This guide covers the training and competence phase of ISO 9001 implementation. By this point, documentation is being issued and the QMS is moving from design into use. The organization now has to prove that people performing quality-affecting work understand the QMS, know their role in it, and are competent to perform the work assigned to them.

The core shift is from "we trained everyone" to "we determined requirements, verified competence, addressed gaps, and retained evidence." Training attendance helps, but it is not the same as demonstrated competence.

Download the PDF guide Back to ISO Standards Hub

Back to Guides

Visual Summary

Use the competence protocol visual as a quick reference for Clause 7.2, awareness versus competence, verification pillars, and competence matrix design.

Jump to Guide Sections

1. The Competence Imperative

Competence and training are commonly underestimated because organizations confuse training activity with capability. ISO 9001 does not require a signature on a training log as the final objective; it requires the organization to determine competence requirements, ensure people are competent, act where gaps exist, and retain evidence.

Common ISO 9001 training failures and stronger competence-based controls
Common Failure Why It Fails Competence-Based Control
Training delivered, competence not verified Attendance proves presence, not ability to perform quality-affecting work. Require observation, demonstration, assessment, work review, or supervisor sign-off tied to defined role requirements.
Competence assumed from experience Long tenure may indicate capability, but the QMS still needs evidence of defined requirements and verification. Use structured attestation, supervisor evaluation, historical performance evidence, and targeted gap checks.
Records exist but do not complete the cycle A training log alone does not show requirements, gap closure, or competence effectiveness. Maintain the full trail: requirements, training, verification, gap actions, reassessment, and retained evidence.

2. Clause 7.2: What the Standard Actually Requires

Clause 7.2 is a system design requirement. It asks the organization to define what competence is needed for people doing work under its control, ensure those people are competent, act where needed, evaluate those actions when appropriate, and retain records.

Clause 7.2 competence cycle translated into implementation actions
Clause 7.2 Requirement Implementation Meaning Evidence to Retain
Determine competence Define role-specific knowledge, skills, experience, education, certifications, and demonstrated abilities. Role profiles, competence matrix, job descriptions, qualification criteria, or training requirements.
Ensure competence Confirm people meet requirements through hiring, training, mentoring, assignment controls, or reassignment. Training records, assessments, supervisor approvals, qualification records, and onboarding evidence.
Take action when gaps exist Close gaps through training, coaching, supervision, retraining, procedure clarification, or work restriction. Gap plans, training completion, reassessment records, corrective actions, or authorization changes.
Retain evidence Keep records showing the organization did the above and can retrieve the evidence during an audit. Employee competence files, matrices, attendance logs, verification records, and historical attestations.

3. Building the Competence Matrix

The competence matrix is the organizing document that makes Clause 7.2 manageable across multiple roles and employees. It should show quality-affecting roles, role requirements, current employee status, training gaps, verification method, and reassessment needs.

Build Sequence

  • Identify quality-affecting roles.
  • Define competence requirements per role.
  • Assess current competence for each employee.
  • Build the matrix document.
  • Create and execute the gap training plan.

Single-Point Risk

A strong matrix also reveals roles where only one person is competent. Those single points of failure should feed cross-training, succession, and continuity planning.

Competence matrix assessment status definitions
Assessment Status Meaning Required Follow-Up
Competent Employee meets defined requirements and evidence supports the judgment. Retain proof and define reassessment triggers such as process change, incident, or time interval.
Competent with restriction Employee can perform some tasks but not the full role independently. Define allowed work, supervision requirements, training actions, and reassessment date.
Gap identified Employee lacks required knowledge, skill, evidence, or authorization. Create a gap closure plan and verify competence before independent assignment.

4. Training Records: What Auditors Actually Need

Training records should prove more than attendance. A registrar will typically trace from a role requirement to an employee, then ask how competence was determined, what training occurred, how competence was verified, and how gaps were handled.

Training and competence record types needed for ISO 9001 Clause 7.2 evidence
Record Type Purpose Minimum Contents
Competence requirements Shows what the organization determined each role needs. Role, requirements, source of requirements, owner, approval, and revision status.
Training attendance Shows who received training and when. Topic, date, trainer, attendees, method, materials, and procedure or requirement covered.
Competence verification Shows that training transferred into ability to perform the work. Evaluation method, evaluator, result, restrictions, recheck date, and employee role.
Gap closure Shows how deficiencies were addressed. Gap, action taken, responsible person, completion date, reassessment result, and retained evidence.

5. Clause 7.3: Awareness vs. Competence

Competence is the proven ability to perform work. Awareness is the understanding of how that work connects to the QMS. An employee can be competent at a task and still lack awareness of the Quality Policy, objectives, QMS contribution, and consequences of poor conformance.

Clause 7.3 awareness requirements translated into employee understanding
Awareness Requirement What Employees Should Understand Practical Evidence
Quality Policy The policy is not a poster; it is the organization's quality commitment and operating direction. Employees can explain the policy in role-appropriate language.
Quality objectives Objectives translate policy into measurable performance targets. Teams know the objectives that affect their process and where results are reviewed.
Contribution to QMS effectiveness Each role affects whether the QMS produces conforming products, services, and records. Employees can connect their work to quality outcomes and controls.
Consequences of nonconformance Poor conformance creates customer, safety, cost, delivery, audit, and certification risk. Employees know what can happen when controls are bypassed and how to escalate problems.

6. Designing QMS Training That Changes Behavior

Effective QMS training is tiered. Everyone needs awareness, quality-affecting roles need procedure and competence training, and leaders need training on governance, escalation, management review, and their own accountability.

Three-tier ISO 9001 QMS training architecture
Training Tier Audience Purpose
Tier 1: QMS awareness All employees Explain certification purpose, Quality Policy, objectives, employee contribution, and consequences of nonconformance.
Tier 2: Role and procedure training Employees performing quality-affecting work Train procedures, records, acceptance criteria, escalation paths, and practical task expectations.
Tier 3: Leadership and process-owner training Managers, supervisors, process owners, and implementation leaders Build ownership for process performance, document approval, audit response, corrective action, and management review.
Training design rule: every training event should answer what changed, who is affected, how the person demonstrates competence, and what record proves it.

7. New Employee Onboarding

The competence system must work for new hires as well as current employees. New employees should receive QMS awareness before independent work and role-specific training before they perform quality-affecting tasks without supervision.

Before Independent Work

  • QMS awareness completed.
  • Role requirements identified.
  • Required procedures assigned.
  • Supervisor or trainer assigned.
  • Initial competence verification planned.

Onboarding Evidence

The employee file should show awareness training, role training, supervised practice, competence verification, restrictions if any, and release to independent work.

8. Training Records: The Complete System

Training record control should be treated like document control. Records must be organized, retrievable, protected, and connected to the competence matrix. If a record cannot be found during the audit, it will not support the competence claim.

Essential ISO 9001 training record system components
Record System Component What It Contains Audit Purpose
Competence matrix Roles, requirements, employee status, gaps, restrictions, and review dates. Shows the organization knows who is competent for what work.
Employee competence file Training, qualifications, assessments, attestations, and reassessments for one employee. Supports person-specific audit sampling.
Training attendance records Session details, attendees, trainer, date, materials, and covered requirements. Shows delivery of planned training.
Competence assessment records Demonstration, observation, test, work review, or supervisor evaluation results. Shows capability, not merely exposure.
Gap closure records Actions taken when competence was missing or incomplete. Shows the QMS acts when requirements are not met.

9. Clause 7.4: Communication

Training and awareness are reinforced by communication. Clause 7.4 requires the organization to determine what QMS communications are needed, when they occur, with whom, how they happen, and who communicates.

QMS communication plan examples for ISO 9001 implementation
Communication Audience Purpose
QMS awareness training All employees Explain certification purpose, policy, objectives, contributions, and consequences.
Procedure release notices Affected process users and supervisors Communicate new or revised procedures before they become active.
Audit closing meetings Process owners and leadership Report findings, evidence, responsibilities, and follow-up expectations.
Management review outputs Leadership, process owners, and affected functions Communicate decisions, actions, resources, and improvement priorities.

10. Meridian Three-Phase Training Rollout

Meridian executes training in three phases after the competence matrix framework is built and documentation is far enough along to train real procedures. The rollout is designed to build awareness, verify quality-affecting competence, and sustain the QMS beyond the certification audit.

Meridian ISO 9001 training rollout phases
Phase Audience Content and Objective
Phase A: Leadership and management training Executives, managers, supervisors, and process owners Build leadership ownership for QMS governance, process accountability, procedure approval, audit response, and management review.
Phase B: Quality-affecting employee training Employees whose work affects product, service, inspection, records, purchasing, production, or release decisions Deliver QMS awareness plus role-specific procedure training, on-the-job verification, and gap closure.
Phase C: Organization-wide awareness completion Employees in non-quality-affecting roles Complete awareness coverage so every employee understands policy, objectives, QMS contribution, and nonconformance consequences.
Meridian lesson: training at the point of use exposes real process gaps. When training reveals procedure weakness, update the process and retrain rather than treating the finding as a training-only issue.