Context is a critical concept introduced and used extensively in ISO 9001:2015. ISO 31000 defines context as the environment in which the organization operates and achieves its business objectives.
In ISO 9001:2015, context may also include the following:
- Culture, tone at the top, Corporate Social Responsibility (CSR) and other critical competitive attributes.
- Governance, Risk, and Compliance (GRC) business environment and management systems.
- Business environment in which the organization operates and competes.
- Business strategies, plans, and tactics developed to achieve QMS objectives.
- Product standards, guidelines, and corporate business model.
- Type of value added and services produced.
- Resources assigned to achieve QMS objectives.
- External and internal stakeholder expectations and requirements.
- Suppliers critical to the development of a sustainable business model.
Context is critical in ISO standard because it defines the type, extent, and level of controls to be developed to mitigate risks. Context also ensures a tailored risk management framework is designed and deployed.
Lesson Learned: Remember: if you master context, you can and will master RBT.