ISO 9001:2015 no longer requires a Quality Manual.
One of the biggest misconceptions about ISO 9001 is that it requires organisations to produce large volumes of paperwork.
It does not prescribe one fixed document pack that every organisation must create.
Instead, ISO 9001 requires the documented information necessary to operate the Quality Management System effectively and demonstrate that important activities have taken place.
The amount of documentation should reflect the size, complexity and risks of the organisation.
A smaller business may need a relatively simple system, while a larger or highly regulated organisation may require more comprehensive controls.
The objective is practical documentation that supports the business — not paperwork created purely for an auditor.
ISO 9001:2015 no longer requires a Quality Manual.
The standard uses the term documented information instead of separate categories such as documents and records.
Some documented information is mandatory, while other documentation is created only if it supports effective operations.
The amount of documentation should reflect the size and complexity of the organisation.
Well-designed documentation should help employees perform their work consistently, not simply satisfy auditors.
Electronic document management systems are fully acceptable provided they are properly controlled.
The objective is an effective Quality Management System, not excessive paperwork.
One of the key principles of ISO 9001 is that documentation should be appropriate for the organisation.
The standard specifies what information must be controlled but generally allows organisations to decide how that information is documented.
One of the most significant changes introduced in ISO 9001:2015 was the replacement of terms such as documents, procedures and records with a single concept: documented information.
This change reflects a shift away from prescribing specific types of documentation towards allowing organisations greater flexibility in how they manage information.
Documented information includes any information that an organisation needs to control and maintain as part of its Quality Management System.
It may exist in a variety of formats, including:
The documentation should support consistent business operations, provide evidence that processes are being followed and enable the organisation to demonstrate conformity with the requirements of ISO 9001.
This flexibility allows organisations to develop documentation that reflects the way they actually work rather than forcing every business into the same documentation structure.
For example, a manufacturing company may require detailed production work instructions, while a professional services firm may rely on documented project workflows and client delivery processes.
Both approaches can comply with ISO 9001 provided they support effective process control.
Earlier editions of ISO 9001 required organisations to maintain several documented procedures and, in many cases, a formal Quality Manual.
Although these requirements helped standardise Quality Management Systems, they also led many organisations to produce documentation that existed primarily to satisfy certification audits rather than improve business performance.
ISO 9001:2015 adopted a more flexible approach.
Instead of prescribing exactly which procedures must exist, the standard encourages organisations to determine what documented information is necessary to ensure that their processes operate effectively.
As a result, two organisations performing similar activities may have very different documentation structures while both fully complying with ISO 9001.
A small engineering consultancy may manage its Quality Management System using a handful of well-designed procedures and digital records. A multinational manufacturer may require hundreds of controlled documents across multiple facilities.
Neither approach is inherently better.
The appropriate level of documentation depends on the organisation's activities, complexity, competence of its employees and operational risks.
One of the most common mistakes organisations make is developing documentation that bears little resemblance to the way work is actually performed.
Employees then continue following informal practices while the documented procedures remain unused until an audit approaches.
Effective ISO 9001 documentation should describe real business processes in a way that employees understand and can apply consistently.
Good documentation typically:
This is one of the most common questions organisations ask when preparing for ISO 9001 certification.
The short answer is:
The current version of ISO 9001 does not require organisations to maintain a Quality Manual.
This is one of the most significant changes introduced in ISO 9001:2015. Earlier editions of the standard required a documented Quality Manual that described the organisation's Quality Management System and how it met the requirements of the standard.
Today, organisations have far greater flexibility.
Instead of requiring a specific document, ISO 9001 allows organisations to decide how they document and communicate their Quality Management System, provided they maintain the documented information necessary for it to operate effectively.
The requirement was removed because many organisations created Quality Manuals that were rarely used outside certification audits.
These manuals often became lengthy documents that duplicated procedures, quickly became outdated and added little operational value.
ISO 9001:2015 shifted the focus away from prescribed documents and towards documentation that genuinely supports business processes.
Although it is no longer mandatory, many organisations still choose to maintain a Quality Manual.
A well-designed manual can:
For smaller organisations with straightforward operations, a Quality Manual can provide a simple way of bringing important information together in one place.
For larger organisations with digital management systems, integrated business platforms or extensive process documentation, a traditional manual may offer little additional value.
Rather than prescribing a fixed documentation structure, ISO 9001 identifies specific areas where documented information must either be maintained or retained.
Understanding the difference between these two concepts is important.
This refers to information that describes how the organisation operates.
Examples include:
These documents are kept up to date as the organisation evolves.
Retained documented information provides evidence that activities have been completed as planned.
Examples include:
These records demonstrate that the Quality Management System is operating effectively.
A simple way to think about the difference is:
Although ISO 9001 is flexible, there are specific pieces of documented information that organisations are expected to maintain or retain.
Below are the key documentation requirements most organisations will need to address.
The organisation must define the scope of its Quality Management System.
This explains the boundaries of the system, including the products, services, locations and activities covered by certification.
The scope helps customers, employees and certification bodies understand exactly what is included within the Quality Management System.
Top management is required to establish and maintain a Quality Policy.
The policy should:
A good Quality Policy should be concise, meaningful and relevant to the business rather than a generic statement copied from a template.
ISO 9001 requires organisations to establish measurable quality objectives.
These objectives should support the Quality Policy and provide a basis for evaluating the effectiveness of the Quality Management System.
Typical objectives might relate to:
Organisations should also maintain information describing how these objectives will be achieved and monitored.
Where necessary to ensure effective process control, organisations must maintain documented information describing how operational activities are performed.
The exact form of this documentation varies considerably.
Some organisations use:
ISO 9001 does not specify the format.
ISO 9001 also requires organisations to retain documented information demonstrating that their Quality Management System is operating effectively.
This includes evidence relating to areas such as:
The standard deliberately allows organisations flexibility in how these records are maintained, provided they remain accurate, accessible and appropriately controlled.
One of the biggest misconceptions surrounding ISO 9001 is that mandatory documentation must be lengthy or highly detailed.
In reality, the standard says very little about the length or format of documented information.
A one-page procedure may be entirely appropriate for one organisation, while another may require a far more detailed process because of its size, complexity or regulatory environment.
Auditors are not assessing how many documents an organisation has.
One of the biggest misconceptions about ISO 9001 is that every document used within a Quality Management System is mandatory.
In reality, many of the documents commonly associated with ISO 9001 are created because they help organisations manage their operations more effectively, not because the standard specifically requires them.
The level of documentation should always reflect the organisation's size, complexity, risks and operational needs.
A small consulting firm may operate effectively with relatively few controlled documents, while a manufacturing business with multiple production lines may require extensive documented processes to ensure consistent quality.
The following documents are among the most commonly used within ISO 9001 Quality Management Systems, even though they are not specifically prescribed by the standard.
Standard Operating Procedures describe how specific activities should be performed to achieve consistent results.
Examples include procedures for:
Well-written procedures reduce variation, improve training and ensure employees follow consistent methods.
However, not every activity requires a formal procedure.
Organisations should document processes where doing so improves consistency, reduces risk or supports competence.
Work instructions provide detailed guidance for performing specific tasks.
Unlike procedures, which often describe an entire process, work instructions focus on individual activities.
For example:
Many organisations present work instructions using photographs, diagrams, flowcharts or videos rather than lengthy written documents.
Process maps visually illustrate how work flows through the organisation.
Rather than relying solely on written procedures, many organisations use flowcharts to show:
Process maps are particularly useful because they help employees understand how their work contributes to the wider business process.
They are also valuable during employee induction, process improvement initiatives and management reviews.
Although ISO 9001 requires organisations to address risks and opportunities, it does not require a formal risk register.
Many organisations choose to maintain one because it provides a structured way of identifying, assessing and monitoring business risks.
A typical risk register may include:
For organisations operating in regulated or higher-risk industries, a risk register can become an important management tool even though it is not specifically required by ISO 9001.
Many organisations maintain approved supplier lists to support purchasing and supplier evaluation.
These documents often record information such as:
Maintaining this information helps organisations demonstrate that externally provided products and services are appropriately controlled.
Training matrices provide an overview of employee competence across the organisation.
They commonly identify:
These documents make it easier to identify competency gaps and plan future training activities.
Where equipment affects product or service quality, organisations often maintain asset registers that include:
These registers help organisations ensure equipment remains suitable for its intended purpose.
Another area that often causes confusion is the distinction between documents and records.
Although ISO 9001 groups both under the term documented information, they serve very different purposes.
A simple way to understand the difference is:
For example:
This distinction is important because auditors are interested in both.
Documents demonstrate how the organisation intends to manage quality, while records provide objective evidence that those processes have been followed.
Absolutely.
ISO 9001 does not require documentation to be paper-based.
In fact, many organisations now manage their Quality Management Systems entirely through digital platforms.
Examples include:
Electronic documentation often provides significant advantages, including:
Regardless of whether documentation is maintained electronically or on paper, organisations should ensure that it remains:
One of the most persistent myths surrounding ISO 9001 is that organisations improve their chances of certification by producing more documentation.
The opposite is often true.
Excessive documentation can:
The most effective Quality Management Systems are usually those with documentation that is concise, practical and closely aligned with the way the organisation actually operates.
One of the advantages of ISO 9001:2015 is that organisations have the flexibility to develop documentation that suits their own operations.
However, that flexibility can also lead to common mistakes, particularly when businesses rely on generic templates or focus on certification rather than business improvement.
Documentation should support the people using it every day, not just the certification audit.
If employees find procedures difficult to understand or impractical to follow, they are likely to develop their own informal methods of working.
The most effective documentation is clear, concise and reflects how work is actually performed.
Many organisations purchase ISO 9001 template packs and assume they are ready for certification.
While templates can provide a useful starting point, they should never replace documentation that reflects the organisation's own processes.
Auditors are looking for evidence that your Quality Management System represents how your business operates, not how another organisation operates.
Some organisations assume that more documentation automatically means better compliance.
In reality, excessive documentation often creates unnecessary administration, duplicates information and becomes difficult to maintain.
If employees stop using the documentation because it is overly complicated, it no longer adds value to the Quality Management System.
ISO 9001 encourages organisations to maintain only the documented information necessary for effective process control.
Even well-written documentation loses its value if employees are using outdated versions.
Organisations should ensure that documented information is:
Effective document control helps ensure that employees always work from the latest approved information.
Business processes change over time.
New customers, technologies, regulations and organisational structures all influence how work is performed.
Documentation should therefore be reviewed regularly to ensure it remains accurate and continues to support the organisation's objectives.
This is perhaps the most important question organisations ask when implementing ISO 9001.
The answer is refreshingly simple:
There is no required number of procedures.
There is no required number of forms.
There is no required number of pages.
The appropriate level of documentation depends on factors such as:
A small service provider with experienced staff may require relatively little documentation.
A multi-site manufacturer producing safety-critical products will almost certainly require a more comprehensive documentation structure.
Neither approach is inherently more compliant than the other.
During a certification audit, auditors do not assess organisations based on the volume of documentation they have produced.
Instead, they evaluate whether:
If documentation accurately reflects the way the organisation operates and supports consistent performance, it is far more likely to add value beyond certification.
Want to understand the complete certification journey? Read our ISO 9001 Certification Process guide to learn what to expect before, during and after your certification audit.
Not necessarily.
ISO 9001 requires organisations to maintain documented information where it is necessary for the effective operation of their Quality Management System.
Some organisations use formal procedures, while others rely on process maps, digital workflows or work instructions.
ISO 9001:2015 removed the requirement for a Quality Manual.
Organisations may still choose to maintain one if it adds value, but it is no longer a mandatory document.
ISO 9001 allows organisations to maintain documented information in any suitable format, including cloud-based document management systems, business software and digital workflows, provided the information is properly controlled and accessible.
There is no prescribed number.
The amount of documentation should reflect the organisation's size, complexity, risks and operational needs.
Documents describe how work should be performed, while records provide evidence that activities have been completed and that the Quality Management System is operating effectively.
Both are important components of documented information.
Templates can provide a useful starting point, but they should always be adapted to reflect the organisation's actual processes.
Generic templates that do not align with the way the business operates are unlikely to deliver long-term value and may create unnecessary complexity.
Developing ISO 9001 documentation shouldn't result in folders full of paperwork that no one reads.
The most effective Quality Management Systems use documented information to support consistent operations, improve communication and provide confidence that critical processes are being followed.
At ISO Specialist South Africa, we help organisations develop practical documentation that reflects the way they actually work, not generic template packs designed solely for certification.
Our ISO 9001 services include:
Whether you're developing a new Quality Management System or improving existing documentation, our consultants can help you build a system that supports both certification and long-term business performance.
CTA: Meet an ISO Specialist
Or, if you're preparing for implementation:
CTA: Download the ISO 9001 Checklist
ISO 9001 documentation is often misunderstood.
Many organisations assume the standard requires extensive manuals, numerous procedures and large volumes of paperwork. In reality, ISO 9001:2015 takes a far more practical approach.
The standard requires organisations to maintain and retain the documented information necessary to operate an effective Quality Management System.
Beyond a small number of mandatory requirements, organisations have considerable flexibility to determine what documentation best supports their business.
Documentation should help employees perform their work consistently, support informed decision-making and provide confidence that processes are operating as intended.
By focusing on practical, proportionate and well-controlled documented information, organisations can build a Quality Management System that delivers value long after the certification audit has been completed.
:::
Not sure whether your organisation is ready for ISO 9001 certification?
Our ISO 9001 Readiness Checklist helps you assess the key areas of your Quality Management System before starting implementation or preparing for certification.
It provides a practical way to identify strengths, highlight potential gaps and understand the steps needed to become certification-ready.