the drill results.
- Compliance evaluation (16) keeps evidence and results for every item in the legal requirements list (4).
Clause numbers may differ depending on the edition of the standard. Check them against the text of the standard. Step numbers are the numbers within this track.
Division of roles: eiso plans, your computer holds basic data, and eiso performs the overall analysis
| eiso: Plan | Your computer: actual work and basic data | eiso: processing, analysis and synthesis of information |
|---|---|---|
| eiso prepares the plan and criteria for each step, proposed changes to forms and documents (procedures and guidelines), and draft tables and checklists. | Your company does its actual work with the revised forms and accumulates basic data (records, results, inspections, measurement results) on your own computer (or in-house server). You do not need to do totalling or analysis separately. | When you operate, if you specify the folder (or file) for that step, eiso processes (organizes and totals), analyzes (against objectives and criteria, trends, causes) and synthesizes (judgment, action, next plan) the basic data. Files are read only inside the browser, are not sent to the server and are not stored. |
Yearly operation flow: plan and forms in eiso → work and basic data on your computer → specify the folder when you operate → eiso processes, analyzes and synthesizes, and revises the plan and forms. The Output begins with "Processing, analysis and synthesis of basic data" and ends with "Basic data to accumulate on your computer" (data, form, folder, person in charge, cycle).
Recommended folder structure: what your computer does in each step and the basic data to designate to eiso Expand
Management System\00_Documents: manual, procedures and guidelines (current versions). Under each step folder, keep a Forms folder (current forms) and a Records folder (basic data).
| Step | Recommended folder | What is done on your computer (basic data) | Materials to designate during operation (analyzed by eiso) |
|---|---|---|---|
| 1 | Management System\Context of the Organization | Compile business plans and management results; gather opinions from customers, partners and employees | Business plan, previous year's management analysis and KPI results, customer and partner opinions, organization chart |
| 2 | Management System\Legal Requirements | Carry out permits, statutory notifications and statutory inspections; check for changes in laws | List of permits and notifications, statutory inspection and measurement records, current list of legal requirements |
| 3 | Management System\Risk Assessment | Site inspections and risk assessment meetings; carry out the actions decided | Current risk assessment tables (environmental aspects table, occupational risk assessment table, PFMEA, control plan), process flow chart, material balance (raw materials, emissions), permit and measurement records, accident and near-miss records, action results |
| 4 | Management System\Objectives | Compile objective results and monthly reports; carry out action plans | Objectives and KPI register, monthly results, action plan progress table |
| 5 | Management System\Monitoring and Measuring Equipment | Request calibration and receive certificates; carry out verification; display calibration status | Instrument register, calibration certificates, verification records |
| 6 | Management System\Competence | Conduct education, competence evaluation and recognition | Education and training results, competence recognition records, competence evaluation table (excluding personal information) |
| 7 | Management System\Control of Documented Information | Create, revise and distribute documents; retain and dispose of records | Document list (master list), revision history, distribution records, records retention list |
| 8 | Management System\Control of Documented Information of External Origin | Obtain standards, laws and customer documents; confirm and distribute the latest versions | External document list, receipt and distribution records |
| 9 | Management System\Contract Management | Review quotations, orders and contracts; handle customer change requests | Contract review forms, contract and order register, customer change request records |
| 10 | Management System\Design and Development | Carry out design reviews, verification and validation; handle design changes | Design plan, review, verification and validation records, design change records |
| 11 | Management System\Supplier Management | Supplier evaluation and re-evaluation; incoming inspection | Approved supplier list, supplier evaluation forms, incoming inspection records |
| 12 | Management System\Process Control | Operate according to the control plan and work standards; process and daily inspections; handle changes | Control plan and QC process chart, work standards, process and daily inspection records, change records |
| 13 | Management System\Control of Nonconforming Outputs | Identify, segregate and dispose of nonconforming products (rework, concession, scrap) | Nonconformity register, disposition records |
| 14 | Management System\Emergency Preparedness and Response | Conduct emergency drills; inspect emergency equipment | Emergency response plan, drill result report, emergency equipment inspection checklist |
| 15 | Management System\Analysis and Evaluation | Measure indicators and compile data; customer satisfaction surveys | KPI results, customer satisfaction survey results, process and supplier performance data |
| 16 | Management System\Compliance Evaluation | Confirm compliance with each law and gather evidence | Legal requirements list, measurement and inspection results, permit status, previous compliance evaluation results |
| 17 | Management System\Internal Audit | Conduct audits (interviews, on-site verification) and record results | Audit materials, customer company forms, statement of applicability, previous audit results, audit records (in the Internal Audit box below) |
| 18 | Management System\Management Review | Hold management review meetings; carry out decisions | Summary of results of each step, minutes of previous management review, performance data |
| 19 | Management System\Nonconformity and Corrective Action | Investigate causes, carry out actions and verify effectiveness | Nonconformity and corrective action request forms, investigation records, evidence of action results |
| 20 | Management System\Participation, Consultation and Communication | Hold consultative body meetings; carry out communication; receive and handle reports of concerns | Consultative body minutes, communication records (notices, training, external replies), register of reported concerns |
| 21 | Management System\Improvement | Carry out improvement tasks and verify their effect; horizontal deployment of good practices | Management review minutes and decisions, corrective action results, objectives (KPI) results, improvement suggestions and audit observations |
| 22 | Management System\Policy | Review, approve and sign the policy; post, announce and train on it; confirm understanding | Business plan and management philosophy, existing policy (2015 edition, etc.), organization chart and process flow, management review decisions, policy posting and training records |
| 23 | Management System\Roles and Responsibilities (R&R) | Review, approve and announce the roles and responsibilities table; update it when the organization is reorganized; training by role | Organization chart, existing roles and responsibilities table and job descriptions, process map, list of projects and sites, status of statutory appointments |
Folder names are recommendations. If you already use a folder, specify it as it is. The Company Workspace is where plans, documents and analysis results created by eiso are kept only when you want them kept. Original files (checklists, certificates, name lists, etc.) stay on your computer. Records, measured values and actions that you enter directly in the operating data register are stored encrypted per company in the Company Workspace (eiso server).
Operation steps Expand
Operation steps
The twenty steps in each track are linked to one another: the result of an earlier step becomes the input of the next (for example, issues and requirements from Context of the Organization → compliance obligations in Legal Requirements → Risk Assessment). Choose and click the step you want to proceed with. For a standard with a pass, all 20 steps of that track are available, and you do not pay separately for each step.
You may use a single step on its own; if this is your first time, go in order starting from 1 Context of the Organization. If you use two or more steps, the steps share results. Results kept in this browser (or saved in the Company Workspace) are taken over by other steps. In the Internal Audit step you can also do a virtual audit, a Q&A with an AI auditor.
Economic Prosperity: 20 Steps
- 1Context of the OrganizationHS 4.1 to 4.3Starting step · Feeds back to ⑱ · ⑳Select this step ›
- 2PolicyHS 5.1, 5.2← Takes over results of ① · Feeds back to ⑱ · ⑳Select this step ›
- 3Roles and Responsibilities (R&R)HS 5.3← Takes over results of ① · ② · Feeds back to ⑱ · ⑳Select this step ›
- 4Legal RequirementsHS compliance obligations (e.g. ISO 14001, 45001 6.1.3)← Takes over results of ① · Feeds back to ⑱Select this step ›
- 5Risk AssessmentHS 6.1← Takes over results of ① · ③ · ④ · Feeds back to ⑯ · ⑱ · ⑲Select this step ›
- 6ObjectivesHS 5.2, 6.2← Takes over results of ① · ② · ③ · ④ · ⑤ · Feeds back to ⑱ · ⑳Select this step ›
- 7Monitoring and Measuring EquipmentHS 7.1 · ISO 9001 7.1.5← Takes over results of ① · ⑤ · Feeds back to ⑯Select this step ›
- 8CompetenceHS 7.2, 7.3← Takes over results of ① · ② · ③ · ④ · ⑤ · Feeds back to ⑲Select this step ›
- 9Control of Documented InformationHS 7.5← Takes over results of ① · ② · ③ · ④Select this step ›
- 10Control of Documented Information of External OriginHS 7.5.3← Takes over results of ④ · ⑨Select this step ›
- 11Contract ManagementHS 8.1 · ISO 9001 8.2← Takes over results of ① · ④ · ⑤Select this step ›
- 12Design and DevelopmentHS 8.1 · ISO 9001 8.3← Takes over results of ④ · ⑤ · ⑪Select this step ›
- 13Supplier ManagementHS 8.1 · ISO 9001 8.4← Takes over results of ④ · ⑤ · ⑪ · ⑫Select this step ›
- 14Process ControlHS 8.1, 6.3 · ISO 9001 8.5, 8.6← Takes over results of ③ · ④ · ⑤ · ⑥ · ⑦ · ⑧ · ⑨ · ⑪ · ⑫ · ⑬Select this step ›
- 15Control of Nonconforming OutputsISO 9001 8.7← Takes over results of ⑦ · ⑪ · ⑬ · ⑭Select this step ›
- 16Analysis and EvaluationHS 9.1← Takes over results of ⑤ · ⑥ · ⑦ · ⑪ · ⑬ · ⑭ · ⑮Select this step ›
- 17Internal AuditHS 9.2← Takes over results of ① · ③ · ④ · ⑤ · ⑭ · Feeds back to ⑲Select this step ›
- 18Management ReviewHS 9.3← Takes over results of ① · ④ · ⑤ · ⑥ · ⑧ · ⑬ · ⑮ · ⑯ · ⑰ · Feeds back to ⑲ · ⑳Select this step ›
- 19Nonconformity and Corrective ActionHS 10.2← Takes over results of ⑤ · ⑪ · ⑮ · ⑯ · ⑰ · ⑱Select this step ›
- 20ImprovementHS 10.1← Takes over results of ⑥ · ⑯ · ⑰ · ⑱ · ⑲Select this step ›
Social Value: 20 Steps
- 1Context of the OrganizationHS 4.1 to 4.3Starting step · Feeds back to ⑱ · ⑳Select this step ›
- 2PolicyHS 5.1, 5.2← Takes over results of ① · Feeds back to ⑱ · ⑳Select this step ›
- 3Roles and Responsibilities (R&R)HS 5.3← Takes over results of ① · ② · Feeds back to ⑱ · ⑳Select this step ›
- 4Legal RequirementsHS compliance obligations (e.g. ISO 14001, 45001 6.1.3)← Takes over results of ① · Feeds back to ⑯ · ⑱Select this step ›
- 5Risk AssessmentHS 6.1← Takes over results of ① · ③ · ④ · Feeds back to ⑦ · ⑮ · ⑱ · ⑲Select this step ›
- 6ObjectivesHS 5.2, 6.2← Takes over results of ① · ② · ③ · ④ · ⑤ · Feeds back to ⑦ · ⑱ · ⑳Select this step ›
- 7Participation, Consultation and CommunicationISO 45001 5.4 · HS 7.4← Takes over results of ① · ② · ③ · ④Select this step ›
- 8Monitoring and Measuring EquipmentHS 7.1 · ISO 9001 7.1.5← Takes over results of ① · ⑤ · Feeds back to ⑮Select this step ›
- 9CompetenceHS 7.2, 7.3← Takes over results of ① · ② · ③ · ④ · ⑤ · ⑦ · Feeds back to ⑲Select this step ›
- 10Control of Documented InformationHS 7.5← Takes over results of ① · ② · ③ · ④Select this step ›
- 11Control of Documented Information of External OriginHS 7.5.3← Takes over results of ④ · ⑩Select this step ›
- 12Supplier and Contractor ManagementHS 8.1 · ISO 9001 8.4← Takes over results of ④ · ⑤ · ⑦Select this step ›
- 13Operational ControlHS 8.1, 6.3 · ISO 9001 8.5, 8.6← Takes over results of ③ · ④ · ⑤ · ⑥ · ⑦ · ⑧ · ⑨ · ⑩ · ⑫Select this step ›
- 14Emergency Preparedness and ResponseISO 14001, 45001 8.2← Takes over results of ④ · ⑤ · ⑦ · ⑨ · ⑬Select this step ›
- 15Analysis and EvaluationHS 9.1← Takes over results of ⑤ · ⑥ · ⑧ · ⑫ · ⑬ · ⑭Select this step ›
- 16Compliance EvaluationISO 14001, 45001 9.1.2← Takes over results of ④ · ⑬ · ⑮Select this step ›
- 17Internal AuditHS 9.2← Takes over results of ① · ③ · ④ · ⑤ · ⑦ · ⑬ · ⑯ · Feeds back to ⑲Select this step ›
- 18Management ReviewHS 9.3← Takes over results of ① · ④ · ⑤ · ⑥ · ⑦ · ⑨ · ⑫ · ⑮ · ⑯ · ⑰ · Feeds back to ⑲ · ⑳Select this step ›
- 19Nonconformity and Corrective ActionHS 10.2← Takes over results of ⑤ · ⑦ · ⑭ · ⑮ · ⑯ · ⑰ · ⑱Select this step ›
- 20ImprovementHS 10.1← Takes over results of ⑥ · ⑦ · ⑮ · ⑯ · ⑰ · ⑱ · ⑲Select this step ›
Tasks and outputs by step Expand
| Step | HS clauses | What you do | Output (example) |
|---|---|---|---|
| Context of the Organization (Operation) Economic Prosperity 1 · Social Value 1 | 4.1~4.3 | Determine the internal and external issues of the organization (including whether climate change is a relevant issue), interested parties and their requirements, and the scope of the management system. | Internal and external issues table (PESTEL, SWOT) Interested parties and requirements table (marking what the management system will address) Scope statement |
| Legal Requirements Identification Economic Prosperity 4 · Social Value 4 | Compliance obligations (e.g. ISO 14001, 45001 6.1.3) | Identify and register the laws and regulations and other requirements the company must comply with (compliance obligations), and set the compliance evaluation plan (method, cycle, evaluator). The actual evaluation is done in the Compliance Evaluation step (Social Value track). Only the names of laws are given, so check provisions and penalties against the original text of the law. | Compliance obligations register: laws and requirements / related activities / person in charge / review cycle Compliance evaluation table Where to check (National Law Information Center, etc.) indicated |
| Risk Assessment Economic Prosperity 5 · Social Value 5 | 6.1 | Based on the issues and requirements identified in 1 Context of the Organization, determine the risks and opportunities to address, evaluate them with the assessment table suited to the selected standard, and set actions. | Assessment tables by standard: ISO 9001 risks and opportunities, ISO 14001 environmental aspects and impacts, ISO 45001 risk assessment, ISO 37001 bribery risk, ESG double materiality Action plan (action, responsibility, deadline, method of checking effectiveness) |
| Objective Setting Economic Prosperity 6 · Social Value 6 | 5.2·6.2 | Establish objectives consistent with the policy at relevant functions and levels (departments, ranks), and for each objective plan what will be done, the resources, the responsible person, the completion time and the method of evaluating results. | Draft policy (including commitments by standard) Objectives and key performance indicators (KPI) table: formula, measurement cycle, responsible department, deadline Action plan for achieving objectives |
| Monitoring and Measuring Equipment Control Economic Prosperity 7 · Social Value 8 | 7.1 · ISO 9001 7.1.5 | Register the instruments used for monitoring and measurement and manage them by setting calibration and verification cycles. If an instrument is found out of calibration, evaluate whether results measured with it are valid. | Measuring instrument register: control no. / equipment / measurement range and resolution / process of use / calibration cycle and body / next calibration date Calibration and verification plan and acceptance criteria Action record when an out-of-calibration finding occurs (evaluation of the validity of earlier measurement results) |
| Competence Recognition Economic Prosperity 8 · Social Value 9 | 7.2·7.3 | Determine the competence (education, training, experience, qualifications) needed for each job, evaluate whether each person meets it, and recognize their competence. Where it is lacking, close the gap through education and training and check its effectiveness. | Competence criteria table by job: job / education / training / experience / qualifications and licences / method of recognition Competence recognition status table: met or lacking / action / validity period Education and training plan and effectiveness evaluation |
| Documented Information Control Economic Prosperity 9 · Social Value 10 | 7.5 | Establish the documentation system and numbering, and control the creation, review, approval, distribution, revision and disposal of documents. For records, set storage, protection and retention periods. | List of documents: document number / document title / revision / effective date / owner / distribution Records retention schedule: record / related clause / retention period / storage location and medium / disposal method Flow for preparing, revising and distributing documents, and access rights and backup for electronic documents |
| Documented Information of External Origin Economic Prosperity 10 · Social Value 11 | 7.5.3 | Identify and register documents received from outside, such as standards, laws, customer drawings and specifications, and supplier materials. Check regularly that they are the latest version, distribute them where needed, and withdraw superseded editions. | List of external documents: document title / issuer / edition or revision date / date received / managing department / method and frequency of latest-version checks / distribution Procedure for checking the latest version (standards, laws, customer portals) Records of receipt, review, distribution and withdrawal |
| Contract Management Economic Prosperity 11 | 8.1 · ISO 9001 8.2 | Before a quotation, order or contract, determine the customer requirements (statutory requirements, delivery date, quality, special requirements) and review whether they can be met. Contract changes and communication with customers are also controlled. | Contract review checklist: review item / what is checked / result Contract register: contract number / customer / product or service / quantity and delivery date / special requirements / review date / change history Contract change control flow and records of customer communication |
| Design and Development Control Economic Prosperity 12 | 8.1 · ISO 9001 8.3 | Plan design and development in stages and determine the inputs (requirements). After review, verification and validation, approve the outputs (design results) and control design changes. If design and development are not carried out, state the justification for excluding it from the scope (the reason it may be excluded). | Design and development plan: stage / activity / deliverable / review, verification and validation / responsibility / schedule List of design inputs and outputs, and a template for review meeting minutes Records of design change control |
| Supplier Management Economic Prosperity 13 · Social Value 12 (supplier and subcontractor management) | 8.1 · ISO 9001 8.4 | Evaluate and select external providers (suppliers and subcontractors), monitor their performance and re-evaluate them. Also determine how the products and services received will be verified and which requirements are to be communicated to suppliers. | Supplier evaluation and selection criteria: evaluation item / points / pass criterion Approved supplier list: supplier / supplied item / grade / evaluation date / re-evaluation cycle Supplier performance evaluation form, and incoming inspection and verification methods |
| Process Control Economic Prosperity 14 · Social Value 13 (operational control) | 8.1·6.3 · ISO 9001 8.5·8.6 | Organize the process flow, and turn the actions determined in risk assessment and legal requirements identification (compliance obligations) into operational control criteria for each process and task (control item, criterion, method, frequency, person in charge, record). This also covers work standards, validation of special processes (processes whose results cannot be fully verified by inspection after production), identification and traceability, and release approval. Planned changes and unintended changes are also controlled (including the former "control plan"). | Process flow chart and operational control criteria (QC process chart, control plan): process or task / control item / criterion / method and frequency / person in charge / record / action on abnormality List of work standards, validation plan for special processes, and criteria for identification, traceability and release approval Change control table: review of the consequences of planned and unintended changes |
| Nonconforming Product Control Economic Prosperity 15 | ISO 9001 8.7 | Applies only to the Economic Prosperity track (based on ISO 9001). Under the standards of this track (ISO 9001, IATF 16949, ISO 13485, ISO 19443, ISO 22000 and ISO 21001), products and services that do not conform to requirements (nonconforming products) are identified and segregated so that they are not used or delivered unintentionally. Handling such as rework, concession and scrapping, and approval and re-verification, are kept as records. Corrective action to eliminate the cause, and nonconformities under other standards such as environment and occupational health and safety, are dealt with in the Nonconformity and Corrective Action step. | Criteria for handling nonconforming products: type / authority to decide / handling (rework, repair, concession, scrapping, return) / approval / customer notification Nonconforming product register: date of occurrence / process or item / description / quantity / handling / re-verification / whether corrective action is needed Methods of identification and segregation marking |
| Emergency Preparedness and Response Social Value 14 | ISO 14001·45001 8.2 | Identify emergency situations such as fire, leaks, explosions, power failure, natural disasters and information leakage, and determine response procedures, communication channels and equipment. Conduct drills regularly and revise the procedures based on the results. | Emergency situation identification table: emergency situation / location or process / potential impact / likelihood / response level Emergency response procedure: initial response / communication channels / equipment and resources / recovery / notification of external bodies Drill plan and evaluation of results |
| Analysis and Evaluation Economic Prosperity 16 · Social Value 15 | 9.1 | Determine what to monitor and measure, when and how, and analyze the data collected (achievement of objectives, customer satisfaction, processes, suppliers, nonconformities, etc.) to evaluate the performance and effectiveness of the management system. | Monitoring and measurement table: subject / indicator and formula / method / frequency / person in charge / criterion Data analysis results: trends, comparison with objectives, causes Evaluation conclusions and improvement opportunities, and inputs to management review |
| Compliance Evaluation Social Value 16 | ISO 14001·45001 9.1.2 | Regularly evaluate, using evidence (materials showing that requirements are being met), whether the legal requirements registered in legal requirements identification and other requirements are actually being met. Take action on those not met and record the compliance status. | Compliance evaluation table: legal or other requirement / summary of requirement / applicable subject / evaluation method / evidence / result (compliant, partially compliant, noncompliant, to be confirmed) / action Compliance evaluation plan: frequency and evaluators Records of actions on noncompliance, and inputs to management review |
| Internal Audit Economic Prosperity 17 · Social Value 17 | 9.2 | Establish an audit program and audit plan for conducting internal audits at planned intervals, audit using checklists and report the results. | Annual internal audit program and audit plan (scope, criteria, auditors, schedule) Checklists by clause and process Audit report and nonconformity reports |
| Management Review Economic Prosperity 18 · Social Value 18 | 9.3 | Organize the input materials so that top management reviews the suitability, adequacy and effectiveness of the management system at planned intervals, and record the decisions. | Organization of management review inputs: previous actions, changes in issues and interested parties, performance (objectives, nonconformities, monitoring, audit results), opportunities for improvement Management review report: decisions, needed changes, resources List of follow-up actions |
| Nonconformity and Corrective Action Economic Prosperity 19 · Social Value 19 | 10.2 | Deal with nonconformities, find and eliminate their causes to prevent recurrence, and verify the effectiveness of the actions. | Nonconformity report (what happened, impact, immediate action) Cause analysis (5 Whys, cause-and-effect diagram) Corrective action plan and records of effectiveness verification |
| Participation, Consultation and Communication Social Value 7 | 5.4·7.4 | Determine the subjects and methods of participation and consultation by workers and interested parties (occupational safety and health committee, labor-management council, etc.), prepare an internal and external communication plan covering what, when, to whom, how and by whom, and set up channels for raising concerns and reporting, with a ban on retaliation. | Participation and consultation table: matters for consultation (ISO 45001 5.4 d) / matters for participation (5.4 e) / forum and method / frequency / records Internal and external communication plan: what / when / to whom / how / by whom (HS 7.4) Channels for raising concerns and reporting, and handling procedure (ISO 37001 8.9 · ISO 37301 8.3) |
| Improvement Economic Prosperity 20 · Social Value 20 | 10.1 | Find opportunities for improvement from management review decisions, corrective action results, objective performance and audit observations, judge them in terms of suitability, adequacy and effectiveness, set improvement tasks (person in charge, deadline, resources, performance indicator) and carry them out, verify the effect and standardize, and feed the results back into the context of the organization and objectives of the next cycle. Elimination of the causes of nonconformities is dealt with in the Nonconformity and Corrective Action step. | Improvement judgment table: viewpoint (suitability, adequacy, effectiveness, strategic alignment) / judgment / basis Objective achievement and list of improvement opportunities: source / improvement opportunity / expected effect / priority Improvement task register: task / person in charge / deadline / resources / performance indicator (current → target) / effect verification / status |
| Policy Establishment Economic Prosperity 2 · Social Value 2 | 5.1·5.2 | Compare the context of the organization, the business direction, the vision of top management and the policy requirements of the selected standards (editions) to establish a management policy for each standard and, if there are two or more standards, an integrated management policy. If an existing policy is in place, analyze the gap against the 2015 edition and propose a revision. Communicate the policy in three stages: declaration, training and monitoring. The Objective Setting step takes over the policy and uses it as the framework for objectives. | Situation analysis report: characteristics of the industry and processes / top 3 key risks / opportunities / relevance to climate change / key requirements of the standard Management policy (per standard and integrated): title / full text of the policy / signature field for top management / date of establishment or revision and applicable standard edition, and a policy comparison table Policy gap analysis and revision proposal (where an existing policy is in place), communication plan for dissemination: declaration and publication / training and internalization / monitoring and feedback |
| Roles and Responsibilities Economic Prosperity 3 · Social Value 3 | 5.3 | Compare the organization chart, existing roles and responsibilities tables, job descriptions, and process, project and site materials with the requirements of Clause 5 (especially 5.3) of the selected standards (editions), and prepare roles, responsibilities and authorities by department, job, process, project and site, together with a RACI matrix. Map the standard clauses to departments, identify missing responsibilities, overlaps and statutory appointments, and propose improvement tasks. Objectives, risks, competence and internal audit take over these roles and responsibilities. | Roles and responsibilities table (by unit): unit / role (position) / main tasks / responsibility / authority / reporting line / related standard and clause RACI matrix and mapping of standard clauses to departments: task or process / top management / management system manager / R, A, C, I by department 5.3 gap analysis and preparation for statutory appointments: clause / requirement / current status / gap / improvement task / priority |
Economic Prosperity Operation: Interrelationship of Steps The inputs and outputs of the 20 steps, shown in figures and diagrams Expand
The 20 steps of Economic Prosperity Operation are not separate functions but one connected management system. The connections are determined on the basis of ISO 9001 (Clause 8, product and service realization) and the requirements of ISO 9001, 14001 and 45001. The result (output) of one step becomes the input of the next, and management review decisions (9.3.3), nonconformities and corrective action (10.2) and analysis results (9.1) feed back to earlier steps to correct the next cycle. In the diagram below, when you select a step, only the inputs it receives (green) and the outputs it sends (blue) are shown, and the reason for each connection (standard clause) appears below.
Select a step by clicking it or by pressing Tab and then Enter, and below you will see where that step receives inputs from and where it sends outputs to.
Overview: the steps each step receives from and sends to
Hover over a number to see what is handed over through that connection and its basis. Orange numbers are feedback (later step → earlier step); selecting a line selects that step in the diagram above.
View in detail as a grid (receiving step × sending step) Expand
Chart: input and output table for the 20 steps of Economic Prosperity
Rows = receiving step, columns = sending step. ● Input received from an earlier step · ◆ Input returned from a later step (feedback). The rightmost column shows the number of inputs received and the bottom row shows the number of outputs sent. Hover over a cell to see the reason for that link (standard clause).
| Receiving step ＼ Sending step | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | Number of inputs |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Context of the Organization (Operation) | ◆ | ◆ | 2 | ||||||||||||||||||
| Policy Establishment | ● | ◆ | ◆ | 3 | |||||||||||||||||
| Roles and Responsibilities | ● | ● | ◆ | ◆ | 4 | ||||||||||||||||
| Legal Requirements Identification | ● | ◆ | 2 | ||||||||||||||||||
| Risk Assessment | ● | ● | ● | ◆ | ◆ | ◆ | 6 | ||||||||||||||
| Objective Setting | ● | ● | ● | ● | ● | ◆ | ◆ | 7 | |||||||||||||
| Monitoring and Measuring Equipment Control | ● | ● | ◆ | 3 | |||||||||||||||||
| Competence Recognition | ● | ● | ● | ● | ● | ◆ | 6 | ||||||||||||||
| Documented Information Control | ● | ● | ● | ● | 4 | ||||||||||||||||
| Documented Information of External Origin | ● | ● | 2 | ||||||||||||||||||
| Contract Management | ● | ● | ● | 3 | |||||||||||||||||
| Design and Development Control | ● | ● | ● | 3 | |||||||||||||||||
| Supplier Management | ● | ● | ● | ● | 4 | ||||||||||||||||
| Process Control | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | 10 | ||||||||||
| Nonconforming Product Control | ● | ● | ● | ● | 4 | ||||||||||||||||
| Analysis and Evaluation | ● | ● | ● | ● | ● | ● | ● | 7 | |||||||||||||
| Internal Audit | ● | ● | ● | ● | ● | ◆ | 6 | ||||||||||||||
| Management Review | ● | ● | ● | ● | ● | ● | ● | ● | ● | ◆ | ◆ | 11 | |||||||||
| Nonconformity and Corrective Action | ● | ● | ● | ● | ● | ● | 6 | ||||||||||||||
| Improvement | ● | ● | ● | ● | ● | 5 | |||||||||||||||
| Number of outputs | 11 | 4 | 6 | 11 | 11 | 4 | 3 | 2 | 2 | 0 | 6 | 2 | 4 | 3 | 3 | 5 | 3 | 8 | 5 | 5 |
- Output produced by AI is a draft for reference, to be used after your company reviews and approves it. It does not guarantee certification results.
- On eiso, AGENT does not artificially prepare or review the documents of a specific company (for implementation consulting and training, separate from eiso, see Management System Establishment and Training Inquiries).
Selecting the standard and operation steps
When you select the standard to operate, a draft of the work for the selected steps is written to fit that standard's requirements. The requirements consist of the clauses and subclauses of the common chapter structure used by ISO standards (the harmonized structure, HS) and the requirements specific to each standard (for example, ISO 14001: environmental aspects and compliance evaluation; ISO 45001: risk assessment and worker participation).
If you select several standards, common requirements are written once, and standard-specific requirements are written separately with the standard name attached. Pass per standard: it is not sold by step and is not paid in advance.
If you click "Write with AI" for a standard without a pass, the cost is shown first, and if you agree, payment is made on the spot and writing continues.
Until AI writing is connected, please leave a message via "Contact staff".After entering your input, click "Write with AI". If you agree to the cost notice, the payment screen opens, and after payment you return to this page and continue with your input as it was.
The output appears after the document completeness check (80 points). On-screen payment (card, simple payment) is being prepared. Before then, or if you prefer a bank transfer, click "Contact staff". A staff member will explain the amount and the payment method, and will open access after confirming the deposit (eiso Pricing).
* AI-generated output is a reference draft and does not guarantee certification.: AGENT eiso.co.kr
