A gap analysis compares what the organization does today with each ISO 9001:2015 requirement and
answers three questions: how ready are we, which gaps would stop certification, and in what order do we
close them. scripts/gap_template.py prints the worksheet (45 auditable clauses, paraphrased);
scripts/gap_score.py scores it, grades the gaps and gives a verdict.
Trigger Conditions
Activate this skill when the user:
- Is starting ISO 9001 and wants a baseline before writing documents
- Has a stage 1 or stage 2 certification audit coming and wants to know the risks
- Has inherited a QMS (new quality manager, acquisition) and needs a health check
- Asks "what are we missing for ISO 9001?", "are we ready for certification?", "what is mandatory?"
For explaining a single clause in depth use iso-9001-clause-explainer; for the timeline to certification, iso-9001-certification-roadmap-planner.
Workflow
1. SCOPE -> agree sites, products/services and any clause that may not apply (only 7.1.5, 8.3, 8.5.3, 8.5.5)
2. WORKSHEET -> python scripts/gap_template.py > gap.csv
3. ASSESS -> walk each process; for every row set status met / partial / not-met / n/a and write the evidence seen
4. SCORE -> python scripts/gap_score.py gap.csv
5. PRIORITISE -> majors first, then by dependency (context -> processes -> controls -> audit -> review)
6. PLAN -> owner, action, evidence of closure and due date per gap
7. RE-SCORE -> monthly, same worksheet, report the trend to top managementAssessing Each Row
| Status | Use when | Evidence column must say |
|---|---|---|
| met | It is done, consistently, and you have seen proof | Document number, record date, who was interviewed |
| partial | It exists but is incomplete, inconsistent or not recorded | What exists and what is missing |
| not-met | Nothing in place | - |
| n/a | Only for 7.1.5, 8.3, 8.5.3, 8.5.5, and only if it does not affect conformity | The justification that will go in the scope (4.3) |
"Met" without evidence is an opinion. Sample on the shop floor and across shifts, not only in the quality office. Evidence expected per clause and the most common first-assessment gaps: clause-evidence-guide.md.
Gap Codes (gap_score.py)
| Code | Grade | Meaning |
|---|---|---|
| GA001 | major | Core clause not met: 4.3, 4.4, 5.2.1, 6.1, 6.2, 7.5, 8.4, 8.6, 8.7, 9.2, 9.3, 10.2 |
| GA002 | minor | Other clause not met |
| GA003 | minor | Partially implemented |
| GA004 | check | Marked met, no evidence written |
| GA005 | error | n/a on a requirement that always applies |
| GA006 | check | Clause missing or status blank / invalid |
Readiness: 90.2% across 41 assessed clauses -> NOT READY
By section: 4: 87.5% 5: 100% 6: 50% 7: 94.4% 8: 100% 9: 70% 10: 100%
GA001 [major] 9.2 Internal audit: not implemented (needs a record)
GA003 [minor] 9.3 Management review: partially implemented (needs a record): one review held; outputs not recordedA high percentage with a major is still NOT READY: a single missing internal audit or management review stops certification. Grade definitions, readiness thresholds and how to turn gaps into a plan: grading-and-closure.md.
Mandatory Documented Information
ISO 9001 requires only a short list of documents (scope, process support information, policy, objectives,
operational criteria) and about twenty kinds of records. The worksheet's documented_info column marks them;
the full list is in clause-evidence-guide.md.
A quality manual and most procedures are optional: recommend them only where their absence would cause errors.
Output Format
When reporting a gap analysis, give:
- Scope assessed - sites, products/services, declared non-applicable clauses with justification.
- Readiness - overall %, by section, and the verdict from
gap_score.py. - Gaps - majors first, each with clause, what is missing and why it matters.
- Closure plan - table of gap, owner, action, evidence of closure, due date, ordered by dependency.
- Earliest credible certification date - allowing about 3 months of records, one audit cycle and one management review before stage 2.
Scripts
python scripts/gap_template.py > gap.csv # CSV worksheet: clause, title, requirement, documented_info, status, evidence, notes
python scripts/gap_template.py --clause 8.5 # one clause family
python scripts/gap_template.py --markdown # handout table for a workshopExit codes: 0 printed, 2 unknown clause.
python scripts/gap_score.py gap.csv
python scripts/gap_score.py gap.csv --jsonAccepts status aliases (yes/no/partially/na). Exit codes: 0 no major gaps or errors, 1 major gaps or
errors, 2 read error or missing columns. Both scripts share the clause table in scripts/_clauses.py.
Additional Resources
| File | Content |
|---|---|
| clause-evidence-guide.md | Evidence an auditor samples per clause, common gaps, full list of mandatory documents and records |
| grading-and-closure.md | Major/minor/OFI definitions, readiness thresholds, dependency-ordered closure plan, interview tips |
8d-problem-solving-report-writer
Write and review 8D problem-solving reports for customer complaints and serious nonconformities (automotive and aerospace practice: Ford Global 8D, VDA, GM, Stellantis formats): D0 emergency response, D1 cross-functional team and champion, D2 problem description with 5W2H and is / is-not and no cause in the statement, D3 interim containment within 24 hours with verification and clean point, D4 verified occurrence and escape (non-detection) root causes plus systemic cause, D5 permanent corrective actions for each cause verified before implementation, D6 implementation, validation with production data and removal of containment, D7 PFMEA, control plan and read-across to similar products, D8 closure and recognition. Checks an 8D discipline by discipline for missing content, human-error root causes, missing escape cause or action, late containment and dates out of order.
acceptance-sampling-plan-selector
Select and evaluate acceptance sampling plans for incoming, in-process and final inspection: ANSI/ASQ Z1.4 / ISO 2859-1 single sampling under normal inspection (code letter from lot size and inspection level I, II, III, S-1 to S-4; sample size, Ac and Re from AQL, following the table's arrows to the correct plan; 100% when n reaches the lot size; AQLs above 10 per 100 units), operating characteristic curves (Pa at any quality, producer's quality level, indifference point, LTPD, AOQ and AOQL, binomial or hypergeometric), plans designed from producer and consumer risk, and c = 0 zero-acceptance plans. Covers AQL choice by defect class, switching rules between normal, tightened and reduced inspection, when sampling is not appropriate, and random sampling.
approved-supplier-list-manager
Manage and audit an approved supplier list (ASL) / external provider register for ISO 9001 8.4.1, IATF 16949 8.4 and AS9100 8.4.1: supplier status (approved, conditional, probation, pending, disqualified), scope of approval by commodity and process, risk class, certification and expiry, re-evaluation intervals by risk, conditions with end dates, single-source contingency, approver and customer-directed sources. Audits the list for expired or expiring certificates, overdue re-evaluations, conditional or probation status past its decision date, high-risk suppliers without the required certification, single-source suppliers without backup and missing approvers, and checks purchase orders for suppliers that are off-list, disqualified or pending, or buying outside the approved scope. Covers ERP blocks, PO requirements, off-list and emergency purchases.
apqp-phase-planner
Plan and track Advanced Product Quality Planning (AIAG APQP 3rd edition, IATF 16949) for a new or changed automotive part: back-schedule the five phases (plan and define, product design, process design, product and process validation, launch and feedback) from the start-of-production date by program complexity, with overlap, PPAP lead and safe-launch period; list the deliverables and gate for each phase (DFMEA, DVP&R, feasibility, process flow, PFMEA, control plans, MSA, Ppk, run at rate, PPAP, safe launch, lessons learned); adjust for build-to-print suppliers; flag compressed timelines and late or untracked deliverables against a status list. Covers gate reviews, red/yellow/green status reporting, run at rate and safe-launch exit criteria.
as9100-gap-analyzer
Run an AS9100D / EN 9100:2018 gap analysis for aviation, space and defence suppliers on the requirements added to ISO 9001: on-time delivery and conformity focus, management representative, ethics and human-factors awareness, operational planning and operational risk management, configuration management, product safety, counterfeit-part prevention, special requirements, critical items and key characteristics, external provider register and flow-down, FOD prevention, tooling and NC program control, special process validation, first article inspection (AS9102), traceability, in-service data and nonconforming product control. Generates and scores a worksheet, grades missing core controls as major, and checks invalid n/a claims. Covers AS9101/AS9104, OASIS, AS9102 FAI forms, counterfeit standards (AS5553, AS6174, AS6081), NADCAP and the planned IA9100 transition.
audit-report-writer
Write internal, supplier and pre-certification audit reports with the content ISO 19011:2018 6.5 expects: audit objectives, scope, criteria with revisions, dates, team and auditees, method and sampling statement, specific strengths, findings table and three-part finding details (requirement, evidence, statement), conclusion on the degree of fulfilment of criteria, diverging opinions, follow-up deadlines and distribution. Builds a Markdown report from a JSON audit record, generates the conclusion from the findings (major / minor / none) and flags reports missing required content or findings without clause or evidence. Covers conclusion wording, closing meetings, response expectations and verifying corrective actions.