An ISO 9001 supplier quality checklist exists because Clause 8.4 makes you accountable for the quality of anything you buy in — not just what you make yourself. “Externally provided processes, products, and services” covers everything from raw materials and components to outsourced manufacturing steps and subcontracted services. If a supplier’s failure reaches your customer, Clause 8.4 says the failure is still yours to answer for.
Here is what Clause 8.4 actually requires, and a checklist to put it into practice.
ISO 9001 SUPPLIER QUALITY CHECKLIST — WHAT CLAUSE 8.4 COVERS
Clause 8.4 of the ISO 9001:2015 standard breaks into three connected requirements:
8.4.1 — Type and extent of control. You must determine controls proportionate to the risk each supplier poses — a critical raw material supplier needs tighter control than a stationery vendor.
8.4.2 — Type and extent of control (criteria). You must define criteria for evaluating, selecting, monitoring performance, and re-evaluating external providers, and keep records of these evaluations.
8.4.3 — Information for external providers. You must communicate your requirements clearly to suppliers before the relationship starts — specifications, approval methods, competence requirements, and your right to verify at their premises if needed.
STEP 1 — CLASSIFY SUPPLIERS BY RISK, NOT JUST BY SPEND
Not every supplier needs the same level of scrutiny. Classify suppliers by the risk their failure poses to your product or service — a component that goes directly into your finished product warrants far more control than a general facilities supplier, regardless of contract value.
STEP 2 — DEFINE SELECTION CRITERIA BEFORE YOU NEED THEM
Build selection criteria into your procurement process, not as an afterthought once a supplier is already delivering. Typical criteria include quality certifications held, technical capability, delivery performance history, and financial stability for critical suppliers.
STEP 3 — SET CLEAR REQUIREMENTS AT THE START OF THE RELATIONSHIP
Specify exactly what you need before the first order: product or service specifications, acceptance criteria, required certifications or competencies, and whether you reserve the right to audit their premises. Ambiguity here is where most supplier disputes start.
STEP 4 — MONITOR PERFORMANCE ON A DEFINED SCHEDULE
Track supplier performance against measurable criteria — on-time delivery rate, defect rate, response time to corrective action requests — not just a gut feeling at renewal time. Set a review frequency proportionate to risk classification from Step 1.
STEP 5 — RE-EVALUATE, DON’T JUST RENEW
A supplier that passed evaluation three years ago may not still meet your requirements today. Build re-evaluation into your schedule, and treat a supplier’s declining performance data as a trigger for an earlier review, not something to address only at contract renewal.
STEP 6 — DRIVE SUPPLIER NON-CONFORMITIES INTO YOUR CAPA PROCESS
When a supplier issue reaches your process, treat it with the same rigour as an internal non-conformity. Feed it into your corrective action (CAPA) guide process, and track whether the supplier’s corrective action was actually effective — not just submitted on time.
STEP 7 — KEEP RECORDS THAT SURVIVE AN AUDIT
Clause 8.4.2 explicitly requires documented information on evaluation results and any actions arising. Auditors will ask to see the evaluation criteria, the evidence behind a supplier’s approval, and the trail of any performance issues and how they were resolved.
HOW THIS FITS YOUR WIDER QMS
Supplier control doesn’t sit in isolation — it connects directly to the documentation required for ISO 9001:2026 certification more broadly, since supplier records are among the documented information auditors check first. If you’re building a broader internal audit programme, our combined ISO audit template covers ISO 9001 alongside ISO 14001 and ISO 45001 in one system. For the practical side of supplier relationship management beyond the compliance checklist, see our Supplier Management guide — and for further reading on building a QMS geared toward sustained performance rather than just certification, ISO 9004 is worth reviewing alongside the core standard.
GET THE FREE CHECKLIST
We’ve built a ready-to-use ISO 9001 supplier quality checklist covering classification, selection criteria, monitoring, and re-evaluation in one document.
👉 [Download the free ISO 9001 Supplier Quality Checklist]
Need the full documented procedure and a supplier scoring matrix? See our ISO 9001:2026 document pack for the complete set.