Understanding Competence Requirements in ISO 9001
ISO 9001 places strong emphasis on ensuring that people performing work under an organisation’s control are competent to do so. Competence is directly linked to the quality of products and services, customer satisfaction, and the effectiveness of the quality management system (QMS).
Organisations must be able to show that individuals have the appropriate knowledge, skills and experience for their roles.
Rather than prescribing specific qualifications or training courses, ISO 9001 requires organisations to take a risk-based approach. This means identifying where a lack of competence could affect conformity to requirements and taking appropriate action to prevent issues before they arise.
The standard is therefore flexible and applicable to organisations of all sizes and sectors.
What ISO 9001 Means by “Competence”
Within ISO 9001, competence refers to a person’s proven ability to apply knowledge and skills to achieve intended results. It is not limited to formal qualifications, but includes practical capability, experience and behavioural attributes that enable effective performance.
Competence under ISO 9001 typically involves a combination of the following:
- Relevant education or professional qualifications
- Practical skills needed to perform specific tasks
- Work experience and industry knowledge
- Understanding of procedures, risks and quality objectives
Organisations are expected to determine what competence is required for each role, ensure that individuals meet those requirements, and take action where gaps are identified. This may involve training, mentoring, supervision or reassignment of responsibilities.
Clauses in ISO 9001 Related to Competence
The primary requirement for competence is found in Clause 7.2 – Competence, but it is supported by several other clauses throughout the standard. Together, these clauses ensure that competence is embedded within the wider QMS rather than treated as a standalone activity.
Key ISO 9001 clauses linked to competence include:
- Clause 5.1 – Leadership and commitment, ensuring people understand their roles
- Clause 7.2 – Determining, achieving and maintaining competence
- Clause 7.3 – Awareness of quality policy, objectives and impacts of work
- Clause 8.5.1 – Control of production and service provision
These clauses collectively require organisations to not only ensure competence, but also to make people aware of how their work contributes to quality outcomes. Auditors will often look for consistency across these areas rather than isolated evidence.
Difference Between Competence, Training and Awareness
Although closely related, competence, training and awareness are distinct concepts within ISO 9001. Understanding the difference helps organisations avoid common nonconformities and focus efforts where they are most effective.
The key distinctions are as follows:
- Competence: The demonstrated ability to perform a role effectively
- Training: One of several methods used to develop competence
- Awareness: Understanding policies, objectives, and the consequences of one’s work
Training alone does not guarantee competence, and awareness does not replace skill or experience. ISO 9001 requires organisations to evaluate whether actions taken—such as training—have actually resulted in improved competence. This ensures that resources are used effectively and that personnel can consistently meet quality requirements.
please continue onto the next section
Identifying Competence Needs Within Your Organisation
To demonstrate competence under ISO 9001, organisations must first clearly identify what competence is required. This involves understanding how different roles contribute to product or service conformity and determining where insufficient competence could introduce risk
The process should be systematic, proportionate and aligned with the organisation’s context and objectives.
Competence needs should not be based on job titles alone. Instead, they should reflect actual responsibilities, the complexity of tasks performed, and the potential impact of errors. This ensures that competence requirements remain relevant and defensible during audits.
Determining Required Skills and Knowledge
Identifying required skills and knowledge begins with analysing the work that affects quality. This includes operational activities, decision-making roles and any support functions that influence customer satisfaction or regulatory compliance.
Key factors to consider when determining competence requirements include:
- Technical skills needed to perform specific tasks
- Knowledge of procedures, standards and legal requirements
- Understanding of quality risks and controls
- Problem-solving and decision-making capabilities
Once identified, these requirements should be documented in a practical format, such as role profiles or competence matrices, to support consistent application across the organisation.
Role-Based Competence Requirements
ISO 9001 encourages organisations to define competence on a role-by-role basis rather than applying generic requirements. This approach allows greater clarity and ensures individuals understand what is expected of them.
Role-based competence requirements may include:
- Mandatory qualifications or certifications
- Minimum levels of experience
- Specific process or system knowledge
- Authority and accountability boundaries
By defining competence at role level, organisations can more easily identify gaps, plan development activities and provide clear evidence to auditors that competence has been systematically addressed.
Considering Experience and Qualifications
While qualifications can provide useful evidence of competence, ISO 9001 does not require formal certification for every role. In many cases, practical experience and demonstrated performance are equally valid.
When assessing competence, organisations should consider:
- Length and relevance of experience
- Proven ability to perform tasks independently
- Past performance and results
- Feedback from supervision or peer review
This balanced approach allows organisations to recognise existing competence while ensuring that any gaps are addressed in a controlled and effective manner.
next section please
Methods for Demonstrating Competence
Once competence requirements have been identified, organisations must be able to demonstrate that individuals meet those requirements. ISO 9001 allows flexibility in how competence is achieved and shown, provided the approach is appropriate to the organisation and the risks involved. Evidence of competence should be objective, consistent and proportionate.
Demonstrating competence is not a one-off exercise. It should be maintained over time and reviewed whenever roles change, processes are updated, or performance issues are identified. This ensures ongoing conformity and continual improvement.
Training and Professional Development
Training is one of the most common methods used to develop competence, particularly where new skills or knowledge are required. Training may be delivered internally or externally and should be planned based on identified competence gaps.
Examples of training and development activities include:
- Formal classroom or online training
- External courses and workshops
- Professional qualifications and CPD
- Internal quality or process training
ISO 9001 requires organisations to evaluate the effectiveness of training, not simply record attendance. This may involve testing, observation or performance review to confirm that competence has improved.
On-the-Job Training and Supervision
For many roles, competence is best developed through practical, hands-on experience. On-the-job training allows individuals to learn in real working conditions under appropriate supervision.
Common on-the-job methods include:
- Coaching or mentoring by experienced staff
- Supervised task completion
- Job shadowing
- Gradual increase in responsibility
These methods can be particularly effective where formal training is impractical or where skills are highly specific to the organisation. Records should clearly show how competence has been achieved and who has authorised independent working.
Competence Assessments and Evaluations
Assessing competence is essential to demonstrate that actions taken have been effective. Assessments should be appropriate to the role and the level of risk associated with the work.
Assessment methods may include:
- Observation of work activities
- Practical tests or demonstrations
- Performance reviews and appraisals
- Internal audits or peer assessments
Documented assessments provide strong evidence during audits and help ensure that competence is maintained over time rather than assumed.
Use of Certifications and External Qualifications
External certifications and qualifications can provide credible evidence of competence, particularly for technical or regulated roles. However, they should be relevant to the work performed and kept up to date.
Examples include:
- Trade or professional certifications
- Regulatory licences
- Industry-recognised qualifications
While useful, external qualifications should be supported by internal evidence showing how the individual applies their competence within the organisation’s processes and QMS.
next section, increase word count slightly please
Maintaining and Improving Competence
ISO 9001 requires organisations not only to establish competence, but also to maintain and continually improve it. Competence can decline over time due to changes in processes, technology, regulations or organisational structure.
Regular review ensures that people remain capable of performing their roles effectively and that emerging risks are addressed promptly.
Maintaining competence should be integrated into normal management activities rather than treated as a separate process. When linked to performance management, risk assessment and continual improvement, competence becomes an active contributor to QMS effectiveness.
Ongoing Monitoring and Performance Reviews
Regular monitoring helps organisations confirm that competence is being applied consistently in day-to-day work. Performance reviews provide a structured opportunity to assess whether individuals continue to meet role requirements and where development may be needed.
Effective monitoring and review activities may include:
- Periodic performance appraisals
- Review of key performance indicators (KPIs)
- Observation of work practices
- Feedback from customers, colleagues or supervisors
These activities help identify early signs of competence gaps and allow corrective action to be taken before nonconformities occur.
Addressing Competence Gaps
When gaps in competence are identified, ISO 9001 expects organisations to take appropriate action. The response should be proportionate to the risk and tailored to the individual and role concerned.
Actions to address competence gaps may include:
- Additional training or refresher courses
- Increased supervision or mentoring
- Revision of role responsibilities
- Temporary restriction of certain activities
Organisations should record the actions taken and verify their effectiveness. This demonstrates a controlled and systematic approach to managing competence-related risks.
Continual Improvement of Skills and Knowledge
Continual improvement applies as much to people as it does to processes. Encouraging the development of skills and knowledge supports innovation, efficiency and long-term organisational success.
Ways to promote continual improvement of competence include:
- Supporting ongoing professional development
- Sharing lessons learned and best practice
- Encouraging cross-functional learning
- Reviewing future competence needs during management review
By actively investing in competence, organisations can strengthen their QMS, improve resilience and demonstrate a clear commitment to quality and improvement under ISO 9001.
next seciton please
Documenting and Recording Competence
Documented information plays a key role in demonstrating competence under ISO 9001. While the standard does not prescribe specific documents or formats, organisations must retain appropriate records as evidence that competence requirements have been met and maintained.
These records support effective management of competence and provide objective evidence during audits.
Documentation should be practical, accurate and kept up to date. Overly complex systems can be difficult to maintain, while insufficient records can lead to nonconformities. The focus should always be on usefulness and reliability rather than volume.
Keeping Training and Competence Records
Training and competence records should clearly show how individuals meet the requirements of their roles. Records may be held in paper-based systems, spreadsheets or dedicated competence management software, depending on organisational needs.
Typical competence-related records include:
- Training attendance and completion records
- Qualifications, certifications and licences
- Competence assessments and authorisations
- Records of on-the-job training and supervision
Records should be controlled to ensure they are legible, identifiable and protected from loss or unauthorised access, in line with ISO 9001 requirements for documented information.
Evidence Auditors Commonly Expect
During ISO 9001 audits, auditors will look for clear, objective evidence that competence has been determined, achieved and reviewed. They will often sample records and interview personnel to confirm understanding and application.
Auditors typically expect to see:
- Defined competence requirements for key roles
- Evidence that competence gaps have been addressed
- Proof that training effectiveness has been evaluated
- Personnel awareness of quality objectives and procedures
Consistency between documented information and actual practice is critical. Gaps between what is recorded and what happens in reality are a common source of nonconformities.
Managing Records in Line with ISO 9001
ISO 9001 requires organisations to control documented information to ensure it remains suitable and available. This includes defining how long competence records are retained and how they are updated when roles or requirements change.
Good practice for managing competence records includes:
- Regular review and updating of records
- Clear version control where applicable
- Defined retention periods
- Secure storage and controlled access
Effective record management not only supports audit compliance but also enables organisations to make informed decisions about workforce development and resource planning.
next please
Demonstrating Competence During ISO 9001 Audits
ISO 9001 audits provide organisations with the opportunity to demonstrate that competence requirements are being effectively managed and applied in practice. Auditors will focus not only on documented information, but also on how competence supports the consistent delivery of conforming products and services.
Preparation is key. Organisations that embed competence into everyday operations generally find audits more straightforward, as evidence is readily available and staff can confidently explain their roles and responsibilities.
Preparing for Internal and External Audits
Effective audit preparation involves ensuring that competence requirements are clearly defined, understood and supported by up-to-date records. Internal audits are particularly valuable, as they allow organisations to identify and address issues before external audits take place.
Key preparation activities include:
- Reviewing competence requirements for critical roles
- Checking that training and assessment records are complete
- Confirming that actions taken to address gaps are documented
- Ensuring staff understand relevant procedures and quality objectives
Regular internal audits help reinforce competence expectations and provide confidence that systems are working as intended.
Common Nonconformities Related to Competence
Competence-related nonconformities are often the result of weak evaluation or poor record management rather than a complete absence of training. Understanding common issues can help organisations avoid them.
Typical competence-related nonconformities include:
- No evidence that competence requirements have been determined
- Training provided without evaluation of effectiveness
- Outdated or incomplete competence records
- Individuals performing tasks without appropriate authorisation
Addressing these issues proactively reduces audit risk and strengthens overall QMS performance.
Best Practice Examples for Audit Success
Organisations that perform well during audits typically take a structured, risk-based approach to competence. They focus on demonstrating real capability rather than relying solely on documentation.
Best practice approaches include:
- Using competence matrices linked to key processes
- Aligning competence reviews with management review activities
- Encouraging staff to explain their roles and quality impact
- Regularly updating competence requirements as processes change
By adopting these practices, organisations can demonstrate clear conformity with ISO 9001 and show auditors that competence is effectively managed, maintained and continually improved.
please write a key take aways and then a conclusion section
Key Takeaways
Demonstrating competence under ISO 9001 is about ensuring people can consistently perform their roles in a way that supports quality objectives and customer satisfaction. The standard provides flexibility, but it also requires a structured and evidence-based approach.
Key points to remember include:
- Competence is the proven ability to apply knowledge and skills, not just attendance at training
- Organisations must determine competence requirements based on roles and risk
- Training is only effective if its impact on competence is evaluated
- Experience and practical ability are valid evidence of competence
- Records must be accurate, controlled and aligned with actual practice
- Ongoing review and improvement of competence are essential for long-term compliance
Focusing on these principles helps ensure competence is both meaningful and audit-ready.
Conclusion
ISO 9001 views competence as a fundamental driver of quality, not an administrative exercise. By clearly defining competence requirements, developing people appropriately and maintaining robust evidence, organisations can demonstrate conformity while also improving performance and resilience.
A practical, risk-based approach allows competence to be embedded into everyday operations rather than treated as a separate compliance task. When competence is regularly reviewed, documented effectively and aligned with organisational objectives, it supports continual improvement and strengthens the overall quality management system.
Ultimately, organisations that invest in competence are better positioned to deliver consistent results, adapt to change and succeed under ISO 9001.
Frequently Asked Questions (FAQs)
What does ISO 9001 mean by competence?
ISO 9001 defines competence as the proven ability to apply knowledge and skills to achieve intended results. It includes education, training, experience and practical ability relevant to a specific role.
Which clause of ISO 9001 covers competence?
Competence is primarily addressed in Clause 7.2, with supporting requirements in Clauses 5.1, 7.3 and 8.5.1.
Is training mandatory under ISO 9001?
Training is not mandatory in all cases. ISO 9001 requires organisations to ensure competence, and training is just one of several ways to achieve this.
Can experience be used as evidence of competence?
Yes. Relevant experience and demonstrated performance are valid forms of evidence, particularly where formal qualifications are not required.
Do all employees need formal qualifications?
No. ISO 9001 does not require formal qualifications for all roles, only that individuals are competent to perform their assigned tasks.
How should competence requirements be documented?
Competence requirements can be documented using role profiles, job descriptions, competence matrices or similar tools that clearly define expectations.
How often should competence be reviewed?
Competence should be reviewed regularly and whenever there are changes to roles, processes, technology or performance issues.
What records are required to demonstrate competence?
Typical records include training records, competence assessments, qualifications, licences and evidence of evaluation of effectiveness.
How do auditors assess competence during an ISO 9001 audit?
Auditors review documented information and often interview staff to confirm understanding of roles, procedures and quality objectives.
What is the difference between competence and awareness?
Competence relates to the ability to perform tasks effectively, while awareness focuses on understanding policies, objectives and the impact of one’s work.
Is a competence matrix required by ISO 9001?
No, a competence matrix is not required, but it is a widely used and effective tool for demonstrating competence.
Common issues include lack of defined competence requirements, no evaluation of training effectiveness and outdated or incomplete records.
Does ISO 9001 require evaluation of training effectiveness?
Yes. Organisations must evaluate whether training or other actions have successfully improved competence.
Can outsourced or temporary workers be included in competence requirements?
Yes. ISO 9001 applies to anyone performing work under the organisation’s control, including contractors and temporary staff.
How does competence support continual improvement?
Competent people are better able to identify risks, solve problems and improve processes, directly supporting continual improvement under ISO 9001.
