3.3 Clause 7.1.6 & 7.2–7.4 — Organizational knowledge, competence, awareness & communication

7.1.6 Organizational Knowledge

Clause 7.1.6 requires the organization to determine the knowledge necessary to operate its processes and achieve conformity of products and services, to maintain that knowledge, and to make it available where needed. When facing changing needs and trends, the organization must consider its current knowledge base and determine how to acquire or access any additional knowledge required, and any necessary updates.

ISO 9001 illustrates organizational knowledge as coming from two broad sources:

• Internal sources — intellectual property; knowledge gained from experience; lessons learned from failures and successful projects; capturing and sharing undocumented knowledge and experience held by individuals; results of improvements to processes, products, and services
• External sources — standards; academia; conferences; knowledge gathered from customers or external providers

For an auditor, this clause is really about institutional memory risk. A classic audit trail is to ask what happens when an experienced employee retires or leaves — is critical process knowledge documented, mentored, or otherwise captured, or does it walk out the door? Organizations that can point to onboarding materials built from lessons learned, a lessons-learned log from a major nonconformity, or a mentoring handover plan are demonstrating genuine compliance; organizations that have no answer beyond "we'd figure it out" have a gap worth probing further.

This clause was new to the 2015 revision and remains one of the more lightly audited requirements simply because organizations, and sometimes auditors, forget it exists. A useful technique is to ask during a process interview: "If you left tomorrow, what would your replacement need to know that isn't written down anywhere?" A confident answer describing a handover plan, cross-training, or a documented "tribal knowledge" capture exercise is positive evidence; a long, uncomfortable pause is a signal worth exploring further, though again not an automatic nonconformity on its own.

7.2 Competence

Clause 7.2 requires the organization to:

1. Determine the necessary competence of persons doing work under its control that affects the performance and effectiveness of the QMS
2. Ensure those persons are competent on the basis of appropriate education, training, or experience
3. Where applicable, take actions to acquire the necessary competence and evaluate the effectiveness of those actions
4. Retain documented information as evidence of competence — one of the standard's mandatory documented-information requirements

A helpful note in the clause lists applicable actions: training, mentoring, reassigning currently employed persons, or hiring/contracting competent persons. The auditor should trace a specific role — say, a calibration technician or a final inspector — from the competence requirement defined for that role, through the training or experience evidence, to (where training was provided) some evidence the training was actually effective, not merely attended. A signed attendance sheet with no assessment, test, or supervised sign-off is weaker evidence than a competence record that shows the trainee was subsequently observed performing the task correctly.

7.3 Awareness

Clause 7.3 requires that persons doing work under the organization's control be aware of:

• The quality policy
• Relevant quality objectives
• Their contribution to the effectiveness of the QMS, including the benefits of improved performance
• The implications of not conforming with QMS requirements

This is the clause behind one of the most common — and most revealing — interview questions a lead auditor asks anyone on the shop floor or in an office: "What is our quality policy, and what do you personally do to help us meet our quality objectives?" A confident, specific answer (even paraphrased rather than word-for-word) is strong positive evidence of awareness; a blank stare, or an answer copied verbatim from a poster with no understanding of personal contribution, is a signal to dig further, though it is not automatically a nonconformity on its own — the auditor should sample more than one person before drawing a conclusion.

7.4 Communication

Clause 7.4 requires the organization to determine the internal and external communications relevant to the QMS, including:

Objective evidence ranges from toolbox talks, notice boards, and intranet postings for internal communication, to documented customer-complaint handling processes and supplier communication records for external communication. As with Clause 6.2's five planning questions, the auditor's checklist here maps directly onto the clause's own structure — if any one of the five elements is missing for a communication the organization claims to manage, that is a legitimate line of questioning.

Auditing These Requirements Together

Clauses 7.1.6 through 7.4 are frequently audited as a single thread during interviews, because they share a common thread: the organization's people. A strong audit trail moves from a documented competence requirement (7.2), to evidence the person received it through training or experience (7.2), to whether that person can demonstrate awareness of the policy and objectives (7.3), to whether relevant information reaches them through a defined communication channel (7.4), and finally to whether critical knowledge held by that person is protected against loss (7.1.6). Treating these as isolated checklist items misses the point; treating them as one continuous conversation with a real employee is what distinguishes a strong lead auditor from a box-ticker.