ISO 9001 clause 7.1.2: provide enough people to control the work

What clause 7.1.2 requires in practice

Clause 7.1.2 asks the organisation to determine and provide the persons needed for two jobs: the effective implementation of the QMS, and the operation and control of its processes. The wording covers both the people who carry out the work and those who keep the system running, such as process owners, reviewers and auditors.

The clause is about numbers and availability. Competence is dealt with separately in clause 7.2, so a team can have the right skills and still breach this clause if there are too few people, or if the right people are not available when the process needs them. The requirement is judged against the work to be done: the volumes, the peaks, the control activities and the time needed to carry them out.

No ratio, headcount or workload formula is given. The output is a reasoned staffing position that process owners can defend, with people actually in place to run and control the work.

Start with the process demand

Identify the activities that must be performed and controlled, including work that is less visible than production or direct service. Contract review, document updates, provider evaluation, internal audit and corrective-action follow-up may all require people's time. Avoid planning only the work that generates immediate revenue.

Consider relevant variation in demand and the consequences of unavailable coverage. Shift patterns, service hours, project peaks and specialist tasks can affect the need. ISO 9001 does not prescribe a universal staffing ratio or require identical arrangements for every site. The choice should support effective operation in the organisation's circumstances.

Distinguish capacity, competence and authority

Clause 7.1.2 addresses provision of people. Clause 7.2 addresses whether people have the competence their work requires, while 5.3 concerns relevant responsibilities and authorities. These questions overlap in implementation but should not be collapsed into a single headcount check.

A substitute may be available but not competent for a particular decision. A competent employee may be overloaded or lack authority to release work. Assess the combination needed for the process to function. Temporary staff and external personnel can contribute, but the organisation must consider the relevant controls and requirements for their work.

Why having enough people matters to the business

Quality is rarely lost through ignorance alone. It is lost when capable people are stretched across too many tasks, so checks are skipped, handovers rush and corrective actions stay open. Customers meet the result as late deliveries, repeated mistakes and slow responses. Planning for enough people, including cover for absence and for busy periods, keeps controls operating and protects experienced staff from burning out. It also gives leaders accurate information when they decide whether to accept new work, because the same team cannot meet every promise at once.

How to implement clause 7.1.2

Start from the work, not from the organisation chart, and keep the analysis simple enough to repeat each planning cycle. One way Sterling's teams do this is to review workload signals each quarter with process owners, because the clause requires a reasoned judgement and does not prescribe any staffing model. Competence is assessed separately under clause 7.2, so keep the two questions apart.

1. For each process, identify the activities that must happen, including the control and checking activities.
2. Estimate the volume and the timing, including peaks and seasonal variation.
3. Compare this with the people available, taking account of leave, turnover and shared roles.
4. Identify the critical roles, and arrange cover so that one absence does not stop a control.
5. Raise gaps with the managers who can decide, and record the decision taken.
6. Check the position when work is won, lost or changed.
7. Review actual signals such as overtime, backlog and missed checks as early warnings.

Illustrative manufacturing example: inspection coverage

Illustrative IT example: a specialist escalation service

A hypothetical IT provider offers a specialist support service that depends on one engineer. The engineer's absence leaves the service desk unable to resolve certain cases within the agreed arrangement. A procedure exists, but no other person has been assigned to provide the required capability.

The provider reviews the commitment, workload and available options. It may develop suitable internal coverage, arrange appropriate external support or revise the service offer before accepting further commitments. It checks that the chosen arrangement can be activated when needed. The evidence concerns a workable coverage decision, not a claim that every specialist role requires an identical backup position.

Plan around changes and constraints

Expansion, new service hours, turnover and transfer of work can change staffing needs. Review the people required when the process changes, rather than waiting until missed controls become normal. Information from supervisors and process owners can reveal tasks that depend on informal effort or unrecorded assistance.

Where a gap is identified, consider whether the response should involve recruitment, reassignment, different sequencing or a process change. These are possible implementation choices, not a prescribed menu. The organisation should understand how the chosen action supports effective QMS implementation and process control.

Look for evidence in the work

Common nonconformities with clause 7.1.2

Findings usually appear where the effect of too few people shows in the records. Typical examples: Auditors usually discover these findings by looking for skipped controls and long-open actions, then asking the owner why, and the answer often points to workload. The clause does not set staffing levels, but it does expect that shortages affecting conformity are recognised and addressed.

• Checks or reviews required by the process are skipped or done late because of workload.
• One person holds several critical roles and no cover exists.
• Persistent backlogs and overtime have not been escalated or addressed.
• New work was accepted without checking whether the team could handle it.
• Roles needed to run the QMS, such as internal auditors, are vacant or untrained.