ISO 9001 Clause 7.1 Resources Explained: People, Infrastructure and Environment

What Clause 7.1 Is Actually About

ISO 9001 Clause 7.1 sits at the start of Section 7, which covers support requirements for the quality management system. Before your organisation can plan work, deliver products, or serve customers, it needs resources. Clause 7.1 is where the standard asks you to identify what those resources are, determine whether you have them, and address any gaps.

The clause covers six distinct sub-clauses: 7.1.1 General, 7.1.2 People, 7.1.3 Infrastructure, 7.1.4 Environment for the Operation of Processes, 7.1.5 Monitoring and Measuring Resources, and 7.1.6 Organisational Knowledge. This article focuses on the first four, which deal with the human, physical, and environmental conditions that support your QMS. Clause 7.1.5 on calibration and 7.1.6 on organisational knowledge each deserve their own treatment.

Understanding what auditors look for across these sub-clauses will help quality managers build systems that hold up under scrutiny, and help internal auditors ask the right questions when reviewing resource management.

Clause 7.1.1 General: The Foundation Requirement

The general requirement is straightforward. Your organisation must determine and provide the resources needed to establish, implement, maintain, and continually improve the QMS. It also requires you to consider what internal resources you already have and their current capabilities, as well as what you need to obtain from external providers.

This sounds simple, but auditors see organisations fall short here in two common ways. First, organisations treat resource planning as a one-time activity rather than an ongoing responsibility. Second, they fail to document any evidence that resource adequacy has been assessed at all.

The standard does not prescribe how you demonstrate this. It might be captured in management review outputs, budget planning records, workforce planning documents, or capacity assessments. What matters is that there is some evidence that leadership has considered resources deliberately, not just assumed they are adequate.

What Auditors Look For Under 7.1.1

When auditing this sub-clause, look for evidence that the organisation has a systematic way of identifying resource needs. Ask questions like: How does the organisation determine whether it has enough people, equipment, or facilities to meet customer requirements? What happens when a gap is identified? Who has the authority to approve additional resources?

Management review records are often the best place to check. If the management review outputs include decisions about resource allocation, that is a strong indicator that 7.1.1 is being addressed meaningfully. If management review minutes say nothing about resources despite obvious capacity pressures in the business, that is worth probing.

Clause 7.1.2 People: More Than a Headcount

Clause 7.1.2 requires the organisation to determine and provide the people necessary for the effective implementation of the QMS and for the operation and control of its processes. This is not just about having enough bodies on the floor. It is about having the right people with the right capabilities in the right roles.

The distinction matters. An organisation might have ten staff in a production team but still not have the people resources it needs if those staff lack the skills to perform critical tasks, if key personnel are consistently unavailable due to competing demands, or if succession planning is absent and critical knowledge sits with one individual.

Common Gaps Auditors Find Under 7.1.2

The most frequent gap is an organisation that has not formally determined what roles are needed to run the QMS effectively. Job descriptions exist, but they do not clearly link to QMS responsibilities. The quality function is understaffed relative to the scope of certification. Or the business has grown significantly but the QMS resourcing has not kept pace.

Another common issue is reliance on contractors or casual workers without any assessment of whether those workers have the competence and awareness needed for QMS-related tasks. If a process depends on externally sourced labour, the resource planning needs to account for that.

When auditing people resources, ask the process owner directly: if your two most experienced operators were unavailable tomorrow, what would happen to this process? The answer often reveals whether people resources have been genuinely thought through or just assumed.

Clause 7.1.3 Infrastructure: The Physical Foundation

Infrastructure under ISO 9001 covers the physical and technical assets the organisation needs to achieve conformity of products and services. The standard gives three categories: buildings, utilities, and associated facilities; equipment including hardware and software; and transportation and communication resources and information technology.

The requirement is to determine, provide, and maintain the infrastructure needed. Maintenance is explicitly mentioned, which means a corroded production line, software running without updates, or a vehicle fleet with no preventive maintenance schedule can all be legitimate nonconformities under this clause.

Reading Infrastructure Requirements in Context

Infrastructure needs vary enormously by industry. For a manufacturing organisation, this clause covers production equipment, storage facilities, fork-lifts, and production software. For a professional services firm, it might cover office space, IT systems, and communication platforms. For a transport company, it covers the fleet itself.

The key audit question is not whether infrastructure exists, but whether it is adequate for the organisation's quality objectives and whether it is maintained in a condition that supports consistent process performance. An organisation that has the right equipment but allows it to fall into disrepair is not meeting the intent of this clause.

Maintenance records are your primary evidence here. Look for preventive maintenance schedules, records of completed maintenance, and any evidence of how the organisation responds when critical infrastructure fails. If there is no maintenance programme, or if the programme exists on paper but records show it is rarely followed, that is a finding worth raising.

Software as Infrastructure

One area that catches organisations off guard is software. Many quality managers think of infrastructure as physical assets, but the standard explicitly includes hardware and software. If your organisation's QMS depends on software, for example an ERP system, a document management platform, or a customer relationship management tool, that software is infrastructure under Clause 7.1.3.

Auditors should check whether software is licensed, maintained, and backed up appropriately. If a critical system goes down and there is no contingency plan, that is a gap in infrastructure management. This is increasingly relevant as organisations rely more heavily on cloud-based tools and integrated software platforms.

Clause 7.1.4 Environment for the Operation of Processes

This sub-clause is often misunderstood. When ISO 9001 refers to the environment for the operation of processes, it does not mean the natural environment or environmental management in the ISO 14001 sense. It means the conditions under which work is performed, the human and physical factors that affect process outcomes.

The standard gives examples: social factors such as a non-discriminatory, calm, and non-confrontational environment; psychological factors such as stress-reducing conditions, burnout prevention, and emotional protection; and physical factors such as temperature, heat, humidity, light, airflow, hygiene, and noise.

The requirement is that the organisation determines and manages the work environment needed to achieve conformity of products and services. Not every factor will be relevant to every organisation. A software company has different environmental considerations than a food manufacturer or a precision engineering workshop.

Why This Sub-Clause Gets Overlooked

In practice, Clause 7.1.4 is one of the most under-audited parts of the standard. Many organisations acknowledge it exists but have done little to formally determine what environmental conditions matter for their specific processes, let alone document how they manage those conditions.

This is a missed opportunity. Poor work environment conditions directly affect product quality and service consistency. A noisy environment where workers cannot hear instructions clearly, an assembly area where temperature fluctuates beyond acceptable ranges, or a customer-facing team working under constant high-pressure conditions, all of these can affect conformity. The standard is asking organisations to recognise that and manage it deliberately.

Auditing the Work Environment

When auditing this clause, start by asking the process owner what environmental conditions are important for their process. Then ask how those conditions are monitored or controlled. Walk the floor and observe. Are conditions what they need to be? Are there obvious environmental stressors that nobody has formally addressed?

Evidence might include temperature logs for controlled environments, noise assessments, ergonomic assessments, records of workplace inspections, or documented standards for cleanliness in food-safe environments. The form of the evidence will depend on the nature of the work.

One practical approach is to link this clause with the organisation's work health and safety management. Many organisations already manage physical and psychological work environment factors under their WHS obligations. The ISO 9001 requirement is simply asking that the quality lens is also applied to those same conditions.

How Clause 7.1 Connects to the Rest of the QMS

Resources do not sit in isolation. Clause 7.1 connects directly to several other parts of the standard. The people determined under 7.1.2 need to be competent, which is addressed in Clause 7.2. The infrastructure maintained under 7.1.3 often needs to be monitored and measured, which connects to Clause 7.1.5 on monitoring and measuring resources. The work environment under 7.1.4 influences process performance, which feeds into Clause 9.1 on monitoring, measurement, analysis, and evaluation.

When auditing Clause 7.1, keep this broader picture in mind. A gap in people resources will often show up as a competence gap under 7.2 or a process performance issue under Clause 8. An infrastructure maintenance failure might surface as a product nonconformity under Clause 8.7. Following the thread from a downstream finding back to a resource root cause is a hallmark of effective auditing.

For a deeper look at how to audit the competence requirements that flow from 7.1.2, see our article on ISO 9001 Clause 7.2 Competence Explained.

Common Nonconformities Under Clause 7.1

Across certification audits and internal audits, certain patterns repeat themselves under Clause 7.1. Knowing these patterns helps you either avoid them or find them faster.

• No evidence of resource determination: The organisation cannot demonstrate that it has formally assessed whether its resources are adequate. There is no management review discussion of resources, no capacity planning, and no documented assessment.
• Maintenance programme not followed: A preventive maintenance schedule exists but records show significant overdue items. Critical equipment has not been serviced in line with the programme.
• Infrastructure gaps not addressed: The organisation is aware that certain equipment or facilities are inadequate but has taken no action and has no plan to address the gap.
• Work environment not determined: The organisation has not identified what environmental conditions are relevant to its processes, let alone managed them.
• People resources not keeping pace with growth: The business has expanded its scope or volume significantly but QMS resourcing has not been reviewed or updated.
• Software not included in infrastructure management: Critical software systems have no maintenance plan, no backup process, and no documented access controls.

For a broader view of what auditors find across Clause 7, see our article on Common ISO 9001 Clause 7 Nonconformities Auditors Keep Finding.

Practical Tips for Quality Managers

If you are a quality manager preparing for a certification audit or running your own internal audit programme, here is what to focus on.

Start with a resource register. Document the key resources your QMS depends on across people, infrastructure, and work environment. This does not need to be elaborate. A simple table that lists each resource, its current status, and any identified gaps is a solid foundation. Review this register as part of your management review process.

For infrastructure, ensure your maintenance programme is realistic and followed. An ambitious preventive maintenance schedule that nobody actually executes is worse than a simpler one that is consistently completed. Auditors are looking for evidence of actual maintenance, not just a plan.

For the work environment, start by identifying which processes are sensitive to environmental conditions. For each of those processes, determine what conditions matter and how you know whether those conditions are being met. Even basic monitoring, such as a daily temperature check in a controlled storage area, is better than no monitoring at all.

For people resources, connect your resource planning to your operational planning. When you plan a new contract, a new product line, or a significant increase in volume, resource adequacy should be part of that planning conversation. Document the outcome, even briefly.

Auditing Resources Under Clause 7.1: A Practical Approach

If you are conducting an internal audit of Clause 7.1, structure your approach around the four sub-clauses covered in this article. For each one, identify the evidence you need to see, the questions you will ask, and the observations you will make on the floor.

Use process owners as your primary source of information. They know what resources their process depends on better than anyone. Ask them what would happen if a key resource were unavailable. Their answer will tell you a great deal about how seriously resource management is taken in practice.

Triangulate your evidence. Do not rely solely on documents. Look at the physical environment. Check maintenance records against the actual condition of equipment. Compare the staffing levels on the floor to what the QMS says is needed. The gap between documented intentions and operational reality is often where findings live.

For a comprehensive guide to how auditors approach this clause from the audit side, see our dedicated article on Auditing Resources Under ISO 9001 Clause 7.1: From People to Calibration.

How Training Helps You Apply Clause 7.1 Confidently

Understanding what a clause requires is one thing. Knowing how to audit it, how to ask the right questions, how to gather evidence, and how to write a finding that actually drives improvement, is a different skill set. That is where structured auditor training makes a real difference.

At Audit Workshop, our ISO 9001 internal auditor and lead auditor courses work through clauses like 7.1 in the context of real audit scenarios. You learn not just what the clause says but how to apply it in the field, including how to handle situations where the evidence is incomplete or where the auditee pushes back on your findings.

Whether you are building your internal audit capability or working toward lead auditor certification, practical clause-level knowledge is the foundation everything else rests on. Our courses are built by auditors with real certification audit experience, not just trainers who have read the standard.