Featured Video
This Week in Quality Digest Live
Standards Features
Dara Corrigan
A new path for pharmaceutical inspections in Europe and beyond
Pat Toth
Take it from a caution giver
Joe Schlecht
There’s a VIM definition and various interpretations of it: Here are a few
Mark Whitworth
Get ready for the evolved standard
Timothy Woodcome
How to eat an elephant

More Features

Standards News
Checklist helps safety managers and business leaders assess facility safety
Explains basic steps businesses can take to better protect their information systems
Program uses peer learning to enable organizations to become more effective and profitable
AIAG’s director of corporate responsibility comments on impact of new ethics language in upcoming IATF 16949
ISO 20400 will help companies achieve sustainability goals, improve supplier relations
Majority of late-September visits will be to healthcare organizations

More News








Miriam Boudreaux


Document Review: Do I Have To?

ISO 9001 requires that your procedures and work instructions are always accurate

Published: Friday, July 27, 2012 - 12:28

Deciding how to control your documents can be difficult. ISO 9001, the quality management system (QMS) standard from the International Organization for Standardization (ISO), requires you maintain accurate and up-to-date procedures, but doesn’t give a lot of guidance on how to get there. Between the requirements and the implementation lie grey areas and confusion. Let’s take a look at the difference between what is required and what is a good idea in the world of document review.

When I say procedures, what does that include?

A procedure is a way of carrying out an activity; it explains who does what, where, and when; it’s a document that defines a process. ISO requires that your procedures, work instructions, etc. are always accurate and truly represent the steps to completing a process. How you ensure that accuracy is up to you.

A procedure could describe the process for obtaining customer feedback (e.g., using scheduled customer surveys, or calling customers and saying specific scripts). Review procedures to ensure workers have the most current, complete, and accurate information to do their job.

Do you have to review your procedures once a year?

As per ISO 9001, you do not have to review procedures once a year. How often you review procedures depends on the complexity of your business activities. Some people may decide to review their documents every two years and others every three years. In a company where processes are dynamic and procedures are constantly being revised, there may not even be a need for a formal review, since the procedures are probably being reviewed every time they are updated.

So, do I really need to review procedures periodically?

If your organization doesn’t update procedures very often or isn’t well-disciplined about updating procedures every time a process changes, then it may benefit from implementing a set review time.

I once audited an organization whose procedures were 3 years old. Basically it changed its processes and never went back to update its procedures. That was not good. A lot of the information wasn’t applicable anymore. It decided to implement a set review date every year. 

On the other hand, I audited a company with procedures that were 7 years old and still accurate because its business was not dynamic. In this case, even though everything was fine, the company decided to implement a review date of every three years; perhaps this would force it to consider better ways to do things, given that technology is always changing.

Periodically conduct employee surveys regarding the usability of procedures, and schedule times to monitor and review processes to measure the performance and effectiveness of the processes to identify opportunities for improvement.

What is the final word?

Hopefully you get the idea that there isn’t a right or wrong way to do document review. Remember that ensuring that your procedures, work instructions, and forms are true to what your company actually does is the ultimate goal; your organization must decide how to accomplish that goal.


About The Author

Miriam Boudreaux’s picture

Miriam Boudreaux

Miriam Boudreaux is the CEO and founder of Mireaux Management Solutions, a technology and consulting firm headquartered in Houston, Texas. Mireaux’s products and services encompass international standards ISO and API consulting, training, auditing, document control and implementation of Web QMS software platform. Mireaux’s 6,500 square foot headquarters, located in the northwest area of Houston, houses their main offices as well as their state-of-the art training center. Mireaux itself is certified to ISO 9001:2015 and ISO 27001:2013. To get in touch with Miriam Boudreaux, please contact her at info@mireauxms.com.



Hello Miriam,

Nice article, thank you.  I often use two meanings for "procedure".  One is the ISO 9000/quality system context in which procedures are level 2 documents, distinguished from level 3 work instructions.  Another meaning for me is "all written processes" or even "all processes whether written or not".  Of course some people like to debate this meaning.  In your article you seem to use procedures to mean "all written processes".  Do you agree with that usage?  If not, what term do you use when you want to say, "procedures and work instructions, but not forms"?

Jim Cook

Procedures vs Work Instructions

Thanks for your readership Jim! Ahh...the old pyramid of procedures, work instructions, etc. You are correct, I talk about procedures in general terms because in my view everything that provides a way to do something is a procedure. So a Work Instructions is in essence a step-by-step procedure to do something. I probably should have said Documents. I do think Work Instructions should also be reviewed along with forms and any other policy or procedures. Reviewing all these "documents" on some kind of frequency should help keep the system in check - should people not be diligent about updating documents when processes change. Hope this helps! Miriam