Auditors do not expect a one-to-one document for every ISO 9001 clause. They expect objective evidence that your processes conform to the requirements and are effective. In manufacturing, that evidence is usually a mix of documented information, system records (ERP/MES/PLM/QMS), and observable practice on the floor.
What follows is a clause-by-clause view of the typical types of evidence third-party or customer auditors will sample. Exact expectations vary by scope, risk, regulation, and how your QMS is implemented.
General points on evidence for ISO 9001
- Auditors sample; they do not (and cannot) review all records. They trace from policy to process to record and back.
- Evidence can live in multiple systems (ERP, MES, PLM, LIMS, QMS, shared drives, paper). Fragmentation is acceptable if it is controlled, traceable, and repeatable.
- For regulated / aerospace environments, evidence often needs to support additional requirements (AS9100, customer, statutory), but ISO 9001 itself remains the baseline.
- Auditors are usually more concerned with consistency and effectiveness than with template format.
Clause 4: Context of the organization
- 4.1 Understanding the organization and its context
Typical evidence:
- Risk or strategy reviews showing analysis of market, regulatory, and technical context.
- Management review inputs that discuss external/internal issues.
- Business or quality strategy decks where context is explicitly considered.
- 4.2 Understanding the needs and expectations of interested parties
Typical evidence:
- Stakeholder maps or lists (customers, regulators, certification bodies, owners, employees, suppliers).
- Customer requirements matrices, contracts, supplier quality agreements.
- Regulatory requirement registers where relevant (aviation, medical, defense).
- 4.3 Determining the scope of the QMS
Typical evidence:
- Documented QMS scope statement (often in the quality manual or equivalent).
- Justifications for any exclusions/limitations, aligned with actual operations.
- 4.4 Quality management system and its processes
Typical evidence:
- High-level process map / interaction diagrams.
- Process descriptions showing inputs, outputs, responsibilities, sequence, and criteria.
- Linkage to procedures, work instructions, and system workflows (ERP/MES/QMS).
Clause 5: Leadership
- 5.1 Leadership and commitment
Typical evidence:
- Management review records showing active leadership participation.
- Quality policy communication evidence (town halls, postings, intranet, onboarding).
- Resourcing decisions that support the QMS (headcount, equipment, training budgets).
- 5.2 Quality policy
Typical evidence:
- Approved quality policy document with revision control.
- Evidence it is communicated and understood (employee interviews, training records).
- Alignment of policy with objectives and context.
- 5.3 Organizational roles, responsibilities and authorities
Typical evidence:
- Organization charts, job descriptions, RACI matrices.
- Delegation of authority documentation (e.g., sign-off matrices, MRB membership).
- People on the floor who can explain their responsibilities relative to the QMS.
Clause 6: Planning
- 6.1 Actions to address risks and opportunities
Typical evidence:
- Risk registers, FMEA, PFMEA, or similar structured risk analyses.
- Links from identified risks/opportunities to actions, projects, or controls.
- Follow-up reviews showing whether actions were effective.
- 6.2 Quality objectives and planning to achieve them
Typical evidence:
- Documented quality objectives with measurable targets (e.g., scrap %, OTD, customer complaints).
- Action plans, owners, and timelines to achieve objectives.
- Performance trend data (dashboards, KPI reports) and management review minutes discussing results.
- 6.3 Planning of changes
Typical evidence:
- Change control records for process, product, or system changes (ECR/ECO, PCN, change requests).
- Impact assessments that consider risk, resources, validation/qualification, and documentation updates.
- Evidence that changes were implemented in a controlled manner across affected systems and documents.
Clause 7: Support
- 7.1 Resources
Typical evidence:
- Capacity and capability assessments used to plan resources.
- Calibration and maintenance records (also relevant for 7.1.5, 7.1.3).
- 7.1.2 People
Typical evidence:
- Staffing plans and resource planning related to demand.
- Evidence of adequate coverage of key roles (e.g., qualified backup for inspectors and programmers).
- 7.1.3 Infrastructure
Typical evidence:
- Equipment asset lists and layouts.
- Preventive maintenance schedules and completion records.
- Workplace environment inspections (e.g., 5S audits in some plants).
- 7.1.4 Environment for the operation of processes
Typical evidence:
- Controls on temperature, humidity, cleanliness, ESD, etc., where relevant.
- Environmental monitoring records, alarms, or logs where conditions are critical.
- Housekeeping and safety observations when walking the floor.
- 7.1.5 Monitoring and measuring resources
Typical evidence:
- Calibration records and certificates with traceability to national or international standards.
- Equipment status labeling (in calibration / out of service) aligned with records.
- MSA or Gage R&R studies where precision is critical (sometimes beyond ISO 9001 but routine in aerospace).
- 7.1.6 Organizational knowledge
Typical evidence:
- Work instructions, standard operating procedures, design standards, and lessons learned repositories.
- Mechanisms to capture and share knowledge (NCR analysis, FMEA updates, technical reviews).
- Succession or cross-training plans for critical skills.
- 7.2 Competence
Typical evidence:
- Competency matrices linking roles to required skills/qualifications.
- Training records, certifications, and on-the-job qualification sign-offs.
- Interviews with operators and engineers to confirm they are competent for assigned tasks.
- 7.3 Awareness
Typical evidence:
- Training content that covers quality policy, objectives, and the impact of nonconformity.
- Interviews on the floor demonstrating awareness (“How does your job affect product quality?”).
- 7.4 Communication
Typical evidence:
- Documented internal/external communication channels (meetings, dashboards, portals).
- Records of key communications (customer notifications of changes, supplier quality alerts).
- 7.5 Documented information
Typical evidence:
- Document control procedures covering creation, review, approval, distribution, and change control.
- Sampled procedures, work instructions, and forms showing version control and authorization.
- Evidence of obsolete documents being removed from points of use or clearly marked.
- Record control: retention policies, storage (including in MES/ERP/PLM/QMS), and retrieval performance.
Clause 8: Operation
- 8.1 Operational planning and control
Typical evidence:
- Production planning records, capacity plans, master schedules, or MRP outputs.
- Shop orders, travelers, or digital work orders showing controlled execution.
- Risk and control integration into routing, process plans, or control plans.
- 8.2 Requirements for products and services
Typical evidence:
- Contracts, purchase orders, and technical specifications with review records.
- Review/acceptance workflows (including contract review in ERP/PLM/CRM).
- Customer communication logs (RFQs, order confirmations, changes, complaints).
- 8.3 Design and development of products and services (if in scope)
Typical evidence:
- Design and development planning documents, including stages, reviews, and responsibilities.
- Design inputs (customer requirements, standards, regulations) and traceability to outputs.
- Design review minutes, verification/validation reports, and test records.
- Configuration management and change control for design data.
- 8.4 Control of externally provided processes, products and services
Typical evidence:
- Approved supplier lists and criteria for selection, evaluation, and re-evaluation.
- Supplier performance data (OTD, quality metrics) and actions taken on poor performers.
- Incoming inspection records, supplier NCRs, and deviation/concession approvals.
- Controls for outsourced processes (e.g., special processes, heat treat, NDT) and their verification.
- 8.5 Production and service provision
Typical evidence:
- Controlled work instructions, routings, travelers, and setup sheets at point of use.
- Evidence of process control (e.g., torque programs, machine programs, SPC charts, checklists).
- Identification and traceability records where required (serial/lot tracking, as-built data).
- Preservation controls: packaging, storage conditions, FOD control, shelf life management.
- Records of post-delivery activities where applicable (installation, field service, warranty).
- 8.5.1 Control of production and service provision
Typical evidence:
- Evidence that specified processes are followed (audit trails in MES, signoffs, time stamps).
- Qualification for special processes where the result cannot be fully verified by subsequent inspection.
- 8.5.2 Identification and traceability
Typical evidence:
- Part/lot/serial identification practices and labels.
- System records showing genealogy (material heat to finished part, where applicable).
- 8.5.3 Property belonging to customers or external providers
Typical evidence:
- Controls for customer-supplied materials, tooling, test equipment, intellectual property.
- Records of receipt, verification, segregation, and reporting of damage or misuse.
- 8.5.4 Preservation
Typical evidence:
- Storage conditions, FIFO/FEFO, environmental controls where required.
- Packaging specifications and records of preservation steps.
- 8.5.5 Post-delivery activities
Typical evidence:
- Warranty handling procedures and records.
- Field service, retrofit, or recall records if relevant.
- 8.5.6 Control of changes
Typical evidence:
- Production process change records (route changes, CNC program revisions, tooling changes).
- Evidence of risk assessment, approval, validation/first article where applicable.
- 8.6 Release of products and services
Typical evidence:
- Final inspection/test records tied to product identification.
- Evidence of acceptance criteria and signoff by authorized personnel.
- Certificates of conformity, inspection reports, or equivalent customer-required records.
- 8.7 Control of nonconforming outputs
Typical evidence:
- Nonconformance reports (NCRs), MRB decisions, deviations and concessions.
- Segregation/identification controls for nonconforming material.
- Rework/repair dispositions, verification of rework, and traceability to affected lots or serials.
Clause 9: Performance evaluation
- 9.1 Monitoring, measurement, analysis and evaluation
Typical evidence:
- Defined KPIs and monitoring plans (what is measured, how, how often, using which systems).
- Dashboards, reports, or logs showing actual performance and trends.
- Evidence that measurement results are used to make decisions or drive improvement.
- 9.1.2 Customer satisfaction
Typical evidence:
- Customer satisfaction surveys, scorecards, or performance reports.
- Complaint logs, portal feedback, and corresponding analysis.
- Actions taken in response to negative trends.
- 9.2 Internal audit
Typical evidence:
- Internal audit program and schedule covering all areas and clauses over time.
- Audit plans, checklists, auditor competence/qualification records.
- Audit reports, nonconformities, and follow-up corrective actions with effectiveness checks.
- 9.3 Management review
Typical evidence:
- Management review agenda and minutes showing coverage of required inputs (performance, risks, resources, opportunities, changes, audit results).
- Outputs such as decisions, action items, and resource allocations.
- Evidence that outputs are tracked to completion.
Clause 10: Improvement
- 10.1 General
Typical evidence:
- Improvement initiatives (projects, kaizen events, yield or scrap reduction programs).
- Evidence that improvement is an ongoing activity, not just reaction to problems.
- 10.2 Nonconformity and corrective action
Typical evidence:
- Corrective action records linked to nonconformities, audits, complaints, or performance trends.
- Root cause analysis documentation (5-Whys, fishbone, FMEA updates).
- Verification of effectiveness and closure records.
- 10.3 Continual improvement
Typical evidence:
- Trend analyses showing performance improvements (scrap, rework, OTD, complaint rates).
- Evidence that lessons learned are fed back into procedures, training, and design/process controls.
Brownfield and multi-system realities
In most established plants, evidence is scattered across legacy systems, paper forms, and newer digital platforms. Auditors typically accept this if you can:
- Show that each source of record is controlled (permissions, version control, backups).
- Retrieve requested evidence reliably and quickly, even if it requires multiple systems.
- Demonstrate that changes are synchronized across systems with appropriate change control and, where required, validation.
Full QMS platform replacement purely for audit convenience is rarely justified in aerospace-grade environments because of validation burden, downtime risk, long asset lifecycles, and integration complexity. Incremental digitization of key records (e.g., travelers, NCRs, calibration, training) often provides more practical audit readiness benefits with lower risk.
Practical guidance for preparing evidence
- Map each ISO 9001 clause to your actual processes and systems, not to a generic template list.
- Identify for each clause: policy/intent, procedures or system configuration, and typical records.
- Run internal audits that trace end-to-end (requirement → process → record → improvement) to test the evidence trail before external audits.
- Where evidence depends heavily on one person or one system, treat that as a risk and strengthen redundancy, training, or documentation.
Ultimately, auditors expect a coherent story: your risks and context are understood, processes are defined and followed, your records show it, and you use that information to control and improve operations.
