Quality Position Qualification Management and Authorization System —— A Systematic Approach from Onboarding Training to Skill Matrix

In a quality management system (QMS), people are the most dynamic and unpredictable elements. No matter how well-designed the system or how detailed the process standards, if the implementers lack the necessary qualifications or if the scope of authorization is unclear, quality risks will seep into every aspect in the form of "human factors." Clause 7.2 of ISO 9001:2015 explicitly requires organizations to determine and ensure that the personnel under their control possess the necessary capabilities. However, many companies have a common gap in implementation—training records are comprehensive, but there is a lack of a clear correspondence between "what they can do" and "what they are allowed to do." This article systematically discusses how to build a practical, auditable, and sustainable quality position qualification and authorization management system from three dimensions: setting qualification standards, designing training matrices, and hierarchical authorization management.

1. Setting Quality Position Qualification Standards

Qualification standards are the foundation of authorization management, and their core lies in answering one question: What capabilities does an employee in a quality position need to be considered qualified?

The first step is to conduct a job capability requirement analysis. For each quality position, the capability requirements should be梳理 from three dimensions: knowledge (whether they understand relevant standards, methods, and tools), skills (whether they have practical operational capabilities, such as using measuring instruments or interpreting SPC control charts), and experience (whether they have encountered enough real cases, such as how many nonconforming product reviews they have handled). All three dimensions are essential—passing a written test alone cannot prove that a person can correctly use a coordinate measuring machine, and having operational experience without a systematic understanding of standards makes it difficult to handle abnormal situations.

The second step is to define the assessment criteria for each dimension. Knowledge-based capabilities should be evaluated using a combination of "training + examination," with the training duration and passing score set by the technical supervisor. Skill-based capabilities should be assessed through "on-site operational evaluation," where the authorized evaluator observes the examinee independently completing one or more practical operations and evaluates them according to a pre-set scoring sheet. The assessment of experience-based capabilities is the most challenging and is typically quantified through "case defense" or "cumulative handling quantity," for example, requiring a quality engineer to independently handle at least 10 quality anomalies before applying for advanced qualifications.

The third step is to establish a qualification grading system. It is not advisable to use a binary "qualified/unqualified" classification. Instead, a three- or four-level grading system should be adopted. For example, for an inspector, the levels could be: Inspector (can independently complete standard inspection tasks but needs guidance for abnormal judgments), Senior Inspector (can independently judge common abnormalities and participate in the development of inspection work instructions), and Inspection Technician (can lead the development of complex measurement plans and train new inspectors). Each level corresponds to different knowledge, skill, and experience requirements, and promotions must be sequential, with no skipping levels allowed.

The validity period of qualifications should also be clearly defined. Given that employee skills can deteriorate over time and standards and equipment can be updated, qualifications should not be "once certified, always valid." It is recommended to set a qualification validity period of 1 to 2 years, with re-certification through "renewal assessment" or a combination of "theoretical hours + practical operation" upon expiration. For personnel who fail multiple assessments or make significant quality errors, their qualifications should be downgraded or revoked.

2. Building and Dynamically Managing the Training Matrix

The training matrix is the bridge connecting position qualification standards with individual development plans and is one of the most frequently checked documents in QMS audits. An effective training matrix should answer four questions: What training is required for each position? Who has completed this training? Whose training is about to expire? How is the training effectiveness measured?

The basic structure of the training matrix is recommended to be a two-dimensional table format of "position × training course." Rows are position names (expanded by position levels), and columns are training courses (grouped by categories, such as system standards, inspection methods, equipment operation, and problem-solving). Each intersecting cell in the matrix should be labeled with the requirement level for that course: M (Mandatory, required), R (Recommended, optional), or N/A (Not Applicable).

After the matrix design is completed, a standardized course outline should be developed for each training course. The outline should include: course objectives (what can be done after completion), target audience (which positions need it), prerequisites (what needs to be mastered first), course duration and format (classroom instruction, online learning, on-site practice), assessment methods (written test, practical operation, case review), and retraining cycle (annually or biennially). Standardized course outlines ensure training consistency and traceability, avoiding the common issue of "different content each time."

Dynamic management of the training matrix is equally important. The matrix should be updated promptly in the following situations: when new equipment or new testing methods are introduced, the training requirements and course content for relevant positions should change; when process or product changes lead to updated inspection standards, the retraining plans for affected positions should be automatically triggered; when job responsibilities are adjusted, the corresponding qualification requirements should be reassessed. The responsibility for managing the training matrix should be clearly assigned, typically maintained by the human resources department in collaboration with the quality department. The quality management department is responsible for technical content review, while the human resources department handles the archiving of training records and compliance tracking.

In highly digitized companies, the training matrix can be integrated into an LMS (Learning Management System) or QMS system, achieving automatic identification of training needs, automatic assignment of learning tasks, and automatic alerts for expiring qualifications. For small and medium-sized enterprises, a dynamically maintained Excel table and regular management reviews can also meet the system's operational needs.

3. Four Levels of Hierarchical Authorization and the Audit Loop

Qualifications prove "whether someone can do it," while authorization addresses "whether they are allowed to do it." The most common issue in quality management on-site is not a lack of employee capability but unclear authorization—inspectors are unsure whether they should make judgments when encountering abnormalities, and equipment operators are unclear about when they can continue production and when they must stop and report.

An effective authorization system should adopt hierarchical management. The first level is general authorization, applicable to all personnel who have passed basic certification. The scope of authorization includes performing routine tasks as specified in standard operating procedures, such as conducting normal inspections according to inspection work instructions or performing normal production operations according to standard procedures. The characteristic of general authorization is "automatic authorization upon qualification," requiring no additional approval.

The second level is specialized authorization, applicable to operators of specific equipment, specific processes, or specific customer products. For example, authorization to operate a coordinate measuring machine, authorization to adjust parameters in a key process, or authorization to release products for a specific customer. Specialized authorization requires additional training and assessment and should have a clear validity period and authorization number for traceability.

The third level is abnormal situation handling authorization, applicable to personnel who can make non-standard decisions in abnormal situations. This type of authorization should have clear boundary conditions—for example, an inspection supervisor has the authority to make concession acceptance judgments for minor nonconformities in non-key characteristics, but any anomalies involving safety characteristics must be escalated to a quality engineer or quality manager. Abnormal situation handling authorization should follow the "exception management" principle, with each exercise of authority requiring a written record and a review during management reviews.

The fourth level is approval authorization, applicable to decision-making at the QMS level, including the approval of quality policies, the determination of quality objectives, the outputs of management reviews, and the handling plans for major quality anomalies. This type of authorization is typically linked to the organizational hierarchy and directly granted by the top management, with a clear signature authority table as a basis.

Authorization management needs to form a complete audit loop. The quality department should conduct a comprehensive review of the authorization list at least every six months to confirm: whether all authorizations are within their validity period, whether there are any unauthorized violations, and whether there are any authorized personnel who have not used their authorization for a long time (their skill retention status should be reassessed). When gaps in the authorization system are identified, they should be included in the corrective action process, with root causes analyzed and relevant management procedures updated.

4. Digital Support for Qualification and Authorization Management

In traditional paper-based management, qualification files and authorization records are often scattered across the human resources department, the quality department, and various workshops, leading to information silos and the awkward situation of "three sets of data not matching" during audits. The most effective solution to this problem is to integrate qualification and authorization management into a unified platform within the QMS or HR system.

The core functional modules of a digital system include: a job capability model library (maintaining standard capability requirements for each position), a training course library (managing course outlines, exam question banks, and training records), a qualification ledger (recording each person's qualification level, issuance date, validity period, and retraining plan), and an authorization list (recording the scope of authorization, the authorized person, the validity period, and the exercise record). The data linkage relationships between these modules are: job capability models determine training needs → training completion and passing assessment trigger qualification certification → qualification certification completion triggers authorization approval based on job needs.

Digitalization also brings a significant management benefit—data analysis. By aggregating metrics such as qualification coverage rate (the proportion of certified personnel in each position), authorization expiration rate (the rate of expired authorizations not timely renewed), and training punctuality rate (the proportion of due training completed on time), quality managers can quickly identify systemic capability gaps and authorization blind spots. For example, if the qualification coverage rate of a certain team is significantly lower than that of other teams, it may indicate issues such as rapid personnel turnover or lagging training schedules, requiring management intervention.

5. Common Implementation Pitfalls and Countermeasures

Pitfall 1: Setting qualification standards too high, leading to "no one available." Some companies set the qualification thresholds for each position too high to emphasize the importance of quality, resulting in most employees failing to pass the assessments and the actual operation relying heavily on "partially certified personnel," rendering qualification management ineffective. Countermeasure: Refine qualification levels and adopt a dual-track system of "onboarding qualification (minimum required) + advanced qualification (continuous improvement)," ensuring that new employees can start work after basic training while setting continuous improvement paths for current employees.

Pitfall 2: Emphasizing training form over capability verification. Completing training courses and passing exams is considered sufficient, but exams often test memory rather than practical application. Countermeasure: Introduce a "post-training follow-up evaluation" phase in the training matrix—1 to 3 months after training, the direct supervisor should observe and evaluate the trainee's actual work performance to confirm that they have indeed applied the learned content to their daily work, forming a "training → assessment → practical verification → retraining" loop.

Pitfall 3: Disconnection between authorization systems and actual operations. The authorization table is clear, but on-site operations often bypass the authorization system due to the absence of signatories or lengthy approval processes. Countermeasure: Fully consider mechanisms for "overriding authorization" and "post-event signing" in the authorization design to make the system flexible, rather than rigid, to prevent employees from having to violate regulations due to an inflexible authorization system.

Capability determines whether someone can do it, and authorization determines whether they are allowed to do it.

Knowledge code: 13.2.3

Version: v20260706

Author: Quality Think Tank Quality Think Tank is dedicated to providing systematic professional knowledge, methodologies, and practical tools for quality management practitioners, helping companies continuously improve their quality capabilities.