Maximizing Infrastructure and Enterprise Value: The Strategic Imperative of ISO 55001 in Asset Management

In asset-intensive industries, physical assets, ranging from high-speed railway tracks and power distribution grids to massive petrochemical refining units and municipal water networks, represent the backbone of operational capability and capital expenditure. Historically, organizations viewed asset management through a narrow, siloed lens of treating maintenance as a cost center, capital planning was dictated by short-term budgeting cycles, and risk management was reactive.

The advent of ISO 55001, the international standard for Asset Management Systems (AMS), fundamentally transformed this paradigm. ISO 55001 provides a globally recognized framework that enables organizations to derive maximum value from their assets, balance financial costs against operational risks, and align day-to-day engineering and operational decisions with overarching corporate objectives. For global engineering and industrial leaders, ISO 55001 is not merely a mechanism for compliance; it is a vital competitive differentiator in delivering complex infrastructure and industrial projects across diverse markets.

Introduction: The Shift from Maintenance to Value Realization:

Therefore, the question as to why companies should adopt ISO 55001? Core drivers and business benefits of adopting an asset management system aligned with ISO 55001 delivers profound operational, financial, and strategic advantages. The standard steers companies away from firefighting and toward systematic value creation by:

  • Optimized Financial Performance and Capital Allocation: Physical assets require heavy capital investment. ISO 55001 helps organizations optimize total cost of ownership (TCO) by evaluating assets across their entire lifecycle, from creation and acquisition to utilization, maintenance, and ultimate disposal.
  • Data-Driven Decision Making: By establishing rigid criteria for data quality, traceability, and information management, the standard prevents costly decisions based on intuition or fragmented spreadsheets.
  • Proactive Risk and Vulnerability Management: Rather than responding to catastrophic equipment failures, ISO 55001 requires systematic risk identification, ensuring that operational hazards, environmental shifts, and obsolescence are addressed proactively.
  • Stakeholder and Regulatory Confidence: Implementation of the standard gives an organization the best systematic approach to procure, plan, design where needed, and provide assets. Certification provides independent validation that an organization exercises elite governance, reassuring investors, regulatory bodies, and public stakeholders that assets are managed safely and sustainably.

Salient Features and Clause-by-Clause Justifications:

ISO 55001 is built on the Annex SL high-level structure, aligning seamlessly with other management standards like ISO 9001 (Quality) and ISO 14001 (Environment). Below is an exploration of the key clauses and how they drive organizational excellence.

Clause 4: Context of the Organization

  • The Mandate: An organization must define the internal and external issues affecting its asset management system, understand stakeholder expectations, and account for emerging macro-factors such as climate change and regulatory shifts.
  • Justification: For example, for an aircraft fleet, a power generation plant, or a rail engineering consultancy, understanding context means recognizing that regional environmental factors (heavy coastal rainfall, seismic risks, corrosive atmospheres, and temperature swings) directly impact asset deterioration rates and dictate maintenance parameters.

Clause 5: Leadership and Commitment

  • The Mandate: Top management must demonstrate active leadership by establishing the asset management policy, ensuring integration with business processes, and ensuring resources are available.
  • Justification: Asset management fails when left exclusively to maintenance technicians and plant floor engineers. Clause 5 ensures executive alignment, tying asset health directly to financial viability and corporate reputation.

Clause 6: Planning (Featuring the Strategic Asset Management Plan (SAMP) and the Management Role):

  • The Mandate: Organizations must address risks and opportunities and establish a SAMP. The SAMP serves as the crucial “line of sight” linking high-level corporate goals to day-to-day asset tasks.
  • The Executive and Management Role in Creating the SAMP: Leadership cannot simply delegate the SAMP to lower-level planners (clause 5.1a). Top management and operational leadership must actively drive its creation by defining the organization’s long-term financial risk appetite, establishing organizational objectives, and allocating cross-functional resources. Management bridges the gap between boardroom financial targets (such as Return on Capital Employed) and front-line maintenance strategies, ensuring that the SAMP realistically reflects both commercial pressures and technical constraints.
  • Justification: This is often considered the heart of the standard. It prevents short-term budget cuts from gutting long-term preventative maintenance schedules, safeguarding infrastructure longevity.

Clause 7: Support (Information, Data, and Knowledge Management)

  • The Mandate: Requires robust processes for resource allocation, competence, communication, and notably, data, information, and knowledge management (Clauses 7.6 and 7.7).
  • Justification: For example, modern rail networks, smart electrical grids, and automated manufacturing plants generate massive telemetry streams. Clause 7 ensures that asset registries, financial data, and historical maintenance logs are accurate, traceable, and institutionalized rather than locked in individual employee silos.

Clause 8: Operation (Life Cycle Management and Outsourcing):

  • The Mandate: Operational planning and control must explicitly govern the asset life cycle, operational execution, management of change, and the control of outsourced activities.
  • Justification: Complex industrial projects routinely involve multi-tier supply chains and external contractors. Clause 8.3 ensures that third-party vendors adhere to the same rigorous asset safety and quality thresholds as the parent organization.

Clause 9 & 10: Performance Evaluation and Improvement (Predictive Action)

  • The Mandate: Organizations must monitor, measure, analyze, and evaluate asset performance through internal audits and management reviews, transitioning from reactive fixes to Predictive Action (Clause 10.3).
  • Justification: Rather than waiting, for example, for a rail track circuit to fail, a power transformer to blow, or a refinery pump to seize, predictive action leverages condition-monitoring and IoT (Internet of Things) data to intervene at the optimal economic and safety tipping point.

Practical Application: ISO 55001 Across Diverse Engineering and Industrial Sectors:

The true power of ISO 55001 is best illustrated across a spectrum of asset-intensive industries where safety, asset density, and capital intensity are exceptionally high.

A. Railway and Transit Systems

  • Track Maintenance Scheduling: Instead of relying purely on calendar-based inspections, an ISO 55001 framework integrates automated track-recording car data with dynamic load profiles. Under Clause 8 (Operation) and Clause 10.3 (Predictive Action), maintenance is triggered precisely when degradation trends approach risk thresholds, minimizing traffic disruptions.
  • Rolling Stock Lifecycle Economics: Rail cars have lifespans spanning decades. Using the SAMP (Clause 6.2.1), transit operators model mid-life overhauls against complete replacement costs, ensuring that capital expenditure (CapEx) and operational expenditure (OpEx) are balanced optimally across the 30-to-40-year asset horizon.

B. Electric Power Generation and Distribution

  • Grid Resiliency and Substation Management: Power utilities manage billions of dollars in transformers, switchgear, and transmission lines. By utilizing ISO 55001, utilities balance the risk of aging grid infrastructure against capital constraints.
  • Vegetation Management and Outage Prevention: Under Clause 6 (Planning) and Clause 8 (Operation), utilities utilize risk-based asset strategies to prioritize line-clearing and pole replacements in high-wildfire-risk zones, drastically reducing catastrophic failure probabilities and regulatory liabilities.

C. Oil, Gas, and Petrochemical Processing

  • Integrity Operating Windows (IOWs): In refineries and processing plants, pressure vessels, piping circuits, and rotating machinery operate under extreme temperatures and pressures. Planning per ISO 55001 ensures that corrosion monitoring data is tied directly to operational limits, preventing leaks and unscheduled shutdowns.
  • Decommissioning and Asset Retirement: The standard governs the entire lifecycle, ensuring that end-of-life abandonment, environmental remediation, and capital reinvestment provisions are budgeted decades before a facility shuts down.

D. Municipal Water and Wastewater Treatment

  • Pumping Station Reliability: Water authorities manage vast underground pipe networks and treatment facilities where failure results in public health crises. ISO 55001 helps municipalities prioritize pipe replacement schedules based on soil corrosivity, age, and consequence of failure, optimizing taxpayer funds.

Industry Spotlight: Engineering and Infrastructure Delivery:

As global engineering and industrial powerhouses deliver complex infrastructure, they maintain a vital operational footprint across continents, spearheading major transportation, energy, and urban development initiatives.

Why ISO 55001 Matters for Engineering and Asset Operations:

  1. Bridging Design, Build, and Long-Term Operations: Major engineering firms frequently operate under progressive Design-Build-Finance-Operate-Maintain (DBFOM) delivery models. By embedding ISO 55001 principles into their engineering hubs, teams ensure that the assets they design and construct today are optimized for maintainability and total lifecycle cost decades into the future.
  2. Navigating Environmental Realities: Operating across variable geographical regions exposes infrastructure to unique challenges—ranging from corrosive coastal marine environments to severe freeze-thaw cycles in mountain corridors. Utilizing Clause 4 (Context of the Organization) ensures that local climate risks are formally integrated into asset risk registers from day one.
  3. Delivering Value to Asset Owners and Public Authorities: Municipal, provincial, and private asset owners increasingly mandate high standards of asset governance. By applying ISO 55001 frameworks, engineering teams provide clients with verifiable proof that their capital investments will achieve maximum availability, safety, and fiscal sustainability over generations.

Conclusion

ISO 55001 elevates asset management from a back-office maintenance function to a boardroom-level strategic advantage. By enforcing structural rigor across the entire asset lifecycle—from the contextual risk evaluations of Clause 4 and executive-driven SAMP creation under Clause 6 to the predictive actions of Clause 10—organizations protect their bottom line and secure public safety. Embracing this standard ensures that the complex infrastructure and industrial systems built today remain resilient, efficient, and valuable for decades to come.

__

About the Author

Inderjit (IJ) Arora, Ph.D., is the Chairman of QMII. He serves as a team leader for consulting, advising, auditing, and training regarding management systems. He has conducted many courses for the United States Coast Guard and is a popular speaker at several universities and forums on management systems. Arora is a Master Mariner who holds a Ph.D., a master’s degree, an MBA, and has a 35-year record of achievement in the military, mercantile marine, and civilian industry.

ISO 13485 Internal Audits: Preparing Medical Device Manufacturers for MDSAP

Why ISO 13485 Internal Audits Matter for MDSAP

For a medical device manufacturer, an internal audit is not simply a requirement to be completed before the certification auditor arrives, but if done well, it is the organization’s own independent test of whether the quality management system can consistently protect the patient, satisfy regulatory requirements and provide reliable evidence of control. That purpose becomes even more important when the organization is preparing for the Medical Device Single Audit Program (MDSAP).

ISO 13485 provides the quality management system foundation. MDSAP uses that foundation but applies it through a regulatory audit model that incorporates the applicable requirements of participating jurisdictions. A manufacturer that conducts only a clause-by-clause conformity audit may therefore be ISO 13485 compliant on paper and still be poorly prepared for MDSAP. The internal audit program must test the connections among processes, products, risks, records and regulatory obligations. ISO 13485 and MDSAP are therefore related, but not identical.

ISO 13485 Internal Audit Requirements and MDSAP

ISO 13485 is an international quality management system standard written specifically for medical devices and for regulatory purposes. Clause 8.2.4 requires the organization to conduct internal audits at planned intervals to determine whether the quality management system conforms to planned arrangements, the standard, and the organization’s own requirements, and whether it is effectively implemented and maintained. The audit program is to consider the status and importance of processes and areas, as well as the results of previous audits. Auditor objectivity, records, timely correction and corrective action, and verification of action taken are essential parts of the requirement.

MDSAP is not another management system standard. It is a structured audit approach under which a recognized auditing organization may conduct one regulatory audit that addresses the relevant requirements of the participating regulatory authorities for example, Australia, Brazil, Canada, Japan and the United States. A single audit does not mean one universal set of regulations. It means that applicable country-specific requirements are examined through one coordinated audit model.

This distinction matters. An ISO 13485 internal audit may ask, ‘Does the complaint process meet Clause 8.2.2?’ An MDSAP-oriented internal audit must also ask whether the complaint was assessed against reportability criteria in every market where the device is supplied, whether the decision was made within the required time, whether any advisory notice or field action was properly controlled, and whether the information entered the risk-management and CAPA processes. Therefore, the intend is to think in audit trails, not isolated clauses.

Follow Audit Trails, Not Isolated Clauses

The MDSAP audit model is process based and follows defined linkages. Its major process areas include management, device Marketing authorization and facility registration, measurement, analysis and continual improvement, medical device adverse events and advisory notices reporting It also includes design and development, production and service controls and purchasing. The audit is designed to follow evidence from one process into another. That approach should influence the manufacturer’s internal audit program. Instead of auditing document control on Monday, purchasing on Tuesday and complaints on Wednesday as unrelated subjects, select representative devices, changes, suppliers, complaints or nonconformities and trace them through the system. For example, a complaint involving a failed component can provide an audit trail through complaint intake, evaluation and investigation (Clause 8.2.2); regulatory reporting and advisory-notice decisions (clause 8.2.3 and applicable national requirements); analysis of data and detection of adverse trends (clause 8.4); risk-management review and design or process implications (clauses 7.1 and 7.3); supplier controls and purchasing information (clause 7.4); and correction, CAPA and effectiveness review (clauses 8.3, 8.5.2 and 8.5.3).

Build a Risk-Based ISO 13485 Internal Audit Program

This is a much stronger test of effectiveness. It also reflects the way regulatory auditors think. A weakness rarely remains confined to one procedure. A missed complaint trend may reveal problems in data analysis, risk management, supplier control and management oversight at the same time. The idea is to build the audit program around risk and regulatory importance. Clause 8.2.4 expects the audit program to consider the status and importance of the processes and areas to be audited, and previous audit results. This is a clear basis for risk-based planning. ‘All clauses once a year’ may be easy to schedule, but it is not necessarily an effective audit program.

Processes with a direct effect on device safety or regulatory compliance should receive greater depth or frequency. These may include sterile barriers, software validation, special processes, design transfer, complaint handling, adverse-event reporting, supplier controls, traceability, product release and CAPA. The organization should also consider new products, transfers, acquisitions, major changes, recurring nonconformities, supplier deterioration, adverse trends and prior external-audit findings.

Risk-based does not mean that low-risk processes are ignored. It means that audit resources are applied intelligently. The program should document why certain processes are audited more frequently, why particular products or sites were sampled, and how previous results influenced the next cycle. An MDSAP auditor should be able to see that the internal audit program responds to the actual risk profile of the business.

Include Applicable Regulatory Requirements

The need is to add the applicable regulatory requirements. ISO 13485 repeatedly refers to applicable regulatory requirements. An internal audit cannot verify conformity unless the auditors know what those requirements are. The organization therefore needs a maintained regulatory matrix or equivalent method that identifies the markets served, device classifications, licenses or registrations, reporting obligations, record-retention periods, language or labeling requirements, and responsible functions.

This matrix should be used when preparing audit criteria and sampling records. If a device is marketed in Canada, Brazil and the United States, the auditor should not stop after confirming that an ISO procedure exists. The auditor should verify that the current authorizations are in place, changes have been assessed for notification or approval, establishment information remains accurate, and reportable events have been handled under the applicable jurisdictional rules.

FDA QMSR and ISO 13485 Alignment

For U.S. manufacturers, the regulatory context changed materially on February 2, 2026, when FDA’s Quality Management System Regulation (QMSR) became effective. QMSR incorporates ISO 13485:2016 by reference, with additional FDA requirements and the FD&C Act controlling where a conflict exists. FDA also replaced the former QSIT inspection approach with its updated inspection process. This alignment makes a mature ISO 13485 system more valuable, but it does not eliminate U.S.-specific obligations. Internal auditors must understand both the incorporated standard and the regulatory additions.

Begin the MDSAP Audit with Management Responsibility

Top management auditing should be the start of the audit. That way down the line at workplaces this can be verified. Therefore, audit management responsibility first. MDSAP places strong emphasis on management responsibility because leadership provides the resources and decisions that hold the system together. Internal audits should test more than whether management-review minutes exist. Under clauses 5.1 and 5.6, auditors should evaluate whether top management receives meaningful information, acts on it and ensures the continuing suitability, adequacy and effectiveness of the system.

Useful trails include overdue CAPAs, complaint trends, supplier performance, audit findings, regulatory changes, product nonconformities and resource constraints. Was management given accurate information? Were decisions assigned, resourced and completed? Did management recognize a systemic issue before an external auditor did? Repeated problems accompanied by polished management-review minutes are evidence that the review may be ceremonial rather than effective.

Strengthen High-Value MDSAP Audit Trails

The spirit of the auditing clause from ISO 13485 seen with MDSAP implies strengthen the high-value audit trails to ensure:

  • Measurement, analysis and improvement: this process is often the best starting point because it shows whether the manufacturer learns from its own data. Audit complaint handling, internal audits, nonconforming product, data analysis and CAPA as one system. Challenge the rationale for investigation and reportability decisions. Select closed CAPAs and verify effectiveness using subsequent performance data—not merely evidence that a procedure was revised or training was completed.
  • Design and development: for devices subject to design controls, trace user needs into design inputs, outputs, verification, validation and transfer (Clause 7.3). Confirm that risk-management activities are integrated throughout development and that design changes are reviewed, verified or validated as appropriate, approved and assessed for regulatory impact. Include software, usability, cybersecurity and supplier-developed elements where applicable to the product.
  • Production and service controls: follow a released device from approved specifications through production, inspection, acceptance, identification, traceability, storage and distribution (Clauses 7.5 and 8.2.6). For processes whose output cannot be fully verified later, examine validation, revalidation triggers, equipment, personnel qualification and process monitoring. Ask whether acceptance evidence can be linked to the person, equipment, method and current specification used.
  • Purchasing and outsourced processes: clause 7.4 requires controls proportionate to the supplier’s effect on product quality. Internal auditors should test whether supplier classification drives selection, monitoring and reevaluation; whether purchasing information accurately states requirements; and whether changes are communicated and controlled. Outsourcing transfers work, not accountability. Sample critical suppliers and verify that poor performance leads to escalation, corrective action or reconsideration of approval status.
  • Adverse-event and advisory-notice reporting: this regulatory process deserves deliberate sampling. Begin with complaints, service reports, returns, literature, distributor communications or trend signals that could involve serious injury, malfunction or public-health risk. Verify the reportability assessment, decision date, rationale, submission evidence, follow-up and linkage to CAPA and risk management. A sound decision should be reproducible from the record without relying on the memory of one regulatory specialist.

Make Internal Audit Evidence MDSAP-Ready

Make internal audit evidence MDSAP-ready A credible audit file should tell the story of what was tested and what was concluded. It should contain the audit objective, scope, criteria, auditor independence, processes and locations covered, samples selected, evidence reviewed, findings, conclusions and follow-up. Vague statements such as ‘procedure reviewed—acceptable’ do not demonstrate audit depth.

The organization should also be careful not to confuse a document review with an audit. Procedures may be compliant while practice is not. Internal auditors need access to records, personnel, electronic systems and the workplace. They should observe activities, interview process owners, sample objective evidence and follow trails across departmental boundaries.

A Practical MDSAP Readiness Method

A practical MDSAP-readiness method ensures that a manufacturer can progressively strengthen its internal audit program through the following six actions:

·      Map the QMS processes to the MDSAP audit model and to the regulations of every market served.

·      Create a risk-based audit schedule using product risk, process importance, change, performance and previous results.

·      Train auditors in ISO 13485, the MDSAP process approach and the applicable jurisdictional requirements—not only in generic auditing technique.

·      Use end-to-end audit trails built around real devices, complaints, changes, suppliers and CAPAs.

·      Write findings against clear criteria and address systemic causes, not merely the isolated record sampled.

·      Verify correction, corrective action and effectiveness, then feed significant results into management review.

A useful final step is a focused readiness audit conducted in the expected MDSAP sequence. This should not be a staged performance in which employees memorize answers. It should be an honest stress test of the system, including incomplete records, adverse examples and older files. The objective is to discover weakness while the organization still has time to act.

Common MDSAP Audit Weaknesses to Avoid

Common weaknesses to avoid:

·      Auditing only against ISO 13485 and omitting country-specific regulatory criteria.

·      Using the same checklist every year regardless of changes, risks or past results.

·     Allowing auditors to audit their own work or areas for which they are directly responsible.

·      Reporting findings without enough objective evidence to support correction and root- cause analysis.

·      Closing CAPA on completion of tasks rather than demonstrated effectiveness.

·      Failing to connect complaints, adverse events, risk management, design changes and supplier action.

·      Treating management review as a presentation rather than a decision-making process.

Conclusion

In conclusion my thought is MDSAP readiness is not achieved by adding another checklist to the audit folder. It comes from using internal audits to test whether the entire management system works as an integrated regulatory system. ISO 13485 Clause 8.2.4 provides the mechanism; management commitment, competent auditors, risk-based planning and disciplined process trails give that mechanism value. The best internal audit is not the one that produces the fewest findings. It is the one that identifies weaknesses before they affect a patient, a customer or a regulatory authority. When internal audits follow the evidence across functions, challenge the effectiveness of controls and confirm jurisdiction-specific obligations, the manufacturer is not merely preparing for MDSAP. It is strengthening the system that MDSAP is intended to evaluate—and improving the assurance that safe and effective medical devices will consistently reach the people who depend on them.

__

About the Author:

Inderjit (IJ) Arora, Ph.D., is the Chairman of QMII. He serves as a team leader for consulting, advising, auditing, and training regarding management systems. He has conducted many courses for the United States Coast Guard and is a popular speaker at several universities and forums on management systems. Arora is a Master Mariner who holds a Ph.D., a master’s degree, an MBA, and has a 35-year record of achievement in the military, mercantile marine, and civilian industry.

Systematizing Government at all levels by using ISO 18091

The process-based management system approach gives any organization the best shot at systematically improving administration and addressing nonconformities, so the output of the administration is a confirming product as step one. The next step would be to continually improve the system and meet objectives. ISO 18091 (Quality management systems guidelines for the application of ISO 9001 in local government) is an international standard designed specifically to help local governments and municipal authorities implement effective quality management systems (QMS) based on ISO 9001. Using a standard which encompasses worldwide wisdom on the system approach as the basis of the system is better than reinventing the wheel every time.

The Technical committees for various standards (TC-176 for ISO 9001) bring to the table a lot of wisdom on which they frame these standards. ISO 18091:2019, the second edition, was reviewed and confirmed by ISO in 2024 and therefore remains current. It was prepared by ISO/TC 176, quality management and quality assurance. This is important because the guidance is connected directly to the accepted principles and requirements of ISO 9001 while recognizing that local government has responsibilities that are different from those of a commercial organization.

Government affects the citizen throughout life. Birth registration, education, public health, roads, water, sanitation, emergency services, licensing, land use and public safety are all delivered through processes. When these processes are left to personalities, informal practices or the priorities of the moment, results vary. A management system converts good intentions into defined responsibilities, controls, measures and opportunities for correction. It also helps preserve institutional knowledge when elected leaders or senior officials change.

The word systematizing should not be misunderstood as adding bureaucracy. The objective is to simplify and control the work so that it produces intended results. ISO 9001:2026, Clause 4.4, requires the organization to determine the processes needed for the QMS, their interactions, the criteria and methods for operation and control, the resources required, responsibilities, risks and opportunities, and the methods for evaluation and improvement. ISO 18091 explains how this process approach can be applied to public policy and municipal services.

Rather than creating a standalone set of requirements, ISO 18091 translates the core concepts, principles, and clauses of ISO 9001:2015 into terms, structures, and processes that directly address the public sector. The standard provides the core objectives for good administration particularly, citizen centric focus, reliability and transparency and alignment with UN (United Nations) SDGs (sustainable development goals) as follows:

  • Citizen-Centric Focus: Adapts the ISO 9001 concept of “customer satisfaction” into citizen satisfaction, focusing on key municipal responsibilities such as public safety, infrastructure, waste management, healthcare, and education.
  • Reliability & Transparency: Standardizes public administration processes to improve transparency, accountability, operational efficiency, and overall public trust (“Trusted Governance”).
  • Alignment with UN SDGs: Serves as a framework to implement, track, and measure progress toward the United Nations Sustainable Development Goals (SDGs) at the municipal level.

Citizen focus begins with understanding who the interested parties are and what they reasonably require. Clause 4.2 of ISO 9001 asks the organization to determine the relevant interested parties and their requirements. In a local government these parties extend beyond the person standing at a service counter. They include residents, visitors, businesses, employees, elected representatives, regulators, service contractors, vulnerable groups and future generations affected by present decisions. ISO 18091 helps the local government translate these different expectations into manageable processes and measurable public policy.

Leadership is central and Clause 5.1 requires top management to demonstrate leadership and commitment to the QMS. For local government this means that elected and appointed leaders cannot delegate the system to a quality coordinator and consider the work complete. Leaders must establish policy and objectives, provide resources, assign authority, review performance and act when results are not achieved. The system succeeds when it becomes the way the government manages, rather than a separate quality program maintained for an audit. Accountability remains with leaders and delegation of authority as per clause 5.3 would not mean leaders are not accountable.

Risk-based thinking also has direct public value. Clause 6.1 requires action on risks and opportunities. A municipality can therefore consider foreseeable interruptions and failures before they harm citizens: loss of drinking water, delayed permits, failure of waste collection, deterioration of roads, cyber incidents, extreme weather, contractor failure or loss of critical knowledge. Controls can then be proportionate to the consequence. The same analysis can identify opportunities such as digital services, shared resources, preventive maintenance and clearer communication with citizens.

A reliable system also distinguishes between correction and corrective action. If a citizen receives an incorrect permit, correcting the document solves the immediate problem. Clause 10.2 goes further by requiring the organization to react to the nonconformity, deal with its consequences, determine whether the cause could create the same or a similar failure elsewhere, implement needed action and review its effectiveness. This changes administration from repeated firefighting to prevention of recurrence.

The key Components and annexes of the standard include structured tools specifically tailored to municipal management. ISO 9001 remains the primary standard. ISO 18091 is not a sector specific standard in itself. It is a guideline enabling use of the ISO 9001 for governance. The standard provides:

  • Clause-by-Clause ISO 9001 Translation: Offers guidance on how each standard requirement (e.g., leadership, risk management, performance evaluation) applies to public policy and municipal administration.
  • Diagnostic Assessment Tool (Annex A): A self-assessment tool utilizing 39 key performance indicators across four broad policy categories:
    • Institutional development for good governance
    • Sustainable economic development
    • Social development
    • Sustainable environmental development
  • Integral Quality Management Processes (Annex B): Guidance on designing and maintaining processes that ensure reliable public service delivery.
  • Integral Citizen Observatories (Annex C): Guidelines for engaging citizens directly in monitoring public policy, fostering transparency and continuous improvement.
  • UN Agenda 2030 Alignment (Annex D): Maps local government management indicators directly to the 17 UN Sustainable Development Goals.

The clause-by-clause guidance covers the full management cycle: context in clause 4, leadership in clause 5, planning in clause 6, support in clause 7, operation in clause 8, performance evaluation in clause 9 and improvement in clause 10. This sequence is useful because it prevents a government from jumping directly to measurement without first defining its purpose, processes, responsibilities and controls. Measurement then becomes evidence for decisions rather than a collection of statistics with no clear use.

Annex A can provide the starting point. Its 39 indicators enable a local government to examine public policy as an integrated whole. The value lies less in declaring a score and more in identifying where conditions are unacceptable, where essential practices are only partly established and where results are being sustained. Priorities can then be based on evidence, citizen need and risk. Periodic reassessment provides a visible record of progress and exposes areas that remain dependent on temporary effort.

Annex B supports the process view. Services such as issuing a license or repairing a road are rarely the work of one department from beginning to end. They require inputs, decisions, resources, contractors, information and communication across organizational boundaries. Mapping these interactions helps identify delays, duplication, unclear handoffs and missing controls. It also allows objectives to be assigned to the complete service, not merely to the activity of an individual department.

Annex C recognizes that citizens should not be treated only as passive recipients of government output. An integral citizen observatory provides a structured way for citizens to observe public policy, examine evidence and contribute to accountability. Citizen participation becomes more useful when it is based on defined indicators and verified information. It can confirm where services are working and identify gaps that internal reporting may overlook.

Annex D connects the local indicators to the UN Sustainable Development Goals and to other assessment and management systems. This helps local government translate broad global commitments into local processes and measures. A goal such as clean water, sustainable communities or climate action becomes meaningful only when responsibility, resources, controls, measures and follow-up are established at the level where services are delivered.

The key difference in ISO 18091 from the primary standard ISO 9001 is the guidelines. ISO 9001 provides generic requirements for any organization, whereas ISO 18091 is a sector-specific guide. It does not add or alter ISO 9001’s fundamental requirements; rather, it bridges the gap between private-sector quality management language and the multi-stakeholder, public-policy realities of local government.

This distinction is important for certification. A local government may be assessed for conformity to ISO 9001, but ISO 18091 itself supplies guidance and does not create additional certifiable requirements. The guidance should therefore be used to make the ISO 9001 system relevant and effective, not as a checklist that produces another layer of documentation.

Clause 7 helps ensure that plans are supported by competent people, suitable infrastructure, organizational knowledge, communication and controlled documented information. In government, documented information provides continuity and transparency, but documentation should serve the process. A procedure that is not followed, a record that is not analyzed or a measure that does not support a decision adds little value. The necessary amount and form of documentation should depend on complexity, risk, competence and the need for accountability.

Clause 8 brings the discipline to service delivery. Requirements must be understood, changes controlled, external providers managed and nonconforming outputs identified. This is particularly relevant because many public services are delivered through contractors or partnerships. Outsourcing an activity does not outsource accountability. The local government must determine the controls needed to ensure that externally provided processes and services continue to meet requirements.

Clauses 9.1, 9.2 and 9.3 close the management loop through monitoring, internal audit and management review. Clause 9.1.2 addresses customer satisfaction; ISO 18091 places this in the context of citizens and other interested parties. Satisfaction surveys can contribute evidence, but they are not enough by themselves. Service times, complaints, recurrence of failures, infrastructure condition, regulatory compliance, access, cost and achievement of public objectives provide a fuller picture. Internal audit should test whether processes are implemented and effective, while management review should lead to decisions on improvement, resources and needed changes.

Implementation can begin on a manageable scale. The local government can define its context and interested parties, use Annex A for an initial diagnosis, select one or two high-impact services, map their processes, establish measures and responsibilities, and begin the cycle of audit, review and corrective action. Early projects should demonstrate that the system makes work clearer and services more reliable. Lessons can then be applied across other departments and levels of government.

The benefits are practical. Citizens receive more consistent services and clearer information. Employees understand responsibilities and handoffs. Leaders receive evidence on whether policies are producing intended results. Suppliers and contractors work within defined controls. Problems are recorded and their causes addressed. Objectives are linked to resources and reviewed. Transparency improves because processes, measures and decisions can be explained.

ISO 18091 can therefore help systematize government without attempting to standardize political choices or make every municipality identical. ISO 9001 itself does not require uniformity in the structure of quality management systems. Each government retains its mandate, priorities and local context. What becomes systematic is the method used to understand needs, plan services, manage risk, deliver outputs, evaluate results and improve.

The real test of good governance is not the number of procedures written or certificates displayed. It is whether the administration consistently fulfills requirements, corrects failures, learns from evidence and improves the results experienced by citizens. ISO 18091 provides a sound guideline for doing this. Used by leadership and team with purpose, it can make government more reliable, transparent and capable of sustaining improvement beyond changes in personalities and political terms.

__

About the Author:

Inderjit (IJ) Arora, Ph.D., is the Chairman of QMII. He serves as a team leader for consulting, advising, auditing, and training regarding management systems. He has conducted many courses for the United States Coast Guard and is a popular speaker at several universities and forums on management systems. Arora is a Master Mariner who holds a Ph.D., a master’s degree, an MBA, and has a 35-year record of achievement in the military, mercantile marine, and civilian industry.

IATF 16949 vs ISO 9001: What the Automotive Suppliers Need to Know Before Auditing

For suppliers operating in the automotive supply chain, quality management is not just an internal operational goal, it is a mandatory condition of doing business. While ISO 9001 serves as the world’s foundational standard for quality management systems (QMS) across industries, automotive original equipment manufacturers (OEMs) demand a far higher level of rigor. This is generally true of all sectors specific standards. Be it aviation or automotive or nuclear or any other ISO 9001 is not prescriptive or descriptive. It needs interpretation. As the interpretations for a sector of the industry become too many or prescriptive a sector specific standard is born. This is where IATF 16949 enters the frame as an automotive specific standard. Over 40 plus years QMII has built expertise in auditing, consulting and training of this standard.

Navigating the transition or managing a dual-standard audit requires a clear understanding of where ISO 9001 ends and IATF 16949 begins. Before entering an audit, suppliers must understand the structural hierarchy, specific core tools, standard clauses, and auditor requirements necessary to achieve and maintain certification. IATF 16949 Builds on ISO 9001. The system approach remains the underlying driver. A common misconception among suppliers is that IATF 16949 is a standalone quality standard that replaces ISO 9001. IATF 16949 is a sector-specific supplement layered on top of ISO 9001:2015, not a replacement. ISO 9001 provides the core quality management system baseline and IATF 16949 provides the automotive specific sector requirements.

Harmonized Structure (HS) Integration

IATF 16949 uses the exact same HS, as the ISO 9001:2015, comprising 10 core clauses. ISO 9001 provides the baseline framework, such as leadership, risk-based thinking, and continuous improvement. The IATF 16949 injects stringent automotive requirements into those identical clause structures. I am discussing the key structural clause references below:

  • Clause 4 (Context of the Organization): ISO 9001 requires identifying internal and external issues. IATF 16949 expands on this in Clause 4.3.2 by requiring customer-specific requirements, mandating that OEM customer specifications which are formally evaluated and included in the QMS scope.
  • Clause 7 (Support): ISO 9001 focuses on general competence and resources. IATF 16949 adds Clause 7.2.3 mandates internal auditor competency and clause 7.2.4 requires second-party auditor competency, enforcing qualification requirements for anyone conducting audits.
  • Clause 8 (Operation): ISO 9001 outlines general operational planning. IATF 16949 builds extensive automotive requirements directly into this section, covering product safety in clause 4.4.1.2 / 8.3.1.1 and embedded software, and supply chain management.

Key Differences Auditors Must Understand

To conduct a successful audit, internal and external auditors must look beyond general ISO 9001 processes and audit against automotive-specific methodologies. The general risk management of ISO 9001 per IATF makes it mandatory FMEA per clause 8.3.5.1 and contingency plans per clause 6.1.2.3. Basic process controls in ISO 9001 are strengthened by IATF 16949 to include requirement for core tools as APQP (advanced product quality planning), PPAP (production part approval process), MSA (measurement system analysis), SPC (statistical process control). The requirement of internal audits in ISO9001 clause 9.2 is made specific by including in clause 9.2.2.2-4, system, process and product audits. And the customer satisfaction is clarified with requirement for customer specific requirements (CSRs) and OEM scorecard in IATF.

Automotive Core Tools. IATF 16949 explicitly or implicitly mandates the use of five fundamental automotive core tools:

  1. APQP (Advanced Product Quality Planning): Governs product development from concept through mass production (Clause 8.3.2.1 – Design and development planning).
  2. PPAP (Production Part Approval Process): Formally verifies that manufacturing processes can consistently produce compliant parts at production rates (Clause 8.3.4.4 – Product approval process).
  3. FMEA (Failure Mode and Effects Analysis): Risk identification tool for design (DFMEA) and process (PFMEA) (Clause 8.3.5.1 – Design and development outputs).
  4. MSA (Measurement Systems Analysis): Evaluates variation in measurement equipment (Clause 7.1.5.1.1 – Measurement system analysis).
  5. SPC (Statistical Process Control): Monitors process stability and capability (Clause 9.1.1.1 – Monitoring and measurement of manufacturing processes).

Customer-Specific Requirements (CSRs)

Unlike general ISO 9001 audits, an IATF 16949 audit evaluates compliance with Customer-Specific Requirements (CSRs) (Clause 4.3.2 & Clause 7.5.1.1). Auditors must verify that OEM-specific portals, packaging manuals, labeling rules, and scorecard metrics are integrated into the organization’s daily processes.

Common Nonconformities in Automotive Audits

During certification and surveillance audits, third-party auditors frequently issue major and minor nonconformities in specific, repeat areas. Understanding these failure points allows organizations to address gaps proactively.

  1. Problem Solving (Clause 10.2.3): Organizations often submit superficial 8D corrective action plans that fail to address system-level root causes or update related PFMEAs and Control Plans (Clause 8.5.1.1).
  2. Contingency Planning (Clause 6.1.2.3): Failing to regularly test or review contingency plans for key risk events (e.g., utility outages, cyberattacks, equipment failure, supply chain disruptions).
  3. Internal Auditor Competency (Clause 7.2.3): Internal auditors lack documented evidence of competency in core tools, risk-based thinking, or customer-specific requirements.
  4. Control Plan Alignment (Clause 8.5.1.1): Discrepancies between the PFMEA, the Control Plan, and actual shop-floor work instructions.

Preparing Your Team for a Combined Audit

Organizations seeking simultaneous certification or upgrading from ISO 9001 to IATF 16949 can streamline the audit process through a structured preparation by using a four-step path. In step 1 by conducting a gap analysis & CSR mapping (clauses 4.3.2 & 6.1) as also evaluating the existing ISO 9001 processes against IATF 16949 additions and by mapping all active OEM customer specific requirements (clause 4.3.2) into the process matrix. The second step includes core tool and process alignment (clauses 8.3 & 8.5) to include verification that every PFMEA directly informs the corresponding control plan (clause 8.5.1.1) and to conduct MSA studies (clause 7.1.5.1.1) for all key gauge types listed in control plans. The step 3 is the internal process and system audits (clause 9.2) shift away from clause-by-clause checklist audits. The requirement is to perform internal manufacturing process audits (clause 9.2.2.3) and product audits (Clause 9.2.2.4) using the Turtle Diagram methodology (inputs, outputs, resources, competence, key performance indicators, and risk). Step 4 is the management review and the assessment of final readiness (clause 9.3). Holding a formal management review meeting (clause 9.3) and addressing all IATF-specific inputs, including warranty performance (clause 9.3.2.1), OEM scorecards, and action plan reviews are requirements.

Building In-House Audit Capability

The success of an IATF 16949 QMS ultimately relies on effective implementation and therefore the competence of the people auditing it. Relying solely on external consultants for internal audits can be costly and creates dependency risks. Therefore, building a team of certified lead auditors is essential. IATF 16949 clause 7.2.3 sets strict qualification requirements for internal auditors. Auditors must demonstrate, understanding of the automotive process approach for auditing, including risk-based thinking and knowledge of applicable customer-specific requirements and of applicable ISO 9001 and IATF 16949 requirements. Auditors must have competency in Core Tools (APQP, PPAP, FMEA, MSA, SPC). Establishing qualified in-house expertise transforms internal auditing from a routine compliance exercise into a driver of process performance and cost reduction.

Path to Compliance

IATF 16949:2016 lead auditor training requires completing an accredited IATF 16949:2016 training program, providing quality managers, engineers, and internal auditors with the skills needed to lead full QMS audits, evaluate complex supply chains, and ensure seamless readiness for third-party registrar audits.

Conclusion

Understanding the dynamic between ISO 9001 and IATF 16949 is critical for any automotive supplier aiming for certification and operational excellence. By mastering automotive core tools, addressing common nonconformity areas, and investing in certified IATF 16949:2016 lead auditor capability, an organization can approach certification audits with confidence.

ISO 45003 in Military Operations: A Framework for Psychological Health and Operational Readiness at Sea

Bridging ISO Management Standards and Naval Operational Readiness

Integrating ISO 45003:2021 into military operations, particularly naval operations, specifically in the context of high tempo carrier strike group deployments like the USS Abraham Lincoln and other deployments of armed forces provides a compelling framework for evaluating psychological health, operational fatigue, and organizational resilience. For subject matter experts in management system standards like me and those planning the operations and those in command the standard gives a useful framework. I think ISO 9001 clause 7.1.4 requiring creation of an environment for the operation of the processes is worth considering. This is further amplified by ISO 45001 occupational health and safety standard in general terms. The addition of ISO 45003: 2021 centered on psychological health and safety at work provides very useful guidelines for managing psychological risks. In the present context linking ISO 45003, operational readiness, and naval safety would create a strong bridge between international ISO management system standards and naval oversight. This aligns directly with how Annex SL harmonized structure connects quality, physical safety, and psychosocial well-being into a unified management architecture. After all, as Napoleon said, “morale is to physical, as two is to one”. Not to forget “an army marches on its stomach,” implying understanding risks and planning the logistics.

Operationalizing Psychological Health During Extended Naval Deployments

Operationalizing psychological health at sea is a reality particularly when deployments are extended. Applying ISO 45003 to extended deployment of military units particularly to aircraft carriers and nuclear submarines the application of the standard would enable better and systematized risk appreciation and planning. Operations planning where deployments are away from the country/ home base and the period of deployment is extended and sometimes uncertain the context and the high tempo operational environment the risks must be considered (clause 4 context of the organization of ISO 45003 leading to clause 6.1 actions to address risk and opportunities).

Psychosocial Hazards in High-Tempo Carrier and Submarine Operations

Appreciating the operational context for each deployment must consider the unique psychological hazards of high-stress naval deployments (e.g., high-speed flight operations, extended periods at sea, geopolitical tension, unpredictable schedule shifts, availability of logistics, rest and recreation, changed work hours and isolation etc.). ISO 45003 clause 4.1 explicitly mandates assessing both external aspects (geopolitical instability, extended sea lines of communication) and internal aspects (vessel design limitations, habitability, sleep architecture). For an aircraft carrier and other surface units the bridge physical safety with psychosocial risk management are relevant inputs. Physical safety controls (ISO 45001) are incomplete without addressing operational stress, decision fatigue, sleep deprivation, and psychological safety (ISO 45003). These are further extenuated in nuclear submarines where prolonged submergence, lack of natural light, and extreme isolation amplify cognitive strain.

The Three Domains of Psychosocial Risk Under ISO 45003 Clause 6.1.2.1

Understanding the ISO 45003 framework in a naval unit and incorporating it in operational planning would provide the systematized resource planning and preparations. ISO 45003 as a guidance document that extends ISO 45001 by identifying psychosocial hazards across three key domains outlined in sub-clause 6.1.2.1. It can look at how work is organized (clause 6.1.2.1.1: shift patterns, watch standing rotations, high workload, administrative overload). Then there are the social factors (clause 6.1.2.1.2: command climate, communication, leadership dynamics, isolation) and a discussion on work environment and hazardous tasks (clause 6.1.2.1.3: confined spaces, high noise, operational danger, vibration, high heat on flight decks). All these and more that commanders at sea could provide would enable better defining of the context of the organization.

Mapping ISO 45003 Clauses to Carrier Strike Group Operations

Looking at the clauses in ISO 45003 the key clauses mapping and deployment application would strengthen the planning effort. For example, the operational planners could map key ISO 45003 clauses directly to operational conditions aboard a deployed aircraft carrier.

Clause 4 — Context of the Organization

ISO 45003, clause 4, context of the organization covering context and needs of personnel in clause 4.1 / 4.2 requires assessing external drivers (geopolitical conflict, extended deployments) and internal stressors (watch schedules, habitability, separation from families). Clause 4.3 further reinforces defining the boundary of the management system thereby ensuring psychological safety applies equally to organic ship’s company, embarked air wing personnel, and staff elements.

Clause 5 — Leadership and Worker Participation

Clause 5 related to leadership and worker participation in clause 5.1 / 5.4 provides the inputs for leadership commitment to psychological safety. Clause 5.1 requires top management to demonstrate accountability by ensuring resources are allocated for mental health support, while Clause 5.4 mandates consultation with personnel without fear of reprisal. Demonstrating that leadership balances mission accomplishment with crew fatigue and mental well-being, fostering open communication without stigma or fear of career reprisal.

Clause 6 — Planning and Psychosocial Risk Assessment

Clause 6 related to planning and psychosocial risk assessment in clause 6.1.2 requires proactive identifying of psychosocial hazards. Evaluating the compounded impact of fatigue, high job demands, low autonomy, and environmental stress on deck and in combat direction spaces. Under clause 6.2, commands must establish measurable objectives regarding fatigue metrics, rest-hour compliance, and psychological safety indicators.

Clause 8 — Operational Control and Risk Elimination

Further clause 8, operational control and risk elimination in clause 8.1.2 looks at implementing operational controls managing watch and station bill rotations, enforced rest cycles, access to mental health professionals (e.g., Chaplain, OSCAR t[i]eams), and clear command communication. In line with ISO clause 8.1.1, controls must follow a hierarchy—where hazard elimination isn’t feasible during combat operations, robust administrative controls (enforced circadian watch schedules, rotational relief) become the primary line of defense.

Clause 7 — Support, Competence, and Communication

Clause 7 (support) also plays a key role here through clause 7.2 (competence) and clause 7.4 (communication). Division Officers and Chief Petty Officers must be competent in recognizing early signs of psychological distress, while transparent communication down the chain of command during schedule changes directly mitigates rumor driven anxiety.

Auditing Psychological Safety: The PDCA Cycle and Clause 9

The PDCA (plan, do, check and act) cycle which is the fundamental of the process-based management system approach in implementing all the harmonized standards which includes ISO 45001 and in this case ISO 45003, the check stage is important. Therefore, effective auditing of psychological safety by the armed forces auditors would drive continual improvement. Clause 9.1 (monitoring, measurement, analysis and performance evaluation) combined with clause 9.2 (internal audit) provides the mechanism for this verification. The discussion would bring up how they conduct independent, third-party evaluations across the Naval Enterprise to verify risk controls and safety management systems (SMS). Auditing beyond physical compliance of ISO 45003 lens requires analysis of how service auditors can evaluate whether a command is “safe to operate and operating safely” by assessing psychosocial health metrics including by self-assessment and self-correction. They would ask questions including if the command leadership evaluate fatigue and burnout indicators prior to high-risk flight deck operations? Audit traps and behavioral indicators would include auditing beyond surface-level checklists and looking at medical department stress reports, watch stander qualification pacing, incident reports linked to human error, and command climate surveys.

Worker Involvement and Psychological Safety Within Military Command Structures

One of the underlying principles in OH&S is involvement of the workers. In all other standards the leadership decisions are sufficient. However, in occupational health the worker involvement and perception on feeling safe, secure and healthy is important. This can sometimes cause conflict with military requirements when command and control may require going in harm’s way. This does not imply, not considering the risk. Therefore, incorporation of risk evaluation and communication is a factor. Testing if junior sailors and division officers feel empowered to stop unsafe evolutions caused by acute fatigue or psychological strain (psychological safety in practice) keeping within the military directions is a factor in interpretation of the standard. This directly operationalizes clause 5.4, proving that worker participation can coexist with traditional military command structures by establishing clear boundaries where operational safety interventions are welcomed rather than penalized.

Strategic Benefits of Integrating ISO 45003 and ISO 45001

Strategic benefits and recommendations in incorporating ISO 45003 with ISO 45001 in working systematically would include strengthening operational readiness and resilience. Use of ISO 45003 would address hazards directly reduces human-factor mishaps, improving retention, and enhances tactical focus during critical operations. Clause 10 (improvement) ensures that lessons learned from near-misses, fatigue-related mishaps, or extended surge operations feed back into operational planning for future deployment cycles.

Practical Recommendations for Naval Quality and Safety Systems

Practical recommendations for naval quality and safety systems would include formalizing psychosocial audit criteria by incorporating ISO 45003 guidelines into naval safety audit protocols alongside physical safety metrics. Predictive fatigue management by using data-driven scheduling tools aligned with clause 8 operational controls would be a strong recommendation. Of course, leadership training would educate senior leadership and department heads on identifying early indicators of psychosocial distress within division teams.

Conclusion: Mental Well-Being as a Core Operational Readiness Metric

In conclusion, I would say treating mental well-being and psychosocial risk management as core operational readiness metrics validated through rigorous auditing and oversight helps ensure that capital assets like the USS Abraham Lincoln remain fully combat-capable and resilient.

[i] OSCAR Team Uses Technology to Identify Mental Health Risk Factors — Navy Medicine (link at the “Chaplain, OSCAR teams” reference) — https://www.med.navy.mil/Media/News/Article/2609002/oscar-team-uses-technology-to-identify-mental-health-risk-factors/

About the Author:

Inderjit (IJ) Arora, Ph.D., is the Chairman of QMII. He serves as a team leader for consulting, advising, auditing, and training regarding management systems. He has conducted many courses for the United States Coast Guard and is a popular speaker at several universities and forums on management systems. Arora is a Master Mariner who holds a Ph.D., a master’s degree, an MBA, and has a 35-year record of achievement in the military, mercantile marine, and civilian industry.

What the ISM Code Can Teach Us About Risk: Part Two

Editor’s note: This is the second of a two-part article examining the risk-based thinking lessons to be learned from maritime safety and security protocols. You can read part one here.

The International Safety Management (ISM) Code brings a framework for safety through systematic management. It was introduced by the International Maritime Organization after several major maritime accidents revealed a common problem: The causes were rarely technical alone; instead, they were failures of management systems. The ISM Code, therefore, established a simple but powerful requirement, wherein shipping organizations must implement a documented safety management system (SMS) to ensure the safe operation of ships and the protection of the environment.

The principles embedded in the ISM Code offer valuable lessons for organizations operating in any uncertain environment. Many of these principles also resonate strongly with ISO 9001, the international standard for quality management systems. Let us examine a few of those connections.

Connecting the ISM code and ISO 9001

The ISM Code is not a technical manual for operating ships. Instead, it requires organizations to establish structured processes addressing leadership responsibility, risk assessment, operational control, training and competence, incident reporting, corrective action, and continual improvement. These requirements may sound familiar to anyone working with ISO management system standards such as ISO 9001 and others following the harmonized structure. In essence, the ISM Code recognizes a fundamental truth in that safe operations are the result of disciplined management systems, not individual heroics.

Establishing an SMS based on the ISM code and principles of ISO 9001 means planning for the unexpected. One of the most relevant principles in the ISM Code is the requirement to identify potential emergency situations and establish procedures to respond to them. Ships are required to plan for events such as fire, collision, grounding, machinery failure, person in water, and/or security threats or piracy. (Note that maritime security is covered by the International Ship and Port Facility Security Code and ISO 28001 covering security management systems for the supply chain). These procedures are not theoretical. Crews regularly conduct drills so that when an emergency occurs, the response is not improvised.

Organizations often interpret risk narrowly, focusing only on operational or financial risks. The ISM Code reminds us that effective management systems anticipate unexpected and low-probability events that can disrupt operations. In quality management terms, this is the discipline of considering what could go wrong and if people know their roles if (when) it does. It also means interrogating the system to determine how the organization will handle the ramifications of the adverse event.

Leadership and responsibility are important in maritime life. Another core principle of the ISM Code is clear authority and responsibility. Sections 5.1 and 5.2 require that on board a ship, there is no ambiguity about who is responsible for the safety of the vessel. The master has overriding authority. At the same time, as per section 4, the ISM Code requires those off the ship to support the master through a defined role known as the Designated Person Ashore (DPA). This individual provides a direct link between shipboard operations and top management. This structure reflects two key leadership principles: Authority must match responsibility and top management must remain connected to operational realities.

ISO 9001 expresses the same idea in a different context. As seen in clause 5.1 (“Leadership and commitment”) and clause 5.3 (“Organizational roles, responsibilities, and authorities”) leadership is required to ensure that the quality management system is integrated into the organization’s processes and that responsibilities and authorities are clearly assigned. Without this alignment, procedures quickly become paperwork rather than operational guidance.

In the case of mariners, competence and training are systematized. The International Convention on Standards of Training, Certification and Watchkeeping for Seafarers (STCW) ensures that seafarers are properly trained and certified for their duties. But beyond certification, maritime safety culture emphasizes something equally important: continuous drills and practice. Crew members rehearse emergency responses repeatedly. Fire drills, abandon-ship drills, and damage-control exercises are conducted not because emergencies are frequent; instead, it is because although they are rare, they are also highly consequential. This principle translates directly into quality management. Competence is not merely about qualifications; it is about preparedness to perform under pressure. Organizations that rely solely on written procedures without practical rehearsal often discover gaps only when a crisis occurs.

Learning lessons from incidents, as seen in ISO 9001’s clause 7.1.6 (“Organizational knowledge”) is integral to the SMS, making it a critical requirement of the ISM Code requiring the reporting and investigation of nonconformities, accidents, and hazardous occurrences. The purpose is not to blame, but to learn. Each incident becomes an opportunity to ask, “What failed in the system?” “What corrective action is needed?” and/or “How do we prevent recurrence?” Again, this is entirely consistent with ISO 9001’s approach to corrective action and continual improvement. The difference in the maritime world is that the consequences of failure can be immediate and severe. As a result, the discipline around incident learning is deeply embedded in the culture.

Risk decisions at sea and in maritime organizations need consideration about all key decisions, including how and when to transit dangerous areas. These decisions are rarely simple. They require balancing safety risks, commercial pressures, and regulatory requirements, including ever-changing statutory requirements of various contracting governments. This must be seen within the contexts of operational capability and the need to ensure crew welfare. The ISM Code does not dictate the decision. Instead, it ensures that the process for making the decision is structured and informed. This is perhaps the most valuable lesson for quality professionals. Management systems do not eliminate risk; they provide a framework for making better decisions about risk.

The ISM Code as a case study for risk-based thinking

Mariners have much to teach quality professionals on the use of the system approach for considering risks. For those working in quality assurance, auditing, or conformity assessment, the maritime experience offers several enduring lessons:

  • Systems matter more than individuals; therefore, while competent people are essential, reliable operations depend on structured systems.
  • Leadership must remain engaged in safety or quality, and this accountability cannot be delegated away.
  • Leaders must prepare for rare but high-impact events, because risk management is not only about what happens frequently.
  • Practice builds readiness.
  • ISM auditor Training and drills ensure procedures work under real conditions.

The takeaway is that there is a need to learn relentlessly from failure and use nonconformities as opportunities to strengthen the system.

The need to navigate uncertainty strengthens the importance of the ISM Code and/or ISO 9001 to inform leaders about risk and process management. For ship owners and masters, decision-making requires a complete and quick update of risks and other factors. For those who have spent a lifetime at sea, uncertainty is part of the profession. Mariners routinely navigate storms, mechanical failures, and complex navigational environments. Yet despite these uncertainties, global shipping remains remarkably reliable. More than 80 percent of world trade moves by sea, and the system functions with a level of safety and predictability that most industries take for granted.

The ISM Code, as well as ISO 9001, recognize that outcomes, whether safety or quality, depend on well-defined processes and leadership oversight. To mariners and quality professionals alike, I would advise another close look at your management system. Strengthen it. Maritime leaders ashore, like executives in the boardroom, must stay involved in assessing and mitigating risks to provide the best chance for safety, security, and success.

__

About the author

Inderjit (IJ) Arora, Ph.D., is the Chairman of QMII. He serves as a team leader for consulting, advising, auditing, and training regarding management systems. He has conducted many courses for the United States Coast Guard and is a popular speaker at several universities and forums on management systems. Arora is a Master Mariner who holds a Ph.D., a master’s degree, an MBA, and has a 35-year record of achievement in the military, mercantile marine, and civilian industry.

Home » Archives for Inderjit Arora

What the ISM Code Can Teach Us About Risk: Part One

For centuries, individuals have sailed the sea, perhaps for their livelihood, perhaps for adventure, or perhaps for reasons of their own. Christopher Columbus, Ferdinand Magellan, James Cook, and countless others changed the world.

Today, sailing through international waters to meet the basic needs of the world brings challenges. Without merchant ships, tankers, bulk carriers, and container vessels, the global supply chain stops. Doesn’t the world owe these mariners all due safety and security?

I am a former seafarer who commanded submarines in the Indian Navy and then continued my career as a master in the merchant marine. Today, I am a subject matter expert in issues related to maritime safety and security. Given this background, I feel compelled to analyze what I hear and read about current events and provide a structure whereby the merchant marine industry might better prepare for any and all eventualities. The International Safety Management (ISM) Code, the International Convention on Standards of Training, Certification and Watchkeeping for Seafarers (STCW), and ISO 9001 all provide process-based approaches that can be used by those in this industry for planning and risk mitigation.

Most of us do not have to deal with high-risk challenges at sea. For those who do, however, there are guidelines they can use. As one example, the ISM Code provides some lessons into anticipating the unexpected and planning for these risks in a systematic manner.

In this article I will touch on how portions of the ISM Code connects to elements of ISO 9001 and provide input that might be useful to maritime leadership in ensuring quality assurance and conformity assessment based on risk and considering the context in which these organizations operate. This is guidance that applies to any of us, on the water or in a facility or factory.

Similarities between the ISM Code and ISO 9001

For professional mariners, a simple rule applies: Conditions that appear routine can change without warning. The ISM Code emphasizes preparedness for emergencies and abnormal situations. Section 8.1 requires the organization to establish procedures to identify, describe, and respond to potential emergency situations aboard the ship. In other words, the ISM Code requires organizations to plan not only for technical failures or weather hazards, but also for security risks and unexpected external threats. Navies may refer to this as an operational assessment, but (in Shakespearean language) a risk by any other name would still be a risk.

ISO 9001 expresses a comparable idea through the requirement for risk-based thinking. As emphasized in clause 6.1.1, the organization shall determine the risks and opportunities that need to be addressed to give assurance that the quality management system can achieve its intended results.

From a management systems perspective, the broader lesson is clear: Organizations must plan for situations that may appear unlikely until they occur. For a ship’s captain or master, that planning may involve security drills, contingency routing, and coordination with naval authorities. For a quality manager or organizational leader, it may involve supply chain disruption, cybersecurity incidents, or geopolitical shocks. Ultimately, the decision on whether to sail should be based on a proper risk assessment. Events at sea sometimes remind us, in stark terms, why disciplined safety and command systems matter. What makes an incident significant in the context of this discussion is the reminder of just how quickly circumstances can change at sea.

Within ISO 9001, the context of the organization (clauses 4.1 and 4.2) leads to risk appreciation (clause 6.1). All of this must be integral parts of the maritime management system, at sea or ashore.

This is precisely why the ISM Code emphasizes preparedness for emergencies and abnormal situations as per section 8.1. Good organizations connect real maritime events with risk-based thinking. They understand that commercial interests must mesh with the emergency planning sections in the ISM Code. This understanding is also found in ISO 9001, specifically in clause 6 (“Planning”) and clause 8 (“Operation”).

Expecting the unexpected

My own appreciation for disciplined systems thinking was shaped long before the ISM Code was widely implemented in commercial shipping. During my years in the Indian Navy, I had the privilege of commanding vessels, first on F-class boats and later through service on a Charlie II-class submarine. Submarines operate in an environment where uncertainty is not theoretical and the margin for error is extremely small. Any failure in equipment, communication, or procedure can quickly become critical. What keeps submarines safe is not individual brilliance on the part of a captain or crew. That is part of it, of course, but even more important is the relentless adherence to procedures and constant preparation for contingencies. Before every patrol, the crew repeatedly rehearses emergency actions such as flooding drills, fire drills, loss of propulsion, and loss of power. Each crew member knows precisely where to go, what valve to operate, and what sequence of actions to follow. These procedures are not simply found in written manuals. They are practiced until they become instinctive.

At that time, we did not describe this discipline in terms of “process-based management systems,” but that is exactly what it was. The system existed to ensure that when the unexpected occurred, as it inevitably does at sea, the crew would not rely on improvisation alone. The response would already be embedded in the system and in themselves. Years later, when I sailed as a master in the merchant marine and then began to work with ISO management systems, I recognized the same principles expressed in a different language. ISO 9001 requires organizations to establish, implement, and maintain the processes needed for the quality management system and their interactions, as per clause 4.4 (“Quality Management System and its Processes”). Section 1.2 of the ISM Code similarly requires organizations to ensure safe practices in ship operation and a safe working environment. Different industries, different terminology, but the underlying idea is identical: Safety, quality, and reliability are the result of preparation and training, not simply reacting well to emergencies.

I can confirm through my experience that this reflection is not merely theoretical. It comes from first-hand experience wherein I led teams and where preparation truly mattered. This background gives me a clear perspective on risk, command responsibility, and disciplined procedures under uncertainty. This perspective can make a very compelling bridge between maritime safety management (ISM/STCW) and organizational quality systems (ISO 9001).

As we consider dangerous situations on or in the water, we can see what the ISM Code and ISO 9001 (in addition to other maritime protocols and ISO standards) can teach us about risk in uncertain times. In today’s volatile world, commercial shipping once again finds itself navigating geopolitical tension. News headlines remind us that vessels may need to transit waters where the risks are not merely commercial, but also matters of safety and survival. For those who have spent a career at sea, such circumstances are not entirely unfamiliar. The maritime profession has long recognized that uncertainty is inherent to operations. Ships sail through storms, equipment failures, and occasionally conflict zones. Yet despite these uncertainties, shipping remains one of the safest and most reliable global industries. This is not an accident. Much of that safety culture comes from the ISM Code, supported by training standards such as STCW. These frameworks provide reliable, structured guidance on how organizations anticipate risk, prepare crews, and maintain operational control.

In the next part of this two-part article, we will further discuss the framework of maritime systems and how they relate to risk and ISO 9001.

__

About the author

Inderjit (IJ) Arora, Ph.D., is the Chairman of QMII. He serves as a team leader for consulting, advising, auditing, and training regarding management systems. He has conducted many courses for the United States Coast Guard and is a popular speaker at several universities and forums on management systems. Arora is a Master Mariner who holds a Ph.D., a master’s degree, an MBA, and has a 35-year record of achievement in the military, mercantile marine, and civilian industry.

Root Cause Analysis for ISO 9001: Why “Human Error” is Never the Real Answer

We’ve all seen it on a corrective action report. A major nonconformity occurs, a customer shipment is delayed, or a critical process control is bypassed. The quality team scrambles, an investigation is launched, and under the “Root Cause” section of the form, someone writes the fatal phrase, “Human error. Employee was retrained.” Case closed. The form is filed, the auditor is supposedly satisfied, and everyone goes back to business as usual. But then, three months later, the exact same failure happens again. Different employee, same result. Blaming employees without looking at the processes can never be the answer. True in exceptional cases for example in the aviation industry pinpointing human failure can be the correction and even there not the corrective action.

If your organization is ISO 9001 certified and you find that “human error” is a recurring theme in your internal audits and corrective actions, your management system isn’t learning. In fact, relying on human error as a root cause is a red flag that your QMS is operating on compliance theater rather than true process effectiveness. As a management system framework, ISO 9001:2015 is fundamentally designed to prevent this exact trap. Here is why human error is never the real answer and how the standard gives you the architecture to dig deeper.

The myth of the careless worker starts When we blame human error, we are inadvertently stating that our processes are perfect, but our people are flawed. In the vast majority of manufacturing and service environments, this simply isn’t true. People rarely show up to work intending to make a mistake. When a mistake happens, it is almost always the predictable result of a flawed system, ambiguous instructions, or a lack of appropriate operational safeguards. ISO 9001 doesn’t view “human error” as a dead end; it views human action as an input to a process that must be managed.

Under Clause 4.4 (quality management system and its processes), the organization is required to determine the inputs required and the outputs expected from its processes, as well as the criteria and methods needed to ensure their effective operation and control. If a single human slip can crash a process, the control method is what failed, not the human.

Retraining is usually a cop-out. If the root cause is “human error,” the universal knee-jerk solution is “retraining.” But let’s be honest: if an employee already knew how to do the task and made a mistake due to fatigue, distraction, or a confusing interface, retraining them on the exact same flawed method accomplishes nothing. It is a cosmetic fix designed to show an auditor that “action was taken.” The standard addresses this distinction sharply between ISO 9001 Clause 7.2 (Competence) and Clause 7.3 (Awareness). Competence is about ensuring people have the necessary education, training, or experience to perform work affecting quality performance. Awareness, however, requires that persons doing work under the organization’s control are aware of the quality policy, relevant quality objectives, and crucially the implications of not conforming with the QMS requirements.

If an operator bypasses a step, the real question isn’t “Did we train them?” The real questions are: did they understand the risk of bypassing it? Did the system make it easy to bypass? Was production pressure actively incentivizing them to cut corners?

These structural anchors require digging behind the mistakes. To move past the surface-level excuse of human error, an effective root cause analysis (RCA) must use the framework embedded in ISO 9001 to look at the environment surrounding the worker. When a mistake occurs, use these three clause categories to guide your investigation. First the operational planning and control (ISO 9001 clause 8.1). The standard expects organizations to plan, implement, and control the processes needed to meet requirements. If a human error occurs, the organization should investigate if the process was designed to minimize the likelihood of error? Did we implement “mistake-proofing” (Poka-Yoke) or clear visual cues. If a step is critical, did we rely solely on memory, or did the system enforce a verification checkpoint?

The second important aspect is documented information (ISO 9001 clause 7.5.3). Often, “human error” is just a symptom of a terrible procedure. If an instruction is a 40-page wall of dense text sitting in a binder, or if it’s poorly formatted and confusing, a human will eventually misread it. ISO 9001 clause 7.5.3 requires documented information to be available and suitable for use, where and when it is needed. If your documentation isn’t user-friendly, the system is designed to generate errors.

Then there are the infrastructure and environment for the operation of processes (clauses 7.1.3 & 7.1.4). As humans we are heavily influenced by our physical and psychological surroundings. For example, is the lighting poor, or is the software interface counter-intuitive? Is the workplace excessively noisy or disorganized, leading to cognitive fatigue? Clause 7.1.4 explicitly requires organizations to determine, provide, and maintain a suitable environment, including social, psychological, and physical factors. If you push people past the brink of exhaustion or manage through fear, “human error” is a system-generated metric. This is further amplified as requirements in ISO 45001 and ISO 45003 and in the maritime world in the MLC (maritime labor convention).

There is then the need to drive the culture change via corrective action. To stop the cycle of lazy problem-solving, top management and quality leaders must change how they handle ISO 9001 clause 10.2 (nonconformity and corrective action). The standard outlines a strict, logical flow for failure management in terms of reacting to the nonconformity (contain the immediate issue). The need to evaluate the need for action to eliminate the causes of the nonconformity, so that it does not recur or occur elsewhere, by, reviewing and analyzing the nonconformity, determining the causes of the nonconformity and determining if similar nonconformities exist, or could potentially occur. Notice the plural language, causes. If your RCA stops at the individual who made the mistake, you have only found the mechanism of the failure, not the cause. A true root cause answer sounds like this: “The sorting process allowed a nonconforming part to pass because the visual inspection standard was ambiguous, the lighting at Station 3 was below the required lumens, and there was no secondary physical gate to catch human oversight.” Fixing that combination of system gaps actually prevents recurrence. Retraining the inspector does not.

The next time you review a corrective action report with “human error” listed as the root cause, reject it. Send it back with a simple instruction: Find out why the system made that error inevitable. If you are looking at system resilience use ISO 9001 clause 4.4 and ask if the process have adequate criteria and controls to handle human variability? When auditing competence verses awareness under ISO 9001 clauses 7.2 and 7.3 check if they lack the skill (competence), or did they lack an understanding of the impact of the mistake (awareness)? Now if you are looking at workplace factors under ISO 9001 clause 7.1.4 check if fatigue, poor layout, or excessive stress contribute to the slip? When auditing process safeguards, under ISO 9001 clause 8.1 check if the process built on robust operational planning, or is it relying purely on human heroics? Looking for evidence of true RCA execution under ISO 9001 clause 10.2 ask if they stop at who did it, or did we fix the systemic gaps to ensure it cannot happen elsewhere?

In concluding I would opine that the ultimate test of a living QMS is the sophistication of an organization’s management system and how it is mirrored directly in its corrective action register. An immature system looks for someone to blame, checks a box, and schedules a training session. A mature, high-performing QMS looks at a human mistake as a symptom, treats it as a valuable data point, and asks: “How did our system fail to protect our person from making this error?” As leadership and quality professionals, our goal shouldn’t be to build an audit-proof wall of paperwork that blames the workforce. Our goal is to engineer resilient processes.

__

About the Author:

This article was written by IJ, Principal Consultant at QMII. With extensive experience in ISO standards, auditing, and organizational transformation, IJ has guided global organizations in strengthening their management systems. His approach focuses on aligning ISO implementation with strategic business objectives to drive long-term performance improvement.

ISO certified but nothing has changed? Here’s why your system isn’t delivering

Many organizations celebrate ISO 9001 certification, as also any other certification, as a major achievement. The certificate is framed, the scope is published, customers are informed, and the external audit is finally behind them. Yet a few months later, the uncomfortable question that arises before the leadership and the team asking, if we are ISO certified, why has nothing really changed?

The same problems keep recurring. Customer complaints are still handled reactively. Internal audits are still treated as a paperwork exercise. Corrective actions still close late. Processes still depend on individual heroics rather than robust systems. Management review still feels like an annual ritual rather than a business performance discussion. Employees still see ISO as “the quality department’s job.” This is, I think, not a failure of the standard but more often, it is a failure of implementation.

ISO 9001 was never intended to be a certificate on the wall. It is a management system standard designed to help an organization consistently meet customer, statutory, and regulatory requirements, while improving the effectiveness of its processes. If certification has not changed performance, behavior, decision-making, or customer outcomes, then the organization may have achieved conformity without achieving effectiveness. That distinction matters. A system can be documented, audited, and certified and yet still fail to deliver meaningful business value. The real question is not “are we certified?” The better question is, is our quality management system influencing how the organization is run?

QMII has been working on management systems and meeting client objectives since 1986. One thing is certain when a system is built for the auditors and not the business, it is almost worthless. One of the most common reasons ISO 9001 fails to deliver is that the system was designed around passing an audit rather than improving the organization.

This usually shows up in excessive procedures, generic policies, copied templates, and records created mainly to satisfy perceived audit expectations. The language of the system does not match the language of the business. Employees do not use the procedures because the procedures were not based on the “as-is” of the system. The system was template driven and its one and only aim was to get certified.

ISO 9001 does not require a parallel universe of paperwork. It expects the organization to determine the processes needed for the quality management system (clause 4.4.1 of ISO 9001), understand their sequence and interaction, define criteria and methods for effective operation and control, assign responsibilities, address risks and opportunities, and evaluate performance.

If your QMS is a collection of documents rather than a description of how the business creates and protects value, it will not deliver. A useful system should answer practical questions on effectiveness of the system and lead to continual improvement.

ISO 9001 Clause 5.1 requires accountability from the leadership. If the leadership is running the system using only clause 5.3 of ISO 9001 by delegation instead of owning it is doomed to failure. ISO 9001:2015 deliberately strengthened the role of top management. The standard moved away from the idea that quality can be delegated to a “management representative” and placed clear expectations on leadership. Top management must take accountability for the effectiveness of the QMS, ensure that the quality policy and objectives are compatible with the organization’s context and strategic direction, integrate QMS requirements into business processes, promote the process approach and risk-based thinking, provide resources, and support continual improvement. In practical terms, leadership must do more than attend the opening and closing

Employees are told quality matters, but production pressure overrides process controls. Corrective actions are assigned but not resourced. Customer complaints are discussed only after escalation. Internal audit findings are treated as irritations rather than opportunities to improve the system. A QMS delivers only when leadership uses it to make decisions. Certification may be achieved through documentation. Performance improvement requires leadership behavior.

The next thought that comes to mind is about the organization’s misunderstood “context”. A strong QMS begins with a clear understanding of the organization and its environment. Clause 4.1 understanding the organization and its context requires the organization to determine external and internal issues relevant to its purpose, strategic direction, and ability to achieve the intended results of the QMS. Clause 4.2. Interested parties requires the organization to understand relevant interested parties and their relevant requirements. In weak systems, this exercise often becomes a static SWOT analysis prepared once and filed away. It may list obvious items such as “competition,” “regulations,” “customers,” and “employees,” but it does not influence risk assessment, objectives, process controls, supplier management, resource planning, or improvement priorities. It must be remembered context is not a poster. It is the operating reality in which the QMS must function. For example, if the organization faces high staff turnover, then competence, training, knowledge retention, and process standardization become critical. If customer requirements are becoming more complex, then contract review, design control, change management, and communication need strengthening. If supply chain reliability is a recurring issue, then supplier evaluation, contingency planning, and incoming verification become important. If climate-related factors can affect operations, supply, infrastructure, or customer expectations. The update to standard expected in September reinforces that these issues should be considered where relevant. A QMS that ignores context becomes generic. A generic system may pass an audit, but it rarely improves performance.

Quality objectives (clause 6.2) are an important aspect of the QMS and yet are often not connected to process performance. Many certified organizations have quality objectives, but the objectives are often too broad, too safe, or too disconnected from process performance. Examples include “improve customer satisfaction,” “reduce complaints,” or “deliver quality products.” These are good intentions, but they are not always effective objectives. Clause 6.2  m expects objectives to be measurable, monitored, communicated, updated as appropriate, and consistent with the quality policy. The organization must also plan what will be done, what resources are required, who is responsible, when it will be completed, and how results will be evaluated. If objectives do not drive action, they are not management tools. They are slogans. Effective objectives should connect to the organization’s key processes and risks. A certified organization with weak objectives will often remain exactly where it was before certification. The certificate confirms that a system exists. Objectives determine whether the system is moving.

Connected closely to context is the risk-based thinking, which is often treated as a form, not a way of managing. Risk-based thinking is one of the central concepts in ISO 9001:2015. It is embedded throughout the standard, especially in Clause 6.1. Actions to address risks and opportunities. The organization must determine risks and opportunities that need to be addressed to give assurance the QMS can achieve intended results, enhance desirable effects, prevent or reduce undesired effects, and achieve improvement. In many organizations, risk-based thinking becomes a spreadsheet exercise. Risks are listed, scored, color-coded, and reviewed occasionally. But the risk register does not meaningfully affect process controls, training, supplier selection, inspection levels, maintenance, contingency planning, or management review. It is therefore not surprising that nothing changes. Risk-based thinking should influence how work is designed and controlled. If a process has high risk, it may need clearer criteria, competent personnel, verification steps, mistake-proofing, supplier controls, documented information, monitoring, or escalation triggers. If an opportunity exists, the organization should consider how to capture it, whether through technology, training, simplification, standardization, or improved customer communication.

When process owners do not really own their processes, it is an issue. ISO 9001 depends on the process approach. Processes must be defined, controlled, monitored, measured, and improved. Yet in many organizations, process ownership is unclear. A procedure may name an owner, but that person may not monitor process performance, review nonconformities, evaluate risks, train personnel, approve changes, or drive improvements. The quality department ends up chasing everyone for records, actions, and audit responses. This creates the impression that ISO belongs to quality rather than to the business. Clause 4.4 requires the organization to determine responsibilities and authorities for processes. Clause 5.3 requires organizational roles, responsibilities and authorities requires top management to ensure relevant roles are assigned, communicated, and understood. Process ownership must be real. A process owner should know, what the process is intended to achieve. What inputs and outputs matter. What risks can prevent success. What controls are required. What indicators show whether the process is effective. What nonconformities have occurred. What improvements are underway. What resources or competence are needed.  If process owners cannot answer these questions, the system is unlikely to deliver. The QMS may exist on paper, but operational accountability is missing.

Effective auditing is an essential part of decision making by leadership. If Internal audits check conformity but not effectiveness, then the system weakens. Internal audits are one of the most underused tools in ISO 9001. In weak systems, internal audits simply confirm that procedures exist and records are available. Auditors ask, “Do you have a procedure?” and “Can you show me the record?” This may establish conformity, but it does not necessarily test whether the process is effective. Clause 9.2 on internal audit requires the organization to conduct audits at planned intervals to provide information on whether the QMS conforms to the organization’s own requirements and ISO 9001, and whether it is effectively implemented and maintained. The word “effectively” is essential. A good internal audit should test whether the process achieves intended results. For example, an audit of purchasing should not only verify approved supplier lists and purchase orders. It should examine whether supplier controls are reducing risk, whether supplier performance is monitored, whether poor-performing suppliers are addressed, and whether purchased products and services consistently meet requirements.

An audit of corrective action should not only confirm that forms are completed. It should test whether root causes are credible, actions are appropriate, recurrence has been prevented, and lessons have been shared. If internal audits do not challenge process effectiveness, the certification audit may become the first serious test of the system. By then, opportunities for improvement have already been missed.

Corrective action must not stop at containment. Many organizations respond quickly to problems but fail to learn from them. They replace the defective item, reissue the document, retrain the employee, apologize to the customer, and close the action. The same issue then returns under a slightly different name. This is a classic sign that corrective action is not effective.

Clause 10.2 on nonconformity and corrective action requires the organization to react to nonconformities, deal with consequences, evaluate the need for action to eliminate causes, implement action, review effectiveness, update risks and opportunities where necessary, and make changes to the QMS if needed. The purpose is not to complete a form. The purpose is to prevent recurrence. Weak corrective action systems focus on symptoms. Strong systems investigate causes. They ask why the process allowed the issue to occur, why it was not detected earlier, whether the issue could exist elsewhere, whether controls are adequate, and whether the solution worked. A certified system that does not learn from failure will not improve. It will simply document recurrence.

Management review is often treated as a ceremonial meeting to satisfy ISO requirements. Slides are prepared, data is presented, minutes are recorded, and actions are listed. But the discussion may not influence strategy, resources, priorities, or change. Clause 9.3 on management review requires top management to review the QMS at planned intervals to ensure its continuing suitability, adequacy, effectiveness, and alignment with the strategic direction of the organization. Inputs include changes in context, customer satisfaction, process performance, nonconformities, audit results, supplier performance, adequacy of resources, effectiveness of actions taken to address risks and opportunities, and opportunities for improvement. If management review does not result in decisions and actions related to improvement, resources, process changes, risks, opportunities, and customer satisfaction, it is not fulfilling its purpose. A management review that does not change anything is a warning sign that the QMS is not connected to leadership control.

Continual improvement is expected by leadership, but the team dos does not engineer its success. Organizations often say they are committed to continual improvement, but they do not create the conditions for improvement to happen. Improvement depends on data, leadership, competence, time, ownership, and follow-through. Clause 10.3, continual improvement requires the organization to continually improve the suitability, adequacy, and effectiveness of the QMS. This connects directly to Clause 9.1 monitoring, measurement, analysis and evaluation, which requires the organization to determine what needs to be monitored and measured, the methods needed, when monitoring and measurement will be performed, and when results will be analyzed and evaluated. In simple terms: you cannot improve what you do not understand. If performance data is weak, late, inaccurate, or ignored, improvement becomes guesswork. If trends are not analyzed, the organization remains reactive. If customer feedback is collected but not acted upon, dissatisfaction continues. If process indicators are selected because they are easy to measure rather than because they reveal effectiveness, management will have poor visibility.

Continual improvement must be built into the management rhythm. It should be visible in objectives, audits, corrective actions, management review, process reviews, customer feedback, risk reviews, and operational meetings. Improvement is not an annual ISO activity. It is the habit of managing better.

So why has nothing changed? If ISO certification has not changed your organization, the likely reason is that the QMS has not been integrated into how the organization is led, planned, operated, evaluated, and improved.

The certificate may confirm that requirements were met at a point in time. But the value of ISO 9001 comes from daily use: leaders using the system to make decisions, process owners managing performance, employees following practical controls, risks being addressed before they become failures, audits testing effectiveness, corrective actions eliminating causes, and management reviews driving improvement.

ISO 9001 is not meant to sit beside the business. It is meant to help run the business. The remedy is not necessarily more documentation. In many cases, it is better integration, better ownership, better questions, and better use of existing information. Start by asking each process owner one question: How does your process prove that it is effective? Then ask top management, what decisions have we made because of the QMS? If those questions are difficult to answer, the organization may be certified but the system is not yet delivering.

The good news is that ISO 9001 already contains the architecture for improvement. Clauses 4 through 10 are not separate audit compartments; they are connected parts of a management system. Context informs risks and opportunities. Risks influence planning and controls. Controls shape operations. Operations generate performance data. Data feeds internal audit and management review. Nonconformities drive corrective action. Corrective action and analysis drive improvement.

When that cycle works, ISO certification becomes more than a market access tool. It becomes a disciplined way to manage performance, satisfy customers, reduce waste, strengthen accountability, and improve resilience. The certificate is only the beginning. The real test is whether the system changes decisions, behavior, and results.

__

About the Author:

This article was written by IJ, Principal Consultant at QMII. With extensive experience in ISO standards, auditing, and organizational transformation, IJ has guided global organizations in strengthening their management systems. His approach focuses on aligning ISO implementation with strategic business objectives to drive long-term performance improvement.

How Should an Organization Prepare for a Surveillance Audit?

A surveillance audit is an essential component of maintaining certification to management system standards such as ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 22301 and many more. Unlike an initial certification audit, which evaluates the entire management system for compliance with a standard, a surveillance audit is conducted periodically, typically once or twice a year, to verify that the organization is continuing to comply with the requirements of the standard and that the management system remains effective and continually improves over time.

Preparing for a surveillance audit requires a structured and proactive approach. Organizations that maintain their management systems throughout the year generally find surveillance audits less stressful and more productive. Effective preparation not only helps ensure successful audit outcomes but also strengthens organizational performance, enhances customer confidence, and promotes a culture of continual improvement.

Purpose and Scope of the Audit

The first step in preparing for a surveillance audit is understanding its purpose and scope. Surveillance audits are designed to confirm that the certified management system is still functioning effectively and that the organization continues to meet the requirements of the applicable standard. The certification body usually provides an audit plan in advance, outlining the processes, departments, and clauses that will be reviewed and participation of the process owner.

Organizations should carefully examine the audit agenda and identify the areas that will receive special attention. Auditors often focus on changes made since the previous audit, corrective actions taken in response to past findings, internal audit results, management reviews, and key performance indicators. Understanding the audit scope allows management to allocate resources effectively and ensure that relevant personnel and records are available during the audit.

Review of Previous Findings

One of the most important preparation activities is reviewing the findings from previous audits, be it certification, surveillance, or internal or even the non-conformities raised internally without the audits. Auditors will often revisit past nonconformities and observations to verify whether corrective actions have been implemented and if the corrective action are effective or not. If there are any trends in the occurrence or recurrence of these non-conformities.

Organizations should gather evidence demonstrating that all corrective actions have been completed and that the root causes of identified issues have been addressed. This may include updated procedures, training records, monitoring reports, or revised controls. Any unresolved findings should be prioritized before the surveillance audit to avoid recurring nonconformities, which may indicate weaknesses in the management system.

Conduct Internal Audits

Internal audits are a valuable tool for assessing readiness before a surveillance audit. They provide an opportunity to identify gaps, weaknesses, and nonconformities before the external audit. Organizations should ensure that internal audits are conducted according to the planned audit schedule and cover all critical processes.

A well-executed internal audit should evaluate:

  • Compliance with management system requirements.
  • Adherence to organizational procedures.
  • Effectiveness of process controls.
  • Achievement of objectives and targets.
  • Availability and accuracy of records.

Any findings from internal audits should be documented, and addressed through corrective action processes. Evidence of these activities demonstrates the organization’s commitment to continual improvement and effective system management.

Ensure Documentation Is Current and Up-to-Date

Documentation forms the backbone of any management system. During a surveillance audit, auditors review documented information to verify compliance and consistency. Therefore, organizations should perform a thorough review of all relevant documents and records before the audit.

Key documents that should be examined include:

  • Policies and objectives.
  • Process maps and procedures.
  • Work instructions.
  • Risk assessments.
  • Training and competency records.
  • Equipment maintenance records.
  • Calibration certificates.
  • Customer complaints and feedback records.
  • Corrective action reports.
  • Internal audit reports.
  • Management review records.

Organizations should also verify that document control procedures are functioning effectively. Obsolete documents should be removed from circulation, and only approved versions should be available to employees.

Verify Employee Awareness and Competence

Employees play a critical role during surveillance audits because auditors frequently interview personnel to assess their understanding of processes and responsibilities. Staff members should be familiar with relevant policies, procedures, objectives, and their role within the management system.

Organizations can prepare employees through awareness sessions, refresher training, and communication meetings. Employees should understand:

  • Their job responsibilities.
  • Relevant procedures and work instructions.
  • Organizational objectives.
  • Quality, environmental, safety, or security policies.
  • How they contribute to management system performance.

Rather than memorizing answers, employees should be encouraged to explain their actual work practices honestly and confidently. Authentic responses provide auditors with evidence that the management system is genuinely implemented rather than existing only on paper.

Review Organizational Performance

Surveillance audits often focus on performance measurement and continual improvement. Organizations should review their key performance indicators (KPIs), objectives, and targets to ensure that performance is being monitored and evaluated effectively.

Examples of performance measures may include:

  • Customer satisfaction levels.
  • Product or service quality indicators.
  • Environmental performance metrics.
  • Occupational health and safety statistics.
  • Information security incident rates.
  • Process efficiency measurements.

Management should be prepared to demonstrate how data is collected, analyzed, and used for decision-making. Auditors may ask for evidence showing that performance trends are reviewed regularly and that actions are taken when targets are not achieved.

Conduct a Comprehensive Management Review

Management review is a fundamental requirement of most ISO standards. Before the surveillance audit, organizations should ensure that management reviews have been conducted according to schedule and that all required topics have been addressed.

A management review should evaluate:

  • Internal and external audit results.
  • Customer feedback and complaints.
  • Process performance and effectiveness.
  • Status of corrective actions.
  • Resource adequacy.
  • Risks and opportunities.
  • Achievement of objectives.
  • Opportunities for improvement.

The outputs of the management review should include decisions and actions aimed at enhancing system effectiveness. Auditors will often examine management review records to determine the level of leadership involvement and commitment.

Assess Risks and Opportunities

Modern management system standards emphasize risk-based thinking. Organizations should review their risk assessments and ensure that identified risks and opportunities remain current and relevant.

Preparation activities should include:

  • Reviewing risk registers.
  • Evaluating mitigation measures.
  • Assessing emerging risks.
  • Monitoring control effectiveness.
  • Updating risk assessments where necessary.

Auditors may seek evidence that risk considerations are integrated into planning, operations, and decision-making processes. Demonstrating proactive risk management strengthens confidence in the management system.

Evaluate Corrective Action Processes

Corrective action management is a key area of interest during surveillance audits. Auditors want to see that problems are systematically identified, investigated, and resolved.

Organizations should review all corrective actions initiated since the last audit and verify that:

  • Root causes were identified.
  • Appropriate actions were implemented.
  • Effectiveness was verified.
  • Results were documented.

A robust corrective action process demonstrates a commitment to continual improvement and helps prevent recurring issues.

Prepare Audit Logistics and Resources

Effective logistical preparation contributes significantly to a smooth audit experience. Organizations should designate an audit coordinator responsible for facilitating communication between auditors and internal personnel.

Preparations may include:

  • Confirming the audit schedule.
  • Arranging meeting rooms.
  • Ensuring access to records and documents.
  • Identifying process owners and key contacts.
  • Providing necessary equipment and internet access.
  • Organizing facility tours if required.

Well-organized logistics help create a professional impression and allow auditors to focus on evaluating the management system rather than dealing with administrative delays.

Perform a Final Readiness Check

Before the surveillance audit begins, organizations should conduct a final readiness assessment or a mock audit. This exercise helps identify any remaining weaknesses and allows employees to practice responding to auditor questions.

The readiness review should verify:

  • Availability of required records.
  • Completion of corrective actions.
  • Employee awareness.
  • Compliance with procedures.
  • Effectiveness of management system processes.

Addressing issues discovered during this final review can significantly improve audit outcomes.

Conclusion

Preparing for a surveillance audit requires commitment rather than last-minute efforts. Organizations that regularly monitor performance, conduct internal audits, maintain accurate documentation, manage risks, and implement corrective actions are generally well positioned for successful surveillance audits. By understanding the audit scope, engaging employees, reviewing management system effectiveness, and ensuring that evidence of compliance is readily available, organizations can demonstrate ongoing conformity to standards and their dedication to continual improvement. Ultimately, effective preparation transforms the surveillance audit from a compliance exercise into a valuable opportunity to strengthen organizational performance and sustain long-term certification success.

__

About the Author:

Anjalika Singh is the President of QMII (Quality Management International, Inc.), a global management systems consulting firm headquartered in Ashburn, Virginia. Over the course of her career, she has developed a sharp intuitive sense combined with strong operational and training management skills, making her a key asset in QMII’s consulting and training initiatives. Her work focuses on practical lead-auditor training and helping organizations adopt ISO and industry-specific management systems in a way that delivers real business value. Anjalika also serves as President and CEO of iCertifications, LLC, where she leads efforts to make accredited ISO certification services accessible to small and medium-sized businesses.