In-Depth Interpretation of ISO9001 Clause (13) | 7.2 Competence: From Training Records to Competence Evidence Chain
1. Key Points of the Clause
The four paragraphs of Clause 7.2 "Competence" in ISO 9001:2015 can be summarized as four actions:
a) Determine the necessary competence of personnel under the organization's control whose work affects the performance and effectiveness of the quality management system (QMS);
b) Ensure that these personnel are competent based on appropriate education, training, or experience;
c) When applicable, take actions to acquire the required competence and evaluate the effectiveness of these actions;
d) Maintain appropriate documented information as evidence of competence.
The standard uses three key terms: determine, ensure, and evaluate. The focus is on "actual competence of personnel" rather than "the organization has arranged training." This clause is the second half of the same issue addressed in Clause 7.1.2 (Personnel): 7.1.2 is responsible for "staffing," while 7.2 is responsible for "competence."
2. Interpretation of Intent
The standard places Clause 7.2 in the "Support" section, making the logic clear: processes rely on people to operate, and if people lack the necessary competence, all the planning—4.4 processes, 6.2 objectives, 7.1 resources—can only remain on paper.
The true intent of the clause has three layers:
The scope of responsibility is "work that affects system performance," not all personnel. The standard does not require a competence profile for every employee in the company but rather a tiered approach based on "the impact on quality outcomes": key positions must prove competence, while auxiliary positions can receive basic notifications. Many companies spread resources evenly across all sign-in sheets, leaving key positions without evidence, which is putting the cart before the horse.
The sources of competence are not limited to training. The clause mentions "education, training, or experience," indicating that external hiring, mentorship, job rotation, qualification certification, and specialized project experience can all serve as pathways to competence. A common misconception in companies is to narrow "competence" down to "having attended a course," leading to a degradation of the competence system into a mere training sign-in system.
The requirement to evaluate the effectiveness of measures. "Training completed" does not equal "able to perform." Effectiveness evaluation must focus on behavior or results: the ability to complete tasks, the ability to do them correctly, and the ability to make correct judgments in abnormal situations. This is the easiest area for Clause 7.2 to lose points and the most likely to be questioned by auditors.
3. Implementation Practices
Step 1: Develop a job competence list and impact grading. Using the process list as input, mark each position: which outputs of the position affect product/service conformity, customer satisfaction, or system effectiveness. Divide positions into three levels: "key competence positions—important competence positions—basic notification positions," with different levels requiring different strengths of evidence.
Step 2: Write observable competence standards, not course catalogs. Break down job competencies into three categories: knowledge, skills, and judgment. Each item should be written as a verifiable behavioral description, such as "able to independently complete first article inspection and correctly determine release or hold," rather than "familiar with first article management." Competence standards serve as the yardstick for subsequent evaluations; without this yardstick, evaluations can only be based on impressions.
Step 3: Choose acquisition methods and leave process evidence. Training only addresses knowledge items; skills require hands-on mentoring and simulation exercises; judgment requires case study debriefs. For key positions, establish a "competence matrix" (position × personnel × level) using codes or colors to indicate "independent," "mentored," "supervised," or "unauthorized," and link this directly to job authorization.
Step 4: Design tiered evaluation methods. Knowledge items can be evaluated through written tests or oral questioning; skills through practical assessments and result judgments; judgment through case study questions or on-site anomaly handling tracking. Evaluations must have clear pass criteria and qualified evaluators, who cannot evaluate themselves.
Step 5: Form and dynamically maintain a competence evidence chain. A complete competence evidence chain typically consists of four layers: job competence standards → acquisition records (training, mentoring, certification, experience) → effectiveness evaluation records → job authorization or position qualification confirmation. Only when all four layers are present is it called an "evidence chain"; the first two layers alone are just "training records." Competence should be re-verified when personnel transfer, process changes, new equipment is introduced, or new products are launched.
4. Auditor's Perspective
Common Finding 1: Only sign-in sheets and test papers, no effectiveness evaluation. Auditors will ask, "How do you prove that he really knows how to do it after the training?" If no evaluation method can be provided, this is typically recorded as a nonconformity under 7.2 c). This issue is most common in small and medium-sized enterprises.
Common Finding 2: Competence lists are disconnected from actual job responsibilities. The competence requirements are copied from templates and state "understand ISO9001," which is irrelevant to the actual judgment tasks of the position. When auditors randomly question operators about their job competence requirements, they often cannot answer or their responses do not match the documented requirements.
Common Finding 3: Key positions lack authorization or have expired authorization. Special processes, inspection, internal audit, and calibration positions have changed personnel, but the authorization lists have not been updated. New employees sign off on inspection records without being evaluated for competence. Auditors will trace back the qualifications of those who sign the records, and the chain often breaks.
Common Finding 4, a typical misconception: equating "competence" with education, certificates, or years of service. Long years of service do not necessarily mean competence in new processes after changes, and having a certificate does not mean the person has worked on the company's equipment. Auditors focus on whether there is evidence of competence for the current position.
Common Finding 5: Missing competence evidence for internal auditors. Internal audits conducted by personnel who have not received internal audit training or whose competence has not been evaluated are considered nonconformities related to both 9.2 and 7.2, and are often overlooked.
5. Self-Inspection Checklist
□ 1. Have positions been tiered based on "impact on system performance," and has a list of key competence positions been output?
□ 2. Do key positions have observable and verifiable competence standards (behavioral descriptions)?
□ 3. Do competence acquisition measures (training, mentoring, job rotation, certification) cover knowledge, skills, and judgment, rather than just classroom training?
□ 4. Have the effectiveness of competence acquisition measures been evaluated, with clear criteria and qualified evaluators?
□ 5. Is the competence matrix linked to job authorization and promptly re-verified during transfers, process changes, and product changes?
□ 6. Do the competence evidence chains for internal auditors, inspectors, and special process personnel include all four layers?
Competence requires evidence, not just sign-in
Knowledge code: 2.1.1
Version: v20260911
Author: QTank QTank is dedicated to providing systematic professional knowledge, methodologies, and practical tools for quality management practitioners, helping companies continuously improve their quality capabilities.