Planning of Changes: A Guide to ISO 9001 Clause 6.3

Why Clause 6.3 Exists and What It Is Actually Asking

Change is unavoidable in any organisation. Suppliers change, processes evolve, staff turn over, equipment gets replaced, and customer requirements shift. The question ISO 9001 asks through Clause 6.3 is not whether you will change, but whether you will change in a controlled and considered way.

Clause 6.3, titled Planning of Changes, is a short clause. In the 2015 edition of ISO 9001, it reads: when the organisation determines the need for changes to the quality management system, the changes shall be carried out in a planned manner. The clause then lists four considerations that must be addressed when planning any change.

Despite being brief, this clause is one of the more commonly misunderstood requirements in the standard. Some organisations treat it as a bureaucratic checkbox. Others ignore it entirely until an auditor raises a nonconformity. Neither approach serves the organisation well. Understanding what Clause 6.3 actually requires, and why it matters in practice, is what this guide is about.

The Four Considerations in Clause 6.3

The clause specifies that when planning changes to the QMS, the organisation must consider:

• The purpose of the change and its potential consequences
• The integrity of the quality management system
• The availability of resources
• The allocation or reallocation of responsibilities and authorities

These four points are not a procedure. They are prompts for disciplined thinking. Let us look at each one in context.

Purpose and Potential Consequences

Before making a change, you need to be clear about why you are making it. Is the change driven by a customer requirement, a corrective action, a new piece of equipment, a process improvement, or a regulatory update? The purpose matters because it shapes how the change should be planned and communicated.

Equally important is thinking through what might go wrong. A change to one part of the QMS rarely stays isolated. If you change your incoming inspection process, what happens to your supplier evaluation records? If you outsource a previously internal function, how does that affect your monitoring and measurement obligations under Clause 9.1?

In practice, this means asking: what processes interact with this change, and what could break if the change is not managed properly?

Integrity of the Quality Management System

This consideration is about coherence. The QMS is a system of interconnected processes, documents, responsibilities, and controls. A change in one area can create inconsistencies elsewhere if it is not thought through.

For example, if you update your production process to introduce a new step, but do not update your work instructions, training records, or quality plan to reflect that step, the integrity of the system is compromised. The documented information no longer reflects reality, and that gap is exactly what auditors look for.

Maintaining integrity means ensuring that after a change is implemented, the QMS still makes sense as a whole. Documents are consistent with each other. Responsibilities are clear. Controls are in place. There are no orphaned procedures referring to processes that no longer exist.

Availability of Resources

Changes require resources. Those resources might include people, time, training, equipment, or budget. Clause 6.3 asks that you consider whether those resources are actually available before you implement the change.

This is a common failure point in practice. Organisations sometimes implement changes on paper without ensuring that the people responsible for carrying them out have the skills, tools, or time to do so. The result is a change that looks good in a procedure but is not happening on the floor.

A practical question to ask at the planning stage is: who needs to do what differently after this change, and do they have what they need to do it?

Allocation or Reallocation of Responsibilities and Authorities

Every process in a QMS needs an owner. When a change is made, responsibilities sometimes shift. A new process may need an owner. An existing responsibility may need to transfer to a different role. If these reallocations are not made explicit, accountability gaps appear.

This is particularly relevant when organisations restructure, when staff leave and are replaced, or when functions are outsourced. The change might be operationally sound, but if nobody knows who is now responsible for what, the system breaks down quietly.

What Types of Changes Does Clause 6.3 Cover?

This is where many organisations get confused. Clause 6.3 applies to changes to the quality management system, not to every operational change in the business. But the boundary between the two is not always obvious.

Changes that clearly fall within Clause 6.3 include:

• Changes to documented processes or procedures
• Changes to the scope of the QMS
• Changes to organisational structure that affect QMS responsibilities
• Introduction of new processes into the QMS
• Changes to monitoring and measurement arrangements
• Changes to supplier management approaches
• Changes arising from corrective actions that alter how a process operates

Changes that may or may not trigger Clause 6.3 depending on their impact include:

• New equipment (if it changes how a process is controlled or documented)
• New software systems (particularly if they replace existing documented controls)
• Changes in personnel in key QMS roles
• Significant changes to customer requirements that require process adjustments

The test is whether the change affects the quality management system in a meaningful way. If it does, Clause 6.3 thinking applies.

How Clause 6.3 Connects to the Rest of ISO 9001

Clause 6.3 does not sit in isolation. It connects to several other parts of the standard, and understanding those connections helps you apply it more effectively.

Connection to Clause 6.1 (Risks and Opportunities)

The risk based thinking required by Clause 6.1 feeds directly into Clause 6.3. When you are planning a change, you are essentially assessing the risks associated with that change and deciding how to address them. An organisation with a mature approach to risk based thinking will find Clause 6.3 easier to apply because the habit of thinking about consequences is already embedded.

Connection to Clause 7.1 (Resources)

The consideration of resource availability in Clause 6.3 links directly to Clause 7.1, which requires the organisation to determine and provide the resources needed for the QMS. A change that requires additional resources must be planned with reference to what Clause 7.1 demands.

Connection to Clause 7.5 (Documented Information)

Almost every significant QMS change will require updates to documented information. Clause 7.5 governs how documents are created, updated, and controlled. When implementing a change under Clause 6.3, you need to ensure that the documented information changes are managed in accordance with Clause 7.5 requirements. A change that is implemented in practice but not reflected in documents creates a nonconformity against both clauses.

Connection to Clause 8.1 (Operational Planning and Control)

Clause 8.1 requires the organisation to plan, implement, control, and maintain the processes needed to meet requirements. Changes to operational processes need to be planned under Clause 8.1 as well as Clause 6.3. The two work together: Clause 6.3 addresses the QMS level thinking, while Clause 8.1 addresses the operational execution.

Connection to Clause 9.3 (Management Review)

Significant changes to the QMS, or the need for changes, are an input to management review under Clause 9.3. This means that your management review process should be capturing and reviewing changes that have been made or are planned. If your management review minutes never mention changes to the QMS, that is a gap worth addressing.

What Auditors Look for Under Clause 6.3

When auditing against Clause 6.3, an experienced auditor is not looking for a specific form or a change management register, although those can be useful. They are looking for evidence that changes to the QMS were thought through and managed in a planned way.

Common questions an auditor might ask include:

• Can you walk me through a recent change you made to your QMS?
• How did you decide to make that change?
• What did you consider before implementing it?
• Were there any impacts on other processes or documents?
• How did you communicate the change to the people affected?
• Were resources adequate to support the change?
• Did responsibilities change as a result, and how was that communicated?

What auditors find in practice is often one of two things. Either the organisation has no awareness that Clause 6.3 applies to a change they have clearly made, or they have a change management form that is filled in after the fact rather than used to guide planning.

Both are nonconformities, though the severity will depend on the significance of the change and the consequences that followed. A major process change implemented without any planning consideration, which then resulted in a quality failure, is a serious finding. A minor administrative update where the planning was informal but demonstrably happened is less so.

Common Nonconformities Against Clause 6.3

Based on real audit experience, the most frequently raised nonconformities against Clause 6.3 include:

• Undocumented changes: A process has clearly changed, but there is no evidence that the change was planned or that the four considerations were addressed.
• Document inconsistencies: Procedures or work instructions have not been updated to reflect a change that has already been implemented, creating a gap between documented and actual practice.
• Missing training records: A change was implemented, but there is no evidence that the people affected were trained or made aware of what changed.
• Unclear responsibilities after a restructure: The organisation restructured, roles changed, but the QMS documents still refer to old job titles or positions that no longer exist.
• Reactive rather than planned changes: Changes were made in response to a problem but without any forward thinking about consequences or resources, resulting in further problems downstream.

If you want a deeper look at the full range of findings auditors raise against Clause 6, the article on common ISO 9001 Clause 6 nonconformities covers these in detail.

Building a Practical Approach to Change Planning

You do not need a complex change management system to satisfy Clause 6.3. What you need is a consistent habit of applying the four considerations before implementing changes to your QMS.

A simple change request or change planning record can capture the essentials:

1. Description of the proposed change
2. Reason for the change
3. Processes, documents, or responsibilities affected
4. Resources required
5. Who is responsible for implementing the change
6. How the change will be communicated
7. How the effectiveness of the change will be verified

This does not need to be a lengthy document. For a minor change, a few lines in a register may be sufficient. For a significant change, such as outsourcing a key process or restructuring the QMS following a major corrective action, a more detailed record is appropriate.

The key is proportionality. The level of planning documentation should match the significance and risk of the change. A good internal auditor will assess whether the approach was appropriate given the nature of the change, not whether a particular form was used.

Change Planning in the Context of ISO 9001:2026

It is worth noting that ISO 9001 is currently under revision. The 2026 edition is expected to bring some adjustments to how planning requirements are framed, though the core intent of Clause 6.3 is unlikely to change significantly. Organisations should stay informed about the revision timeline and what changes are expected.

For those already building or refining their QMS, understanding the key changes coming in ISO 9001:2026 will help you build systems that are already aligned with the direction the standard is heading.

Practical Tips for Quality Managers

If you are the quality manager responsible for maintaining your organisation's QMS, here are some direct, practical suggestions for making Clause 6.3 work in your context.

Build Change Awareness Into Your Culture

The biggest challenge with Clause 6.3 is not the paperwork. It is getting people to think about the QMS implications of changes before they happen rather than after. This requires building awareness across the organisation that certain types of changes need to go through a planning step.

Consider which roles are most likely to initiate QMS changes and make sure those people understand what Clause 6.3 requires. Operations managers, process owners, and department heads are often the ones who drive changes without realising the QMS implications.

Link Change Planning to Your Corrective Action Process

Many QMS changes are triggered by corrective actions. When a corrective action requires a process change, that change should automatically trigger a Clause 6.3 planning step. Build this linkage into your corrective action procedure so that it happens consistently.

Use Management Review to Review Changes

Make changes to the QMS a standing agenda item in your management review. This creates a regular checkpoint where significant changes are reviewed, and any unintended consequences can be identified and addressed before they become nonconformities.

Audit Clause 6.3 Specifically in Your Internal Audit Programme

Clause 6.3 is sometimes overlooked in internal audits because it is short and does not have a lot of explicit documented information requirements. Make sure your internal audit programme includes specific attention to change planning. Ask process owners about recent changes and trace those changes back to see whether they were planned in accordance with the clause.

For guidance on how to structure your internal audit approach to cover this and related planning requirements, the dedicated audit guide for planning of changes in ISO 9001 provides a practical audit trail to follow.