Auditing Resources Under ISO 9001 Clause 7.1: From People to Calibration

Why Clause 7.1 Deserves More Audit Time Than It Gets

Most auditors spend the bulk of their time on operations, risk, and corrective actions. Clause 7.1 of ISO 9001 often gets a quick scan of training records and maybe a glance at a calibration register before the auditor moves on. That is a mistake. Auditing resources under ISO 9001 Clause 7.1 properly means testing whether the organisation has genuinely determined and provided what it needs to run its quality management system and deliver conforming products and services. When resources are inadequate, everything downstream suffers. Nonconforming outputs, customer complaints, and failed audits frequently trace back to resource gaps that nobody wanted to name.

This article walks through each sub-clause of Clause 7.1 in practical audit terms. What to ask, what to look for, what evidence counts, and where organisations typically fall short.

The Structure of Clause 7.1

ISO 9001:2015 breaks Clause 7 into several sub-clauses covering different resource types. For Clause 7.1, the breakdown is:

• 7.1.1 General
• 7.1.2 People
• 7.1.3 Infrastructure
• 7.1.4 Environment for the operation of processes
• 7.1.5 Monitoring and measuring resources (including calibration)
• 7.1.6 Organisational knowledge

Each sub-clause addresses a different dimension of what an organisation needs to function. Together they form a picture of whether the organisation is genuinely resourced or just going through the motions. The standard requires that resources be determined, provided, and maintained. Those three words are worth holding onto as you plan your audit questions.

Auditing Clause 7.1.1: General Resource Determination

The general clause asks whether the organisation has determined the resources needed for the QMS, considering existing internal resources and what needs to be obtained from external providers. It sounds straightforward, but in practice it raises some pointed questions.

What to ask

• How did you determine what resources are needed to run the QMS?
• What happens when resource constraints affect quality? Who makes that call?
• Are there any known resource gaps that have not been addressed? What is the plan?

The last question tends to produce the most useful answers. Most organisations have resource constraints they are managing. What you are testing is whether those constraints are acknowledged and whether there is a plan, not whether the organisation is perfectly resourced.

What evidence counts

There is no mandated document for this sub-clause. Evidence might come from management review records showing resource discussions, budget approvals for QMS activities, or simply a credible explanation from top management about how resourcing decisions are made. If nobody can explain how resource needs are determined, that is worth noting.

Auditing Clause 7.1.2: People

Clause 7.1.2 requires that the organisation determine and provide the persons necessary to implement the QMS and operate and control its processes. This is distinct from Clause 7.2, which deals with competence. Clause 7.1.2 is about headcount and deployment. Do you have enough people in the right places?

Where this gets interesting in practice

Understaffing is one of the most common root causes of quality failures, and it is also one of the most politically sensitive findings to raise. Auditors sometimes avoid it. Do not. If a quality function is clearly overloaded, if inspection steps are being skipped because there is nobody to do them, or if key roles are consistently vacant, that is a resource nonconformity.

Look at the organisation chart alongside actual process requirements. Ask supervisors how they manage when someone is absent. Ask whether the number of people assigned to a process reflects what the process actually demands. Cross reference with any customer complaints or nonconforming output data to see whether patterns align with staffing gaps.

What to ask

• How many people are involved in this process, and is that enough given your current workload?
• What happens to quality controls when someone is on leave?
• Have there been times when quality steps were skipped because of staffing pressures?

Auditing Clause 7.1.3: Infrastructure

Infrastructure under ISO 9001 includes buildings, utilities, equipment (hardware and software), and transport and communication resources. The organisation must determine, provide, and maintain the infrastructure needed for process operation and conforming outputs.

The maintenance angle

The word maintain is where most auditors find traction. Organisations often have the infrastructure, but they are not maintaining it adequately. Ask to see the preventive maintenance schedule. Check whether it is being followed. Look at equipment downtime records and ask whether recurring failures have been addressed or just repeatedly fixed.

In manufacturing environments, walk the floor. Look at the condition of equipment. Ask operators whether they have reported maintenance issues and what happened when they did. The gap between what is reported and what is acted on often tells you more than any document.

Software and IT infrastructure

Do not overlook software. If the organisation relies on a production management system, ERP, or quality software, ask about version control, backups, and what happens when the system goes down. These are legitimate infrastructure questions under Clause 7.1.3.

What to ask

• Can you show me your maintenance schedule and recent maintenance records?
• Have there been any equipment failures that affected product quality in the last 12 months? What was done?
• How is software used in this process managed and maintained?

Auditing Clause 7.1.4: Environment for the Operation of Processes

Clause 7.1.4 covers the physical, social, psychological, and environmental conditions needed for process operation. The standard gives examples: temperature, humidity, lighting, cleanliness, noise. For some industries this is critical. For others it barely registers. Your job is to assess whether the environment actually supports conforming outputs.

Physical conditions

In food manufacturing, pharmaceutical production, precision engineering, or electronics assembly, environmental conditions directly affect product conformity. Ask what conditions are required, how they are monitored, and what happens when they go out of range. Look for records of monitoring and any corrective actions taken when conditions drifted.

Social and psychological conditions

The standard explicitly mentions non-discriminatory, calm, and non-confrontational work environments. This is not just a wellbeing consideration. High-stress, blame-heavy environments suppress quality reporting. Workers who fear consequences for raising issues will not raise them. Ask about how errors are handled. A blame-free reporting culture is a quality resource.

What to ask

• What environmental conditions does this process require, and how are they monitored?
• What happens when conditions fall outside acceptable limits?
• How are quality concerns reported here? Are people comfortable raising issues?

Auditing Clause 7.1.5: Monitoring and Measuring Resources

This is the sub-clause that most auditors associate with calibration, and rightly so. But it covers more than just calibrated instruments. The full requirement is that monitoring and measuring resources be appropriate for the type of monitoring and measurement undertaken, and maintained to ensure they remain fit for purpose.

Calibration requirements

Where measurement traceability is required, or where the organisation has determined it necessary, measuring equipment must be calibrated or verified at specified intervals against measurement standards traceable to national or international standards. The organisation must retain documented information as evidence of fitness for purpose.

In practice, this means the calibration register needs to show:

• Each piece of measuring equipment subject to calibration
• The calibration interval
• The date of last calibration and next due date
• The result of the calibration
• The standard used for calibration, with traceability information

Out-of-date calibrations are among the most common nonconformities auditors find. They are also among the easiest to miss if you only look at the register and do not cross-check against equipment in use. Walk the floor. Pick up measuring instruments. Check whether the calibration sticker matches the register and whether the due date has passed.

The fitness for purpose question

Calibration alone is not enough. The standard also requires that measuring equipment be protected from damage and deterioration. Ask to see instruments that are actually in use. A micrometer stored in a drawer without a case, dropped regularly, or used outside its rated range may be calibrated on paper but unreliable in practice. Ask operators how they handle instruments and what they do if they suspect a measurement is wrong.

When calibration is not required

Not all measuring equipment needs formal calibration. A tape measure used for rough layout work is different from a torque wrench used to tighten safety-critical fasteners. The organisation should be able to explain which instruments are subject to calibration and why, and which are not. If the answer is that everything is calibrated regardless of its purpose, or that nothing is calibrated because it was never thought about, both are worth exploring further.

What to ask

• Can you show me your calibration register and explain how it is maintained?
• How do you determine which instruments need calibration?
• What do you do if you find that an instrument was out of calibration when measurements were taken?
• Can I see the calibration certificate for this instrument? What standard was it calibrated against?

That last question, about what happens when an out-of-calibration instrument is discovered, is particularly revealing. A mature organisation will have a documented process for assessing the validity of previous measurements and taking appropriate action. Many organisations have no process at all. For more on gathering evidence that holds up, see our guide on how to gather audit evidence that stands up to scrutiny.

Auditing Clause 7.1.6: Organisational Knowledge

Clause 7.1.6 is one of the newer and more misunderstood requirements in ISO 9001:2015. It requires the organisation to determine the knowledge necessary for the operation of its processes and the achievement of conforming products and services. That knowledge must be maintained, protected, and made available as needed. When changes occur, the organisation must consider how to acquire or access new knowledge.

What organisational knowledge actually means

Organisational knowledge is the accumulated understanding that keeps the organisation functioning. It includes lessons learned from past projects, the expertise of long-serving staff, documented procedures that capture how things are actually done, supplier and customer knowledge, and the institutional memory embedded in people who have been around for years.

The risk this clause addresses is knowledge loss. When experienced people leave, retire, or are made redundant, critical knowledge can walk out the door with them. The standard asks organisations to think about this proactively.

What to look for

Ask how knowledge is captured when key people leave. Look for evidence of lessons learned processes, knowledge transfer activities, or documented procedures that go beyond generic policy statements to capture genuine operational know-how. Ask what would happen if the most experienced person in a critical role left tomorrow.

Also look at how the organisation identifies knowledge gaps. When a new product, process, or technology is introduced, how does the organisation assess what it does not yet know and how it will acquire that knowledge?

Common findings

Most organisations struggle to articulate what their organisational knowledge is, let alone demonstrate that it is maintained and protected. The most common finding is that there is no systematic approach. Everything lives in people's heads, and when those people leave, the knowledge goes with them. That is not a minor observation. It is a genuine risk to product and service conformity.

For a deeper look at what this sub-clause requires, see our article on Organisational Knowledge: What ISO 9001 Clause 7.1.6 Actually Requires.

Common Clause 7.1 Nonconformities to Watch For

Across all the sub-clauses, certain patterns appear repeatedly in practice:

• Calibration overdue: Equipment in use with expired calibration dates, often because the register is not regularly reviewed.
• No calibration traceability: Instruments calibrated by internal staff using reference standards that are themselves not traceable to national standards.
• Infrastructure maintenance gaps: Preventive maintenance schedules that exist on paper but are consistently deferred in practice.
• Staffing not matched to process demands: Inspection steps relying on a single person with no cover arrangement.
• Organisational knowledge entirely undocumented: Critical processes known only to one or two individuals with no succession plan.
• Environmental conditions not monitored: Temperature or humidity requirements stated in a procedure but no monitoring records to confirm they are being met.

For a broader view of what auditors commonly find across the whole standard, the article on common ISO 9001 nonconformities and how to avoid them is worth reading alongside this one.

Connecting Clause 7.1 to the Rest of the Audit

One of the most useful things an auditor can do is connect resource findings to outcomes. If you find calibration gaps, ask whether any product was measured with the affected equipment during the out-of-calibration period. If you find staffing shortfalls, look at whether nonconforming outputs increased during periods of understaffing. If infrastructure maintenance has been deferred, check whether there have been equipment-related quality failures.

This is what separates a surface-level audit from one that genuinely adds value. Resources are not an isolated clause. They feed directly into the ability of the organisation to deliver conforming outputs. Showing that connection in your findings makes them harder to dismiss and more likely to drive real change.

For auditors who want to sharpen their approach to finding evidence that connects across clauses, the article on audit techniques for Clause 7: verifying competence, awareness and documents covers the broader Clause 7 picture including competence and awareness requirements that sit alongside the resource provisions covered here.

Practical Tips for Auditing Clause 7.1 Efficiently

Clause 7.1 covers a lot of ground. Here are some practical approaches to auditing it without losing half your day:

1. Review the calibration register before the site visit. Identify any overdue items in advance so you can go straight to the relevant equipment on the floor rather than working through everything from scratch.
2. Use the process approach. Rather than auditing Clause 7.1 as a standalone block, weave resource questions into each process interview. Ask about equipment, environment, and staffing in context, not in isolation.
3. Follow the evidence. If a process has had quality problems, use that as a starting point to explore whether resource adequacy played a role. This is more productive than a generic checklist approach.
4. Ask about recent changes. New equipment, new processes, staff turnover, and facility changes all create resource risks. Ask what has changed in the last 12 months and how resource adequacy was assessed as part of that change.
5. Do not skip the floor walk. Documents tell you what should be happening. The floor shows you what is actually happening. The gap between the two is where most findings live.

Building Your Skills in Clause-Level Auditing

Auditing resources effectively requires both technical knowledge of the standard and practical interviewing and observation skills. Understanding what the clause requires is the starting point. Knowing how to gather evidence, follow an audit trail, and frame findings clearly is what makes an auditor genuinely useful.

If you are looking to build those skills in a structured way, Audit Workshop offers practical ISO 9001 internal auditor and lead auditor training that covers clause-level auditing in depth. The training is built around real audit scenarios, not just theory, and is delivered by an experienced lead auditor who has conducted over 500 external certification audits. Whether you are new to auditing or looking to sharpen your existing practice, the courses give you the tools to audit with confidence across every clause of the standard.