3.2 Clause 7.1 — Resources

7.1.1 General and 7.1.2 People

Clause 7.1 opens by requiring the organization to determine and provide the resources needed to establish, implement, maintain, and continually improve the QMS. The organization must consider the capabilities of, and constraints on, existing internal resources, and decide what needs to be obtained from external providers. This internal-versus-external judgment is itself something an auditor can probe: a small organization that outsources calibration to an accredited third-party laboratory, rather than maintaining its own calibration lab, is making a legitimate resourcing decision under 7.1.1, provided the outsourced provider is itself competent and traceable. Clause 7.1.2 then requires the organization to determine and provide the persons necessary for the effective operation of the QMS and its processes — the staffing side of resourcing, which sets up the competence requirements covered later in Clause 7.2.

7.1.3 Infrastructure

The organization must determine, provide, and maintain the infrastructure necessary to achieve conformity of products and services. ISO 9001 gives four illustrative categories of infrastructure, and an auditor should be able to recognize evidence of each on a site visit:

• Buildings and associated utilities — facilities, power, water, HVAC
• Equipment, including both hardware and software
• Transportation resources — vehicles, forklifts, logistics equipment
• Information and communication technology — networks, servers, business systems

Maintenance is not optional: preventive maintenance schedules, breakdown logs, and IT patch/update records are all legitimate objective evidence that infrastructure is being kept fit for purpose, not just provided once and forgotten.

7.1.4 Environment for the Operation of Processes

The organization must determine, provide, and maintain a suitable environment for operating its processes. ISO 9001 frames this as a combination of human and physical factors:

• Social factors — non-discriminatory, calm, non-confrontational workplace
• Psychological factors — stress-reducing, burnout-preventing, emotionally supportive conditions
• Physical factors — temperature, heat, humidity, light, airflow, hygiene, noise

Auditors sometimes underweight this subclause because it feels "soft," but it is a real requirement and can generate legitimate findings — for example, a workshop where noise or lighting conditions demonstrably contribute to inspection errors is objective evidence of an environment not suited to the process.

7.1.5 Monitoring and Measuring Resources

This is one of the highest-yield subclauses for exam scenarios because it is where calibration lives. Clause 7.1.5.1 requires the organization to determine and provide the resources needed to ensure valid and reliable results whenever monitoring or measurement is used to verify conformity to requirements. Those resources must be suitable for the specific activity and maintained to ensure continuing fitness for purpose, with documented information retained as evidence of that fitness for purpose.

Clause 7.1.5.2 — measurement traceability — applies whenever traceability is a requirement or is essential to giving confidence in measurement results. Where it applies, measuring equipment shall be:

1. Calibrated or verified at specified intervals, or before use, against measurement standards traceable to international or national standards (where no such standard exists, the basis used for calibration must itself be recorded as documented information)
2. Identified so its calibration status can be determined at a glance (e.g., a calibration-due label)
3. Safeguarded from adjustments, damage, or deterioration that would invalidate the calibration status or the measurement results

The single most exam-relevant detail in this whole subclause is the out-of-tolerance (OOT) requirement: when equipment is found to be unfit for purpose during calibration, the organization must determine whether the validity of previous measurement results was adversely affected, and take appropriate action if it was. In practice this means tracing back to the last known-good calibration and assessing every product measured with that instrument in between — potentially triggering re-inspection, containment, or customer notification. An auditor who finds an OOT calibration certificate with no impact assessment attached has found a genuine nonconformity, because the result of the OOT finding, not just the finding itself, is what the clause requires to be addressed.

What the Auditor Checks

Typical objective evidence for Clause 7.1 (excluding 7.1.6, covered next) includes:

• Calibration certificates and the calibration schedule/register, including due dates
• Equipment identification/status labels showing current calibration status
• OOT investigation and impact-assessment records
• Traceability certificates linking the calibration back to a national or international standard (e.g., an accredited laboratory)
• Infrastructure maintenance logs and IT/software update records
• Evidence of environmental controls relevant to the process (e.g., ESD-safe workstations, cleanroom monitoring, noise or lighting assessments)

When following an audit trail through 7.1.5, always ask to see at least one OOT case, even if the organization reports none in the audit period — the auditor needs to confirm the procedure for handling an OOT result exists and is understood, not just that no OOT has happened yet.

It is also worth remembering that not every piece of equipment on site falls under 7.1.5.2. The traceability requirement applies specifically where measurement traceability is either a stated requirement (customer, regulatory, or internal) or is essential to giving confidence in the result. A tape measure used to confirm a pallet fits through a warehouse doorway typically does not need formal calibration traceability; a torque wrench used to verify a safety-critical fastener almost always does. Part of a lead auditor's judgment is recognizing which measuring instruments genuinely drive conformity decisions about the product or service, and focusing traceability scrutiny there rather than treating every tool in the building as equally regulated.