What is actually in the ISO 7101 document
A complete, editable ISO 7101:2023 leadership and governance procedure for healthcare quality management systems — governance, service user focus and management review in one document.
20
obligations cross-referenced
17
MSI notes in the margin
65+
marked decisions that are yours
Three things ISO 7101 governance procedures routinely omit
ISO 7101 is the first international standard written specifically for quality management in healthcare organizations, and most procedures brought to it were built for a different standard. Three obligations tend to survive that translation badly.
1. Service user focus treated as a satisfaction survey
Clause 5.4 places service user focus inside Leadership. It is an obligation on top management, not a measurement activity delegated to a patient experience team.
Most healthcare organizations answer it with survey scores. Scores describe what service users reported after care was delivered. The clause is asking something earlier and harder: what top management does to ensure service user needs shape how care is designed, resourced and prioritised in the first place. A rising score with no decision attached to it satisfies nobody who reads the clause carefully.
What this template does about it: Service user focus is written as a set of governance decisions with named owners and records — what reaches top management, at what frequency, and what has to change as a result — with survey data as one input among several rather than the whole answer.
2. Equity and access have nowhere to live
A governance procedure adapted from a generic quality standard has sections for policy, objectives, resources and review. It has no section for whether care reaches the people who need it, because no generic standard asks.
ISO 7101 does. The result is that equity and access obligations either go unaddressed or get appended as a policy statement with no process behind them — no data, no owner, no point at which anyone is required to look.
What this template does about it: Equity of access is built in as a standing governance input with a named producer and a defined review point, so it arrives at the table on a schedule rather than when someone remembers.
3. Culture is delegated, and then nobody governs it
Clause 5.1 places obligations on top management for the culture the organization operates in — the conditions under which people report concerns, escalate risk and speak up about harm.
In practice this is handed to human resources or to a patient safety team, both of which run programmes and neither of which governs. The delegation is reasonable; the gap it leaves is that culture has no route back to top management as a governed item, and no record showing it was ever considered.
What this template does about it: Culture is written as a governance obligation with defined indicators, a named owner and a place on the management review agenda — separate from the programmes that deliver it.
What’s included
30 pages, editable Microsoft Word format, no protection and no macros.
- Complete governance procedure covering the layer top management owns — context, leadership and commitment, healthcare quality policy, service user focus, organizational roles and responsibilities, objectives and planning, resources, communication, monitoring, and management review
- Service user focus written as governance decisions with named owners and records, not as a satisfaction measurement exercise
- Equity of access built in as a standing governance input, with a named producer and a defined review point
- Culture obligations written with indicators, an owner and a place on the review agenda, separate from the programmes that deliver them
- Management review structured so every required input has a producer and a due date before the meeting opens, rather than an agenda assembled the week before
- Healthcare quality policy commitments written as testable statements rather than intentions, so conformity can be demonstrated against them
- Objectives written with what, resources, who, when, and how results are evaluated
- Roles and responsibilities assigned by named role, with the reporting line to top management stated
- 20 obligations cross-referenced to the clause each one satisfies, held in a table at the back so you can renumber to your own document system
- 17 MSI notes in the margin, drawn from 200+ audits attended, each labelled as MSI practice so an auditor can tell it apart from a clause requirement
- 65+ marked decision points — frequencies, roles, thresholds, systems, retention periods — bracketed wherever the value is genuinely yours to set
- Records table with a location, an owning role and a retention basis for every record the procedure produces
Every appendix, form and worked example is part of the document. Nothing is sold separately.
Who it’s for
Quality and governance leads at hospitals, clinics and health systems implementing ISO 7101, and consultants supporting healthcare quality management systems.
Not sure yet? The
free Leadership and Commitment Maturity Check scores eight elements in under five minutes.
New to the standard? The
ISO 7101 Overview — Healthcare Quality Management Systems course covers the framework.
Questions
Is this a template or a finished procedure?
Both, deliberately. It is written as a filled-in worked example so you can see what each element looks like when done properly, with bracketed placeholders wherever a value is genuinely yours to set — frequencies, roles, thresholds, systems, retention periods. You are editing a working document rather than filling in a hollow outline.
How is this different from a management review template?
A management review template runs the meeting. This procedure determines what arrives at the meeting: who produces each required input, on what frequency, and where the record lives before the review opens. If your reviews are hard to prepare, the problem is upstream of the agenda.
Does it cover the whole standard?
No. It covers the governance layer — context, leadership, policy, objectives, planning, resources, communication, monitoring and management review. It references neighboring processes such as risk management, competence, internal audit and corrective action rather than replacing them.
What format is it?
Editable Microsoft Word (.docx), with the process interaction map supplied separately as an editable SVG where the version includes one. Adapt it, rebrand it, and adopt it into your own document control system. The license permits the buying organization to use it across its own sites and issue it to employees, contractors and auditors, and permits consultants to adapt it for engagements they deliver.
Will this pass an audit?
A procedure does not pass an audit; an organization does. What this gives you is a procedure that addresses every requirement of the clauses it covers, with a named owner and a named record, describing a process people can actually follow. Conformity is demonstrated by implementation and evidence. Unfilled placeholders are unmet requirements, so fill them.
We use different clause numbering.
Every cross-reference sits in a table at the back rather than baked into the body text, precisely so you can renumber without unpicking the procedure.
Which one do I need?
Take the version matching your certification. If you run two or three standards under one system, the combined versions are built for that. If you are unsure where your current process sits, the
free Leadership and Commitment Maturity Check will tell you before you spend anything.
Can you help us implement it?
Yes. Call MSI at
760-434-9141 to schedule a planning session.