ISO 9001:2015 requires organisations to:
Appropriate documented information needs to also be retained as evidence of competence.
It is necessary to apply these requirements to all personnel under the organisations control if they affect the organisations management system performance. This then will include contract / agency workers and any personnel undertaking outsourced work. In addition, the standard also requires records (documented information) to be retained as evidence of competence. IE: Not just training records.
A note on “…doing work under its control.” This should not be confused with subcontracted work or services. Lets look at a couple of examples to clarify:
Back to the requirements of Clause 7.2 on Competence. The Plan, Do, Check, Act process can again be employed here:
P1. Determine what competencies are needed.
(This might, for example in a larger organisation, comprise of a Business Resources Plan, compiled from the output of Personal Development Planning meetings, Succession Plans and departmental level Training Needs Analysis activities Note: Smaller organisations may have a more informal approach, but note the requirement for records (documented information) to be retailed.
Regular scheduled reviews should be augmented by the outputs of the planning process for specific activities. EG: New markets being exploited, orders or contract is being tendered, expansions, acquisitions, and projects. New products or processes being introduced or general / sector specific, economic factors. (See also article 6.3 – Planning for change.)
P2. Determine what (if any) additional competencies are required to be acquired.
(Many organisations use departmental Skills Matrixes to represent required skills and competencies vs current resource levels.)
P3. Determine how any additional competency requirements can best be obtained. Factors may include current resource levels, succession plans, budgetary constraints and crucially, project timelines.
(EG: External or internal education of personnel in the classroom or "on the job" training. Recruitment or contracting of personnel who already possess the required skills and competencies, secondment, or re-assignment of existing personnel to different tasks or projects can offer solutions if timing is a factor.)
Mentor, train, reassign, contract or recruit personnel in line with planned arrangement.
Evaluate the effectiveness of actions taken on the required competency of individuals – including agency, contract and outsourced labour.
Post training feedback reports from candidates are sometimes used as a quick check, but better insights can be achieved via methods such as Performance Reviews, Personal Development Plan achievements, results of internal audits, process performance monitors, project plan deliverables and business metrics for example.
Document new competency levels / determine further actions if necessary. IE: If adequate competencies have not yet been achieved, repeat a new PDCA cycle.
Evidence (documented information) may be requested to demonstrate compliance. IE Actions taken to determine competency needs and to address any gaps, but also crucially, to determine the effectiveness of actions taken. IE: not just training records!
As this clause also covers the competence of person(s) doing work "under the organisations control" to be addressed, records relating to agency or contract workers may be specifically targeted as these are often a weak point.
Note: If applicable to the business, outsourced human resources may also be reviewed under the requirements of a separate clause for externally provided processes, products and services. (See article 8.4.)
This article is the property of David Barker Consulting © and is free for you to use. If you wish to reproduce elsewhere, please be so kind as to ask permission first and credit me as your source. If you need any further assistance, feel free to use my contacts page to get in touch and let me know how I can help!
David Barker CQP MCQI