ISO 9001 Human Resource Management Procedure Template

Your competence procedure probably satisfies Clause 7.2. The question worth asking is whether it satisfies the four competence requirements ISO 9001 puts everywhere else.

Clause 7.2 is the leanest competence requirement in the ISO family. Four sub-clauses. No training-needs determination, no requirement to maintain competence once acquired, no mention of qualification. An organization can satisfy it with a training matrix and a folder of certificates, and many do.

That leanness is misleading, because ISO 9001 does not keep its competence requirements in Clause 7.2. Clause 8.5.1 e) makes the appointment of competent persons, including any required qualification, a controlled condition of production and service provision. Clause 8.4.3 c) requires competence, including any required qualification, to be communicated to external providers. Clause 8.5.1 g) requires the implementation of actions to prevent human error. Clause 7.1.6 requires organizational knowledge to be determined and maintained.

Three of those four use language Clause 7.2 never uses. None of them appears in a typical competence procedure, because a procedure written against Clause 7.2 stops where Clause 7.2 stops. This one does not.

What is included

• Complete Clause 7.2 and 7.3 procedure — 42 pages, editable Microsoft Word format
• The ISO 9001:2026 edition of this template, free, when we issue it — emailed to the address used at purchase
• Section 7.3 — the four competence requirements ISO 9001 places outside Clause 7.2, each discharged and each cross-referenced
• Section 7.8 — actions to prevent human error under Clause 8.5.1 g), with an error-type table and recurrence tracked as the evaluation
• Section 7.4 — organizational knowledge under Clause 7.1.6, four questions per process and the register that answers them
• Qualification tracked separately from training, with issuer and expiry, so Clause 8.5.1 e) is auditable on demand. Expiry reassigns the task rather than supervising the person
• Relevant quality objectives mapped per role — Clause 7.3 b) says relevant, not all, and that decision has to be made by somebody
• Channel-enumerated trigger — eleven routes in, including a repeated error by different people and the departure of someone with unique knowledge
• Single-owner accountability with named alternates for every gating role
• Records table with no blanks — ten records, each with clause driver, owner, retention and location
• Exception and contingency paths — eight, each with an owner, a limit and an approver
• Key performance indicators — six, including the count of processes with no single point of knowledge failure
• Maturity ladder — four levels across eight elements, scoreable as a self-assessment
• Full clause cross-reference — eighteen obligations mapped to where each is discharged
• Process interaction map — embedded in the document and supplied as an editable SVG, discharging the Clause 4.4.1 requirement to determine process sequence and interaction
• Appendix A — competence and awareness register, six parts
• Appendix B — competence shortfall and action record, which asks whether the failure was incompetence or error before the action is chosen
• Appendix C — desk-level work instruction with per-step timings, and two worked examples deliberately different in shape
• Appendix D — determination worksheet, the six things to settle before the procedure runs

Written as a working document, not an outline

It arrives as a filled-in worked example, so you can see what each element looks like when it is done properly, with bracketed placeholders wherever a value is genuinely yours to set — thresholds, roles, intervals, retention periods. You are editing a working document rather than filling in a hollow template.

Every MSI procedure carries the same seven structural marks: a real trigger with informal routes included, one accountable owner with named alternates, stated thresholds rather than intentions, the record as the gate rather than a report about the work, a defined exception path, trainable in one sitting, and an event-based review trigger with the calendar as a backstop only.

Who it is for

Quality managers, operations leaders and consultants at ISO 9001 certified or certifying organizations. It is most useful where an inherited training matrix has no stated reason behind any entry, where the same error keeps recurring despite retraining, or where one person understands a process and nobody has ever counted.

What it changes

• You diagnose the failure before you act on it. Asking whether a shortfall is a competence problem or a human error problem, before selecting the action, is one line on a form. It stops the organization retraining a person who already knew how — the most common ineffective corrective action in quality management, and the one that produces the same nonconformity twelve months later.
• You find out what leaves with the next resignation. One question asked at the point of notice — what do you know that nobody else knows? — has recovered more organizational knowledge than any documentation program MSI has seen. It works because the person is usually willing, briefly available, and has never been asked before.
• You stop losing qualifications at expiry. Qualifications live in their own column with issuer and expiry, on a schedule reviewed monthly, with anything inside sixty days actioned before it lapses.
• You make awareness answer the question the auditor asks. Deciding which quality objectives are relevant to which role takes an afternoon and converts a canteen poster into a record.
• You make the record the gate. A shortfall does not close until the evaluation of effectiveness is recorded, and the interim control stays in force until it does.

Format and license

Editable Microsoft Word (.docx), 42 pages. An editable SVG of the process interaction map is supplied alongside it, so you can retitle the boxes with your own process names. Adapt it, rebrand it, and adopt it into your document control system. Purchase grants your organization a perpetual, non-exclusive license to edit, rebrand and use the template, including at multiple sites under common ownership. It may not be resold, sublicensed, distributed outside the buying organization, or published in whole or in substantial part.

MSI Template v1.0 · July 2026 · Built to ISO 9001:2015.

Questions

Is this a template or a finished procedure?

Both, deliberately. It is written as a filled-in worked example so you can see what each element looks like when done properly, with bracketed placeholders wherever a value is genuinely yours to set — thresholds, roles, intervals, retention periods. You are editing a working document rather than filling in a hollow outline.

Should we wait for ISO 9001:2026?

No. ISO 9001:2015 is the only version you can be certified to until the 2026 edition is published, so this is the template you need today — and the 2026 edition of it is included in this purchase at no additional cost. Waiting costs you the use of it in the meantime and saves you nothing.

Will this pass an audit?

A procedure does not pass an audit; an organization does. What this gives you is a procedure that addresses every requirement of the clause with a named owner and a named record, and that describes a process people can actually follow. Conformity is demonstrated by implementation and evidence — a perfect document over an operation that ignores it is still a finding. Unfilled placeholders are unmet requirements, so fill them.

Does it cover the whole standard?

No. It covers Clauses 7.2 and 7.3 in full, plus the four competence requirements ISO 9001 places elsewhere — Clauses 8.5.1 e), 8.5.1 f), 8.5.1 g), 8.4.3 c) and 7.1.6. It is one procedure in a management system and it references the neighboring processes rather than replacing them.

Is organizational knowledge really a competence matter?

It is a separate requirement, and it belongs here because this is the function that already knows who can do what. Clause 7.1.6 exists to safeguard the organization against loss of knowledge through staff turnover. Competence asks what a person can do; this asks what survives when they leave.

We use different clause numbering and our own document numbers.

Every cross-reference sits in a table at the back rather than baked into the body text, precisely so you can renumber without unpicking the procedure. Document numbers appear as bracketed placeholders throughout.

Can you help us implement it?

Yes. Call Management Systems International at 760-434-9141 to schedule a planning session.

---

Management Systems International, LLC is a veteran-owned and female-owned ISO consulting firm founded in 1998. Over twenty-eight years we have supported more than eighty certifications, attended more than two hundred audits, and trained more than six hundred professionals.

ISO 9001 is a trademark of the International Organization for Standardization. This template is an independent work by Management Systems International, LLC and is not endorsed by or affiliated with ISO, any certification body, or any regulatory authority. Clause references are provided so you can locate each requirement in your own licensed copy of the standard; the standard itself is not reproduced.

This template is guidance, not legal or regulatory advice. Where this document refers to obligations arising from customer requirements, statutory requirements or regulation, you are responsible for identifying which apply to you and confirming their current text against the primary source.

© 2026 Management Systems International, LLC · All rights reserved.