There's a lot of mythology around ISO 9001. Some believe it requires mountains of documentation. Others think it mandates specific processes or organisational structures. Most of this is wrong — and these misconceptions put many businesses off pursuing a certification that could genuinely improve how they operate.
What ISO 9001 actually requires
ISO 9001 requires you to establish a quality management system that is appropriate for your organisation. That means:
- Understanding the context of your organisation — internal and external factors that affect your ability to deliver quality products or services
- Identifying interested parties (customers, regulators, suppliers) and understanding their requirements
- Defining your quality policy and objectives
- Planning and controlling your operational processes
- Monitoring and measuring performance against objectives
- Continually improving the system
What ISO 9001 does not require
The standard does not prescribe specific procedures, document formats, or organisational roles. It does not require a quality manual (though many organisations still find one useful). It does not require a dedicated Quality Manager — though someone needs to own the system.
The flexibility is intentional: a small manufacturer and a large engineering firm should both be able to achieve ISO 9001, but their systems will look completely different.
The documented information requirement
ISO 9001 requires you to maintain and retain "documented information" — but it's far less prescriptive than the old 2008 version. The standard specifies certain documents you must have, but the format, detail level, and medium are up to you. A lean, practical system is better than a bloated one nobody reads.
Ready to start your ISO 9001 journey? Book a free discovery call with Havaya.