We use essential cookies to make the site work and, if you allow it, aggregated analytics cookies to improve the content. We do not use marketing cookies.
Clause 7.2 requires documented competence. A generic training certificate isn't enough. Here's how to build a useful competence matrix.
ISO 9001:2015 clause 7.2 requires determining necessary competence, ensuring it via education, training or experience, and keeping documented information. Simple enough. In audits many companies fail because they confuse "training" with "competence."
Training is an action: a course, a workshop. Competence is an outcome: the person can do the job to acceptable quality. The standard requires competence, not training. An attended course without effectiveness evaluation doesn't conform.
Four requirements:
A matrix that works in an audit has these columns:
| Role | Required competence | Evaluation method | Frequency | Evidence |
|---|---|---|---|---|
| CNC operator | Drawing reading, caliper use, basic FMEA | Practical + written eval | Annual | Internal certificate + record |
| QC inspector | CMM use, basic MSA, GD&T reading | Supervised practical | Semi-annual | Signed checklist |
| Internal auditor | ISO 19011, audit techniques, finding writing | Course + shadowed audit | On hire | Certificate + shadow report |
The external auditor can trace each row to real records.
Not all require formal certification:
Typical SMB combo: supervised practical on hire, written test at one year, refresh every two.
Labor authorities accept general training certificates, but these don't replace QMS competence evaluation. An operator with a "Safety and Hygiene" certificate isn't automatically competent to run a 500-ton press. The standard requires role-specific evidence.
We recommend the annual plan include:
The management review (9.3) should include plan results: percent completed, open gaps.
Pull your current competence matrix. Check whether each critical role has: specific required competence, evaluation method, latest evidence with date. If 30%+ of roles are missing data, your clause 7.2 lives with major-finding risk. Prioritize it over any other documentation improvement.
Clause 7.4 requires communicating what matters about the QMS. Internal email doesn't work. Here's how to build channels that actually land.
The 2015 version removed the quality manual. Here's what the standard actually requires and what's unnecessary tradition.
Implementing ISO 9001 in 90 days is realistic if you separate the critical from the decorative. Here's the concrete week-by-week sequence.