ISO 9001 Quality Policy: How to Write One That Works
Your ISO 9001 quality policy is the foundation of your quality management system (QMS). It sets the direction for quality across your entire organisation and is the first thing auditors check when they walk through the door.
A well-written quality policy does more than satisfy clause 5.2 of the ISO 9001 standard. It communicates your commitment to quality, aligns your team around common objectives, and builds trust with customers and stakeholders. This guide explains what a quality policy is, what ISO 9001 requires, how to write one that works, and provides examples by industry.
What Is an ISO 9001 Quality Policy?
A quality policy is a formal document that states your organisation’s overall intentions and direction related to quality. It is a top-level document approved by senior management that establishes the framework for setting quality objectives.
The quality policy is not a marketing slogan. It is a working document that must be communicated, understood, and applied throughout the organisation. Every employee should be able to explain what the quality policy means for their role.
ISO 9001 Requirements for the Quality Policy
Clause 5.2 of ISO 9001:2015 sets out four specific requirements for the quality policy.
| Requirement | Clause Reference | What It Means in Practice |
|---|---|---|
| Appropriate to purpose and context | 5.2.1 a) | The policy must reflect your organisation’s size, industry, and strategic direction. A generic policy copied from the internet will not pass audit. |
| Commitment to satisfy requirements | 5.2.1 b) | The policy must include a commitment to meet customer, statutory, and regulatory requirements. |
| Commitment to continual improvement | 5.2.1 c) | The QMS must be focused on ongoing improvement, not just maintaining the status quo. |
| Framework for quality objectives | 5.2.1 d) | The policy must provide a framework for setting and reviewing measurable quality objectives. |
| Communicated and understood | 5.2.2 | The policy must be available to relevant interested parties and communicated to all employees. |
| Reviewed for continuing suitability | 5.2.2 | Management must periodically review the policy to ensure it remains relevant. |
How to Write an ISO 9001 Quality Policy
Follow these steps to write a quality policy that works in practice and passes audit scrutiny.
Step 1: Understand Your Organisation’s Context
Review your organisation’s strategic direction, market position, customer base, and regulatory environment. The quality policy must align with where your business is heading, not just where it is today.
Step 2: Define Quality Commitments
State your commitment to meeting customer requirements and regulatory obligations. Include a pledge to continually improve the QMS. Be specific enough to be meaningful but broad enough to remain stable over time.
Step 3: Link to Quality Objectives
The policy should set the direction for measurable objectives. For example, if your policy mentions “on-time delivery,” your objectives should include a target delivery performance percentage.
Step 4: Keep It Concise
Aim for one page or less. The policy should be memorable enough that employees can recall its key points. Avoid jargon and vague statements.
Step 5: Get Management Approval
The policy must be approved by top management. This is not a formality – it demonstrates leadership commitment, which is a core requirement of clause 5.1.
ISO 9001 Quality Policy Examples by Industry
Example 1: Construction
“[Organisation] is committed to delivering construction projects that meet or exceed customer specifications, comply with all applicable health, safety, and regulatory requirements, and continually improve our quality management system. We set measurable quality objectives for project delivery, defect reduction, and customer satisfaction, and we review these objectives quarterly.”
Example 2: Healthcare
“[Organisation] is dedicated to providing safe, effective, and compassionate healthcare services. We comply with all regulatory and accreditation standards, engage our staff in continuous improvement, and measure our performance against patient outcomes and satisfaction targets.”
Example 3: Manufacturing
“[Organisation] is committed to manufacturing products that consistently meet customer requirements and applicable standards. We prevent defects through process control, invest in employee training, and continuously improve our QMS to enhance customer value.”
Example 4: IT Services
“[Organisation] delivers IT services that meet agreed specifications and timelines. We are committed to understanding customer needs, protecting data security, and improving our service delivery through regular performance measurement and management review.”
Communicating the Quality Policy
Writing the policy is only half the work. ISO 9001 requires that the policy is communicated and understood. Here is how to make that happen:
| Method | Audience | Frequency |
|---|---|---|
| Employee induction | New hires | Onboarding |
| Posters in common areas | All staff | Always visible |
| Intranet or SharePoint | All staff | On demand |
| Team meetings | Department teams | Quarterly |
| Management review input | Senior leadership | Annually |
| Customer-facing materials | Customers and stakeholders | As needed |
Regular Review of the Quality Policy
Your quality policy is not a static document. Clause 5.2.2 requires that it is reviewed for continuing suitability. This typically happens during the management review meeting (clause 9.3).
- Trigger events for review – Change in strategic direction, merger or acquisition, entry into new markets, regulatory changes, major customer complaints, or significant process changes.
- Review criteria – Is the policy still aligned with business objectives? Does it reflect current regulatory requirements? Is it still understood by employees? Are quality objectives being met?
- Documentation – Record the review outcome in management review minutes. If the policy is updated, issue a new version with appropriate change control.
Common Mistakes When Writing a Quality Policy
| Mistake | Why It Is a Problem | How to Fix It |
|---|---|---|
| Too long or complex | Employees cannot remember or understand it | Keep it to one page; use plain language |
| Generic or copied | Auditors spot this immediately | Tailor every sentence to your organisation |
| No commitment to improvement | Fails clause 5.2.1 c) | Explicitly state commitment to continual improvement |
| Not linked to objectives | Policy exists in isolation | Reference how the policy guides objective setting |
| No management approval | Fails clause 5.2.1 requirements | Have the CEO or MD sign and date the policy |
| Stored but not communicated | Fails clause 5.2.2 | Prove communication through training records and awareness checks |
Frequently Asked Questions
Can I use a one-sentence quality policy for ISO 9001?
A single sentence is unlikely to meet all ISO 9001 requirements. The policy must cover commitment to customer requirements, continual improvement, and provide a framework for objectives. A short paragraph is the practical minimum.
Who signs the quality policy?
The quality policy must be approved by top management. Typically, the Chief Executive Officer, Managing Director, or equivalent signs it. This demonstrates leadership commitment under clause 5.1.
How often should the quality policy be updated?
There is no fixed interval, but it must be reviewed at each management review meeting (typically annually). It should be updated whenever there is a significant change in organisational context, strategy, or regulatory requirements.
Does the quality policy need to be displayed publicly?
ISO 9001 requires the policy to be available to relevant interested parties. It does not mandate public display, but many organisations choose to publish it on their website to build customer confidence.
Can the quality policy include other management system requirements?
Yes. Many organisations combine quality, environmental, and health and safety policies into a single integrated policy, provided all applicable ISO requirements are addressed.
What is the difference between a quality policy and quality objectives?
The quality policy is a statement of intent and direction. Quality objectives are specific, measurable targets derived from the policy. For example, a policy commitment to customer satisfaction might translate into an objective of achieving a 90% customer satisfaction score.
Get Expert ISO 9001 Quality Policy Support
Bitrixme helps organisations across the GCC develop ISO 9001-compliant quality policies and QMS documentation. Our consultants work with you to create policies that are audit-ready, practical, and aligned with your business goals.
Contact Bitrixme today to discuss your ISO 9001 quality policy or message us on WhatsApp for a quick response.
