Why Clause 7.4 Is Worth More Attention Than It Gets
Auditing communication requirements under ISO 9001 Clause 7.4 is one of those tasks that looks deceptively simple on paper. The clause is short. It does not demand a procedure or a specific documented format. And yet, in practice, it is one of the areas where organisations consistently fall short, not because they do not communicate, but because they cannot demonstrate that their communication is planned, purposeful, or effective.
On this page
If you are auditing a quality management system and you treat Clause 7.4 as a quick checkbox, you will miss the real story. Communication failures sit behind a surprising number of nonconformities in other parts of the system. Customer complaints that were not escalated internally. Corrective actions that were closed without telling the people affected. Quality objectives that nobody on the shop floor has heard of. These are communication breakdowns, and Clause 7.4 is where the standard asks organisations to address them systematically.
This guide walks you through how to audit communication requirements in ISO 9001 with the same rigour you would apply to any other clause. It covers what the standard actually requires, how to structure your audit questions, what evidence to gather, and the nonconformities most likely to appear.
For a detailed explanation of what Clause 7.4 requires from the organisation's perspective, see our companion post Communication Under ISO 9001: Clause 7.4 Explained.
What Clause 7.4 Actually Requires
ISO 9001:2015 Clause 7.4 states that the organisation shall determine the internal and external communications relevant to the quality management system. Specifically, it requires the organisation to determine what to communicate, when to communicate it, with whom to communicate, how to communicate, and who communicates.
That is five questions, and the standard leaves the organisation to answer all of them. There is no prescribed format, no mandatory procedure, and no required register. The organisation has the freedom to determine what is appropriate for its size, complexity, and context.
This flexibility is intentional, but it creates a challenge for auditors. You cannot walk in with a fixed checklist and tick boxes. You need to understand what the organisation has decided is relevant, and then test whether those decisions are actually being implemented.
What “Relevant” Communication Means
The word relevant is doing a lot of work in this clause. Not every piece of communication in a business is relevant to the QMS. The clause is asking specifically about communication that affects the quality management system, its processes, and its outcomes.
Relevant internal communications might include quality policy updates, changes to procedures, nonconformity notifications, quality objective performance data, and corrective action status. Relevant external communications might include customer feedback mechanisms, supplier quality requirements, regulatory notifications, and communication with certification bodies.
Your job as an auditor is to assess whether the organisation has thought this through deliberately, not just whether they have a noticeboard or a weekly meeting.
Exemplar Global Certified Training ProviderRTP No. 310970
How to Structure Your Audit of Clause 7.4
Start With What the Organisation Has Determined
Before you start asking about specific communications, find out what the organisation has actually defined. Ask the quality manager or management representative to walk you through how communication relevant to the QMS is managed. You are looking for evidence that someone has thought about this systematically rather than leaving it to chance.
This might be captured in a communication plan, a communications matrix, a procedure, or even a section in the quality manual. In smaller organisations, it might be less formal, but there should still be some evidence that the five questions have been considered.
Ask questions like:
- How does the organisation decide what needs to be communicated about the QMS?
- Who is responsible for internal QMS communications?
- What channels are used for different types of communication?
- How does the organisation communicate with external parties about quality matters?
If the answer to all of these is a blank stare, that is a significant finding. If the answer is a well thought out communication matrix with owners and channels, your job is then to verify it is being followed.
Test Internal Communication Across the Organisation
Internal communication is where most of the audit evidence sits. You need to go beyond the management level and test whether communication is actually reaching the people who need it.
Go to the floor. Talk to operators, supervisors, and team leaders. Ask them what they know about the quality policy, the quality objectives, and any recent changes to procedures. If they cannot tell you anything meaningful, that is a problem regardless of what the communication plan says on paper.
Common areas to probe during internal communication auditing include:
- How are procedure changes communicated to affected staff?
- How are nonconformities and corrective actions communicated across departments?
- How does management communicate quality performance data to the workforce?
- How are quality objectives and progress against them communicated to relevant staff?
This connects closely to Clause 7.3 awareness requirements. The two clauses work together, and evidence of poor communication often surfaces when you are testing awareness. For a practical guide to that adjacent clause, see Auditing Awareness Under ISO 9001 Clause 7.3: A Practical Guide for Auditors.
Test External Communication
External communication is often underdeveloped in organisations that focus their QMS efforts internally. Ask specifically about how the organisation communicates with customers about quality matters, how supplier quality requirements are communicated, and how the organisation handles incoming quality related communications from external parties.
For customer communication, check whether there is a defined process for communicating product or service specifications, delivery changes, nonconformities that affect the customer, and responses to complaints. These are not just customer satisfaction activities under Clause 8. They are communication requirements under Clause 7.4.
For supplier communication, check how quality requirements are conveyed to suppliers. Is it just through purchase orders? Are quality expectations documented? Is there a process for communicating nonconformities back to suppliers?
What Evidence to Gather
Because Clause 7.4 does not mandate specific documented information, your evidence gathering needs to be broader than a document review. You will typically draw on three sources: documents, interviews, and observation.
Document Evidence
Even without a mandatory procedure, most organisations will have some documented evidence of communication activity. Look for:
- Meeting minutes from toolbox talks, team briefings, or quality meetings
- Email records or intranet posts announcing policy changes or procedure updates
- Training records that show communication of new requirements
- Noticeboards, digital screens, or shared drives with quality information
- Communication plans or matrices if they exist
- Records of customer or supplier communications on quality matters
Be careful not to accept the existence of a document as proof that communication happened. A procedure that says communications will occur monthly is not evidence that they actually did. You need records of the communications themselves.
Interview Evidence
Interviews are your most powerful tool for auditing Clause 7.4. The gap between what management believes is being communicated and what frontline staff are actually receiving is often significant.
When interviewing workers, keep your questions open and specific. Instead of asking “do you receive communications about quality?”, ask “what was the last quality related change you were told about, and how did you find out?” That kind of question surfaces real evidence rather than a reflexive yes.
When interviewing managers, ask them to describe how they know their communications are being received and understood. A manager who says “we send an email” has a very different communication approach from one who says “we send an email, then the supervisor covers it in the toolbox talk, and we check understanding at the next team meeting.”
Observation Evidence
Walk the facility with your eyes open. Look at what is displayed on noticeboards. Check whether quality objectives are posted and whether they are current. Look for evidence that quality information is visible and accessible to the people who need it. Observe how people interact around quality issues. Do they know who to call? Do they know what to report?
Observation is particularly useful for spotting the gap between what is claimed and what is real. An organisation might claim they communicate quality objectives quarterly, but if the noticeboard still shows last year's objectives, that tells you something important.
Common Nonconformities Under Clause 7.4
After auditing communication requirements across many organisations, certain patterns emerge. These are the nonconformities that appear most frequently.
No Determination of What Is Relevant
The most fundamental nonconformity is that the organisation has not actually determined what communications are relevant to the QMS. They have not asked the five questions the clause requires. Communication happens, but it is ad hoc, reactive, and undocumented. There is no evidence that anyone has thought systematically about what needs to be communicated, to whom, when, and how.
This is a systemic gap, not a minor one. Write it clearly and link it to the specific requirement: the organisation shall determine the relevant communications. Determination requires a deliberate decision, not just activity that happens to occur.
Communication Plan Exists But Is Not Followed
A common scenario in more mature organisations is that a communication plan or matrix exists, but the evidence on the ground does not match it. The plan says quality performance is communicated monthly to all staff. The meeting minutes show it happened twice in the last twelve months. The floor workers have not heard a quality update in six months.
This is a conformance gap rather than a design gap, but it is still a nonconformity. The organisation has determined what is required but is not implementing it consistently.
Internal Communication Does Not Reach Frontline Workers
Management receives quality communications. Supervisors receive quality communications. But the information stops there and does not reach the people doing the work. This is particularly common in shift based environments, large sites, or organisations with high staff turnover.
The evidence for this nonconformity comes almost entirely from interviews. When frontline workers consistently cannot tell you about recent quality changes, objectives, or nonconformities, the communication system has failed at the last step.
External Communication Is Not Defined
Organisations often focus their communication planning on internal communication and give little thought to external communication relevant to the QMS. There is no defined process for communicating quality requirements to suppliers, no formal mechanism for customer quality communications, and no clarity about who is authorised to make external quality commitments.
This matters particularly when something goes wrong. If a product nonconformity needs to be communicated to a customer, who does that? How quickly? Through what channel? If the answer is unclear, that is a gap in the communication determination.
Responsibility Is Not Assigned
Clause 7.4 requires the organisation to determine who communicates. If communication responsibilities are not assigned, communications tend to happen inconsistently or not at all. Nobody takes ownership, and important information falls through the gaps.
Look for evidence that specific roles have been given responsibility for specific communications. This connects to the roles and responsibilities requirements under Clause 5.3, which is worth reviewing alongside your Clause 7.4 audit.
Writing Your Findings
When you write findings against Clause 7.4, be specific about which of the five determination requirements has not been met. Saying “communication is inadequate” is too vague to be useful. Saying “the organisation has not determined the timing or method for communicating quality objective performance to production staff, as evidenced by interviews with five production workers who were unable to identify current quality objectives” is precise, evidenced, and actionable.
For guidance on structuring your nonconformity reports to this standard, the post Writing Nonconformity Reports That Stand Up to Scrutiny covers the key principles.
Observations and opportunities for improvement are also appropriate here. If the communication system is technically conforming but clearly not effective, an observation noting the risk is more useful to the organisation than silence. For guidance on writing these well, see Writing Opportunities for Improvement Worth Acting On.
Linking Clause 7.4 to Other Clauses
Communication requirements do not exist in isolation. Clause 7.4 connects to several other parts of the standard, and your audit of communication will often generate leads into adjacent clauses.
When communication of quality objectives is weak, revisit Clause 6.2 and Clause 5.1. When communication of procedure changes is inadequate, check Clause 7.5 documented information and Clause 7.2 competence. When external communication with customers is underdeveloped, look at Clause 8.2 customer requirements and Clause 9.1.2 customer satisfaction.
Auditing communication well means following these threads rather than treating Clause 7.4 as a standalone item. The most useful audit findings are often the ones that trace a communication failure to its downstream consequences in customer complaints, process errors, or corrective actions that never got implemented because nobody told the right people.
Practical Tips for Your Next Clause 7.4 Audit
- Allocate more time than you think you need. Communication auditing relies heavily on interviews, and interviews take time.
- Sample across levels. Talk to top management, middle management, supervisors, and frontline workers. The gaps between levels are where the evidence lives.
- Ask for the last three examples of a specific type of communication, not just confirmation that it happens.
- Check dates. A communication plan is only useful if it is being implemented on schedule.
- Look for feedback loops. Does the organisation have any way of knowing whether its communications are being received and understood? If not, that is worth noting.
- Do not accept the existence of a channel as proof of communication. An intranet page nobody visits is not evidence of effective communication.
Exemplar Global Certified Training ProviderRTP No. 310970Building Your Clause 7.4 Audit Checklist
A good checklist for Clause 7.4 should prompt you to verify each of the five determination requirements. Build questions around what, when, with whom, how, and who. Then add verification questions that push beyond documentation into actual evidence of implementation.
Your checklist might include questions such as: Has the organisation documented or otherwise determined what communications are relevant to the QMS? Can the organisation demonstrate that communications are occurring as planned? Can frontline workers describe recent quality communications they have received? Is there a defined owner for each type of QMS communication? How does the organisation communicate quality requirements to external parties?
Keep the checklist as a guide, not a script. The most valuable evidence in a communication audit comes from following unexpected threads, not from working through a predetermined list. For more on building effective audit checklists, see What Is an Audit Checklist? A Practical Guide for ISO Auditors.
Getting Better at Auditing Communication
Auditing Clause 7.4 well requires strong interviewing skills, the confidence to probe beyond surface answers, and the ability to triangulate evidence from documents, people, and observation. These are skills that develop with practice, and they transfer directly to every other clause you audit.
If you want to build these skills in a structured way, Audit Workshop offers ISO 9001 Internal Auditor and Lead Auditor training that covers practical auditing techniques including how to audit support clauses like Clause 7.4 with confidence. The training is built around real audit scenarios, not just theory, so you leave with skills you can use immediately. Visit auditworkshop.com to explore the available courses.
