ISO 9001
International standard for quality management systems
EN 1090
EU harmonized standard for steel/aluminium structures execution
Quick Verdict
ISO 9001 provides voluntary QMS certification for global efficiency, while EN 1090 mandates CE marking for EU structural steel/aluminium via FPC. Companies adopt ISO 9001 for broad quality gains; EN 1090 for legal market access and compliance.
ISO 9001
ISO 9001:2015 Quality management systems – Requirements
Key Features
- Risk-based thinking embedded throughout QMS
- PDCA cycle drives continual improvement
- Seven quality management principles foundation
- High-Level Structure enables standard integration
- Process approach applicable to all organizations
EN 1090
EN 1090: Execution of steel and aluminium structures
Key Features
- Risk-based Execution Classes (EXC1-EXC4)
- Factory Production Control (FPC) certification
- Welding management via ISO 3834
- Material traceability and NDT requirements
- CE marking with Notified Body oversight
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
ISO 9001 Details
What It Is
ISO 9001:2015 is the international certification standard for quality management systems (QMS). It specifies requirements for organizations to consistently meet customer and regulatory needs through a process-based, risk-oriented framework using the PDCA cycle.
Key Components
- 10 clauses (4-10 auditable): context, leadership, planning, support, operation, evaluation, improvement.
- Built on **seven quality principlescustomer focus, leadership, engagement, process approach, improvement, evidence-based decisions, relationships.
- Annex SL High-Level Structure for integration; voluntary third-party certification with audits.
Why Organizations Use It
- Enhances customer satisfaction, efficiency, risk management.
- Boosts market access, reputation; over 1M certifications worldwide.
- Drives cost savings, compliance; signals trust to stakeholders.
Implementation Overview
- Gap analysis, process mapping, training, internal audits.
- 6-12 months typical; suits all sizes/sectors; certification via accredited bodies with surveillance.
EN 1090 Details
What It Is
EN 1090 is a family of European harmonized standards (EN 1090-1 for conformity assessment, EN 1090-2 for steel, EN 1090-3 for aluminium) governing execution and CE marking of structural components under the CPR. It ensures safe fabrication via a risk-based approach using Execution Classes (EXC1–EXC4) to scale controls by failure consequences.
Key Components
- **Factory Production Control (FPC)Certified system for traceability, processes, inspections.
- **Technical requirementsWelding (ISO 3834), materials, tolerances, corrosion, NDT.
- **Conformity modelAVCP, DoP, Notified Body audits/surveillance.
Why Organizations Use It
- Mandatory for EEA market access with CE marking.
- Reduces liability, rework; enables high-risk projects.
- Builds trust, competitive advantage via quality assurance.
Implementation Overview
Phased: gap analysis, FPC build, training, ITT/ITC, NB certification. For fabricators in EU/UK construction; scales by size/EXC.
Key Differences
| Aspect | ISO 9001 | EN 1090 |
|---|---|---|
| Scope | Quality management systems for all organizations | Execution and conformity of steel/aluminium structures |
| Industry | All sectors worldwide, any size | Construction, steel/aluminium fabrication, EU-focused |
| Nature | Voluntary certifiable QMS standard | Mandatory for CE marking under CPR regulation |
| Testing | Internal audits, management reviews, certification audits | FPC certification, ITT/ITC, notified body surveillance |
| Penalties | Loss of certification, market disadvantage | Market exclusion, fines, legal liability |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about ISO 9001 and EN 1090
ISO 9001 FAQ
EN 1090 FAQ
You Might also be Interested in These Articles...
The DORA 'Hot Seat' Blueprint: Preparing Leadership and the Management Body for Regulatory Interviews
Prepare your Board & Management Body for DORA audits. Master the human element: demonstrate active oversight & accountability in regulatory interviews. Get the
CIS Controls v8.1 for Cloud & SaaS: A Practical Safeguard Playbook for AWS/Azure/GCP and Microsoft 365
Turn CIS Controls v8.1 into a cloud-first playbook for AWS, Azure, GCP & Microsoft 365. Get actionable IaaS/PaaS/SaaS safeguards, automation patterns, evidence
ISO 27701 Implementation Roadmap: Step-by-Step Guide for Extending Your ISO 27001 ISMS to PIMS
Extend ISO 27001 ISMS to ISO 27701 PIMS with this step-by-step roadmap. Master role-specific controls, avoid pitfalls, meet certification evidence needs for pri
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Check out these other Gradum.io Standards Comparison Pages
AS9100 vs 23 NYCRR 500
Compare AS9100 vs 23 NYCRR 500: Aerospace QMS mastery meets NYDFS cybersecurity mandates. Unlock risk strategies, compliance roadmaps, and implementation wins now.
CMMC vs HIPAA
CMMC vs HIPAA: Compare DoD cybersecurity levels & healthcare PHI safeguards. Key NIST controls, compliance strategies for FCI/CUI protection. Expert insights—get compliant now!
ISO 27032 vs BREEAM
ISO 27032 vs BREEAM: Cybersecurity guidelines for Internet threats meet sustainable building certification. Compare scopes, boost resilience, compliance & value—explore key differences now!