Featured Product
This Week in Quality Digest Live
Standards Features
Catherine Cooksey
Ensuring that measurements aid the broader industrial and scientific communities that depend on them
Clare Naden
One way is through a system of conformity assessment to ISO standards
Shaneé Dawkins
Research focuses on ensuring first responder communication tools are designed to meet users’ operational needs
Sheronda Jeffries
Inclusion of ISO 13485 certificates in IAF CertSearch could help protect first responders
Grant Ramaley
Verify ISO QMS certificates using the International Accreditation Forum (IAF) CertSearch database

More Features

Standards News
Design, develop, implement, continually improve risk management in systems and software engineering
ISO/IEC/IEEE 16085 has just been updated
Patient safety is a key focus in update of ISO 14155, the industry reference for good practice in clinical trials.
Is the standard adequate, or should it be improved? Deadline: Dec. 31, 2020
Good quality is adding an average of 11 percent to organizations’ revenue growth
Awards to be presented March 24, 2020, at the Quest for Excellence Conference, in National Harbor, MD
How the nation’s leading multistate cannabis company ensures quality and safety standards
New auditors must pass the exam before auditing for GFSI-recognized certification programs
ISO and WHO are working for universal access to quality health products that are all at once safe, effective, and affordable

More News

Miriam Boudreaux


Document Review: Do I Have To?

ISO 9001 requires that your procedures and work instructions are always accurate

Published: Friday, July 27, 2012 - 12:28

Deciding how to control your documents can be difficult. ISO 9001, the quality management system (QMS) standard from the International Organization for Standardization (ISO), requires you maintain accurate and up-to-date procedures, but doesn’t give a lot of guidance on how to get there. Between the requirements and the implementation lie grey areas and confusion. Let’s take a look at the difference between what is required and what is a good idea in the world of document review.

When I say procedures, what does that include?

A procedure is a way of carrying out an activity; it explains who does what, where, and when; it’s a document that defines a process. ISO requires that your procedures, work instructions, etc. are always accurate and truly represent the steps to completing a process. How you ensure that accuracy is up to you.

A procedure could describe the process for obtaining customer feedback (e.g., using scheduled customer surveys, or calling customers and saying specific scripts). Review procedures to ensure workers have the most current, complete, and accurate information to do their job.

Do you have to review your procedures once a year?

As per ISO 9001, you do not have to review procedures once a year. How often you review procedures depends on the complexity of your business activities. Some people may decide to review their documents every two years and others every three years. In a company where processes are dynamic and procedures are constantly being revised, there may not even be a need for a formal review, since the procedures are probably being reviewed every time they are updated.

So, do I really need to review procedures periodically?

If your organization doesn’t update procedures very often or isn’t well-disciplined about updating procedures every time a process changes, then it may benefit from implementing a set review time.

I once audited an organization whose procedures were 3 years old. Basically it changed its processes and never went back to update its procedures. That was not good. A lot of the information wasn’t applicable anymore. It decided to implement a set review date every year. 

On the other hand, I audited a company with procedures that were 7 years old and still accurate because its business was not dynamic. In this case, even though everything was fine, the company decided to implement a review date of every three years; perhaps this would force it to consider better ways to do things, given that technology is always changing.

Periodically conduct employee surveys regarding the usability of procedures, and schedule times to monitor and review processes to measure the performance and effectiveness of the processes to identify opportunities for improvement.

What is the final word?

Hopefully you get the idea that there isn’t a right or wrong way to do document review. Remember that ensuring that your procedures, work instructions, and forms are true to what your company actually does is the ultimate goal; your organization must decide how to accomplish that goal.


About The Author

Miriam Boudreaux’s picture

Miriam Boudreaux

Miriam Boudreaux is the CEO and founder of Mireaux Management Solutions, a technology and consulting firm headquartered in Houston, Texas. Mireaux’s products and services encompass international standards ISO and API consulting, training, auditing, document control and implementation of Web QMS software platform. Mireaux’s 6,500 square foot headquarters, located in the northwest area of Houston, houses their main offices as well as their state-of-the art training center. Mireaux itself is certified to ISO 9001:2015 and ISO 27001:2013. To get in touch with Miriam Boudreaux, please contact her at info@mireauxms.com.


Need clarification

Dear Ma, your article is very helpfu. Thanks

Please i need a clarification on the below question:

Does a manual/procedure have to be re-authorized once the top management changes? For example, the authorized person who prepared the documents resigned from the company, and a new person employed?

Thank you in advance

Re-authorization of Manual post Management Change

Hi Miriam,

Thanks for the great article and sharing your expertise.

Does a manual have to be re-authorized once the top management changes? For example, a CEO who authorized the manual is succeded, does the new CEO have to re-authorize and sign the same?



Updating Quality Manual

Hi Miriam.

If you audit a plant and found out that the Quality Manual was created 4 years ago - would it be a major non-conformance or a minor non-conformance? Several members of the Quality Management team are not connected in the company.



Hello Miriam,

Nice article, thank you.  I often use two meanings for "procedure".  One is the ISO 9000/quality system context in which procedures are level 2 documents, distinguished from level 3 work instructions.  Another meaning for me is "all written processes" or even "all processes whether written or not".  Of course some people like to debate this meaning.  In your article you seem to use procedures to mean "all written processes".  Do you agree with that usage?  If not, what term do you use when you want to say, "procedures and work instructions, but not forms"?

Jim Cook

Procedures vs Work Instructions

Thanks for your readership Jim! Ahh...the old pyramid of procedures, work instructions, etc. You are correct, I talk about procedures in general terms because in my view everything that provides a way to do something is a procedure. So a Work Instructions is in essence a step-by-step procedure to do something. I probably should have said Documents. I do think Work Instructions should also be reviewed along with forms and any other policy or procedures. Reviewing all these "documents" on some kind of frequency should help keep the system in check - should people not be diligent about updating documents when processes change. Hope this helps! Miriam