Why HR Managers Are More Central to ISO 9001 Than They Realise
If your organisation is pursuing or maintaining ISO 9001 certification, there is a good chance someone has told you that it is primarily a quality or operations thing. That is only partially true. The reality is that several of the most critical requirements in ISO 9001:2015 sit squarely in the HR function, and if HR is not actively engaged, the system will have gaps that a certification auditor will find.
On this page
This article is written specifically for HR managers and HR business partners who are working alongside a quality team, or who have been handed responsibility for certain parts of the quality management system. We will walk through exactly which clauses touch HR, what you are expected to produce, and where HR managers commonly get tripped up during audits.
The ISO 9001 Clauses That HR Managers Need to Understand
ISO 9001:2015 is structured around ten clauses. Not all of them are HR territory, but several have direct and significant HR implications. The most relevant ones are Clause 7.1.2 (People), Clause 7.2 (Competence), Clause 7.3 (Awareness), Clause 7.4 (Communication), and Clause 5.3 (Organisational Roles, Responsibilities and Authorities). There are also indirect connections to Clause 6.1 (Actions to Address Risks and Opportunities) and Clause 9.3 (Management Review).
Let us go through each of these in practical terms.
Clause 7.1.2: People
This clause requires the organisation to determine and provide the persons necessary for the effective operation of the quality management system and for its processes. In plain English, that means HR needs to be involved in workforce planning with quality in mind, not just headcount or budget. If a key process is understaffed or staffed with people who do not have the right skills, that is a conformance issue under ISO 9001, not just an operational inconvenience.
In practice, this means HR should be asking: do we have enough people with the right capabilities to consistently deliver quality outcomes? This is especially relevant during periods of growth, restructuring, or high turnover.
Clause 7.2: Competence
This is arguably the most HR-intensive clause in the entire standard. Clause 7.2 requires the organisation to determine the necessary competence of persons doing work under its control that affects the quality of products and services. It then requires the organisation to ensure those persons are competent based on education, training, or experience, and to take action where competence gaps exist. Finally, it requires documented information as evidence of competence.
What this means for HR is substantial. You need a system for defining competency requirements per role, evaluating whether current employees meet those requirements, identifying gaps, and acting on them through training or other means. You also need records. A training matrix is the most common tool used, and building a proper ISO training matrix is something HR should lead, not delegate to quality alone.
The standard does not prescribe a specific format. What it does require is that you can demonstrate, with evidence, that the people doing work affecting quality are actually competent to do it. Job descriptions alone are not sufficient. You need records of inductions, training completions, qualifications, licences, and performance assessments where relevant.
Clause 7.3: Awareness
Clause 7.3 requires that persons doing work under the organisation's control are aware of the quality policy, the relevant quality objectives, their contribution to the effectiveness of the quality management system, and the implications of not conforming with requirements. This is a communication and induction responsibility that lands firmly in HR territory.
A common audit finding is that employees cannot articulate the quality policy or explain how their role contributes to quality outcomes. This is not just a quality team failure. It is an onboarding and ongoing communication failure. HR needs to ensure that quality awareness is built into induction programs and reinforced through internal communications.
Clause 5.3: Organisational Roles, Responsibilities and Authorities
This clause requires top management to ensure that responsibilities and authorities for relevant roles are assigned, communicated, and understood. HR is typically responsible for maintaining position descriptions and organisational charts. Under ISO 9001, those documents need to clearly reflect quality-related responsibilities, not just operational ones.
If your position descriptions do not mention anything about quality responsibilities, that is a gap. Auditors will look at whether people know what their quality responsibilities are, and whether those responsibilities are formally documented.
What HR Managers Are Expected to Produce for ISO 9001
Let us get specific about the documented information that HR is typically responsible for under ISO 9001. These are the records and documents an auditor will ask to see.
Competency Records and Training Evidence
You need records that demonstrate each person in a role affecting quality has the required competence. This typically includes copies of relevant qualifications or licences, records of completed training (with dates), induction checklists, and any competency assessments or performance review notes that speak to capability. These records need to be maintained and kept up to date. If someone completes a refresher course, that record needs to be added. If someone moves into a new role, their competency profile needs to be reviewed against the new requirements.
Training Needs Analysis and Gap Closure Records
ISO 9001 does not just require you to record training. It requires you to identify competence gaps and take action to close them. That means HR should have a process for conducting training needs analysis, either at an individual level through performance reviews or at an organisational level when processes change, new equipment is introduced, or new regulatory requirements come into effect. Records of the actions taken and their effectiveness are also required.
Position Descriptions with Quality Responsibilities
As mentioned under Clause 5.3, position descriptions need to reflect quality responsibilities. This does not mean every role needs a lengthy quality section. It means the description should make clear what quality-related expectations apply to the role, whether that is following documented procedures, maintaining records, participating in audits, or reporting non-conformances.
Induction Records with Quality Awareness Content
Your induction program needs to include quality awareness content, and you need records showing that employees completed it. This is often where organisations fall short. They have a quality induction module but no record of who attended or when. That is an audit finding waiting to happen.
Common Audit Findings That Originate in HR
Having conducted and reviewed many ISO 9001 audits, the HR-related findings that come up most consistently include the following.
Competency Records Are Incomplete or Out of Date
This is the most common HR-related finding. Training records exist but they are stored in different places, some are missing, and nobody has checked whether they are current. The fix is a centralised training register or training matrix that is reviewed at least annually and updated whenever someone completes training or changes roles.
No Evidence of Effectiveness Evaluation
ISO 9001 Clause 7.2 requires organisations to evaluate the effectiveness of actions taken to address competence gaps. Simply sending someone to a training course is not enough. You need to assess whether the training actually worked. This could be as simple as a post-training assessment, a supervisor sign-off, or a note in the performance review confirming the person is now competent. Without this, you have an incomplete loop.
Quality Policy Not Embedded in Induction
Auditors will ask employees about the quality policy. If employees cannot explain it in basic terms, that points back to the induction and awareness program. HR needs to ensure the quality policy is explained during onboarding and that employees understand how it applies to their work, not just that it exists.
Position Descriptions Not Reviewed Since Certification
Organisations often update their quality management system but forget to update position descriptions. When an auditor compares what the QMS says a role is responsible for against what the position description says, inconsistencies create non-conformances. HR should be part of the process for reviewing and updating position descriptions whenever the QMS changes.
How HR and Quality Should Work Together
One of the biggest structural problems in ISO 9001 implementations is that HR and quality operate in silos. The quality manager builds the system, HR manages people, and the two rarely coordinate until an audit is approaching. That approach creates gaps and last-minute scrambling.
A better model is to establish a clear working relationship between HR and quality from the start. This means HR is involved in defining competency requirements when processes are documented. It means the quality manager flags changes to the QMS that affect role responsibilities so HR can update position descriptions. It means HR includes quality awareness in induction without being asked every time.
If your organisation has a management review process under Clause 9.3, HR data should be feeding into it. Turnover rates, training completion rates, competency gap closure rates, and any HR-related non-conformances are all relevant inputs. Understanding how leadership and top management obligations interact with the QMS helps HR managers see where their inputs are needed at the strategic level, not just the operational one.
ISO 10015 and Why HR Managers Should Know About It
There is a supporting standard that HR managers involved in ISO 9001 should be aware of. ISO 10015 provides guidance on quality management in training, covering the process of identifying training needs, designing training, delivering it, and evaluating its effectiveness. It is not a certifiable standard on its own, but it is directly referenced in the ISO 9001 framework as a supporting guideline for Clause 7.2.
If your organisation is struggling to demonstrate a structured approach to competence development, ISO 10015 gives you a practical framework to follow. It aligns well with what most HR professionals already know about learning and development, but it frames it in a way that satisfies ISO 9001 requirements.
Competence vs Awareness vs Training: Understanding the Difference
These three terms are used differently in ISO 9001 and it is worth being clear on the distinction, because confusing them leads to incomplete systems.
Competence is the ability to apply knowledge and skills to achieve intended results. It is demonstrated through education, training, or experience. It is role-specific and outcome-focused. A person is either competent to perform a task or they are not.
Awareness is understanding. It is about knowing why things matter, what the quality policy says, how your role contributes to quality, and what happens if you do not follow the requirements. Awareness does not require formal training. It can be achieved through briefings, toolbox talks, team meetings, or visual management.
Training is one mechanism for building competence or awareness. It is not the same as competence. Sending someone to a training course does not automatically make them competent. The standard requires you to evaluate whether the training resulted in the intended competence.
HR managers who understand this distinction build better systems. They do not conflate a training attendance record with evidence of competence, and they do not assume that because someone attended an induction they are now aware of everything they need to be.
The ISO 9001:2015 standard itself is explicit that competence is determined by the organisation based on what is necessary for the role, not by a generic checklist.
Practical Steps HR Managers Can Take Right Now
If you are an HR manager who has just been handed ISO 9001 responsibilities or who wants to strengthen your organisation's compliance posture, here is where to start.
- Audit your current training records. Pull together all training records for roles that affect quality. Check for gaps, missing dates, and records that have not been updated in over two years. This will tell you immediately where you stand.
- Review your induction program. Does it include the quality policy? Does it explain how quality relates to the specific role? Is there a record of completion? If not, update it and start capturing records.
- Update position descriptions. Work with the quality manager to identify what quality responsibilities each role carries. Update the position descriptions to reflect this clearly.
- Build or update your training matrix. Map each role to its required competencies, the evidence you hold, and any gaps. Review it at least annually.
- Establish an effectiveness evaluation process. For any training conducted to close a competence gap, define how you will confirm the gap has been closed. This could be a supervisor sign-off, a post-training quiz, or a probationary review.
- Get involved in management review. Ask the quality manager what HR data they need for management review inputs. Provide it. This ensures HR is seen as an active contributor to the QMS, not just a record-keeping function.
Understanding what competence means in the context of ISO and how to prove it is one of the most practical things an HR manager can do before an audit. It is a question auditors ask directly, and the answer needs to be backed by evidence, not just a verbal explanation.
What Happens During an Audit When HR Is Involved
During a Stage 2 certification audit or a surveillance audit, the auditor will typically want to interview a sample of employees across different roles and levels. They will ask questions like: what is your organisation's quality policy? How does your role contribute to quality? What do you do if you identify a non-conformance? They will also request to see competency records, training matrices, and position descriptions.
HR managers are often present during the opening and closing meetings, and sometimes interviewed directly about how competence is managed. Being able to speak confidently to your processes and point to documented evidence makes a significant difference to how the audit progresses.
If your organisation is still in the planning stage and has not yet selected a certification body, getting the HR components of your QMS in order before you go to audit will save you time and money. Platforms like CertBetter can connect you with experienced ISO consultants who can review your HR documentation and identify gaps before an auditor does. The service is free for businesses, and you receive competing quotes from verified providers, which means you can compare approaches before committing.
