Home › ISO Knowledge Hub › ISO Glossary & Terminology
ISO Glossary & Terminology: Practical A–Z Reference
Find clear explanations of terminology used in ISO management systems, implementation projects and audits. This independent reference helps business owners, consultants and ISO teams understand and apply common terms without confusing an educational explanation with an official normative definition.
A Working Language for ISO Professionals
ISO projects involve quality, environmental performance, occupational safety, information security, risk, auditing and certification. Similar expressions can have different meanings across these disciplines, so shared terminology supports sound decisions.
Interpret terms: understand each concept in plain English without reproducing copyright-protected definitions.
Apply concepts: see the operational significance and a workplace example for each entry.
Verify context: follow a related ISO publication and confirm its actual wording when used in a contractual or audit decision.
139 curated entries
Searchable by term, subject area and reference.
7 subject areas
From quality management to conformity assessment.

How to use this reference: Interpret the entries as practical explanations. For exact ISO terminology, verify the relevant publication and edition before using a term as an audit or contractual criterion.
Search the ISO Glossary
Search by a term, application example, ISO reference or keyword. Filter by subject area, or select a letter from the A–Z index. Choose Practical meaning, example & references within an entry to see its full working context.
Browse A–Z
139 terms available across seven subject areas.
Swipe horizontally to view all glossary columns on smaller screens.
| ISO-Related Term | Plain-Language Meaning & Application | Subject | Entry |
|---|---|---|---|
| Access control IG-I-011 |
Rules and mechanisms determining who may access which assets or services. Practical meaning, example & referencesWhy it matters: Limits unauthorized use and reduces exposure. Example: Role-based permissions restrict access to financial records. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-011 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Accreditation IG-C-004 |
Formal independent recognition of a conformity assessment body's competence and impartiality for defined activities. Practical meaning, example & referencesWhy it matters: Helps users assess confidence in certification and test results. Example: An accreditation body recognizes a certification body's capability for a specific scope. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-004 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Accreditation body IG-C-006 |
An organization authorized to conduct accreditation activities. Practical meaning, example & referencesWhy it matters: Offers oversight of conformity assessment bodies under relevant frameworks. Example: An accreditation body evaluates a certification body's competence. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-006 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Accreditation scope IG-C-018 |
The types of conformity assessment activities for which a body is accredited. Practical meaning, example & referencesWhy it matters: Helps verify that a claim relates to the relevant standard and sector. Example: A buyer checks whether the certification body is accredited for the needed QMS activity. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-018 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Administrative control IG-H-009 |
A procedural, organizational or scheduling measure used to reduce exposure. Practical meaning, example & referencesWhy it matters: Helps manage residual risks and consistent work practices. Example: A permit system controls high-risk maintenance access. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-009 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Asset inventory IG-I-020 |
A controlled record of information assets and their relevant attributes. Practical meaning, example & referencesWhy it matters: Supports risk evaluation and ownership. Example: The ISMS records asset owners, sensitivity and retention needs. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-020 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Audit IG-A-001 |
A structured examination that gathers and evaluates evidence against defined criteria. Practical meaning, example & referencesWhy it matters: Supports independent, evidence-based understanding of conformity and effectiveness. Example: An internal auditor traces customer complaints through handling and closure. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-001 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit conclusion IG-A-008 |
An overall outcome reached after considering audit findings and audit objectives. Practical meaning, example & referencesWhy it matters: Helps management understand significance rather than isolated observations. Example: The team concludes that a process is mostly effective but needs tighter change control. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-008 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit criteria IG-A-005 |
Requirements or other references used to compare audit evidence. Practical meaning, example & referencesWhy it matters: Makes audit judgements traceable and consistent. Example: Criteria include a work procedure, contractual requirement and ISO clauses. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-005 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit evidence IG-A-006 |
Records, statements or observed facts relevant to the audit criteria and capable of verification. Practical meaning, example & referencesWhy it matters: Gives conclusions a defensible factual basis. Example: An auditor reviews an approved work order and observes its execution. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-006 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit finding IG-A-007 |
A result of evaluating collected evidence against audit criteria. Practical meaning, example & referencesWhy it matters: Supports clear reporting of conformity or nonconformity. Example: Several sampled orders lack a required approval record. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-007 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit impartiality IG-A-012 |
The absence of bias or conflicts that might distort audit judgments. Practical meaning, example & referencesWhy it matters: Supports fair treatment and reliable conclusions. Example: An auditor discloses a relationship with the audited contractor. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-012 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit independence IG-A-011 |
Freedom from responsibilities or pressures that could impair objective audit judgments. Practical meaning, example & referencesWhy it matters: Protects confidence in audit results. Example: A payroll process is audited by someone outside payroll operations. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-011 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit plan IG-A-003 |
The arrangements for one specific audit, including activities and timing. Practical meaning, example & referencesWhy it matters: Clarifies what the audit team will do and when. Example: A plan lists departments, interview times and sampling activities. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-003 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit programme IG-A-002 |
Arrangements for one or more audits planned for a specified period and purpose. Practical meaning, example & referencesWhy it matters: Coordinates coverage, priorities and resources across multiple audits. Example: A company plans process and site audits for the next 12 months. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-002 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit sampling IG-A-016 |
Choosing representative evidence from a wider population when examining every item is impractical. Practical meaning, example & referencesWhy it matters: Makes audit coverage feasible while recognizing sampling limitations. Example: An auditor selects work orders from different shifts and dates. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-016 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit scope IG-A-004 |
The boundaries and extent of an audit. Practical meaning, example & referencesWhy it matters: Prevents confusion about included locations, functions and periods. Example: An audit covers product release records at one factory. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-004 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Audit team IG-A-009 |
One or more people appointed to conduct an audit, with relevant support when required. Practical meaning, example & referencesWhy it matters: Matches the audit task to needed expertise and capacity. Example: An audit lead works with a technical expert on data center controls. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-009 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Auditor competence IG-A-010 |
Demonstrated knowledge, skills and behavior suitable for assigned audit work. Practical meaning, example & referencesWhy it matters: Builds credible findings and useful dialogue with auditees. Example: An auditor is observed interviewing staff and evaluating objective evidence. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-010 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Authentication IG-I-013 |
A process for checking that a claimed identity is genuine. Practical meaning, example & referencesWhy it matters: Helps prevent unauthorized access. Example: A user signs in with a password and security key. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-013 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Authorization IG-I-014 |
A decision or mechanism that determines actions a verified identity is allowed to perform. Practical meaning, example & referencesWhy it matters: Separates identity proof from permission. Example: An authenticated user can view but not modify a report. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-014 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Availability IG-I-004 |
The ability of authorized users to access information and services when needed. Practical meaning, example & referencesWhy it matters: Protects business continuity and service delivery. Example: A ticketing platform is designed for recovery after a server outage. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-004 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Awareness IG-Q-014 |
Understanding relevant policies, objectives, responsibilities and consequences of one's actions. Practical meaning, example & referencesWhy it matters: Helps staff connect their daily work to management-system outcomes. Example: A receiving clerk knows when and how to report suspect material. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-014 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Backup IG-I-019 |
A protected copy of information intended to support recovery after loss or damage. Practical meaning, example & referencesWhy it matters: Supports resilience but requires recovery testing. Example: An organization restores a sample backup each month. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-019 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Biodiversity consideration IG-E-018 |
Attention to how activities may affect habitats, species and ecosystem health. Practical meaning, example & referencesWhy it matters: Helps projects recognize local environmental sensitivities. Example: An expansion plan assesses impacts near a protected wetland. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-018 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Business continuity IG-I-018 |
The capability to continue delivering products or services at an acceptable level during disruption. Practical meaning, example & referencesWhy it matters: Links information resilience with business priorities. Example: A cloud service activates a tested alternate processing region. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-018 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Certificate validity IG-C-012 |
The status and period for which a certificate is recognized under applicable rules. Practical meaning, example & referencesWhy it matters: Helps customers avoid relying on expired or suspended claims. Example: A procurement team checks an issuer's register before approval. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-012 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Certification IG-C-003 |
Third-party attestation that specified requirements have been met within a defined scope. Practical meaning, example & referencesWhy it matters: Provides independent assurance without replacing organizational responsibility. Example: A certification body issues a QMS certificate after its decision process. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-003 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Certification body IG-C-005 |
An organization that carries out third-party certification activities. Practical meaning, example & referencesWhy it matters: Identifies the entity responsible for assessments and certification decisions. Example: A company contracts a certification body for a management system audit. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-005 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Certification decision IG-C-013 |
The determination by authorized personnel whether certification should be granted, maintained or changed. Practical meaning, example & referencesWhy it matters: Separates assessment information from final authorization. Example: A qualified decision maker reviews the audit report before issuance. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-013 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Certification mark IG-C-016 |
A protected symbol used to communicate certification under specific rules. Practical meaning, example & referencesWhy it matters: Requires controlled use to avoid misleading claims. Example: Marketing verifies permitted wording and mark placement before publication. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-016 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Certification scheme IG-C-017 |
A defined set of rules, procedures and management arrangements for specified certification activity. Practical meaning, example & referencesWhy it matters: Explains why certification requirements may differ between disciplines. Example: A product scheme specifies evaluation and surveillance activities. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-017 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Certification scope IG-C-007 |
The products, services, sites or activities included in a certificate's stated coverage. Practical meaning, example & referencesWhy it matters: Prevents misleading assumptions about what is certified. Example: A certificate covers warehousing but not product design. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-007 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Change control IG-Q-019 |
A structured way to evaluate, approve, implement and verify relevant changes. Practical meaning, example & referencesWhy it matters: Limits unintended effects from new people, systems or methods. Example: A process change is risk-reviewed before a revised work instruction is issued. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-019 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Closing meeting IG-A-019 |
A meeting to communicate audit findings, conclusions and next steps. Practical meaning, example & referencesWhy it matters: Ensures management understands results and response expectations. Example: The team presents nonconformities and explains follow-up responsibilities. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-019 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Competence IG-Q-013 |
The demonstrated ability to apply knowledge and skills to achieve intended results. Practical meaning, example & referencesWhy it matters: Supports meaningful decisions about task allocation and training. Example: An inspector is observed using the required test method correctly. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-013 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Compliance obligation IG-E-006 |
A legal requirement or other commitment the organization must or chooses to meet. Practical meaning, example & referencesWhy it matters: Links environmental plans to applicable duties and promises. Example: A site tracks permit limits and customer-imposed hazardous substance rules. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-006 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Confidentiality IG-I-002 |
The principle that information is accessible only to authorized parties. Practical meaning, example & referencesWhy it matters: Supports privacy, trust and contractual obligations. Example: Payroll records are restricted to designated HR staff. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-002 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Conformity IG-C-002 |
The condition of meeting a particular specified requirement. Practical meaning, example & referencesWhy it matters: Clarifies what an audit or assessment is judging. Example: A completed record demonstrates that a required check occurred. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-002 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Conformity assessment IG-C-001 |
Activities used to determine whether specified requirements are fulfilled. Practical meaning, example & referencesWhy it matters: Provides a framework for testing, inspection, certification and related assurance. Example: An external body evaluates a management system against agreed criteria. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-001 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Consequence IG-R-015 |
The outcome or impact if a relevant risk event occurs. Practical meaning, example & referencesWhy it matters: Connects technical events to business objectives. Example: A system outage could delay customer orders and create penalties. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-015 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Context of the organization IG-Q-010 |
Internal and external conditions that influence the organization's purpose and results. Practical meaning, example & referencesWhy it matters: Keeps a management system aligned with real business conditions. Example: A firm reviews new regulations, staff capacity and market changes. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-010 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Continual improvement IG-Q-018 |
An ongoing effort to increase an organization's ability to achieve better results. Practical meaning, example & referencesWhy it matters: Encourages learning from data, audits and operational experience. Example: A team improves order review after analysing six months of rework. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-018 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Contractor OH&S management IG-H-016 |
Processes for coordinating safety duties where contractors work under relevant organizational control or influence. Practical meaning, example & referencesWhy it matters: Addresses risks at interfaces between employers and sites. Example: A site verifies contractor competence before electrical maintenance. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-016 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Correction IG-Q-016 |
An action that fixes an identified nonconformity or its immediate effect. Practical meaning, example & referencesWhy it matters: Restores an acceptable condition but may not prevent recurrence. Example: An incorrectly labeled batch is relabeled and verified. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-016 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Corrective action IG-Q-017 |
An action aimed at removing the cause of a nonconformity so it does not recur. Practical meaning, example & referencesWhy it matters: Addresses systemic causes rather than simply fixing a faulty item. Example: A label-control workflow is changed after repeated labeling mistakes. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-017 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Cryptography IG-I-015 |
Use of mathematical methods to protect information and support security functions. Practical meaning, example & referencesWhy it matters: Supports confidentiality, integrity and authenticity controls. Example: An application validates digital signatures on released files. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-015 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Customer requirement IG-Q-007 |
A need or expectation from a customer that applies to a product or service. Practical meaning, example & referencesWhy it matters: Provides an acceptance baseline for delivery and evaluation. Example: A buyer specifies a delivery window and traceability records. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-007 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Customer satisfaction IG-Q-008 |
The customer's perception of how well expectations were met. Practical meaning, example & referencesWhy it matters: Highlights gaps between internal performance and external experience. Example: A support team analyses survey feedback and complaint recurrence. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-008 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Design and development IG-Q-020 |
Activities that transform requirements into specified characteristics for a product, service or process. Practical meaning, example & referencesWhy it matters: Supports controlled review, verification and validation of new solutions. Example: An engineering team tests a revised component against design inputs. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-020 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Documented information IG-Q-012 |
Information an organization needs to control and retain, regardless of medium. Practical meaning, example & referencesWhy it matters: Helps teams distinguish instructions from evidence and prevent obsolete records. Example: An approved procedure and its completed inspection log are controlled differently. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-012 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Elimination of hazard IG-H-006 |
Removing a hazardous task, source or exposure altogether when feasible. Practical meaning, example & referencesWhy it matters: Can provide the strongest form of risk reduction. Example: A dangerous manual lift is removed through process redesign. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-006 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Emergency response IG-H-018 |
Planned actions to protect people and control consequences when an emergency occurs. Practical meaning, example & referencesWhy it matters: Strengthens readiness for events that develop quickly. Example: A site runs an evacuation drill and checks response times. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-018 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Emerging risk IG-R-020 |
A developing or newly recognized uncertainty whose behavior or impact may be difficult to assess. Practical meaning, example & referencesWhy it matters: Prompts early scanning and flexible controls. Example: A business tracks new AI-related data exposure scenarios. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-020 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Encryption IG-I-016 |
Transformation of readable information into an unreadable form for parties without the appropriate key. Practical meaning, example & referencesWhy it matters: Helps protect sensitive data at rest or in transit. Example: A laptop's storage uses full-disk encryption. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-016 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Energy consumption IG-E-013 |
The amount of energy used by an activity, asset or process. Practical meaning, example & referencesWhy it matters: Connects environmental performance to operating decisions. Example: A building monitors electricity usage by production shift. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-013 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Engineering control IG-H-008 |
A physical or technical measure that limits exposure to a hazard. Practical meaning, example & referencesWhy it matters: Provides protection less dependent on individual behavior. Example: Local exhaust ventilation removes airborne contaminants near a workstation. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-008 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Environmental aspect IG-E-002 |
An activity, product or service element that can interact with the environment. Practical meaning, example & referencesWhy it matters: Provides a starting point for identifying environmental impacts. Example: Solvent cleaning introduces possible air emissions and waste solvent. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-002 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental emergency preparedness IG-E-016 |
Planning for and rehearsing responses to potentially harmful environmental events. Practical meaning, example & referencesWhy it matters: Reduces response delay and potential damage. Example: Workers practice containment of a simulated chemical spill. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-016 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental impact IG-E-003 |
A change to the environment resulting wholly or partly from an activity. Practical meaning, example & referencesWhy it matters: Connects an aspect to a consequence that needs management. Example: Runoff carrying sediment affects a nearby watercourse. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-003 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental management system IG-E-001 |
An organized approach to managing environmental responsibilities and performance. Practical meaning, example & referencesWhy it matters: Makes environmental objectives, controls and review routines repeatable. Example: A plant assigns waste, energy and emissions responsibilities by process. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-001 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental monitoring IG-E-015 |
Planned collection and evaluation of data about environmental conditions or controls. Practical meaning, example & referencesWhy it matters: Shows whether actions and permit-related controls are performing. Example: A site regularly checks effluent measurements against applicable limits. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-015 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental objective IG-E-008 |
A result the organization plans to achieve relating to environmental performance. Practical meaning, example & referencesWhy it matters: Turns commitments into managed action. Example: A plant targets reduced process-water consumption per unit of output. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-008 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental performance IG-E-017 |
Results of managing environmental aspects and achieving environmental objectives. Practical meaning, example & referencesWhy it matters: Shows whether an environmental system produces outcomes. Example: A site compares waste intensity and compliance trends year over year. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-017 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Environmental policy IG-E-007 |
Management's stated direction and commitments for environmental performance. Practical meaning, example & referencesWhy it matters: Anchors objectives and accountability. Example: A company commits to protection of the environment and responsible resource use. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-007 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Externally provided process IG-Q-021 |
An activity performed by an outside provider that contributes to organizational outputs. Practical meaning, example & referencesWhy it matters: Helps ensure outsourced work remains within appropriate controls. Example: A lab subcontractor's test results are evaluated before release. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-021 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| First-party audit IG-A-013 |
An audit performed by or on behalf of an organization on its own activities. Practical meaning, example & referencesWhy it matters: Supports internal assurance and improvement. Example: A company audits its purchasing process against its criteria. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-013 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Follow-up audit IG-A-020 |
A subsequent check focused on implemented actions or unresolved findings. Practical meaning, example & referencesWhy it matters: Verifies that corrective actions are effective, not merely reported complete. Example: An auditor tests a revised purchasing approval process after closure. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-020 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Greenhouse gas emission IG-E-012 |
A release of a climate-warming gas from a defined source or activity. Practical meaning, example & referencesWhy it matters: Supports meaningful emissions inventories and improvement plans. Example: A facility records fuel-related emissions for its boiler fleet. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-012 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Hazard IG-H-001 |
A source or situation with potential to cause injury or ill health. Practical meaning, example & referencesWhy it matters: Separates the source of harm from the likelihood of an adverse event. Example: An unguarded moving machine part is identified during a walkthrough. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-001 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Hazard identification IG-H-004 |
The process of spotting potential sources of work-related harm. Practical meaning, example & referencesWhy it matters: Prevents risks from remaining invisible until an incident occurs. Example: Operators identify pinch points during an equipment changeover. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-004 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Hierarchy of controls IG-H-005 |
A preferred sequence for controlling hazards, generally favoring elimination and engineering before relying on PPE. Practical meaning, example & referencesWhy it matters: Supports stronger safeguards than warnings alone. Example: A factory installs guarding rather than relying only on caution signs. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-005 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Incident IG-H-011 |
A work-related event that caused or could have caused injury or ill health. Practical meaning, example & referencesWhy it matters: Creates an opportunity for investigation and improvement. Example: A falling object is reported even though nobody is injured. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-011 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Information asset IG-I-001 |
Information or an information-related resource that has value to the organization. Practical meaning, example & referencesWhy it matters: Helps determine ownership, classification and protection needs. Example: A customer database is registered as a business-critical asset. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-001 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Information security control IG-I-009 |
A measure intended to change or maintain information security risk. Practical meaning, example & referencesWhy it matters: Turns risk decisions into operational safeguards. Example: Multi-factor authentication is applied to administrator access. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-009 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Information security incident IG-I-017 |
An event or series of events that has affected or may compromise information security. Practical meaning, example & referencesWhy it matters: Triggers investigation, containment and response. Example: An unauthorized login is escalated under the incident process. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-017 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Information security risk IG-I-005 |
Uncertainty that may affect confidentiality, integrity or availability of information. Practical meaning, example & referencesWhy it matters: Links threats and vulnerabilities to business outcomes. Example: A team assesses ransomware risk to its order management system. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-005 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Information security risk owner IG-I-008 |
A person assigned authority and accountability for decisions about a particular information security risk. Practical meaning, example & referencesWhy it matters: Clarifies treatment decisions and risk acceptance. Example: A system owner approves mitigation actions for a sensitive application. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-008 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Inherent risk IG-R-009 |
An estimate of risk before taking account of specified controls in a chosen assessment method. Practical meaning, example & referencesWhy it matters: Illustrates underlying exposure and the contribution of controls. Example: A chemical handling task is initially assessed before safeguards. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-009 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Integrity IG-I-003 |
The quality of information being accurate and protected from unauthorized alteration. Practical meaning, example & referencesWhy it matters: Supports reliable decisions and records. Example: A signed change log helps detect modifications to production settings. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-003 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Interested party IG-Q-009 |
A person or organization that can affect, be affected by, or influence an activity or system. Practical meaning, example & referencesWhy it matters: Helps define relevant expectations without treating every possible stakeholder equally. Example: A manufacturer considers customers, workers, regulators and key suppliers. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-009 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Least privilege IG-I-012 |
A security design principle granting only access needed for assigned work. Practical meaning, example & referencesWhy it matters: Reduces the impact of misuse and compromised accounts. Example: A temporary contractor receives time-limited read-only access. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-012 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Life cycle perspective IG-E-005 |
Considering relevant environmental effects across stages connected to a product or service. Practical meaning, example & referencesWhy it matters: Helps avoid improving one stage while shifting impact elsewhere. Example: A packaging review considers sourcing, use and end-of-life disposal. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-005 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Likelihood IG-R-014 |
An indication of the chance or frequency of a relevant event. Practical meaning, example & referencesWhy it matters: Supports transparent evaluation while acknowledging uncertainty. Example: A team assesses how often a critical component could fail. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-014 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Management review IG-Q-024 |
Leadership's structured evaluation of system suitability, adequacy and effectiveness. Practical meaning, example & referencesWhy it matters: Connects operational evidence with strategic decisions and resource commitments. Example: Executives review audit trends, objectives, complaints and investment needs. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-024 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Monitoring and measurement IG-Q-023 |
Observing or determining the status or performance of a process or outcome. Practical meaning, example & referencesWhy it matters: Produces evidence for timely decisions and improvement. Example: A company tracks dispatch errors and checks measurement-device suitability. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-023 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Near miss IG-H-012 |
An unplanned event that caused no harm but had credible potential to do so. Practical meaning, example & referencesWhy it matters: Allows prevention before a more serious event occurs. Example: A pallet falls in an empty aisle and is investigated. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-012 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Nonconformity IG-Q-015 |
A situation in which a specified requirement has not been fulfilled. Practical meaning, example & referencesWhy it matters: Creates a clear starting point for containment and investigation. Example: A required calibration check was not performed before equipment use. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-015 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Occupational ill health IG-H-013 |
An adverse physical or mental health condition linked to work exposure or activity. Practical meaning, example & referencesWhy it matters: Expands OH&S beyond sudden accidents. Example: A company investigates repeated noise-related hearing concerns. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-013 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| OH&S risk IG-H-002 |
Uncertainty relating to potentially harmful work-related events and their consequences. Practical meaning, example & referencesWhy it matters: Supports proportionate prioritization of safety controls. Example: A team assesses possible injury from forklift movements. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-002 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Opening meeting IG-A-018 |
An initial discussion confirming audit scope, methods, arrangements and communication. Practical meaning, example & referencesWhy it matters: Helps avoid misunderstandings before evidence collection. Example: The lead auditor reviews the agenda and confidentiality arrangements. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-018 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Operational environmental control IG-E-009 |
A measure used in activities to manage identified environmental aspects. Practical meaning, example & referencesWhy it matters: Translates environmental plans into daily working practice. Example: A spill-tray inspection is included in a chemical-storage routine. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-009 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Opportunity IG-R-002 |
A circumstance that may enable an improvement or advantageous outcome. Practical meaning, example & referencesWhy it matters: Prevents risk management from focusing only on threats. Example: Automation may reduce data entry errors and increase capacity. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-002 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Permit to work IG-H-017 |
A controlled authorization process for specified high-risk work. Practical meaning, example & referencesWhy it matters: Makes safety prerequisites and approvals explicit. Example: A hot-work permit requires a fire watch and area inspection. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-017 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Personal protective equipment (PPE) IG-H-010 |
Wearable protection used to reduce exposure where other controls do not fully remove hazards. Practical meaning, example & referencesWhy it matters: Provides an additional layer, not a replacement for better upstream controls. Example: Workers use fit-tested respiratory protection in a specified task. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-010 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Pollution prevention IG-E-010 |
Measures designed to avoid, reduce or control the creation or release of contaminants. Practical meaning, example & referencesWhy it matters: Often lowers both environmental harm and operating cost. Example: A shop substitutes a lower-emission cleaning method. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-010 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Process approach IG-Q-005 |
Managing connected activities as processes with inputs, outputs, owners and measures. Practical meaning, example & referencesWhy it matters: Makes hand-offs and causes of poor results visible. Example: A company maps quotation, order review, delivery and after-sales support. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-005 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Process owner IG-Q-006 |
A person given accountability for a process and its intended results. Practical meaning, example & referencesWhy it matters: Supports clear decision rights and meaningful follow-up. Example: A logistics manager owns dispatch accuracy and corrective actions. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-006 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Quality management system IG-Q-001 |
A coordinated way to direct and control how an organization achieves consistent quality outcomes. Practical meaning, example & referencesWhy it matters: Connects leadership, processes and evidence rather than relying on isolated forms. Example: A service provider maps customer onboarding, checks results and reviews recurring complaints. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-001 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Quality objective IG-Q-003 |
A defined result the organization intends to achieve in its quality system. Practical meaning, example & referencesWhy it matters: Turns policy into measurable priorities that teams can manage. Example: A site targets fewer repeat customer complaints over a defined quarter. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-003 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Quality planning IG-Q-004 |
Deciding in advance which processes, controls and resources are needed to meet quality requirements. Practical meaning, example & referencesWhy it matters: Prevents important controls from being improvised after work begins. Example: A project manager assigns checks, owners and acceptance criteria before launch. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-004 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Quality policy IG-Q-002 |
Leadership's documented direction and commitments concerning quality. Practical meaning, example & referencesWhy it matters: Gives process owners a shared basis for objectives and decisions. Example: A manufacturer commits to dependable delivery and learning from customer feedback. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-002 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Recertification IG-C-011 |
A reassessment process supporting the continuation of certification after its cycle. Practical meaning, example & referencesWhy it matters: Provides continued assurance beyond the initial decision. Example: A company undergoes an assessment before certificate renewal. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-011 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Remote audit IG-A-017 |
An audit or part of an audit performed without physical presence at the audited location. Practical meaning, example & referencesWhy it matters: Expands access but requires secure technology and suitable evidence. Example: An auditor reviews live records and interviews staff by video. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-017 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Residual risk IG-R-010 |
Risk remaining after controls or treatment actions have been considered. Practical meaning, example & referencesWhy it matters: Shows whether more action or acceptance is needed. Example: After interlocks are installed, the remaining exposure is reassessed. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-010 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Resource efficiency IG-E-014 |
Achieving an intended outcome with less wasteful use of materials, energy or water. Practical meaning, example & referencesWhy it matters: Creates practical improvement opportunities. Example: A process redesign cuts water usage without affecting product quality. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-014 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Risk IG-R-001 |
The effect that uncertainty may have on objectives, whether adverse or beneficial. Practical meaning, example & referencesWhy it matters: Keeps assessment connected to actual decisions and outcomes. Example: A supplier disruption could delay a product launch. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-001 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk acceptance IG-R-017 |
An informed decision to retain a risk within appropriate decision authority. Practical meaning, example & referencesWhy it matters: Clarifies responsibility when no further treatment is chosen. Example: A manager accepts a documented low-impact operational risk. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-017 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk analysis IG-R-007 |
Understanding the nature of a risk and estimating relevant consequences and likelihoods. Practical meaning, example & referencesWhy it matters: Supports comparisons between treatment options. Example: An operations manager analyses frequency and impact of process failures. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-007 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk appetite IG-R-003 |
The broad level and types of risk an organization is willing to pursue or retain. Practical meaning, example & referencesWhy it matters: Guides strategic trade-offs and escalation. Example: Leadership limits exposure to untested critical vendors. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-003 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk communication IG-R-019 |
Sharing risk information with people who need it for decisions or action. Practical meaning, example & referencesWhy it matters: Supports coordinated responses and informed escalation. Example: Project risks are reviewed with contractors and management. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-019 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk criteria IG-R-005 |
Agreed terms of reference used to judge the significance of risks. Practical meaning, example & referencesWhy it matters: Makes prioritization more consistent. Example: A company defines safety, financial and reputational impact scales. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-005 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk evaluation IG-R-008 |
Comparing analysis results with risk criteria to support decisions. Practical meaning, example & referencesWhy it matters: Helps determine which risks need treatment or acceptance. Example: High-scoring issues are escalated to the plant manager. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-008 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk identification IG-R-006 |
Finding and describing circumstances that may affect objectives. Practical meaning, example & referencesWhy it matters: Builds the inventory needed for further assessment. Example: A team lists possible causes of missed delivery commitments. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-006 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk matrix IG-R-016 |
A visual device for comparing categories of likelihood and consequence. Practical meaning, example & referencesWhy it matters: Helps communicate prioritization but should not replace sound analysis. Example: A 5×5 matrix flags several hazards for management review. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-016 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk monitoring IG-R-018 |
Checking risks, controls and assumptions over time for relevant changes. Practical meaning, example & referencesWhy it matters: Prevents risk registers becoming outdated snapshots. Example: Owners review high-priority risks after each major change. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-018 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk owner IG-R-013 |
The person or role responsible for management of a defined risk. Practical meaning, example & referencesWhy it matters: Ensures a named decision maker can authorize treatment or acceptance. Example: A warehouse manager owns the stock accuracy risk. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-013 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk register IG-R-012 |
A structured record of identified risks, owners, assessments and treatment actions. Practical meaning, example & referencesWhy it matters: Supports accountability and periodic review. Example: A spreadsheet tracks risks and overdue mitigation commitments. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-012 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk tolerance IG-R-004 |
The acceptable variation around a specific objective or risk criterion. Practical meaning, example & referencesWhy it matters: Provides an operational threshold for decisions. Example: A service owner sets a maximum tolerable interruption period. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-004 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Risk treatment IG-R-011 |
Selecting and implementing actions to address risk. Practical meaning, example & referencesWhy it matters: Moves risk analysis into operational decisions. Example: A company changes supplier arrangements to reduce disruption exposure. Related standard(s): ISO 31000:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-R-011 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed: |
Risk Management | View |
| Safety risk assessment IG-H-003 |
A structured assessment of work hazards, existing safeguards and possible harm. Practical meaning, example & referencesWhy it matters: Helps select and verify effective controls. Example: A supervisor reviews lifting operations before a new task begins. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-003 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Scope of the QMS IG-Q-011 |
The boundaries and applicability of a quality management system. Practical meaning, example & referencesWhy it matters: Clarifies which sites, activities and products are covered. Example: The scope covers design and assembly at two named facilities. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-011 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Second-party audit IG-A-014 |
An audit conducted by a customer or a party acting for that customer, often focused on suppliers. Practical meaning, example & referencesWhy it matters: Supports supply-chain assurance and contractual oversight. Example: An automotive customer audits a component supplier. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-014 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Security awareness IG-I-021 |
Understanding of security responsibilities and everyday behaviors that reduce risk. Practical meaning, example & referencesWhy it matters: Strengthens human defenses alongside technical controls. Example: Staff practice recognizing and reporting phishing attempts. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-021 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Significant environmental aspect IG-E-004 |
An aspect the organization judges important using its documented significance criteria. Practical meaning, example & referencesWhy it matters: Focuses controls and monitoring on material environmental interactions. Example: A facility prioritizes wastewater discharge due to volume and sensitivity. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-004 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Stage 1 audit IG-C-008 |
An initial certification audit stage used to review readiness and relevant management system information. Practical meaning, example & referencesWhy it matters: Identifies significant issues before full certification evaluation. Example: An auditor reviews scope, system maturity and planned Stage 2 readiness. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-008 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Stage 2 audit IG-C-009 |
A subsequent certification stage evaluating implementation and effectiveness against the applicable requirements. Practical meaning, example & referencesWhy it matters: Provides evidence for the certification body's decision. Example: Auditors sample operations, interviews and completed system records. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-009 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Statement of Applicability (SoA) IG-I-010 |
A documented record of the organization's selected information security controls and treatment rationale. Practical meaning, example & referencesWhy it matters: Connects ISMS risk treatment choices to control coverage. Example: An ISMS team records why a control applies and how it is implemented. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-010 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Substitution of hazard IG-H-007 |
Replacing a hazardous material, process or item with a less hazardous alternative. Practical meaning, example & referencesWhy it matters: Reduces exposure at its source. Example: A cleaning agent is replaced with a lower-hazard formulation. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-007 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Surveillance audit IG-C-010 |
A periodic assessment during a certification cycle to evaluate continued conformity. Practical meaning, example & referencesWhy it matters: Helps maintain confidence between initial certification and renewal. Example: A certification body reviews selected sites, processes and prior findings. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-010 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Suspension of certification IG-C-014 |
A temporary status in which certification is not fully effective under scheme rules. Practical meaning, example & referencesWhy it matters: Signals that normal certification claims may be restricted. Example: A certificate is suspended while major unresolved conditions are addressed. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-014 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Third-party audit IG-A-015 |
An audit by an external independent organization, often for certification or another assurance purpose. Practical meaning, example & referencesWhy it matters: Provides confidence for parties outside the organization. Example: A certification body audits a company against a management system standard. Related standard(s): ISO 19011:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-A-015 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed: |
Auditing | View |
| Threat IG-I-006 |
A potential cause of unwanted harm to an information asset or system. Practical meaning, example & referencesWhy it matters: Helps frame plausible security scenarios. Example: Credential theft is considered a threat to privileged accounts. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-006 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Traceability IG-Q-022 |
The ability to follow an item's history, application or location through relevant records. Practical meaning, example & referencesWhy it matters: Enables effective investigations and targeted responses to problems. Example: A batch code links raw material lots to final product shipments. Related standard(s): ISO 9000:2026; ISO 9001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-Q-022 · Subject: Quality · Source reference: official ISO catalogue · Reviewed: |
Quality | View |
| Vulnerability IG-I-007 |
A weakness that could be exploited or contribute to an adverse security event. Practical meaning, example & referencesWhy it matters: Supports prioritized remediation. Example: An unpatched service creates an avoidable attack path. Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-I-007 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed: |
Information Security | View |
| Waste hierarchy IG-E-011 |
A preference order for avoiding, reducing, reusing, recycling and recovering waste when suitable. Practical meaning, example & referencesWhy it matters: Supports better material choices before disposal. Example: A warehouse reuses returnable containers before sending materials to recycling. Related standard(s): ISO 14001:2026 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-E-011 · Subject: Environment · Source reference: official ISO catalogue · Reviewed: |
Environment | View |
| Withdrawal of certification IG-C-015 |
The ending of certification under applicable scheme arrangements. Practical meaning, example & referencesWhy it matters: Prevents continued use of an invalid certification claim. Example: A certification body withdraws a certificate after required conditions are not met. Related standard(s): ISO/IEC 17000:2020 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-C-015 · Subject: Certification · Source reference: official ISO catalogue · Reviewed: |
Certification | View |
| Worker consultation IG-H-014 |
Seeking and considering workers' views before decisions affecting OH&S are made. Practical meaning, example & referencesWhy it matters: Improves the practicality and acceptance of safety controls. Example: Operators review a proposed machine-guarding design. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-014 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
| Worker participation IG-H-015 |
Active involvement of workers in relevant OH&S processes and decisions. Practical meaning, example & referencesWhy it matters: Improves hazard reporting and ownership. Example: Employees join a safety risk review and trial a new control. Related standard(s): ISO 45001:2018 Interpretation: Plain-language editorial explanation; not official ISO wording. Record ID: IG-H-015 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed: |
OH&S | View |
No terms match these filters. Try another spelling, a broader keyword or a different subject area.
Review record: Each glossary entry includes an ID, subject area, contextual standard reference and review date. Editorial draft compiled 09 November 2026; specialist validation is recommended before formal reliance.
Commonly Confused ISO Terms
These distinctions matter when a company writes procedures, assigns actions or evaluates audit evidence. The explanations are educational summaries, not exact quotations from ISO publications.
Correction vs Corrective Action
Correction fixes an existing problem; corrective action investigates and addresses a cause to reduce the chance of it happening again.
Workplace example: A mislabeled unit is relabeled (correction), then the labeling approval process is redesigned (corrective action).
Further reading: ISO 9000:2026; ISO 9001:2026
Audit vs Inspection
An audit evaluates verifiable evidence against a set of criteria; an inspection examines a defined item or condition for specified characteristics.
Workplace example: An auditor evaluates the calibration-control process; an inspector checks a particular gauge or finished item.
Further reading: ISO 19011:2026; ISO/IEC 17000:2020
Risk vs Hazard
Risk concerns uncertainty affecting objectives; a hazard is a source or situation with potential to cause harm. They are related but not interchangeable.
Workplace example: An unguarded conveyor is a hazard; the possibility and severity of injury form part of the OH&S risk assessment.
Further reading: ISO 31000:2018; ISO 45001:2018
Certification vs Accreditation
Certification is third-party attestation regarding specified requirements; accreditation recognizes competence and impartiality of a conformity assessment body.
Workplace example: A company may be ISO 9001 certified by a certification body, while that body may be accredited for that certification activity.
Further reading: ISO/IEC 17000:2020
Frequently Used ISO Terms
Start with high-frequency expressions that commonly appear in implementation planning, management reviews and audits. Select a term to open its full glossary record.
Correction
A fix to an identified problem; compare it with action on the underlying cause.
Explore full glossary entry →
Corrective action
Action to reduce recurrence by addressing causes, not only symptoms.
Explore full glossary entry →
Audit evidence
Verifiable facts and records considered against defined audit criteria.
Explore full glossary entry →
Risk
Uncertainty affecting the achievement of objectives, not simply a negative event.
Explore full glossary entry →
Environmental aspect
A process or activity element that interacts with the environment.
Explore full glossary entry →
Accreditation
Recognition of a conformity assessment body’s competence under relevant rules.
Explore full glossary entry →
How to Use Terminology in an ISO Project
Find the Term
Search the English expression or select the related management-system discipline.
Read the Context
Compare the plain-language explanation, significance and example.
Check the Standard
Verify exact terminology and applicable requirements in the licensed ISO publication.
Apply Consistently
Use approved wording in procedures, registers, training and audit criteria.
Review Changes
Update internal terminology when a standard or organizational context changes.
Keep Your ISO Vocabulary Consistent
An internal glossary is most useful when each important expression has an approved meaning for the organization's context. Refer to the applicable edition when wording affects a requirement, contractual obligation or audit conclusion.
Identify owners: assign a qualified process or management-system owner to review terminology used in controlled documents.
Control changes: record revisions when a standard changes or an internal process is redesigned.
Train consistently: use common terminology in procedures, inductions, records and audit interviews.
Use the glossary as a learning aid, and record organization-specific interpretations in an approved document when necessary.

Official References and Related Knowledge
The standards below offer official subject-matter context. Use the official ISO catalogue to confirm each publication's title, edition and current status. Consult the applicable authorized document for its normative definitions.
ISO Publications
- ISO 9000:2026 — Quality management — Fundamentals and vocabulary.
- ISO 9001:2026 — Quality management systems — Requirements.
- ISO 14001:2026 — Environmental management systems — Requirements with guidance.
- ISO 45001:2018 — Occupational health and safety management systems.
- ISO/IEC 27000:2026 — Information security management systems — Overview.
- ISO 31000:2018 — Risk management — Guidelines.
- ISO 19011:2026 — Guidelines for auditing management systems.
- ISO/IEC 17000:2020 — Conformity assessment — Vocabulary and general principles.
- ISO Standards Catalogue — confirm title, status, amendments and current edition.
Continue in the Knowledge Hub
- Understanding ISO Standards — how standards work and how to interpret requirements.
- ISO Standards Directory — browse ISO implementation toolkit references by standard.
- Harmonized Structure & Annex SL — common structure across management-system standards.
- ISO FAQs — practical answers to questions about standards and implementation.
- ISO Knowledge Hub — browse the complete learning and implementation resource ecosystem.