Policy, objectives & standards

Shows the valid quality policy, the description of the quality culture, the quality management lead and the quality objectives with target, actual, traffic light and goal achievement. Trend and actions are visible in the objective.

Creates a quality objective with metric, unit, direction, starting value and target value, tolerance for the amber traffic light, due date, owner, process, actions and standard clauses.

Records the scope, products and services, sites, quality culture, internal and external issues (for example climate change or digital technologies) with effect and relevance, and interested parties with their expectations and monitoring.

Shows roles with tasks, authorities, role holder and deputy, the responsibility matrix (RACI) across all active processes and the org chart from the organisation data.

Shows for each clause (number and own short title, without standard text) the evidence from processes, documents, objectives, context and roles, the coverage (covered, partly, open, not applicable) and the overall coverage level and the level per main clause.

Shows the standard mapping for each active standard or active own standard: clauses with number and our own short title, evidence, coverage per clause, overall coverage level and coverage per main clause. Without a choice, ISO 9001 applies.

Defines which standards are tracked in the standard mapping (always ISO 9001, plus ISO 14001, ISO 45001, ISO 27001, ISO 21001 and EFQM) and creates own standards with a short name and name.

Maintains the clauses of an own standard: create, change number and short title, reorder, delete and import as a CSV file (Number;Title). Also the short name, name, description and active flag.

Places the active standards with a common harmonised structure side by side: for each clause number the coverage (sub-clauses) or the coverage level (main clauses). Standards with their own structure appear with their overall coverage level. Authorised people transfer evidence to clauses with the same numbers in another standard.

Checklist for the move to the 2026 edition: revision topics in our own words with status (open, in progress, done), note and link to a document, process or action, progress in per cent, end of the transition period and a list of documents and processes whose text still refers to the 2015 edition of ISO 9001.

Creates a PDF “Evidence per clause” for the selected standard: coverage level, for each clause the applicability with justification, assessment, evidence with type and status (valid or active) and gaps, and at the end the list of open gaps.

Shows the registers of the integrated management system in tabs: register of legal and other requirements, assets and protection needs, environmental aspects, hazard assessment and the status of the Statement of Applicability.

Shows a legal or other requirement (act, ordinance, standard, contract, official requirement, customer or internal rule) with its reference, your own summary, applicability, compliance, review interval and linked processes, documents and environmental aspects. Assessing compliance sets the next review to the assessment date plus the review interval.

Lists all information security control numbers with our own short title. For each control: applicable or not (with justification), implementation status, evidence, documents and responsibility. “Create list” creates all missing numbers once; the export produces an Excel file.

Shows an asset (information, application, system, device, room, service provider, person) with confidentiality, integrity and availability (normal, high, very high). The protection need is the highest of the three values. Personal data and sensitive personal data are flagged; links to risks, processes and incidents are visible.

Shows a hazard by work area and activity with category, likelihood and severity of harm (each 1–5). The risk is likelihood × severity, with the traffic light of the risk matrix from the QMS settings. Protective measures are ordered by priority (substitute, technical, organisational, personal); the residual risk must not be higher than the initial risk.

Shows an environmental aspect with activity, impact, condition (normal, abnormal, emergency), life-cycle stage, frequency and severity. An aspect is significant if frequency × severity is at least 12, it is legally relevant or it has a severity of 4 or more in an emergency. Actions and linked requirements are visible.