Deep Interpretation of ISO9001 Clauses (5) | 4.4 Quality Management System and Its Processes: Full Implementation of the Process Approach (Including Turtle Diagrams)

1. Key Points of the Clause

ISO 9001:2015 Clause 4.4 is one of the most significant structural changes in the 2015 edition: the process approach is no longer just an "idea" advocated in the introduction but has become a mandatory requirement. Clause 4.4.1 requires organizations to "establish, implement, maintain, and continuously improve a quality management system (QMS) in accordance with the requirements of this standard, including the processes required and their interactions," and explicitly requires organizations to "determine the processes needed for the QMS and their application throughout the organization." It then lists eight items (a) to (h) that must be determined: the inputs and expected outputs of these processes; the sequence and interactions of these processes; the criteria and methods needed to ensure the effective operation and control of these processes (including monitoring, measurement, and related performance indicators); the resources needed to ensure the effective operation and control of these processes; the assignment of responsibilities and authorities for these processes; the need to address risks and opportunities in accordance with Clause 6.1; the evaluation of these processes and the implementation of necessary changes to ensure the achievement of expected results; and the improvement of processes and the QMS. Clause 4.4.2 imposes a hierarchical requirement for documented information: to "maintain" documented information to the necessary extent to support process operation, and to "retain" documented information to ensure that processes are implemented as planned. Understanding these eight items is the key to understanding the entire Chapter 4 and the entire standard.

2. Interpretation of Intent

Why does the standard elevate "determining processes" to a mandatory clause? There are three layers of deep logic. First, a system is not a pile of documents but a network of interacting processes, and the quality of products and services is the result of these processes working together—without controlling the processes, the outcomes cannot be guaranteed. This is the fundamental belief of the process approach. Second, the analysis of internal and external environments in Clause 4.1, the requirements of interested parties in Clause 4.2, and the scope definition in Clause 4.3 must ultimately be "translated" into specific process arrangements to function. Clause 4.4 serves as the "final assembly shop" for these three, converting strategic-level judgments into operational-level process networks, ensuring that the "inputs" of the system truly transform into customer value. Third, the eight items (a) to (h) themselves form a complete PDCA cycle: determining inputs, outputs, and sequence criteria (planning), allocating resources and defining responsibilities according to the criteria and running the processes (implementation), evaluating processes through monitoring, measurement, and performance indicators (checking), and implementing changes and improvements (action). The risk thinking from Clause 6.1 is embedded in item (f), creating a coherent and interconnected cycle. It is also important to note that Clause 4.4.2 distinguishes between two types of documented information using "maintain" and "retain": documents supporting process operation (procedures, work instructions, criteria) need to be "maintained," while records proving that processes are implemented as planned need to be "retained." These terms have different meanings and management requirements, and are often confused during audits, highlighting the precision of the standard's language.

3. Implementation Practices

Step 1: Develop a Process List. Using the conclusions from Clauses 4.1 to 4.3 as input, follow the main value chain from "customer requirements → product realization → customer satisfaction." First, identify customer-oriented processes (such as contract review, design and development, production, delivery), then supplement with support processes (purchasing, equipment and facilities, training, monitoring and measurement) and management processes (internal audit, management review, improvement). This forms a comprehensive process list covering all products, services, and locations, clearly defining the name and responsible department for each process.

Step 2: Draw Turtle Diagrams for Each Process. The turtle diagram is a classic tool for implementing Clause 4.4: the process name is in the center, inputs on the left, outputs on the right, "how to do it" (procedures, criteria, methods) at the top, resources and personnel capabilities at the bottom, the person in charge at the head, and performance indicators at the tail. These six elements correspond precisely to items (a) to (h). For key processes, draw diagrams with specific inputs and outputs, avoiding vague terms like "customer requirements" or "conforming product."

Step 3: Create a Process Interaction Diagram. Use arrows to indicate the sequence, handover points, and information flow between processes. Focus on interface responsibilities: whether the output of one process is the input for the next, whether handover criteria are defined, and whether responsibilities are clear. Eliminate areas of "no one's responsibility" and overlapping controls.

Step 4: Define Criteria and Set Indicators. Answer "what counts as good" for each process: control criteria (process parameters, acceptance standards, time requirements) plus process performance indicators (first-time pass rate, on-time delivery rate, equipment integrity rate, etc.). Align these with the quality objectives system in Clause 6.2 and the monitoring and measurement arrangements in Clause 9.1 to ensure that indicators have data sources, statistical frequencies, and responsible positions.

Step 5: Establish a Closed Loop for Evaluation and Improvement. Conduct process audits on key processes according to Clause 9.2, and use process performance trends as inputs for management reviews according to Clause 9.3. For processes that do not meet expectations or where the environment has changed, plan changes according to item (g) and implement improvements according to item (h) and Chapter 10, forming a continuous cycle of "identification → operation → evaluation → change → improvement."

4. Auditor's Perspective

1. Common Nonconformity: Process List Out of Sync with Reality. A manufacturing company listed 12 processes in its documents, but during on-site audits, it was discovered that activities such as after-sales repair and outsourced electroplating were not included in the list and had no corresponding control arrangements, directly violating the requirement in Clause 4.4.1 to "determine the required processes."
2. Common Nonconformity: Incomplete Turtle Diagram Elements and No Evaluation. Process descriptions only included inputs, outputs, and responsible persons, leaving criteria, resources, and performance indicators blank; or defined indicators but never measured, with no evaluation records available, touching the red line of item (g) in Clause 4.4.1 to "evaluate these processes."
3. Common Misunderstanding: Confusing "Maintain" and "Retain." Process documents were uncontrolled, and on-site versions were chaotic, or operational records were not documented. When auditors asked to verify that "processes are implemented as planned," the company had nothing to show, leading to a breach of item (b) in Clause 4.4.2.
4. Common Misunderstanding: Unclear Interface Responsibilities. A company did not define incoming inspection criteria and responsibility interfaces between procurement and production. When incoming materials were defective, procurement and production blamed each other, exposing the fact that item (b) "sequence and interactions" were not truly determined.
5. Frequent Questions:
   • "Please explain in five minutes what processes your company has, who is responsible for them, and how they are interconnected."
   • "What has been the performance trend of a certain process over the past three months, and what measures were taken when it did not meet standards?" If the responsible person stammers or only the system engineer speaks, it often indicates that Clause 4.4 is still at the document level and not integrated into business operations.

5. Self-Inspection Checklist

• Have you formed a comprehensive process list covering all products, services, and locations (including outsourced and temporary sites), and distinguished between customer-oriented, support, and management processes?
• Do key processes have turtle diagrams or equivalent process descriptions with all six elements (inputs, outputs, criteria, resources, responsibilities, and indicators) fully detailed and specific?
• Does the process interaction diagram or matrix clearly define interface responsibilities, and are there any processes without a responsible person or overlapping responsibilities?
• Have measurable performance indicators been defined for each process, and are they regularly measured, analyzed, and recorded in accordance with Clause 9.1?
• Do process performance results truly drive changes and improvements (items g and h), rather than being "measured but not changed, changed but not verified"?

Clear processes ensure a stable system

Knowledge code: 2.1.1

Version: v20260904

Author: QTank QTank is dedicated to providing systematic professional knowledge, methodologies, and practical tools to quality management practitioners, helping companies continuously enhance their quality capabilities.