Clause 4 Context of the Organisation. In this series our consultants look at ISO's Annex SL, a clause structure already used in ISO 27001 and ISO 22301 but now arriving in ISO 14001:2015 and ISO 9001:2015.

1. Annex SL: Context
ISO 14001:2015
ISO 9001:2015
ISO 27001:2013
ISO 22301:2011

2. Introduction
Assent Risk Management has been implementing ISO
standards based on Annex SL for some time with ISO
22301 and ISO 27001 both using it.
(see: http://www.slideshare.net/rjc211/annex-sl-training-for )
We believe the annex SL structure makes ISO standards
much more adaptable for the organisation and therefore
much more effective.
This series aims to expand the concepts of the 10 Annex
SL clauses for those implementing new Standards such as
ISO 14001:2015 or ISO 9001:2015.

3. Clause 4: Context of the
Organisation
Annex SL puts greater emphasis on understanding the organisation,
which has the following benefits:
• Ensures those implementing the standard have considered the
reasons for doing so.
• Identifies the activities of the company that are relevant to that ISO
standard.
• Considers how internal & external parties affect the system.
• …and therefore the scope of the management system is likely to be
more effective in achieving the intended outcomes.
• Uses findings from clause 4 to inform the Risk and Opportunities of
section 6.

4. Understand the
Organisation
Internal Factors such as:
• Product or Service being provided.
• Strategy (Growth, Consolidation, Efficiency etc).
• Agenda of stakeholders/board.
External Factors such as:
• Political climate.
• Financial markets/Investment.
• Agenda of key suppliers/customers.

5. Understand Interested
Parties
• Who can affect
or be affected by
the system?
• What are their
‘requirements’?
• (In ISO 14001)
does this become
a compliance
obligation?
ISO
Customers
Employees
Suppliers
Board
Shareholders
3rd Parties
• Visitors
• Contractors
Insurers
External
• Public/Neighbours
• The Media
Authorities
• Government
• Regulators
Emergency
• Utilities
• 999

6. Understand Impact of
Activities
How does operating your organisation impact
the management system?
Examples:
• Collection of large volumes of data.
• Handling large quantities of hazardous
chemicals.
• Operating a 24/7 customer service line.

7. Define the Scope of the
System
The scope should be defined in terms of:
• Organisation’s Activities.
• Number of People performing the activities.
• Locations and Facilities of the organisation.
• Logical boundaries such as computer
networks or transfer of data.
• Product lines.
NOTE: The Scope must be Documented.

8. More information
• Please contact us at:
www.assentriskmanagement.co.uk
• Keep up to date with ISO Revisions at:
www.assentriskmanagement.co.uk/isorevision
s