ISO 9001 clause 7: give people the resources and information to deliver

What clause 7 requires in practice

Clause 7, Support, collects what the QMS needs around the core work so that the work can be done reliably. It runs through six topics. Subclause 7.1 covers resources, including people, infrastructure, the environment for operating processes, resources for monitoring and measuring, and organisational knowledge. Subclause 7.2 deals with competence of the people whose work affects QMS performance. Subclause 7.3 deals with awareness of the policy, objectives, personal contribution, consequences of nonconformity and quality culture. Subclause 7.4 sets out communication, and 7.5 covers documented information.

Taken together, the clause requires the organisation to decide what support its processes need, provide it, keep it fit, and be able to show it. It describes what must be determined and provided; it does not dictate the form. A training matrix, a document register or an asset list may help, but none of them is stated as a requirement by the clause. The outputs are resourced processes, capable and aware people, working communication and controlled information.

7.1.1 to 7.1.4: provide resources for the actual process

Resource planning considers existing capabilities and constraints and what must come from external providers. People need to be available for effective operation and control. Infrastructure includes the facilities, equipment and supporting technology the process needs; the process environment includes relevant physical, social and psychological conditions.

In a hypothetical repair service, a technician may be qualified but unable to inspect a component properly because the work area has poor lighting, the current instruction is inaccessible or the necessary equipment is unavailable. Repeating the training course would not resolve those conditions. Examine the whole support arrangement before concluding that the worker is the problem.

Remote and hybrid services need the same reasoning. A customer-support process may depend on access to the approved knowledge source, reliable communication and a suitable working environment. Decide what is necessary for conformity and maintain those conditions. Avoid assuming infrastructure refers only to buildings or manufacturing equipment.

7.1.5: make measurement results trustworthy

Monitoring and measuring resources used to verify conformity must be suitable and maintained for their purpose, with appropriate evidence of that fitness. Where measurement traceability is required or considered essential, the more specific provisions address calibration or verification, identifiable status and protection from conditions that invalidate results.

A calibration label is therefore one part of the explanation, not the whole answer. The selected instrument must suit the measurement being made. If equipment is found unsuitable, the organisation also considers whether earlier results were affected and takes appropriate action. Simply replacing the label leaves the possible consequence for previous work unexplored.

For illustration, a fictional service centre discovers that a measuring device was damaged after its last verification. The responsible person needs to assess the relevant work and determine an appropriate response. The example does not prescribe a universal recall or technical test; those decisions depend on the equipment, use and product or service requirements.

7.1.6 and 7.2: distinguish knowledge from competence

Organisational knowledge is what the business needs to operate its processes and achieve QMS results. The 2026 text addresses retaining, applying and sharing that knowledge, as well as acquiring what is needed when circumstances change. It can exist in people's experience, methods, documents or systems. A repository is useful only if necessary knowledge remains accessible and usable.

Competence concerns the capability of people doing work that affects QMS performance. Determine what the role needs, establish competence through appropriate education, training or experience, and evaluate actions taken to close gaps. Appropriate documented evidence is required. A course certificate can contribute to that evidence but does not establish competence for every task.

A small business might pair an experienced employee with a new colleague on a defined assignment, then review the result. A larger group may need formal role criteria and assessed practice across sites. The method can vary, but it should answer the same practical question: can this person perform the assigned work to the required standard?

7.3 and 7.4: make awareness and communication usable

Awareness includes the quality policy, relevant objectives, each person's contribution, consequences of failing to meet QMS requirements, and the organisation's quality culture and ethical behaviour. Employees should recognise how these ideas affect their decisions. Knowing where to report an incomplete check can be more useful than memorising policy wording.

Communication planning identifies relevant subjects, timing, audiences, methods and responsibility. For a multisite change to a customer specification, sending one central email may not reach contractors or later shifts. Consider how the people affected receive, understand and use the information, including how questions and feedback return to the owner.

7.5: control information through its useful life

The QMS includes information required by the standard and information the organisation considers necessary for effectiveness. When it is created or updated, suitable identification, format, review and approval matter. Control then covers availability, protection, access, preservation, change, retention and disposition as applicable, including necessary information of external origin.

A hypothetical workshop maintains a current electronic instruction while an obsolete printout remains beside the workstation. The revision register may be correct, but the user still has an unreliable choice at the point of work. Follow the information to its actual use. Control should make the correct version easier to identify and prevent unintended alteration of evidence.

Why support matters to the business

Customers experience support failures as inconsistency: the same service gives a different result depending on who is on shift, which tool works that day or which version of an instruction was used. Capable people with the right tools, conditions and information cost less to manage than weak support covered by inspection and rework. Gaps in support also tend to be hidden until a busy period, a new hire or a system change exposes them. Treating support as part of the quality system, not as overhead, protects delivery, reduces avoidable error and gives auditors confidence that good results are repeatable.

How to implement clause 7

Work process by process, asking what the work actually needs, and then connect the answers to the subclauses. One way Sterling's teams do this is to walk one process end to end with its owner and note every support gap on the spot. The clause sets the outcome; the method, record format and any supporting matrix or register are the organisation's own choice, and none is stated as mandatory.

1. Pick a core process and list what a competent person needs to do it well: people, tools, setting, knowledge and information.
2. Compare that list with reality by watching the work and talking to the people doing it.
3. Close the gaps in resources, competence and awareness, giving priority to what affects conformity most.
4. Agree who needs to hear what, when and from whom, and make sure the route works in practice.
5. Decide which documented information the system needs and who controls it.
6. Assign an owner for each support topic so that changes in the business reach it.
7. Review support during management review and when processes or technology change.

What evidence should be ready for review?

Explore each numbered part

Common nonconformities with clause 7

Because clause 7 spans so many topics, findings tend to cluster where support is assumed rather than checked. Typical examples:

• Staff are told to meet a requirement but lack the equipment, access or time to do so.
• Competence is claimed from attendance at training with no check of whether it worked.
• Communication responsibilities are unclear, so important changes reach some staff late.
• Knowledge sits with one or two individuals and is lost when they leave.
• Instructions in use differ from the approved versions.

Illustrative example: a depot that trained its way around a poor setup

A hypothetical logistics company in the Netherlands finds that parcel scanning errors keep recurring at one depot. Management repeats scanner training twice, with no change. A walk through the process shows that the handheld scanners lose their connection in one corner of the building, the sorting instruction on the wall is an old version and one experienced colleague quietly corrects mistakes for everyone. The fault lies in support, not in the operators. The company repairs the connection, withdraws the outdated instruction, records how the colleague's corrections are done so the know-how is shared, and asks a supervisor to confirm the setup each week. Errors fall, and the audit trail shows resources, knowledge and information working together.