ISO 9001 clause 7.4: communicate quality information to the right people
ISO 9001:2026 clause 7.4 requires the organisation to determine internal and external communications relevant to the QMS. That includes the subject, timing, audience, method and person responsible for communicating. The aim is to support effective quality decisions and coordinated work, rather than simply increase the volume of messages.
What clause 7.4 requires in practice
Clause 7.4 asks the organisation to decide which internal and external communications matter to the quality management system. For each, it must settle five questions: what will be communicated, when, with whom, how, and by whom. Internal communication covers things like changes to procedures, objectives, performance results and escalated problems. External communication can include customers, external providers, regulators and other interested parties.
The clause is a planning requirement. It expects the organisation to think the arrangements through, rather than leaving communication to habit, so that the right people receive useful information in time to act. It does not prescribe a communications department, a communication matrix, a meeting calendar or a single tool. A matrix is one common way to show the decisions, but the requirement is the decisions themselves, however they are recorded. Related clauses add detail in specific places, for example customer communication in 8.2.1 and information for external providers in clause 8.4, so clause 7.4 works as the general frame that those provisions sit within.
Start with the recipient's decision
Ask what the recipient needs to know and what action or understanding the communication should support. A broad announcement that a procedure changed may be insufficient for someone who needs to know which approval step now applies. A detailed technical record may be inappropriate for a customer who needs a clear explanation of service status.
The content should be accurate and suited to the audience. Consider language, technical knowledge and access to the chosen channel. Across countries and sites, common communication principles can coexist with local methods that better reach the people concerned.
Determine timing and responsibility
Some communication is planned at regular intervals; other communication is triggered by an event or change. Decide what must happen before work proceeds, what can be reported through routine review and what needs timely escalation. Avoid assuming that the person who discovers an issue automatically has authority to make every external statement about it.
Assign communication responsibility and ensure it connects with decision authority. Where messages require technical or commercial review, make the interface clear enough to prevent delay or contradictory information. The standard does not prescribe a single communications department or a universal approval chain.
Why communication control matters to the business
Quality problems often travel along the gaps between teams. A changed requirement that reaches one department but not another, or an optimistic customer message based on incomplete facts, can turn a small issue into a complaint or a lost account. Deciding in advance who says what, to whom and when reduces delay, contradictory messages and finger-pointing under pressure. It also protects reputation, because customers and external providers hear a consistent account from people who have the authority to give it. In an audit, clear communication arrangements show that management has thought about how information supports decisions across sites, shifts and countries, which is a sign of a system that works in practice.
How to implement clause 7.4
Begin with the decisions people make, then work backwards to the information they need. One way Sterling's teams do this is to walk through a real change or incident and map who needed to know and when.
- List the quality-related subjects that need communication, such as requirement changes, performance results, provider issues and customer service status.
- For each subject, name the audience, internal or external, and what decision or action they must take with the information.
- Choose the timing: routine intervals, triggers such as a change or incident, or a point before work may proceed.
- Select a channel that the audience can actually use, considering language, technical knowledge and access.
- Assign the person who communicates and make sure their authority matches what they are expected to say.
- Test the arrangements against a recent event and note where information arrived late, incomplete or not at all.
- Adjust the arrangements when roles, sites, customers or processes change.
Illustrative construction example: a revised requirement
A hypothetical contractor receives an approved change to a customer requirement. The project manager informs procurement but assumes the site supervisor will hear through an informal discussion. Installation continues using the earlier information, although the central record is current.
The team determines who must receive the change, when the affected work needs the information and which controlled source governs the instruction. It assigns the communication owner and checks that relevant recipients understand the change. The evidence concerns a completed information handover, not simply the existence of an email in the sender's account. Technical approval and contractual requirements remain separate decisions.
Illustrative BPO example: an emerging service disruption
A hypothetical BPO provider identifies a processing interruption that may affect an agreed customer delivery. Operations has the technical facts, while the account team owns customer communication. Without a defined interface, the customer receives an optimistic message based on incomplete information.
The organisation clarifies how confirmed facts, uncertainty and next updates move between those roles. It determines who communicates externally and how changes in the expected position are handled. Later review examines whether the customer received accurate, timely information. The example does not prescribe a universal notification deadline; actual commitments and applicable requirements determine the relevant timing.
Close the gaps between a decision and its users
Sterling can review QMS communication interfaces, linking responsibilities, controlled information and employee learning across locations. Scoped Effivity ISO & GRC automation software can support agreed workflows; independent bodies retain certification decisions.
Explore Documented Information Management for staff handling controlled messages and records. Return to clause 7 or continue to customer communication.
Frequently asked questions
Is a formal communication plan mandatory?
No named format is prescribed. The organisation must determine the relevant communication arrangements and make them effective in practice.
Does sending an email prove communication was effective?
It proves a message was sent. Depending on the purpose, further evidence may be needed that it reached the relevant audience and supported the required understanding or action.
Must all sites use the same communication channel?
No universal channel is required. Use methods suited to the audience and purpose while keeping the meaning, responsibilities and important interfaces clear.
Choose channels that support the purpose
Email, meetings, operational systems, briefings and other channels can all be appropriate. Consider reliability, accessibility and the need for a lasting record. A time-sensitive instruction may need a different route from a periodic management report. Important decisions should not depend on a channel that relevant people do not use.
Where understanding matters, consider how it will be checked. A read receipt may show that a message was opened, but not that the recipient understood a changed requirement. The necessary assurance should be proportionate to the importance and complexity of the communication.