What Clause 5.3 Actually Requires
ISO 9001 Clause 5.3 is one of the shorter clauses in the standard, but it carries significant weight in practice. The clause sits inside Section 5, which covers leadership, and it places a clear obligation on top management to assign, communicate, and ensure that people understand their roles, responsibilities, and authorities within the quality management system.
On this page
The clause has three specific requirements. Top management must assign responsibility and authority for ensuring that the QMS conforms to the requirements of the standard. They must also assign responsibility and authority for ensuring that processes are delivering their intended outputs. And they must ensure that the performance of the QMS is reported to top management, including opportunities for improvement.
Those three points sound straightforward. In practice, they are where a surprising number of organisations fall short, and where auditors spend a lot of time gathering evidence.
Why This Clause Matters More Than It Looks
When you audit Clause 5.3, you are not just checking whether job descriptions exist. You are checking whether accountability for quality is genuinely embedded in the organisation, or whether it has been quietly delegated to a single quality manager who carries the entire system on their own.
The clause does not require a management representative in the same way that ISO 9001:2008 did. The old standard mandated a specific person in that role. The 2015 edition deliberately removed that language to push organisations toward distributing quality ownership more broadly across leadership. That was an intentional design choice, and auditors need to understand what it means in practice.
It means that top management cannot simply point to a quality manager and say the system is their responsibility. Leadership must demonstrate active involvement. Clause 5.3 is the mechanism that makes that visible.
Exemplar Global Recognised Training ProviderRTP No. 310970
The Three Assignments Clause 5.3 Requires
Ensuring QMS Conformity
The first assignment is about who is responsible for making sure the QMS as a whole meets the requirements of ISO 9001. This is typically a quality manager, quality director, or similar role. But the key word is assigned. There must be a deliberate, documented assignment, not just an assumption that the quality team handles it.
In audits, I regularly ask to see how this assignment is documented. Sometimes it appears in a job description. Sometimes it is captured in a responsibility matrix. Sometimes it is in a documented procedure or the quality manual if the organisation still maintains one. Any of these can work, as long as the assignment is clear and the person in the role knows what it means.
What does not work is a vague statement that everyone is responsible for quality. That is not an assignment. It is an avoidance of accountability.
Ensuring Processes Deliver Intended Outputs
The second assignment is about process ownership. Each key process in the QMS should have someone responsible for ensuring it delivers what it is supposed to deliver. This is the process owner concept, and it is closely linked to the process approach that underpins ISO 9001:2015.
In a manufacturing business, this might mean the production manager owns the production process, the purchasing manager owns the procurement process, and the quality manager owns the internal audit process. In a service business, the structure looks different but the principle is the same.
Process ownership is often underdeveloped. Organisations define their processes in a process map but fail to assign clear owners. When something goes wrong, nobody is sure who is accountable. Auditors look for this gap specifically, and it often surfaces as a nonconformity against Clause 5.3 or Clause 4.4.
For a deeper look at how process ownership connects to the broader QMS structure, the article on what ISO 9001 Clause 4.4 requires covers the relationship between processes and their intended outputs in useful detail.
Reporting QMS Performance to Top Management
The third assignment is about information flow. Someone must be responsible for ensuring that performance data, audit results, customer feedback, and improvement opportunities reach top management in a form they can act on.
This is where the connection to management review becomes important. Clause 9.3 requires management review inputs that cover a specific list of topics. Someone has to be responsible for gathering that information and presenting it. Clause 5.3 is the mechanism that assigns that responsibility.
In practice, this often falls to the quality manager. But the assignment should be explicit. And top management should be able to demonstrate that they receive this information and use it to make decisions. If the quality manager is producing reports that nobody reads, the intent of the clause is not being met.
How Organisations Document This in Practice
ISO 9001 does not specify how roles, responsibilities, and authorities must be documented. The standard requires that they be communicated and understood, but the format is flexible. Organisations use a range of approaches.
Job Descriptions
Job descriptions are the most common vehicle for documenting QMS responsibilities. They work well when they are specific enough to be meaningful. A job description that says the quality manager is responsible for the quality management system tells an auditor something. A job description that lists specific responsibilities, such as maintaining the documented information system, managing the internal audit programme, and reporting QMS performance at management review, tells an auditor considerably more.
The weakness of job descriptions is that they can become outdated quickly, and they often do not capture cross-functional responsibilities. If the production manager has a quality responsibility, it should appear in their job description, not just in the quality manager's.
Responsibility Matrices
A responsibility matrix, sometimes called a RACI chart, maps processes or activities against roles and shows who is responsible, accountable, consulted, and informed. These are particularly useful for showing how quality responsibilities are distributed across the organisation rather than concentrated in one function.
Auditors find these useful because they make accountability visible at a glance. They also make it easier to verify that the people in the relevant roles understand what is expected of them, which is a key part of what Clause 5.3 requires.
Organisational Charts With Role Descriptions
Some organisations use an organisational chart combined with role descriptions or position profiles. This works when the descriptions are sufficiently detailed. An org chart alone is not enough. It shows hierarchy, not accountability.
Communicating and Understanding: The Two Requirements That Get Missed
Clause 5.3 does not just require that roles be assigned. It requires that they be communicated and that people understand them. These are two separate things, and auditors test both.
Communication is relatively easy to demonstrate. You can show induction records, training materials, team meeting minutes, or the document distribution records for a procedure that defines responsibilities. Any of these can serve as evidence that the organisation made an effort to communicate roles.
Understanding is harder to demonstrate on paper, which is why auditors test it through interviews. When I audit Clause 5.3, I do not just look at the documentation. I talk to people in key roles and ask them to describe their quality responsibilities. I ask process owners what they are accountable for. I ask department managers whether they know who to contact if a quality issue arises in their area.
The answers reveal a lot. In organisations where quality ownership is genuinely embedded, people answer these questions confidently and consistently. In organisations where quality is treated as the quality department's problem, people are vague, inconsistent, or simply unaware of their responsibilities.
This connects directly to what auditors look for when reviewing leadership commitment under Clause 5.1. The two clauses are closely related. You cannot demonstrate genuine leadership commitment if accountability for quality has not been clearly distributed. The article on ISO 9001 Clause 5.1 leadership and commitment explains how auditors approach that connection in practice.
Common Nonconformities Against Clause 5.3
Responsibilities Not Documented
The most basic nonconformity is that responsibilities have not been documented at all. The organisation relies on informal understanding, which is fine until someone leaves, a role changes, or an auditor asks for evidence. Undocumented responsibilities are not evidence of conformity.
Documentation Exists But Is Not Current
A close second is documentation that exists but has not been maintained. Job descriptions that have not been updated since the system was first implemented, responsibility matrices that do not reflect the current organisational structure, or procedures that name people who no longer work in those roles. All of these create conformity gaps that auditors will raise.
Responsibilities Concentrated in One Person
This is the ghost of the old management representative requirement. Some organisations continue to operate as though one person is solely responsible for the entire QMS. That person may be doing excellent work, but if top management has no visible quality accountability and process owners cannot articulate their responsibilities, the clause is not being met.
People Do Not Know Their Responsibilities
This is the most damaging finding because it suggests the system exists on paper but not in practice. If a production supervisor cannot tell you who is responsible for ensuring the production process delivers conforming product, or if a department manager does not know they are a process owner, the organisation has a systemic problem with how it has implemented Clause 5.3.
What Auditors Look for When Auditing Clause 5.3
When I audit this clause, I follow a consistent approach. I start by reviewing the documented information that defines roles and responsibilities. I look at job descriptions, any responsibility matrices, organisational charts, and relevant procedures. I check whether the three specific assignments required by the clause are visible in that documentation.
Then I move to interviews. I speak with the person assigned responsibility for QMS conformity and ask them to walk me through what that means in practice. I speak with process owners and ask them to describe their accountability. I speak with top management and ask how they receive information about QMS performance.
I also look at the outputs. If someone is responsible for reporting QMS performance to top management, I want to see evidence that this reporting is happening. Management review records, performance dashboards, or meeting minutes can all serve as evidence.
Finally, I look for consistency. If the quality manager tells me one thing and the operations manager tells me something different, that inconsistency is itself a finding. It suggests that responsibilities have been assigned on paper but not genuinely communicated and understood.
For auditors who want to go deeper on how to audit this clause specifically, the companion article on auditing roles, responsibilities and authorities in ISO 9001 provides a detailed walkthrough of the evidence to gather and the questions to ask.
Clause 5.3 in Small Organisations
In small businesses, the same person often holds multiple roles. A business owner might be the top manager, the quality manager, and the process owner for several key processes simultaneously. This is entirely acceptable under ISO 9001. The standard does not require a separate person for each responsibility.
What it does require is that the responsibilities are still clearly defined and understood, even when they are concentrated in fewer people. A small business owner who can articulate their quality responsibilities clearly, demonstrate that they review QMS performance regularly, and show that they take action on the results is meeting the intent of Clause 5.3 regardless of how many other hats they wear.
The article on ISO 9001 for small business explores how small organisations can implement the standard in a way that is proportionate to their size without cutting corners on the substance of what is required.
Exemplar Global Recognised Training ProviderRTP No. 310970Connecting Clause 5.3 to the Rest of the System
Clause 5.3 does not operate in isolation. It connects to almost every other part of the standard. The person responsible for QMS conformity needs to understand Clause 9.2 to manage the internal audit programme. Process owners need to understand Clause 6.1 to manage risks and opportunities within their processes. The person responsible for reporting to top management needs to understand Clause 9.3 to ensure the right information reaches the right people.
This interconnectedness is why getting Clause 5.3 right matters so much. When roles and responsibilities are clear, the rest of the system functions more smoothly. When they are ambiguous, problems appear in every corner of the QMS because nobody is sure who should be addressing them.
If you are building or reviewing your organisation's approach to Clause 5.3, start by mapping your processes and assigning an owner to each one. Then check that the three specific assignments required by the clause are documented and that the people in those roles can articulate what is expected of them. That combination of documentation and demonstrated understanding is what auditors are looking for.
Building the Skills to Audit This Clause Confidently
Auditing Clause 5.3 well requires more than knowing what the clause says. It requires the interviewing skills to draw out genuine understanding from auditees, the judgement to distinguish between documented conformity and real accountability, and the experience to recognise when a system that looks good on paper is not functioning as intended.
These are skills that develop through practice and through structured training. At Audit Workshop, the ISO 9001 Internal Auditor and Lead Auditor courses cover Clause 5.3 in the context of the full standard, with practical exercises designed to build the kind of judgement that makes audits genuinely useful rather than just compliance exercises. If you are preparing to audit a QMS or strengthen your organisation's approach to roles and responsibilities, the training gives you a practical foundation to work from.
