Let’s turn our attention to the third sub-clause in: ISO 9001 Clause 7.1 – Resources.
What does it mean, and how does it work with the rest of your certification?
Is it time to join the more than “one million companies and organisations in over 170 countries certified with ISO 9001:2015”, reported by the International Organisation for Standardisation (the main ISO body) In December 2021?
If that’s what you’re wondering at the moment, we’d like to help get you there – taking the sting out of our regular dire warning that:
ISO 9001 might just be the most confusing document in business history!
That’s why this series of articles and accompanying free factsheets have been written. Their purpose is to:
- Cut through the jargon
- Debunk the myths
- Make smoother sailing of your journey to certification
Let’s get to it – here’s a look at ISO 9001 Clause 7.1.3 – Resources – Infrastructure.
What is ISO 9001 Clause 7.1.3?
Clause 7.1.3 is part of the section on ‘Resources’ within the standard that addresses infrastructure. It examines the building, utilities, equipment, transport resources, technology and services required to consistently provide products and services to clients.
The standard states “the organization shall determine, provide and maintain the infrastructure necessary for the operation of its processes to achieve conformity of products and services”.
The actions of ‘determine’, ‘provide’ and ‘maintain’ are three different activities. Depending on the business, these might be performed by different departments or functions. For example, one team might ‘determine’ and specify requirements. The procurement department will be responsible for purchasing the equipment. And finally, the maintenance department undertakes the installation, testing and periodic inspections required.
Determining the Infrastructure Requirements
Infrastructure can have a significant impact on achieving conformity of products and services. If your business currently makes products, it has already determined and provided the necessary infrastructure for that purpose. However infrastructure can also include the computer software or delivery requirements etc.
Infrastructure needs will obviously vary depending on the products and services provided. A manufacturing company has very different infrastructure requirements to a consultancy business where their needs could be a suitable workspace and IT equipment with reliable connectivity.
Determining the infrastructure requirements is not a one-time event. It is something that needs to be revisited as customers, products and personnel change. The management review process is the perfect opportunity to review infrastructure requirements, as are planning meetings, budgeting and consultations with staff.
Maintaining the Infrastructure
The standard requires the infrastructure to be maintained. It does not stipulate the frequency, methods or who needs to do it, just that it needs to be done. It is up to you to establish the maintenance programme and ensure delivery.
I do recommend keeping records of maintenance and servicing. Whilst there is no explicit requirement to do so, it would be tricky to prove that you are following a programme if there are no records.
Just as determining the infrastructure requirements is not a one-time event, nor is the programme for maintenance fixed. The frequency, specific activities, and the competence of personnel may change over time, and the programme must be updated accordingly.
