Quality leadership: running ISO 9001 and ISO 13485 as one system, not two.

Why do companies end up with two systems?

Many companies hold both ISO 9001 and ISO 13485, because they serve industrial and medical customers from the same sites. Too many of them run two quality systems to do it: two manuals, two sets of procedures, two management reviews. It usually happens by accident. ISO 9001 came first, then a medical customer arrived, a consultant built an ISO 13485 system alongside, and nobody joined them up. The result is duplicated effort, procedures that contradict each other, and people unsure which version applies to the job in front of them.

What is the common core?

The two standards share most of their structure in practice. Document control, records, management responsibility, resources, competence, purchasing, production, measurement, nonconformance, corrective action, internal audit and management review all exist in both. Build one process for each, written to satisfy both standards.

How do you handle the differences?

Handle them inside the same processes. ISO 13485 requires more documented procedures and records, regulatory requirements built in, product risk management under ISO 14971, validation of processes and of software, stricter traceability for some devices, complaint handling with reporting decisions, and medical device files. ISO 9001:2026 places more emphasis on context, opportunities, quality culture, planned change and continual improvement. Write each process to the stricter of the two, with medical-specific steps that apply only to medical product.

What does that look like in practice?

One nonconformance procedure for all products, with an extra step for medical product: assess whether the issue affects safety or must be reported. One purchasing procedure, with supplier criticality that includes medical risk. One complaint process, with a reportability decision triggered for medical devices.

What about documents and records?

One quality manual that meets ISO 13485's requirements and also covers the ISO 9001 themes. One master document list. Records that carry a flag for medical product where traceability or retention rules differ.

Template for this step: the Document Control SOP and master document list are in the ISO 13485 Document Control & Records Kit ($79).

How do audits and reviews fit?

One internal audit programme covering both standards, with the audit checklists cross-referenced, and one management review with the inputs of both standards on the agenda. That alone saves days a year.

Can certification be combined?

Many certification bodies can audit both standards together, as a combined audit, which reduces audit days and disruption. Ask for it. The benefits are real: less duplication, fewer contradictions, and a simpler story for your people. This is how we work, and for medical product, these extra steps apply.

The ISO 13485 Gap Assessment Workbook shows what your ISO 9001 system needs to add. If you are starting the ISO 9001 side fresh, the ISO 9001:2026 Complete QMS Documentation Kit is the base.