Why Leadership Is One of the Hardest Things to Audit
Clause 5.1 of ISO 9001:2015 places a direct obligation on top management. Not on the quality manager, not on a nominated representative, but on the people who actually run the organisation. That shift was deliberate. The 2015 revision removed the old management representative requirement and replaced it with something more demanding: genuine, visible, personal accountability from those at the top.
On this page
For auditors, this creates a real challenge. Leadership and commitment are not a procedure you can flip through or a register you can sample. You cannot verify them by ticking a box. You have to gather evidence across multiple sources, read between the lines of what people tell you, and make a professional judgement about whether top management is genuinely driving the quality management system or just tolerating it.
This article walks through exactly how to do that. Whether you are conducting an internal audit, a second party audit, or preparing for a certification audit, the approach is the same: build a picture from multiple angles and let the evidence speak.
What Clause 5.1 Actually Requires
Before you can audit something, you need to understand what the standard is asking for. ISO 9001 Clause 5.1 breaks into two parts: 5.1.1 covers leadership and commitment for the QMS as a whole, and 5.1.2 covers customer focus specifically.
Clause 5.1.1: Leadership and Commitment for the QMS
The standard lists specific things top management shall do. These include:
- Taking accountability for the effectiveness of the QMS
- Ensuring the quality policy and quality objectives are established and compatible with the strategic direction of the organisation
- Ensuring the QMS requirements are integrated into the organisation's business processes
- Promoting the use of the process approach and risk-based thinking
- Ensuring that the resources needed for the QMS are available
- Communicating the importance of effective quality management and conforming to QMS requirements
- Ensuring the QMS achieves its intended results
- Engaging, directing, and supporting persons to contribute to the effectiveness of the QMS
- Promoting improvement
- Supporting other relevant management roles to demonstrate their leadership
That is a substantial list. Each item is auditable, but none of them can be verified by reading a single document. They require triangulation across interviews, records, and observation.
Clause 5.1.2: Customer Focus
This subclause requires top management to ensure that customer and applicable statutory and regulatory requirements are determined, understood, and consistently met. It also requires that the risks and opportunities affecting conformity of products and services are identified, and that the focus on enhancing customer satisfaction is maintained.
This is covered in detail in our article on auditing customer focus under Clause 5.1.2, so this article will focus primarily on 5.1.1.
Exemplar Global Recognised Training ProviderRTP No. 310970
Planning Your Audit of Clause 5.1
Who to Interview
The most important thing to get right before you start is who you will talk to. For Clause 5.1, you need to speak with top management directly. That means the CEO, Managing Director, General Manager, or whoever holds ultimate accountability for the organisation.
In smaller organisations this is straightforward. In larger ones, you may need to interview multiple senior leaders, particularly if the QMS spans several business units or sites.
Do not accept a proxy. If the quality manager offers to answer leadership questions on behalf of the CEO, politely explain that you need to speak with the person who holds the accountability. This is not about being difficult. It is about obtaining evidence that the right people are engaged.
You should also interview middle managers, supervisors, and frontline staff. Their responses will tell you a great deal about whether top management messaging is landing, whether resources are actually provided, and whether quality is treated as a priority or an afterthought.
Documents to Review Before the Interview
Prepare by reviewing the following before you sit down with anyone:
- The quality policy and how it is communicated
- Quality objectives and their connection to the strategic plan
- Management review records, including inputs, outputs, and decisions
- Evidence of resource allocation decisions related to the QMS
- Internal audit programme and results
- Corrective action records and closure rates
- Customer satisfaction data and how it is acted upon
You are not looking to confirm that these documents exist. You are looking for patterns that will inform your interview questions. If the management review minutes show that the same issues have been raised for three consecutive cycles without resolution, that is a thread worth pulling.
Audit Interview Techniques for Clause 5.1
Opening the Conversation
Start with open questions that give top management space to talk. You are not interrogating. You are listening for evidence of genuine engagement.
Good opening questions include:
- Can you tell me about your role in the quality management system?
- How does the QMS connect to your overall business strategy?
- What are the most important quality outcomes you are trying to achieve this year?
Pay attention to how naturally the answers come. A leader who is genuinely engaged will answer these questions with specific examples, names, and numbers. A leader who is disconnected will give vague, generalised responses or redirect you to the quality manager.
Probing for Specific Evidence
Once you have the opening picture, probe deeper. For each of the requirements in Clause 5.1.1, you need evidence, not assertions.
For accountability and effectiveness:
- How do you know whether the QMS is working effectively?
- What do you do when you find out it is not?
- Can you give me a recent example where you personally got involved in a quality issue?
For integration with business processes:
- How are quality requirements built into how you run the business day to day?
- When you are making a significant business decision, how does the QMS factor in?
For resource provision:
- How do you decide what resources the QMS needs?
- Has there been a situation recently where resources for quality were requested and either approved or declined? What happened?
For communication:
- How do you personally communicate the importance of quality to your people?
- When did you last speak to staff about quality? What did you say?
Cross-Checking with Other Auditees
After your top management interview, you should verify what you heard by talking to people further down the organisation. Ask frontline workers and supervisors:
- Can you tell me what your organisation's quality objectives are?
- How does management communicate the importance of quality here?
- Have you ever raised a quality concern? What happened?
If top management says quality is a priority but frontline workers have never heard a senior leader mention it, that is a significant gap. It may not be a nonconformity by itself, but it is evidence that the communication requirement is not being met in practice.
What Genuine Leadership Looks Like in Evidence
Positive Indicators
When leadership and commitment are real, you will typically find:
- Management review minutes that show active discussion, decisions, and follow-through, not just a record of information being presented
- Quality objectives that are clearly linked to business strategy and reviewed at the senior level
- Resource allocation decisions that reflect quality priorities, including budget approvals, staffing decisions, and infrastructure investments
- Corrective actions that are closed on time, with root causes addressed, not just quick fixes
- Frontline staff who can articulate what quality means in their role and what top management expects
- A quality policy that staff can describe in their own words, not just recite
Red Flags
The following patterns suggest leadership and commitment are lacking:
- Top management who cannot describe the quality objectives without checking a document
- Management review records that are thin, infrequent, or clearly prepared just before the certification audit
- A quality manager who answers all your questions on behalf of top management and appears to be the only person driving the QMS
- Corrective actions that are repeatedly extended or closed without evidence of effectiveness
- Staff who describe quality as the quality manager's job, not something leadership cares about
- A quality policy that has not been reviewed in years and no longer reflects the organisation's direction
None of these red flags is automatically a nonconformity. But each one warrants further investigation. Your job is to gather enough evidence to make a defensible finding.
Common Nonconformities Under Clause 5.1
Based on real audit experience across many organisations, the following are the nonconformities that come up most often under Clause 5.1.
Quality Objectives Not Connected to Strategic Direction
The standard requires that quality objectives be compatible with the strategic direction of the organisation. If the business strategy is focused on growth into new markets but the quality objectives are purely internal operational measures with no connection to that direction, there is a gap. Ask top management to explain the connection. If they cannot, that tells you something.
Integration of QMS Into Business Processes Is Superficial
In many organisations, the QMS sits alongside the business rather than inside it. Procedures exist, but they are not how work actually gets done. The real processes are undocumented, or the documented processes are out of date. When you ask top management how QMS requirements are integrated into business operations, and they point you to a folder of procedures that nobody follows, that is a conformity issue under 5.1.1.
Management Review Is a Compliance Exercise, Not a Business Tool
This is one of the most common findings in certification audits. The management review happens because it has to, not because leadership finds it valuable. Minutes are sparse, decisions are absent, and the same issues appear cycle after cycle. This reflects directly on top management's accountability for QMS effectiveness.
Our article on how to conduct an effective management review under ISO 9001 covers this in detail, but from an auditing perspective, look for evidence that management review outputs are driving real change.
No Evidence of Top Management Communication on Quality
The standard requires top management to communicate the importance of effective quality management. If you ask ten people across the organisation whether they have ever heard a senior leader talk about quality, and the answer is consistently no, that is a finding. Communication does not have to be formal. It can be toolbox talks, team meetings, or direct conversations. But there needs to be evidence that it happens.
How to Write Up Findings Against Clause 5.1
Writing a finding against leadership is one of the more sensitive tasks in auditing. You are, in effect, telling senior people that they are not meeting their obligations. Do it clearly, professionally, and with specific evidence.
A weak finding reads:
Top management does not demonstrate sufficient leadership and commitment to the QMS.
A strong finding reads:
Clause 5.1.1 requires top management to ensure the QMS achieves its intended results. During interviews with three department managers and four frontline staff, none could identify the organisation's current quality objectives or describe how top management communicates quality expectations. Management review records for the past two cycles contain no decisions or action items related to QMS effectiveness. This constitutes a nonconformity against Clause 5.1.1.
The difference is specificity. The strong version cites the clause, describes the evidence, and links them together. It is harder to dispute and easier to act on. For more guidance on writing findings that hold up, see our article on how to write nonconformities that hold up.
Auditing Clause 5.1 in Smaller Organisations
In a small business with fewer than twenty people, top management is often also the person doing the work. The CEO might be on the tools, managing customer relationships, and running the QMS simultaneously. The audit approach needs to reflect that reality.
In these settings, leadership and commitment often shows up differently. You might not find formal management review minutes, but you might find a business owner who can tell you exactly what their quality objectives are, why they matter, and what they did last month when a customer complaint came in. That is evidence of genuine engagement, even if the paperwork is thin.
Conversely, a small business where the owner has handed everything to a quality consultant and has no idea what the QMS contains is a concern, regardless of how complete the documentation is.
Exemplar Global Recognised Training ProviderRTP No. 310970Preparing for a Certification Audit on Clause 5.1
If you are a quality manager preparing your organisation for a certification audit, the most important thing you can do is brief top management honestly. They need to understand that the auditor will speak to them directly, ask specific questions, and expect specific answers.
Help them prepare by:
- Reviewing the quality policy with them and ensuring they can explain it in their own words
- Walking through the quality objectives and the rationale behind each one
- Reviewing recent management review records and corrective action status together
- Discussing how they communicate quality expectations to staff, and whether there are recent examples they can reference
This is not coaching them to give rehearsed answers. It is ensuring that the genuine work they are doing is visible and articulable. If the work is not being done, now is the time to address that, not during the audit.
Bringing It All Together
Auditing leadership and commitment under ISO 9001 Clause 5.1 requires a different mindset than auditing documented procedures or operational controls. You are assessing culture, behaviour, and accountability. None of those things live in a single document.
The approach that works is systematic triangulation: interview top management with specific, probing questions; cross-check what you hear against records and other auditees; and look for consistency between what leaders say and what the rest of the organisation experiences.
When you find gaps, document them with precision. When you find genuine commitment, acknowledge it. Your role is to give an accurate picture of the system as it actually operates, not as it is described in the quality manual.
If you want to develop real confidence in auditing leadership, context, planning, and all the other clauses that go beyond procedures and records, Audit Workshop's ISO 9001 Internal Auditor and Lead Auditor courses are built around exactly this kind of practical, clause-by-clause audit skill. You will learn from a trainer who has conducted over 500 certification audits and knows what effective leadership evidence actually looks like in practice.
