ISO 9001 Competence and Training: Meeting Clause 7.2 Requirements
Your quality management system is only as good as the people who operate it. ISO 9001 Clause 7.2 demands that organisations determine the competence of persons doing work that affects quality performance, ensure they are competent based on appropriate education, training, or experience, and take actions to acquire the necessary competence. This is not a paperwork exercise – it directly impacts product and service quality.
Understanding Clause 7.2 Requirements
Clause 7.2 (formerly Clause 7.2 in ISO 9001:2015) is one of the most frequently audited clauses in the entire standard. It requires four distinct actions:
- Determine the necessary competence of persons doing work that affects the performance and effectiveness of the QMS
- Ensure that these persons are competent on the basis of appropriate education, training, or experience
- Take actions to acquire the necessary competence where gaps exist
- Retain documented information as evidence of competence
The clause applies to any person whose work can affect quality, including employees, contractors, temporary workers, and outsourced personnel. If they touch a process that affects product or service conformity, competence must be ensured.
| Clause 7.2 Element | Organisation’s Responsibility | Common Audit Evidence |
|---|---|---|
| Determine competence | Define what knowledge and skills each role requires | Job descriptions, competence matrices, role profiles |
| Ensure competence | Verify that personnel meet the defined requirements | CVs, qualifications, training records, assessments |
| Acquire competence | Provide training or other actions to close gaps | Training plans, course bookings, on-the-job training records |
| Retain evidence | Maintain documented information on competence | Competence database, training records, certification files |
Determining Competence Needs
The first step is determining what competence is needed for each role that affects quality. This should be driven by the nature of the work, not by generic job descriptions copied from the internet. For each process in your QMS, ask: what knowledge, skills, and behaviours does someone need to perform this work correctly?
The competence determination process typically involves:
- Process analysis – Examining each QMS process to identify the critical tasks and decisions involved
- Role definition – Mapping process tasks to roles and documenting the required competence for each role
- Stakeholder input – Consulting with process owners, team leaders, and the personnel themselves about what competence is needed
- Regulatory requirements – Including any mandatory certifications or qualifications required by law or industry standards
Training vs Experience
ISO 9001 recognises three ways to demonstrate competence: education, training, and experience. They are not mutually exclusive, and the right balance depends on the role and the organisation.
| Method | Definition | Best Used For | Examples |
|---|---|---|---|
| Education | Formal qualifications from accredited institutions | Professional roles requiring theoretical knowledge | Engineering degree, quality management diploma |
| Training | Structured learning activities (internal or external) | Specific skills, procedures, or regulatory requirements | Internal auditor course, welding certification, software training |
| Experience | On-the-job learning and demonstrated proficiency | Roles where practical application is critical | Years of service, apprenticeship, supervised work period |
Many organisations over-rely on formal training and under-value experience. An operator who has run a machine flawlessly for five years is competent regardless of whether they have a training certificate. Conversely, a new hire with a degree still needs supervised experience before they can work independently. The standard recognises this balance.
Competence Records and Documentation
Clause 7.2 explicitly requires that the organisation retains documented information as evidence of competence. This is one of the most heavily audited documentation requirements. Your records must demonstrate that competence has been determined, verified, and maintained.
- Individual competence files – Per-employee records containing qualifications, training certificates, competence assessments, and work history
- Training records – Course details, attendance records, assessment results, and trainer qualifications
- Competence matrices – A visual mapping of roles against required and actual competence levels across the organisation
- Licences and certifications – Copies of any external certifications, professional registrations, or licences required for the role
- Review records – Documentation of periodic competence reviews and any actions taken to address gaps
Evaluating Training Effectiveness
Clause 7.2 requires that you evaluate the effectiveness of actions taken to acquire competence. This goes far beyond collecting attendance sheets. You must demonstrate that the training actually worked – that the person can now perform the task correctly.
- Level 1: Reaction – Did the participant find the training useful? (Feedback forms)
- Level 2: Learning – Did the participant acquire the intended knowledge or skill? (Tests, practical assessments)
- Level 3: Behaviour – Is the participant applying the learning on the job? (Observation, supervisor feedback)
- Level 4: Results – Has the training improved quality performance? (Process metrics, defect rates, audit findings)
Most organisations stop at Level 1 or 2, but auditors increasingly expect evidence of Level 3 and Level 4 evaluation, especially for training that addresses critical quality processes.
The Competence Matrix
A competence matrix is one of the most effective tools for managing ISO 9001 competence requirements. It is a visual tool that maps roles against the required competences and shows the current competence level of each person in each role. Gaps are immediately visible, making it easy to plan training and recruitment.
| Role | QMS Awareness | Process Knowledge | Internal Audit | Root Cause Analysis | Customer Requirements |
|---|---|---|---|---|---|
| Quality Manager | Expert | Advanced | Advanced | Expert | Advanced |
| Production Supervisor | Competent | Expert | Awareness | Competent | Awareness |
| Machine Operator | Awareness | Competent | Not required | Awareness | Not required |
| Sales Representative | Awareness | Not required | Not required | Not required | Competent |
The matrix should be reviewed and updated at least annually, or whenever roles or processes change significantly. It is a living document that drives training budgets, hiring decisions, and succession planning.
Ongoing Competence Management
Competence is not a one-time achievement. Skills erode, knowledge becomes outdated, technology changes, and processes evolve. ISO 9001 expects organisations to manage competence as an ongoing process, not a once-a-year checkbox.
- Periodic competence reviews – Scheduled assessments to verify that personnel remain competent in their roles
- Refresher training – Regular updates for critical skills, especially for QMS awareness, audit techniques, and process changes
- Change-driven reassessment – Whenever a process, technology, or regulatory requirement changes, reassess the competence of affected personnel
- Continuous professional development – Encouraging and tracking ongoing learning through courses, conferences, and professional memberships
- Succession planning – Identifying and developing competence for critical roles to ensure business continuity
Frequently Asked Questions
Does ISO 9001 require mandatory training for all employees?
No. Clause 7.2 requires competence for persons doing work that affects quality performance. Not every employee affects quality directly. Administrative staff in non-operational roles, for example, may not require formal competence assessment. The key is to determine whose work affects quality and ensure those people are competent.
What is the difference between competence and awareness in ISO 9001?
Competence (Clause 7.2) is about having the knowledge, skills, and experience to perform work correctly. Awareness (Clause 7.3) is about understanding the quality policy, quality objectives, and one’s contribution to QMS effectiveness. Competence is role-specific; awareness is universal. Both are required.
How often should competence be reviewed?
At least annually for most roles, but the frequency should be higher for critical processes, high-risk activities, or roles with frequent changes. The standard does not prescribe a specific interval, so you must justify your review frequency based on risk and relevance.
Can we use on-the-job training instead of formal courses?
Yes. ISO 9001 explicitly recognises experience as a valid basis for competence. On-the-job training, when properly structured, documented, and verified, is perfectly acceptable. The key is that the training must be effective, and you must retain evidence of competence regardless of how it was acquired.
Do we need to document competence for temporary workers?
Yes. Clause 7.2 applies to all persons doing work under your organisation’s control, regardless of employment type. If a temporary worker performs a task that affects quality, you must ensure they are competent. This is typically managed through the agency contract, requiring the agency to provide competent personnel and supporting evidence.
What happens if an auditor finds a competence gap in our QMS?
An unresolved competence gap constitutes a nonconformity against Clause 7.2. If the gap directly affects product or service quality, it is likely to be classified as a major nonconformity. The auditor will expect an immediate corrective action plan to address the gap and prevent recurrence.
Build a Competent Workforce with ISO 9001
Meeting Clause 7.2 is not about creating bureaucracy. It is about ensuring that every person in your organisation has what they need to do their job correctly, safely, and consistently. When competence is managed well, quality improves, errors decrease, and your QMS becomes a genuine driver of business performance.
Contact Bitrixme today to develop your ISO 9001 competence management framework. We can help with competence matrices, training programmes, and audit preparation. Message us on WhatsApp for a free consultation.
