A manufacturing plant near Pune clears its ISO 9001 recertification audit on the shop floor, then loses points in the HR office. The auditor asks for evidence that a machine operator was trained before being cleared to run a line. The training happened. Nobody wrote it down. That gap, repeated across a workforce, is where quality certification quietly turns into an HR problem.
ISO 9001 is the world’s most widely held quality management standard, and India carries a large share of it. The 2023 ISO Survey counted 57,658 valid ISO 9001 certificates in India, placing the country third globally behind China and Italy, out of 837,052 worldwide.
Behind most of those certificates sits an HR team that owns a set of clauses it may not have read closely. Understanding which parts of the standard land on the people function, and what an auditor actually looks for, is the difference between a clean audit and a scramble.
What ISO 9001 Requires From HR
ISO 9001 treats HR as the owner of the workforce that makes quality happen, so the standard asks the people function to prove its employees are competent, aware of their role, and documented. The requirements sit mainly in Clause 7, “Support,” and they are less about hiring philosophy and more about evidence. An auditor does not want to hear that your people are good. They want the paper trail that shows how you know.
The clauses that carry the HR load turn familiar people activities into documented obligations, and they cluster in one part of the standard.
| Clause | Title | What HR Has To Show |
| 7.1.2 | People | The organisation has determined and provided the people needed to run its processes |
| 7.2 | Competence | Required competence is defined per role, and each person meets it through education, training, or experience, with records retained |
| 7.3 | Awareness | Employees know the quality policy, their contribution to it, and the cost of not conforming |
| 7.5 | Documented Information | Training records, job descriptions, and competence evidence are controlled, current, and retrievable |
The ISO 9001:2015 standard frames Clause 7.2 plainly: the organisation must determine the necessary competence of people whose work affects quality, ensure they have it, and “retain appropriate documented information as evidence of competence.” That last phrase is where HR earns or loses the audit. Competence without a record is, for audit purposes, competence that did not happen.
Competence And The Records Auditors Actually Open
The single most common HR-related finding in ISO 9001 audits is a competence gap that exists on paper, not in reality. People are trained. Skills are real. The evidence linking the two is missing, incomplete, or three roles out of date. The ISO Technical Committee’s own Auditing Practices Group guidance tells auditors to look for a specific chain of records, and HR should build backwards from that list.
The Competence Chain
An auditor sampling a role wants to trace it end to end. So the records need to connect rather than sit in separate folders that never reference each other.
- A job description or competence matrix that names the skills, qualifications, and experience the role requires
- Evidence the specific person meets those requirements, whether a degree, a certificate, or logged on-the-job experience
- Where a gap existed, a training plan and a training record closing it
- An effectiveness check showing the training worked, going beyond proof that it was delivered
That last point trips up more teams than any other. Attendance sheets prove people sat in a room. They do not prove competence was acquired. A post-training assessment, a supervisor sign-off, or a monitored trial period is what closes the loop the standard asks for.
This plays out at scale in Indian IT services. When TCS or Infosys deploy thousands of engineers onto client projects, the competence record stops being a nicety and becomes contractual proof to the client that certified people are doing certified work. The training-to-deployment audit trail is the product.
HR teams in these firms run competency frameworks and learning management systems precisely because a missing record can jeopardise a client relationship well beyond the risk to an ISO badge.
Where Onboarding Becomes Audit Evidence
Induction is the first place awareness and competence get created, which makes it the first place they can be documented well or badly. A structured induction that captures who was trained, on what, and to what standard turns routine onboarding into audit-ready evidence. A casual one leaves HR reconstructing history the week before an audit. Building feedback and verification into onboarding does double duty here, improving the new-hire experience and generating the records Clause 7.2 wants.
Awareness Is An HR Deliverable, Well Beyond A Wall Poster
Clause 7.3 requires that employees are aware of the quality policy, their contribution to it, and the consequences of nonconformance, and it places proof of that awareness on HR. This is the clause organisations most often reduce to a laminated wall poster. Auditors have seen the poster. They test whether a warehouse assistant or a line supervisor can explain, in their own words, how their work connects to quality outcomes.
Awareness gets built through the channels HR already owns: induction, internal communication, team briefings, and refresher sessions. Evidence includes induction records that cover the quality policy, communication logs, and, increasingly, completion data from a learning platform. An auditor may simply walk the floor and ask people questions. If the answers are blank, the finding lands on HR regardless of how good the training deck looked.
There is a governance dimension too. As Indian workplaces formalise everything from data handling to AI use through written policy, the muscle for translating a policy into genuine employee understanding is the same muscle Clause 7.3 tests. HR that does this well for one standard tends to do it well across all of them.
Fitting Quality Records Into Indian HR Compliance
ISO 9001’s documentation demands do not sit in isolation. They overlap with statutory record-keeping Indian HR already maintains, and the smart move is to design one system that serves both. Under the Apprentices Act, 1961, and the emerging Labour Codes, companies already must keep training and workforce records. ISO 9001 asks for a quality-focused slice of largely the same information.
The overlap is real but not total. Statutory registers under EPFO or the Factories Act, 1948 answer to a labour inspector. ISO 9001 records answer to a certification auditor. A quick map helps HR avoid maintaining two parallel systems:
| Record | Serves Statutory Need | Serves ISO 9001 |
| Training register | Apprentices Act, skilling norms | Clause 7.2 competence evidence |
| Job descriptions with skill requirements | Internal, contractual | Clause 7.1.2 and 7.2 |
| Induction and orientation records | Onboarding, statutory inductions | Clause 7.3 awareness |
| Competency assessment outcomes | Performance and appraisal cycles | Clause 7.2 effectiveness check |
Performance management is the natural home for the effectiveness check the standard wants. When a review cycle already captures whether someone can do the job to standard, that same data feeds the competence evidence an auditor samples. Teams that run structured performance and improvement processes generate ISO-usable records as a byproduct, rather than building a separate quality file nobody maintains.
Building An Audit-Ready HR Function
HR teams that pass ISO 9001 audits cleanly treat the standard as a design brief for their records, not a checklist to satisfy once every three years. The goal is a people function where competence, awareness, and documentation flow from normal operations, so nothing has to be manufactured before an audit. A CHRO steering this is really building an integrated evidence system, and the skills that role demands increasingly include quality-system fluency alongside the people-leadership basics.
A few principles separate the teams that scramble from the teams that stay ready:
- Competence gets defined per role before the hire, so the standard is set when the record is created rather than reverse-engineered later
- Training effectiveness gets recorded alongside its delivery, because effectiveness is the evidence auditors most often find missing
- One workforce record system serves both statutory and ISO needs, so two parallel files never drift apart
- Quality awareness runs through internal communication as a standing feature, so any employee can answer an auditor without rehearsal
None of this requires a dedicated quality-management hire inside HR. It requires HR processes designed so their outputs are already audit evidence.
In The End…
There is a test worth running this week, well before the recertification calendar exposes a gap. The exercise is to pick three job roles at random and trace each one through the full competence chain: the role’s defined skill requirements, the specific person’s evidence of meeting them, any training that closed a gap, and proof the training worked. A missing link on even one role means the finding surfaces on your terms, ahead of the auditor.
That single exercise, repeated across a sample of roles, tells you exactly where your ISO 9001 exposure sits inside HR. The records are worth fixing now, while it is a filing task rather than an audit nonconformity. Quality certification lives or dies on evidence, and for a people function, that evidence is the whole job.
FAQs
Which ISO 9001 clauses apply to HR?
The HR-relevant clauses sit in Clause 7, Support. Clause 7.1.2 (People) covers providing the people needed to run processes, 7.2 (Competence) covers defined competence per role with retained records, 7.3 (Awareness) covers employees knowing the quality policy and their role in it, and 7.5 (Documented Information) covers keeping training records and job descriptions controlled and retrievable.
What does ISO 9001 Clause 7.2 require from HR?
It asks HR to define the competence needed for each role affecting quality, ensure each person meets it through education, training, or experience, and retain documented evidence of it. Competence without a record counts, for audit purposes, as competence that did not happen.
What is the competence chain auditors trace?
Auditors trace a role end to end: a job description or competence matrix naming required skills, evidence the person meets them, a training plan and record where a gap existed, and an effectiveness check proving the training worked. Attendance sheets alone do not close the loop.
How does ISO 9001 overlap with Indian HR statutory records?
Training registers, job descriptions, induction records, and competency assessments kept under the Apprentices Act 1961, the Factories Act 1948, and the Labour Codes largely serve ISO 9001 too. One workforce record system can serve both statutory and certification needs.
How many ISO 9001 certificates does India hold?
The 2023 ISO Survey counted 57,658 valid ISO 9001 certificates in India, third globally behind China and Italy, out of 837,052 worldwide.
