ISO Glossary & Terminology

Home › ISO Knowledge Hub › ISO Glossary & Terminology

ISO Glossary & Terminology: Practical A–Z Reference

Find clear explanations of terminology used in ISO management systems, implementation projects and audits. This independent reference helps business owners, consultants and ISO teams understand and apply common terms without confusing an educational explanation with an official normative definition.

A Working Language for ISO Professionals

ISO projects involve quality, environmental performance, occupational safety, information security, risk, auditing and certification. Similar expressions can have different meanings across these disciplines, so shared terminology supports sound decisions.

  • Interpret terms: understand each concept in plain English without reproducing copyright-protected definitions.

  • Apply concepts: see the operational significance and a workplace example for each entry.

  • Verify context: follow a related ISO publication and confirm its actual wording when used in a contractual or audit decision.

139 curated entries

Searchable by term, subject area and reference.

7 subject areas

From quality management to conformity assessment.

ISO implementation professionals reviewing management system materials in a planning setting
Practical explanations support consistent interpretation; official ISO wording remains the authoritative reference.

How to use this reference: Interpret the entries as practical explanations. For exact ISO terminology, verify the relevant publication and edition before using a term as an audit or contractual criterion.

Search the ISO Glossary

Search by a term, application example, ISO reference or keyword. Filter by subject area, or select a letter from the A–Z index. Choose Practical meaning, example & references within an entry to see its full working context.

Browse A–Z

139 terms available across seven subject areas.

Swipe horizontally to view all glossary columns on smaller screens.

ISO-Related TermPlain-Language Meaning & ApplicationSubjectEntry
Access control

IG-I-011

Rules and mechanisms determining who may access which assets or services.

Practical meaning, example & references

Why it matters: Limits unauthorized use and reduces exposure.

Example: Role-based permissions restrict access to financial records.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-011 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Accreditation

IG-C-004

Formal independent recognition of a conformity assessment body's competence and impartiality for defined activities.

Practical meaning, example & references

Why it matters: Helps users assess confidence in certification and test results.

Example: An accreditation body recognizes a certification body's capability for a specific scope.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-004 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Accreditation body

IG-C-006

An organization authorized to conduct accreditation activities.

Practical meaning, example & references

Why it matters: Offers oversight of conformity assessment bodies under relevant frameworks.

Example: An accreditation body evaluates a certification body's competence.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-006 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Accreditation scope

IG-C-018

The types of conformity assessment activities for which a body is accredited.

Practical meaning, example & references

Why it matters: Helps verify that a claim relates to the relevant standard and sector.

Example: A buyer checks whether the certification body is accredited for the needed QMS activity.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-018 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Administrative control

IG-H-009

A procedural, organizational or scheduling measure used to reduce exposure.

Practical meaning, example & references

Why it matters: Helps manage residual risks and consistent work practices.

Example: A permit system controls high-risk maintenance access.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-009 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Asset inventory

IG-I-020

A controlled record of information assets and their relevant attributes.

Practical meaning, example & references

Why it matters: Supports risk evaluation and ownership.

Example: The ISMS records asset owners, sensitivity and retention needs.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-020 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Audit

IG-A-001

A structured examination that gathers and evaluates evidence against defined criteria.

Practical meaning, example & references

Why it matters: Supports independent, evidence-based understanding of conformity and effectiveness.

Example: An internal auditor traces customer complaints through handling and closure.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-001 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit conclusion

IG-A-008

An overall outcome reached after considering audit findings and audit objectives.

Practical meaning, example & references

Why it matters: Helps management understand significance rather than isolated observations.

Example: The team concludes that a process is mostly effective but needs tighter change control.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-008 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit criteria

IG-A-005

Requirements or other references used to compare audit evidence.

Practical meaning, example & references

Why it matters: Makes audit judgements traceable and consistent.

Example: Criteria include a work procedure, contractual requirement and ISO clauses.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-005 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit evidence

IG-A-006

Records, statements or observed facts relevant to the audit criteria and capable of verification.

Practical meaning, example & references

Why it matters: Gives conclusions a defensible factual basis.

Example: An auditor reviews an approved work order and observes its execution.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-006 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit finding

IG-A-007

A result of evaluating collected evidence against audit criteria.

Practical meaning, example & references

Why it matters: Supports clear reporting of conformity or nonconformity.

Example: Several sampled orders lack a required approval record.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-007 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit impartiality

IG-A-012

The absence of bias or conflicts that might distort audit judgments.

Practical meaning, example & references

Why it matters: Supports fair treatment and reliable conclusions.

Example: An auditor discloses a relationship with the audited contractor.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-012 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit independence

IG-A-011

Freedom from responsibilities or pressures that could impair objective audit judgments.

Practical meaning, example & references

Why it matters: Protects confidence in audit results.

Example: A payroll process is audited by someone outside payroll operations.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-011 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit plan

IG-A-003

The arrangements for one specific audit, including activities and timing.

Practical meaning, example & references

Why it matters: Clarifies what the audit team will do and when.

Example: A plan lists departments, interview times and sampling activities.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-003 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit programme

IG-A-002

Arrangements for one or more audits planned for a specified period and purpose.

Practical meaning, example & references

Why it matters: Coordinates coverage, priorities and resources across multiple audits.

Example: A company plans process and site audits for the next 12 months.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-002 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit sampling

IG-A-016

Choosing representative evidence from a wider population when examining every item is impractical.

Practical meaning, example & references

Why it matters: Makes audit coverage feasible while recognizing sampling limitations.

Example: An auditor selects work orders from different shifts and dates.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-016 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit scope

IG-A-004

The boundaries and extent of an audit.

Practical meaning, example & references

Why it matters: Prevents confusion about included locations, functions and periods.

Example: An audit covers product release records at one factory.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-004 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Audit team

IG-A-009

One or more people appointed to conduct an audit, with relevant support when required.

Practical meaning, example & references

Why it matters: Matches the audit task to needed expertise and capacity.

Example: An audit lead works with a technical expert on data center controls.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-009 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Auditor competence

IG-A-010

Demonstrated knowledge, skills and behavior suitable for assigned audit work.

Practical meaning, example & references

Why it matters: Builds credible findings and useful dialogue with auditees.

Example: An auditor is observed interviewing staff and evaluating objective evidence.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-010 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Authentication

IG-I-013

A process for checking that a claimed identity is genuine.

Practical meaning, example & references

Why it matters: Helps prevent unauthorized access.

Example: A user signs in with a password and security key.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-013 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Authorization

IG-I-014

A decision or mechanism that determines actions a verified identity is allowed to perform.

Practical meaning, example & references

Why it matters: Separates identity proof from permission.

Example: An authenticated user can view but not modify a report.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-014 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Availability

IG-I-004

The ability of authorized users to access information and services when needed.

Practical meaning, example & references

Why it matters: Protects business continuity and service delivery.

Example: A ticketing platform is designed for recovery after a server outage.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-004 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Awareness

IG-Q-014

Understanding relevant policies, objectives, responsibilities and consequences of one's actions.

Practical meaning, example & references

Why it matters: Helps staff connect their daily work to management-system outcomes.

Example: A receiving clerk knows when and how to report suspect material.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-014 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Backup

IG-I-019

A protected copy of information intended to support recovery after loss or damage.

Practical meaning, example & references

Why it matters: Supports resilience but requires recovery testing.

Example: An organization restores a sample backup each month.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-019 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Biodiversity consideration

IG-E-018

Attention to how activities may affect habitats, species and ecosystem health.

Practical meaning, example & references

Why it matters: Helps projects recognize local environmental sensitivities.

Example: An expansion plan assesses impacts near a protected wetland.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-018 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Business continuity

IG-I-018

The capability to continue delivering products or services at an acceptable level during disruption.

Practical meaning, example & references

Why it matters: Links information resilience with business priorities.

Example: A cloud service activates a tested alternate processing region.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-018 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Certificate validity

IG-C-012

The status and period for which a certificate is recognized under applicable rules.

Practical meaning, example & references

Why it matters: Helps customers avoid relying on expired or suspended claims.

Example: A procurement team checks an issuer's register before approval.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-012 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Certification

IG-C-003

Third-party attestation that specified requirements have been met within a defined scope.

Practical meaning, example & references

Why it matters: Provides independent assurance without replacing organizational responsibility.

Example: A certification body issues a QMS certificate after its decision process.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-003 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Certification body

IG-C-005

An organization that carries out third-party certification activities.

Practical meaning, example & references

Why it matters: Identifies the entity responsible for assessments and certification decisions.

Example: A company contracts a certification body for a management system audit.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-005 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Certification decision

IG-C-013

The determination by authorized personnel whether certification should be granted, maintained or changed.

Practical meaning, example & references

Why it matters: Separates assessment information from final authorization.

Example: A qualified decision maker reviews the audit report before issuance.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-013 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Certification mark

IG-C-016

A protected symbol used to communicate certification under specific rules.

Practical meaning, example & references

Why it matters: Requires controlled use to avoid misleading claims.

Example: Marketing verifies permitted wording and mark placement before publication.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-016 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Certification scheme

IG-C-017

A defined set of rules, procedures and management arrangements for specified certification activity.

Practical meaning, example & references

Why it matters: Explains why certification requirements may differ between disciplines.

Example: A product scheme specifies evaluation and surveillance activities.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-017 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Certification scope

IG-C-007

The products, services, sites or activities included in a certificate's stated coverage.

Practical meaning, example & references

Why it matters: Prevents misleading assumptions about what is certified.

Example: A certificate covers warehousing but not product design.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-007 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Change control

IG-Q-019

A structured way to evaluate, approve, implement and verify relevant changes.

Practical meaning, example & references

Why it matters: Limits unintended effects from new people, systems or methods.

Example: A process change is risk-reviewed before a revised work instruction is issued.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-019 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Closing meeting

IG-A-019

A meeting to communicate audit findings, conclusions and next steps.

Practical meaning, example & references

Why it matters: Ensures management understands results and response expectations.

Example: The team presents nonconformities and explains follow-up responsibilities.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-019 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Competence

IG-Q-013

The demonstrated ability to apply knowledge and skills to achieve intended results.

Practical meaning, example & references

Why it matters: Supports meaningful decisions about task allocation and training.

Example: An inspector is observed using the required test method correctly.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-013 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Compliance obligation

IG-E-006

A legal requirement or other commitment the organization must or chooses to meet.

Practical meaning, example & references

Why it matters: Links environmental plans to applicable duties and promises.

Example: A site tracks permit limits and customer-imposed hazardous substance rules.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-006 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Confidentiality

IG-I-002

The principle that information is accessible only to authorized parties.

Practical meaning, example & references

Why it matters: Supports privacy, trust and contractual obligations.

Example: Payroll records are restricted to designated HR staff.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-002 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Conformity

IG-C-002

The condition of meeting a particular specified requirement.

Practical meaning, example & references

Why it matters: Clarifies what an audit or assessment is judging.

Example: A completed record demonstrates that a required check occurred.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-002 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Conformity assessment

IG-C-001

Activities used to determine whether specified requirements are fulfilled.

Practical meaning, example & references

Why it matters: Provides a framework for testing, inspection, certification and related assurance.

Example: An external body evaluates a management system against agreed criteria.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-001 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Consequence

IG-R-015

The outcome or impact if a relevant risk event occurs.

Practical meaning, example & references

Why it matters: Connects technical events to business objectives.

Example: A system outage could delay customer orders and create penalties.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-015 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Context of the organization

IG-Q-010

Internal and external conditions that influence the organization's purpose and results.

Practical meaning, example & references

Why it matters: Keeps a management system aligned with real business conditions.

Example: A firm reviews new regulations, staff capacity and market changes.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-010 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Continual improvement

IG-Q-018

An ongoing effort to increase an organization's ability to achieve better results.

Practical meaning, example & references

Why it matters: Encourages learning from data, audits and operational experience.

Example: A team improves order review after analysing six months of rework.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-018 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Contractor OH&S management

IG-H-016

Processes for coordinating safety duties where contractors work under relevant organizational control or influence.

Practical meaning, example & references

Why it matters: Addresses risks at interfaces between employers and sites.

Example: A site verifies contractor competence before electrical maintenance.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-016 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Correction

IG-Q-016

An action that fixes an identified nonconformity or its immediate effect.

Practical meaning, example & references

Why it matters: Restores an acceptable condition but may not prevent recurrence.

Example: An incorrectly labeled batch is relabeled and verified.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-016 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Corrective action

IG-Q-017

An action aimed at removing the cause of a nonconformity so it does not recur.

Practical meaning, example & references

Why it matters: Addresses systemic causes rather than simply fixing a faulty item.

Example: A label-control workflow is changed after repeated labeling mistakes.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-017 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Cryptography

IG-I-015

Use of mathematical methods to protect information and support security functions.

Practical meaning, example & references

Why it matters: Supports confidentiality, integrity and authenticity controls.

Example: An application validates digital signatures on released files.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-015 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Customer requirement

IG-Q-007

A need or expectation from a customer that applies to a product or service.

Practical meaning, example & references

Why it matters: Provides an acceptance baseline for delivery and evaluation.

Example: A buyer specifies a delivery window and traceability records.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-007 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Customer satisfaction

IG-Q-008

The customer's perception of how well expectations were met.

Practical meaning, example & references

Why it matters: Highlights gaps between internal performance and external experience.

Example: A support team analyses survey feedback and complaint recurrence.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-008 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Design and development

IG-Q-020

Activities that transform requirements into specified characteristics for a product, service or process.

Practical meaning, example & references

Why it matters: Supports controlled review, verification and validation of new solutions.

Example: An engineering team tests a revised component against design inputs.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-020 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Documented information

IG-Q-012

Information an organization needs to control and retain, regardless of medium.

Practical meaning, example & references

Why it matters: Helps teams distinguish instructions from evidence and prevent obsolete records.

Example: An approved procedure and its completed inspection log are controlled differently.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-012 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Elimination of hazard

IG-H-006

Removing a hazardous task, source or exposure altogether when feasible.

Practical meaning, example & references

Why it matters: Can provide the strongest form of risk reduction.

Example: A dangerous manual lift is removed through process redesign.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-006 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Emergency response

IG-H-018

Planned actions to protect people and control consequences when an emergency occurs.

Practical meaning, example & references

Why it matters: Strengthens readiness for events that develop quickly.

Example: A site runs an evacuation drill and checks response times.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-018 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Emerging risk

IG-R-020

A developing or newly recognized uncertainty whose behavior or impact may be difficult to assess.

Practical meaning, example & references

Why it matters: Prompts early scanning and flexible controls.

Example: A business tracks new AI-related data exposure scenarios.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-020 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Encryption

IG-I-016

Transformation of readable information into an unreadable form for parties without the appropriate key.

Practical meaning, example & references

Why it matters: Helps protect sensitive data at rest or in transit.

Example: A laptop's storage uses full-disk encryption.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-016 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Energy consumption

IG-E-013

The amount of energy used by an activity, asset or process.

Practical meaning, example & references

Why it matters: Connects environmental performance to operating decisions.

Example: A building monitors electricity usage by production shift.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-013 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Engineering control

IG-H-008

A physical or technical measure that limits exposure to a hazard.

Practical meaning, example & references

Why it matters: Provides protection less dependent on individual behavior.

Example: Local exhaust ventilation removes airborne contaminants near a workstation.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-008 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Environmental aspect

IG-E-002

An activity, product or service element that can interact with the environment.

Practical meaning, example & references

Why it matters: Provides a starting point for identifying environmental impacts.

Example: Solvent cleaning introduces possible air emissions and waste solvent.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-002 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental emergency preparedness

IG-E-016

Planning for and rehearsing responses to potentially harmful environmental events.

Practical meaning, example & references

Why it matters: Reduces response delay and potential damage.

Example: Workers practice containment of a simulated chemical spill.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-016 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental impact

IG-E-003

A change to the environment resulting wholly or partly from an activity.

Practical meaning, example & references

Why it matters: Connects an aspect to a consequence that needs management.

Example: Runoff carrying sediment affects a nearby watercourse.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-003 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental management system

IG-E-001

An organized approach to managing environmental responsibilities and performance.

Practical meaning, example & references

Why it matters: Makes environmental objectives, controls and review routines repeatable.

Example: A plant assigns waste, energy and emissions responsibilities by process.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-001 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental monitoring

IG-E-015

Planned collection and evaluation of data about environmental conditions or controls.

Practical meaning, example & references

Why it matters: Shows whether actions and permit-related controls are performing.

Example: A site regularly checks effluent measurements against applicable limits.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-015 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental objective

IG-E-008

A result the organization plans to achieve relating to environmental performance.

Practical meaning, example & references

Why it matters: Turns commitments into managed action.

Example: A plant targets reduced process-water consumption per unit of output.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-008 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental performance

IG-E-017

Results of managing environmental aspects and achieving environmental objectives.

Practical meaning, example & references

Why it matters: Shows whether an environmental system produces outcomes.

Example: A site compares waste intensity and compliance trends year over year.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-017 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Environmental policy

IG-E-007

Management's stated direction and commitments for environmental performance.

Practical meaning, example & references

Why it matters: Anchors objectives and accountability.

Example: A company commits to protection of the environment and responsible resource use.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-007 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Externally provided process

IG-Q-021

An activity performed by an outside provider that contributes to organizational outputs.

Practical meaning, example & references

Why it matters: Helps ensure outsourced work remains within appropriate controls.

Example: A lab subcontractor's test results are evaluated before release.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-021 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
First-party audit

IG-A-013

An audit performed by or on behalf of an organization on its own activities.

Practical meaning, example & references

Why it matters: Supports internal assurance and improvement.

Example: A company audits its purchasing process against its criteria.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-013 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Follow-up audit

IG-A-020

A subsequent check focused on implemented actions or unresolved findings.

Practical meaning, example & references

Why it matters: Verifies that corrective actions are effective, not merely reported complete.

Example: An auditor tests a revised purchasing approval process after closure.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-020 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Greenhouse gas emission

IG-E-012

A release of a climate-warming gas from a defined source or activity.

Practical meaning, example & references

Why it matters: Supports meaningful emissions inventories and improvement plans.

Example: A facility records fuel-related emissions for its boiler fleet.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-012 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Hazard

IG-H-001

A source or situation with potential to cause injury or ill health.

Practical meaning, example & references

Why it matters: Separates the source of harm from the likelihood of an adverse event.

Example: An unguarded moving machine part is identified during a walkthrough.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-001 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Hazard identification

IG-H-004

The process of spotting potential sources of work-related harm.

Practical meaning, example & references

Why it matters: Prevents risks from remaining invisible until an incident occurs.

Example: Operators identify pinch points during an equipment changeover.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-004 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Hierarchy of controls

IG-H-005

A preferred sequence for controlling hazards, generally favoring elimination and engineering before relying on PPE.

Practical meaning, example & references

Why it matters: Supports stronger safeguards than warnings alone.

Example: A factory installs guarding rather than relying only on caution signs.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-005 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Incident

IG-H-011

A work-related event that caused or could have caused injury or ill health.

Practical meaning, example & references

Why it matters: Creates an opportunity for investigation and improvement.

Example: A falling object is reported even though nobody is injured.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-011 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Information asset

IG-I-001

Information or an information-related resource that has value to the organization.

Practical meaning, example & references

Why it matters: Helps determine ownership, classification and protection needs.

Example: A customer database is registered as a business-critical asset.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-001 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Information security control

IG-I-009

A measure intended to change or maintain information security risk.

Practical meaning, example & references

Why it matters: Turns risk decisions into operational safeguards.

Example: Multi-factor authentication is applied to administrator access.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-009 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Information security incident

IG-I-017

An event or series of events that has affected or may compromise information security.

Practical meaning, example & references

Why it matters: Triggers investigation, containment and response.

Example: An unauthorized login is escalated under the incident process.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-017 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Information security risk

IG-I-005

Uncertainty that may affect confidentiality, integrity or availability of information.

Practical meaning, example & references

Why it matters: Links threats and vulnerabilities to business outcomes.

Example: A team assesses ransomware risk to its order management system.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-005 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Information security risk owner

IG-I-008

A person assigned authority and accountability for decisions about a particular information security risk.

Practical meaning, example & references

Why it matters: Clarifies treatment decisions and risk acceptance.

Example: A system owner approves mitigation actions for a sensitive application.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-008 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Inherent risk

IG-R-009

An estimate of risk before taking account of specified controls in a chosen assessment method.

Practical meaning, example & references

Why it matters: Illustrates underlying exposure and the contribution of controls.

Example: A chemical handling task is initially assessed before safeguards.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-009 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Integrity

IG-I-003

The quality of information being accurate and protected from unauthorized alteration.

Practical meaning, example & references

Why it matters: Supports reliable decisions and records.

Example: A signed change log helps detect modifications to production settings.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-003 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Interested party

IG-Q-009

A person or organization that can affect, be affected by, or influence an activity or system.

Practical meaning, example & references

Why it matters: Helps define relevant expectations without treating every possible stakeholder equally.

Example: A manufacturer considers customers, workers, regulators and key suppliers.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-009 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Least privilege

IG-I-012

A security design principle granting only access needed for assigned work.

Practical meaning, example & references

Why it matters: Reduces the impact of misuse and compromised accounts.

Example: A temporary contractor receives time-limited read-only access.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-012 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Life cycle perspective

IG-E-005

Considering relevant environmental effects across stages connected to a product or service.

Practical meaning, example & references

Why it matters: Helps avoid improving one stage while shifting impact elsewhere.

Example: A packaging review considers sourcing, use and end-of-life disposal.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-005 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Likelihood

IG-R-014

An indication of the chance or frequency of a relevant event.

Practical meaning, example & references

Why it matters: Supports transparent evaluation while acknowledging uncertainty.

Example: A team assesses how often a critical component could fail.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-014 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Management review

IG-Q-024

Leadership's structured evaluation of system suitability, adequacy and effectiveness.

Practical meaning, example & references

Why it matters: Connects operational evidence with strategic decisions and resource commitments.

Example: Executives review audit trends, objectives, complaints and investment needs.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-024 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Monitoring and measurement

IG-Q-023

Observing or determining the status or performance of a process or outcome.

Practical meaning, example & references

Why it matters: Produces evidence for timely decisions and improvement.

Example: A company tracks dispatch errors and checks measurement-device suitability.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-023 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Near miss

IG-H-012

An unplanned event that caused no harm but had credible potential to do so.

Practical meaning, example & references

Why it matters: Allows prevention before a more serious event occurs.

Example: A pallet falls in an empty aisle and is investigated.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-012 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Nonconformity

IG-Q-015

A situation in which a specified requirement has not been fulfilled.

Practical meaning, example & references

Why it matters: Creates a clear starting point for containment and investigation.

Example: A required calibration check was not performed before equipment use.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-015 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Occupational ill health

IG-H-013

An adverse physical or mental health condition linked to work exposure or activity.

Practical meaning, example & references

Why it matters: Expands OH&S beyond sudden accidents.

Example: A company investigates repeated noise-related hearing concerns.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-013 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
OH&S risk

IG-H-002

Uncertainty relating to potentially harmful work-related events and their consequences.

Practical meaning, example & references

Why it matters: Supports proportionate prioritization of safety controls.

Example: A team assesses possible injury from forklift movements.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-002 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Opening meeting

IG-A-018

An initial discussion confirming audit scope, methods, arrangements and communication.

Practical meaning, example & references

Why it matters: Helps avoid misunderstandings before evidence collection.

Example: The lead auditor reviews the agenda and confidentiality arrangements.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-018 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Operational environmental control

IG-E-009

A measure used in activities to manage identified environmental aspects.

Practical meaning, example & references

Why it matters: Translates environmental plans into daily working practice.

Example: A spill-tray inspection is included in a chemical-storage routine.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-009 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Opportunity

IG-R-002

A circumstance that may enable an improvement or advantageous outcome.

Practical meaning, example & references

Why it matters: Prevents risk management from focusing only on threats.

Example: Automation may reduce data entry errors and increase capacity.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-002 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Permit to work

IG-H-017

A controlled authorization process for specified high-risk work.

Practical meaning, example & references

Why it matters: Makes safety prerequisites and approvals explicit.

Example: A hot-work permit requires a fire watch and area inspection.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-017 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Personal protective equipment (PPE)

IG-H-010

Wearable protection used to reduce exposure where other controls do not fully remove hazards.

Practical meaning, example & references

Why it matters: Provides an additional layer, not a replacement for better upstream controls.

Example: Workers use fit-tested respiratory protection in a specified task.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-010 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Pollution prevention

IG-E-010

Measures designed to avoid, reduce or control the creation or release of contaminants.

Practical meaning, example & references

Why it matters: Often lowers both environmental harm and operating cost.

Example: A shop substitutes a lower-emission cleaning method.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-010 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Process approach

IG-Q-005

Managing connected activities as processes with inputs, outputs, owners and measures.

Practical meaning, example & references

Why it matters: Makes hand-offs and causes of poor results visible.

Example: A company maps quotation, order review, delivery and after-sales support.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-005 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Process owner

IG-Q-006

A person given accountability for a process and its intended results.

Practical meaning, example & references

Why it matters: Supports clear decision rights and meaningful follow-up.

Example: A logistics manager owns dispatch accuracy and corrective actions.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-006 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Quality management system

IG-Q-001

A coordinated way to direct and control how an organization achieves consistent quality outcomes.

Practical meaning, example & references

Why it matters: Connects leadership, processes and evidence rather than relying on isolated forms.

Example: A service provider maps customer onboarding, checks results and reviews recurring complaints.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-001 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Quality objective

IG-Q-003

A defined result the organization intends to achieve in its quality system.

Practical meaning, example & references

Why it matters: Turns policy into measurable priorities that teams can manage.

Example: A site targets fewer repeat customer complaints over a defined quarter.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-003 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Quality planning

IG-Q-004

Deciding in advance which processes, controls and resources are needed to meet quality requirements.

Practical meaning, example & references

Why it matters: Prevents important controls from being improvised after work begins.

Example: A project manager assigns checks, owners and acceptance criteria before launch.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-004 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Quality policy

IG-Q-002

Leadership's documented direction and commitments concerning quality.

Practical meaning, example & references

Why it matters: Gives process owners a shared basis for objectives and decisions.

Example: A manufacturer commits to dependable delivery and learning from customer feedback.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-002 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Recertification

IG-C-011

A reassessment process supporting the continuation of certification after its cycle.

Practical meaning, example & references

Why it matters: Provides continued assurance beyond the initial decision.

Example: A company undergoes an assessment before certificate renewal.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-011 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Remote audit

IG-A-017

An audit or part of an audit performed without physical presence at the audited location.

Practical meaning, example & references

Why it matters: Expands access but requires secure technology and suitable evidence.

Example: An auditor reviews live records and interviews staff by video.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-017 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Residual risk

IG-R-010

Risk remaining after controls or treatment actions have been considered.

Practical meaning, example & references

Why it matters: Shows whether more action or acceptance is needed.

Example: After interlocks are installed, the remaining exposure is reassessed.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-010 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Resource efficiency

IG-E-014

Achieving an intended outcome with less wasteful use of materials, energy or water.

Practical meaning, example & references

Why it matters: Creates practical improvement opportunities.

Example: A process redesign cuts water usage without affecting product quality.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-014 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Risk

IG-R-001

The effect that uncertainty may have on objectives, whether adverse or beneficial.

Practical meaning, example & references

Why it matters: Keeps assessment connected to actual decisions and outcomes.

Example: A supplier disruption could delay a product launch.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-001 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk acceptance

IG-R-017

An informed decision to retain a risk within appropriate decision authority.

Practical meaning, example & references

Why it matters: Clarifies responsibility when no further treatment is chosen.

Example: A manager accepts a documented low-impact operational risk.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-017 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk analysis

IG-R-007

Understanding the nature of a risk and estimating relevant consequences and likelihoods.

Practical meaning, example & references

Why it matters: Supports comparisons between treatment options.

Example: An operations manager analyses frequency and impact of process failures.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-007 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk appetite

IG-R-003

The broad level and types of risk an organization is willing to pursue or retain.

Practical meaning, example & references

Why it matters: Guides strategic trade-offs and escalation.

Example: Leadership limits exposure to untested critical vendors.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-003 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk communication

IG-R-019

Sharing risk information with people who need it for decisions or action.

Practical meaning, example & references

Why it matters: Supports coordinated responses and informed escalation.

Example: Project risks are reviewed with contractors and management.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-019 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk criteria

IG-R-005

Agreed terms of reference used to judge the significance of risks.

Practical meaning, example & references

Why it matters: Makes prioritization more consistent.

Example: A company defines safety, financial and reputational impact scales.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-005 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk evaluation

IG-R-008

Comparing analysis results with risk criteria to support decisions.

Practical meaning, example & references

Why it matters: Helps determine which risks need treatment or acceptance.

Example: High-scoring issues are escalated to the plant manager.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-008 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk identification

IG-R-006

Finding and describing circumstances that may affect objectives.

Practical meaning, example & references

Why it matters: Builds the inventory needed for further assessment.

Example: A team lists possible causes of missed delivery commitments.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-006 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk matrix

IG-R-016

A visual device for comparing categories of likelihood and consequence.

Practical meaning, example & references

Why it matters: Helps communicate prioritization but should not replace sound analysis.

Example: A 5×5 matrix flags several hazards for management review.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-016 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk monitoring

IG-R-018

Checking risks, controls and assumptions over time for relevant changes.

Practical meaning, example & references

Why it matters: Prevents risk registers becoming outdated snapshots.

Example: Owners review high-priority risks after each major change.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-018 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk owner

IG-R-013

The person or role responsible for management of a defined risk.

Practical meaning, example & references

Why it matters: Ensures a named decision maker can authorize treatment or acceptance.

Example: A warehouse manager owns the stock accuracy risk.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-013 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk register

IG-R-012

A structured record of identified risks, owners, assessments and treatment actions.

Practical meaning, example & references

Why it matters: Supports accountability and periodic review.

Example: A spreadsheet tracks risks and overdue mitigation commitments.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-012 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk tolerance

IG-R-004

The acceptable variation around a specific objective or risk criterion.

Practical meaning, example & references

Why it matters: Provides an operational threshold for decisions.

Example: A service owner sets a maximum tolerable interruption period.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-004 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Risk treatment

IG-R-011

Selecting and implementing actions to address risk.

Practical meaning, example & references

Why it matters: Moves risk analysis into operational decisions.

Example: A company changes supplier arrangements to reduce disruption exposure.

Related standard(s): ISO 31000:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-R-011 · Subject: Risk Management · Source reference: official ISO catalogue · Reviewed:

Risk Management View
Safety risk assessment

IG-H-003

A structured assessment of work hazards, existing safeguards and possible harm.

Practical meaning, example & references

Why it matters: Helps select and verify effective controls.

Example: A supervisor reviews lifting operations before a new task begins.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-003 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Scope of the QMS

IG-Q-011

The boundaries and applicability of a quality management system.

Practical meaning, example & references

Why it matters: Clarifies which sites, activities and products are covered.

Example: The scope covers design and assembly at two named facilities.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-011 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Second-party audit

IG-A-014

An audit conducted by a customer or a party acting for that customer, often focused on suppliers.

Practical meaning, example & references

Why it matters: Supports supply-chain assurance and contractual oversight.

Example: An automotive customer audits a component supplier.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-014 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Security awareness

IG-I-021

Understanding of security responsibilities and everyday behaviors that reduce risk.

Practical meaning, example & references

Why it matters: Strengthens human defenses alongside technical controls.

Example: Staff practice recognizing and reporting phishing attempts.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-021 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Significant environmental aspect

IG-E-004

An aspect the organization judges important using its documented significance criteria.

Practical meaning, example & references

Why it matters: Focuses controls and monitoring on material environmental interactions.

Example: A facility prioritizes wastewater discharge due to volume and sensitivity.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-004 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Stage 1 audit

IG-C-008

An initial certification audit stage used to review readiness and relevant management system information.

Practical meaning, example & references

Why it matters: Identifies significant issues before full certification evaluation.

Example: An auditor reviews scope, system maturity and planned Stage 2 readiness.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-008 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Stage 2 audit

IG-C-009

A subsequent certification stage evaluating implementation and effectiveness against the applicable requirements.

Practical meaning, example & references

Why it matters: Provides evidence for the certification body's decision.

Example: Auditors sample operations, interviews and completed system records.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-009 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Statement of Applicability (SoA)

IG-I-010

A documented record of the organization's selected information security controls and treatment rationale.

Practical meaning, example & references

Why it matters: Connects ISMS risk treatment choices to control coverage.

Example: An ISMS team records why a control applies and how it is implemented.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-010 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Substitution of hazard

IG-H-007

Replacing a hazardous material, process or item with a less hazardous alternative.

Practical meaning, example & references

Why it matters: Reduces exposure at its source.

Example: A cleaning agent is replaced with a lower-hazard formulation.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-007 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Surveillance audit

IG-C-010

A periodic assessment during a certification cycle to evaluate continued conformity.

Practical meaning, example & references

Why it matters: Helps maintain confidence between initial certification and renewal.

Example: A certification body reviews selected sites, processes and prior findings.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-010 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Suspension of certification

IG-C-014

A temporary status in which certification is not fully effective under scheme rules.

Practical meaning, example & references

Why it matters: Signals that normal certification claims may be restricted.

Example: A certificate is suspended while major unresolved conditions are addressed.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-014 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Third-party audit

IG-A-015

An audit by an external independent organization, often for certification or another assurance purpose.

Practical meaning, example & references

Why it matters: Provides confidence for parties outside the organization.

Example: A certification body audits a company against a management system standard.

Related standard(s): ISO 19011:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-A-015 · Subject: Auditing · Source reference: official ISO catalogue · Reviewed:

Auditing View
Threat

IG-I-006

A potential cause of unwanted harm to an information asset or system.

Practical meaning, example & references

Why it matters: Helps frame plausible security scenarios.

Example: Credential theft is considered a threat to privileged accounts.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-006 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Traceability

IG-Q-022

The ability to follow an item's history, application or location through relevant records.

Practical meaning, example & references

Why it matters: Enables effective investigations and targeted responses to problems.

Example: A batch code links raw material lots to final product shipments.

Related standard(s): ISO 9000:2026; ISO 9001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-Q-022 · Subject: Quality · Source reference: official ISO catalogue · Reviewed:

Quality View
Vulnerability

IG-I-007

A weakness that could be exploited or contribute to an adverse security event.

Practical meaning, example & references

Why it matters: Supports prioritized remediation.

Example: An unpatched service creates an avoidable attack path.

Related standard(s): ISO/IEC 27000:2026; ISO/IEC 27001:2022

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-I-007 · Subject: Information Security · Source reference: official ISO catalogue · Reviewed:

Information Security View
Waste hierarchy

IG-E-011

A preference order for avoiding, reducing, reusing, recycling and recovering waste when suitable.

Practical meaning, example & references

Why it matters: Supports better material choices before disposal.

Example: A warehouse reuses returnable containers before sending materials to recycling.

Related standard(s): ISO 14001:2026

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-E-011 · Subject: Environment · Source reference: official ISO catalogue · Reviewed:

Environment View
Withdrawal of certification

IG-C-015

The ending of certification under applicable scheme arrangements.

Practical meaning, example & references

Why it matters: Prevents continued use of an invalid certification claim.

Example: A certification body withdraws a certificate after required conditions are not met.

Related standard(s): ISO/IEC 17000:2020

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-C-015 · Subject: Certification · Source reference: official ISO catalogue · Reviewed:

Certification View
Worker consultation

IG-H-014

Seeking and considering workers' views before decisions affecting OH&S are made.

Practical meaning, example & references

Why it matters: Improves the practicality and acceptance of safety controls.

Example: Operators review a proposed machine-guarding design.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-014 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View
Worker participation

IG-H-015

Active involvement of workers in relevant OH&S processes and decisions.

Practical meaning, example & references

Why it matters: Improves hazard reporting and ownership.

Example: Employees join a safety risk review and trial a new control.

Related standard(s): ISO 45001:2018

Interpretation: Plain-language editorial explanation; not official ISO wording.

Record ID: IG-H-015 · Subject: OH&S · Source reference: official ISO catalogue · Reviewed:

OH&S View

Review record: Each glossary entry includes an ID, subject area, contextual standard reference and review date. Editorial draft compiled 09 November 2026; specialist validation is recommended before formal reliance.

Commonly Confused ISO Terms

These distinctions matter when a company writes procedures, assigns actions or evaluates audit evidence. The explanations are educational summaries, not exact quotations from ISO publications.

Correction vs Corrective Action

Correction fixes an existing problem; corrective action investigates and addresses a cause to reduce the chance of it happening again.

Workplace example: A mislabeled unit is relabeled (correction), then the labeling approval process is redesigned (corrective action).

Further reading: ISO 9000:2026; ISO 9001:2026

Audit vs Inspection

An audit evaluates verifiable evidence against a set of criteria; an inspection examines a defined item or condition for specified characteristics.

Workplace example: An auditor evaluates the calibration-control process; an inspector checks a particular gauge or finished item.

Further reading: ISO 19011:2026; ISO/IEC 17000:2020

Risk vs Hazard

Risk concerns uncertainty affecting objectives; a hazard is a source or situation with potential to cause harm. They are related but not interchangeable.

Workplace example: An unguarded conveyor is a hazard; the possibility and severity of injury form part of the OH&S risk assessment.

Further reading: ISO 31000:2018; ISO 45001:2018

Certification vs Accreditation

Certification is third-party attestation regarding specified requirements; accreditation recognizes competence and impartiality of a conformity assessment body.

Workplace example: A company may be ISO 9001 certified by a certification body, while that body may be accredited for that certification activity.

Further reading: ISO/IEC 17000:2020

How to Use Terminology in an ISO Project

01

Find the Term

Search the English expression or select the related management-system discipline.

02

Read the Context

Compare the plain-language explanation, significance and example.

03

Check the Standard

Verify exact terminology and applicable requirements in the licensed ISO publication.

04

Apply Consistently

Use approved wording in procedures, registers, training and audit criteria.

05

Review Changes

Update internal terminology when a standard or organizational context changes.

Keep Your ISO Vocabulary Consistent

An internal glossary is most useful when each important expression has an approved meaning for the organization's context. Refer to the applicable edition when wording affects a requirement, contractual obligation or audit conclusion.

  • Identify owners: assign a qualified process or management-system owner to review terminology used in controlled documents.

  • Control changes: record revisions when a standard changes or an internal process is redesigned.

  • Train consistently: use common terminology in procedures, inductions, records and audit interviews.

Use the glossary as a learning aid, and record organization-specific interpretations in an approved document when necessary.

ISO management system documentation and review matrix supporting consistent terminology
Consistent terminology strengthens process ownership and evidence-based assessment.

Official References and Related Knowledge

The standards below offer official subject-matter context. Use the official ISO catalogue to confirm each publication's title, edition and current status. Consult the applicable authorized document for its normative definitions.

ISO Publications