ISO 9001 clause 7.1.1: decide what the QMS needs to operate
ISO 9001:2026 clause 7.1.1 requires the organisation to determine and provide resources for establishing, implementing, maintaining and continually improving the QMS. It also requires consideration of existing internal capability and constraints, and what needs to be obtained from external providers. The decision should support a system that can actually operate.
What clause 7.1.1 requires in practice
Clause 7.1.1 is the general statement on resources. The organisation determines and provides what is needed to establish, implement, maintain and continually improve its QMS. Two matters must be weighed when deciding. One is what the existing internal resources are able to do, and the limits on them. The other is what should be obtained from external providers.
Three points follow from the wording. First, the duty is to determine and to provide, so identifying a need without acting on it falls short. Second, resources are needed across the life of the system, from setting it up to improving it, not only at certification. Third, the clause treats outside providers as a legitimate source, provided the decision to rely on them is deliberate. The clause does not specify budget levels or require a resource plan document. The output is a reasoned conclusion that the resources match the work, and evidence that the matter was considered.
Assess the resources already available
Examine what internal resources can do, not simply whether they exist. A manager may have appropriate knowledge but insufficient time to coordinate a major change. A business application may support some evidence needs while lacking information necessary for a particular decision. Identify the relevant limitation before choosing a solution.
Use process performance, workload and planned changes to inform the assessment. Avoid assuming that an employee's job title proves unlimited capacity or that a previously adequate arrangement remains adequate as the organisation expands. Existing resources should be assessed in relation to the work and results expected.
Decide what external provision should achieve
External resources can address gaps in capacity, knowledge or capability. Define what is needed and how the provision will support the QMS. A consultant, training provider or external technical service may contribute, but the organisation still needs internal ownership of decisions and implementation.
Consider the relevant provider controls and interfaces. If external support produces instructions that staff cannot use, the resource decision has not achieved its purpose. If the organisation relies on an external specialist, clarify availability and the information needed for a useful response. Do not assume that a purchase order alone establishes operating capability.
Why a deliberate view of resources matters to the business
Under-resourced systems fail quietly. Deadlines are met by cutting checks, key tasks fall to whoever is available, and managers discover the shortfall only when a customer complains. A deliberate view of resources turns the problem into a visible decision: invest, reprioritise, bring in outside capability or accept a narrower promise. It also stops the organisation depending on heroic effort from a few people. For leadership, it creates a record that the business knew its limits and acted on them, which is reassuring to customers, lenders and auditors alike.
How to implement clause 7.1.1
Run a short resource review for each major process, and record only what drives decisions. One way Sterling's teams do this is to add resource questions to the annual planning round. Keep the outcome in view: the clause requires a reasoned determination and for resources to be provided, whatever format records take, and a register or planning template is a convenience, not a requirement of the standard.
- List the main processes and the results each must deliver.
- For each process, ask what is needed to keep it running and what is needed to improve it.
- Test existing capability against the need: skills, capacity, tools, information and time.
- Record the limits you found, and the actions chosen to address them.
- Identify the needs to be met by external providers and set out how they will be selected and checked.
- Give an owner to each action and report progress in management review.
Evidence an auditor expects for clause 7.1.1
The auditor will look for proof that resourcing was considered rather than assumed. Typical evidence includes: Auditors usually test this by asking a manager what was last decided because resources were short, since a specific, recent example is more convincing than a general statement. No particular document is expected, and the evidence can sit in ordinary meeting notes or planning records.
- records of planning or management review discussions about resource needs and constraints
- decisions to add, shift or bring in outside capability, and the reasons given
- observations that processes visibly have what they need to operate
- records of evaluation of external providers supplying key resources
- interviews with managers about how shortfalls are raised and resolved
Common nonconformities with clause 7.1.1
Findings here usually point to resourcing that is reactive and undocumented in any form. Auditors tend to raise these findings by comparing what managers say about stretched teams or ageing tools with what the planning records show, and asking where the gap was ever discussed. The clause does not demand perfect resourcing, but it does expect that limits are recognised and acted on.
- No evidence exists that internal capability and limits were considered.
- Known shortages, such as vacant roles or ageing equipment, were never addressed or escalated.
- Reliance on an external provider for a key resource was never examined.
- Improvement actions were agreed but no resources were assigned.
- Management review never discusses resource adequacy.
Illustrative BPO example: adding a quality-review function
A hypothetical BPO provider plans to strengthen transaction review after recurring customer complaints. Management assigns the work to an experienced supervisor without changing the supervisor's existing workload. Review activity quickly falls behind, and the business interprets the backlog as poor commitment.
A resource assessment shows that the planned review cannot realistically fit the available time. Management considers reprioritisation, additional capacity and a more focused review approach. It provides the chosen support and evaluates whether relevant transactions are reviewed and findings acted on. The example concerns resource sufficiency; it does not prescribe a fixed reviewer-to-agent ratio.
Illustrative construction example: external specialist support
A hypothetical contractor enters a type of project with unfamiliar customer documentation expectations. Its internal team understands the construction work but lacks experience coordinating the specified handover evidence. Management considers external support to establish an appropriate process.
The engagement defines the information and coordination support needed, while internal project owners retain responsibility for obtaining accurate evidence and applying the process. The contractor checks whether staff can operate the arrangement after the external specialist's initial work. A polished set of documents would not be sufficient if the business remained unable to maintain them during the project.
Connect provision with timing and priorities
Resources need to be available when the process requires them. Training delivered after a new responsibility begins or access provided after a review deadline may not support effective implementation. Coordinate resource decisions with objectives and planned changes, especially where several teams depend on the same scarce capability.
Top management's leadership responsibilities include ensuring resources are available. Operational managers can provide the information needed for that decision. Escalate significant constraints clearly, explaining the effect on quality outcomes rather than presenting every request as equally urgent or desirable.
Check whether the decision worked
Clause 7.1.1 does not prescribe a resource-planning template or a dedicated budget record. Useful evidence can include decisions, actual allocations and process results showing whether the need was met. The relevant resource-specific subclauses may impose further requirements, which should be considered alongside this general provision.
Common failures are assuming that approved resources have been delivered, using external support without defining the handover and neglecting maintenance after implementation. Another is repeatedly asking staff to compensate for a structural shortage through overtime or informal workarounds. Review whether the resource arrangement is sustainable enough for the intended QMS result.
Frequently asked questions
Does the clause require a separate QMS budget?
No separate budget format is prescribed. The organisation must determine and provide the necessary resources, which may be managed through normal business planning.
Can a small company rely on external expertise?
Yes, where suitable. Define the need, control relevant interfaces and retain responsibility for the organisation's QMS and its operating decisions.
Is buying software evidence that the resource gap is closed?
Not by itself. Check whether the software is suitable, implemented, understood and supported for the intended use, alongside any other resources the process needs.
Build a realistic resource plan
Sterling can help assess QMS resource needs and implementation priorities, combining scoped consulting, employee learning and agreed Effivity ISO & GRC automation software access. Support should complement internal ownership; certification remains an independent body's decision.
Ask about forthcoming ISO 9001 implementation training for the team maintaining the system. Read the parent resource guide for the individual resource categories.