Chapter 10: The Documentation Myth: ISO Does Not Require a Procedures Manual for Everything
The biggest mistake Canadian manufacturers make is confusing "having a quality management system" with "having procedures for everything." They're not the same. Clause 7.5 of ISO 9001:2015 is remarkably specific about what constitutes documented information, and the standard deliberately uses two different terms: documented information that must be maintained versus documented information that must be retained.
If you're maintaining it, you're keeping it current and accessible—it's a living document tied to how your plant actually operates right now. If you're retaining it, you're storing it for a defined period as evidence. A work instruction for CNC programming is maintained. Records of completed inspections are retained. This distinction matters because it changes how much time you spend updating versus filing.
The 11 Mandatory Documented Information Items Under ISO 9001:2015
Stop writing procedures for everything and focus on these eleven areas. This is what auditors will ask to see. Everything else is optional:
- Quality policy — your written commitment to quality (one-page document, signed by top management)
- Quality objectives — measurable targets tied to strategy (three to five objectives per year)
- Scope of the QMS — what's in and what's out (matters most for multi-site operations)
- Procedures for document control — how you create, review, approve, and retire documents
- Procedures for control of records — how long you keep what, where, and who can access
- Evidence of leadership review — meeting minutes showing management discussed QMS performance
- Procedures for competence — training records and evidence of on-the-job qualification
- Procedures for operational control — how you manage the processes that directly affect product (this varies wildly by industry)
- Procedures for measuring and monitoring — calibration records, inspection procedures, audit checklists
- Procedures for control of nonconforming product — how you handle scrap, rework, or customer complaints
- Procedures for corrective action — the root-cause-and-fix process that everyone talks about but few do well
That's it. Eleven documented information requirements—not twenty, not fifty. A 100-person machining shop needs these eleven areas documented to be ISO 9001 compliant. Everything else—standard work for painting, a flowchart for accounts receivable, the maintenance schedule for the compressor—is useful but not mandatory.
Did You Know?
The most common audit finding at first-certification audits in Canada is not missing procedures. It's procedures that exist but nobody follows, or that describe a process that was changed six months ago and never updated. An auditor would rather see four procedures that are actively used than twelve that sit in a digital tomb.
Chapter 9: Key Takeaway: Your Process Map Is Your System Blueprint
By the end of this chapter, you should have:
Chapter 11: Designing a Document Hierarchy That Matches Your Plant's Reality
Not every manufacturer needs a four-tier documentation system. But understanding the tiers helps you design what your specific operation does need.
Request a Consultation
Fill in your details and we'll get back to you.
