ISO 9001 resources are not a paperwork clause. ISO 9001, ISO 14001 and ISO 45001 all ask the business to decide what it needs to run its management system and then actually provide it. When the time and people are not set aside, the problem rarely shows up in month one. It shows up in the run-up to a Stage 1, Stage 2 or surveillance assessment, when the internal audit has not happened, the management review is a rushed meeting and one person is trying to hold the whole system together. For construction and engineering SMEs in Scotland and across the UK, that crunch is avoidable.
Here is what the standards require, why a lack of resource causes trouble before assessment, and how to stop it.
What does ISO clause 7.1 Resources require?
All three standards share the same high-level structure, so clause 7.1 Resources sits in the same place in each. In plain terms, the organisation has to work out what resources it needs to set up, run, maintain and improve its management system, and then provide them. ISO 14001 and ISO 45001 keep it to that single requirement. ISO 9001 goes further and breaks it into parts:
- People. Enough of the right people to run your processes and the system.
- Infrastructure. Buildings, plant, vehicles, equipment, software and IT, kept fit for use.
- Environment for the operation of processes. The working conditions needed, physical (heat, light, noise) as well as social and psychological (stress, workload).
- Monitoring and measuring resources. Where you use equipment to check work meets requirements, it has to give valid results. Where traceability matters, that means calibration or verification at set intervals, clear identification and protection from damage. ISO 14001 and ISO 45001 cover calibrated or verified equipment under clause 9.1.
- Organisational knowledge. The know-how needed to run your processes, kept and shared so it does not leave when a person does.
How do competence, leadership and management review fit in?
Clause 7.1 does not stand alone. Three other clauses tie resources to how the business is run.
- 5.1 Leadership and commitment. Top management must make sure the resources the system needs are available. That is a director-level duty.
- 7.2 Competence. You decide what competence people need, make sure they have it through education, training or experience, act to close gaps, check whether those actions worked, and keep evidence. We covered the lean way to do this in ISO competence records for construction SMEs.
- 9.3 Management review. Adequacy of resources is one of the inputs top management must consider, and any need for resources is one of the outputs. If your review never asks “do we have enough people and time to run this?”, it is missing part of what the standards ask for.
Why does a lack of resource cause problems before assessment?
Most small firms do not set out to under-resource their system. Work comes first. A big contract lands, the quality lead is pulled onto site, and the ISO tasks slide until the certification body’s date appears in the diary. Then the same problems turn up.
- Internal audits rushed or missed. The audit programme said one thing, but the audits were never done. They get crammed into the final fortnight, often by the person who wrote the procedures, so they are neither thorough nor impartial.
- Management review squeezed into a single meeting. Directors sign minutes they had little time to read, and the inputs, including resources, are thin or missing.
- Actions left open. Findings from the last audit, last year’s assessment or a site incident sit in the register with no owner and no close-out. An assessor will look at that register.
- Calibration and training records out of date. A torque wrench, gas detector or laser level is past its calibration date. A CSCS card or first aid certificate has expired. Easy to fix with notice, awkward on the day.
- One person carrying the whole system. When everything lives in one person’s head or inbox, a holiday, sick day or resignation leaves the business unable to answer basic questions.
Before Stage 2, your certification body will want to see that internal audits and management review are planned and being carried out. At surveillance, they will check the system is still working, not just that it existed last year. A UKAS-accredited assessment is built to find a system that only comes to life the week before the visit.
Is this the same as saying you should not get certified?
No. In September we wrote that if you will not resource ISO 9001 at all, you should rethink the certificate. This post is about the firms who do want it, have committed to it, and still end up in a scramble because time and people were never actually set aside. For them the answer is to plan the resource in, the same way you plan labour and plant for a job.
How do you resource ISO without overloading the business?
Lean ISO does not need a big team. It needs a few clear decisions, made early.
- Name an owner. One person is responsible for keeping the system moving, with a named deputy who knows where things are.
- Block time in the diary. A regular slot, even a couple of hours a month, for evidence, actions and records.
- Plan the audit year back from the assessment date. Start with the certification body’s date. Put management review a few weeks before it, internal audits before that, and leave room to close findings. Add calibration and training renewal dates to the same plan so nothing expires in the gap.
- Make records part of the work. Digital forms for inspections, toolbox talks and equipment checks, filled in on site, mean the evidence exists without a separate admin job.
- Review resource honestly at management review. If the owner is stretched, say so and decide what changes.
- Use an external consultant to fill gaps. An ISO consultant can run internal audits independently, prepare management review, chase open actions and keep the system ticking when your team is flat out on site.
If you run ISO 9001, ISO 14001 and ISO 45001 together, an integrated management system helps a lot here. One audit programme, one management review and one action register mean one set of deadlines to plan for, not three. See our 90-minute management review approach for how lean this can be.
How Accendo can help
Accendo is an ISO consultant UK firms use when they want certification to fit around real work. As an ISO 9001 consultant in Scotland, based in West Lothian, we support construction and engineering SMEs with internal audits, management review, assessment preparation and ongoing support through our Lean IMS for ISO 9001, 14001 and 45001. If your next assessment is coming up and the resource is not there, talk to us early, not the week before.
Contact us today at andrew@accendo.org.uk, or through our contact page.
Accendo Consultants: lean ISO, UKAS-credible, built for how you work.