Document Control ISO 9001:2015 Explained

Document Control ISO 9001:2015 Explained

by -
document_control_isoupdate

By Pierre Servan CEO, Principal Consultant, Factor Quality Inc.

Do I need Document Control?

In my years of performing third party Quality Management System (QMS) audits, gap assessments and internal audits, a common question about document control people ask is:

 “Do I need to control this document?”

Over the years I’ve noticed Document Control has received “a bad reputation” in quality circles.  It does not matter if it’s a procedure, work instruction, or form; One of these pesky documents is bound to be in the wrong place at the wrong time.

Recently, I have noticed that these document control issues are decreasing due to new tech solutions that help organizations manage documents. Nevertheless, the question persists, “to control or not control a document?”


Factor Quality - ISOUpdate.comSponsored Article

Are you looking for recommendations for Quality software? Factor Quality has the experience you need for options you can rely on. Contact us Today!


To Control or not Control a Document?

Without dwelling in the details of ISO 9001 requirements regarding document control and in the spirit of keeping it simple, the intent of the standard’s requirement is straightforward. The aim of the standard is once your organization determines the need for a document (i.e. means to convey critical information or template to collect data) then logic dictates that you want to make it available to those who need it and want to make sure the information is always accurate.

“Document Control is having a way to ensure that information remains relevant, up-to-date, accessible and aligned to the strategy”. – Pierre Survan, Factor Quality

ISO 9001 does not handcuff organizations in dictating specific required procedures. Each organization is free to decide what documents need to be created and controlled.

The expectation is that when you make the decision you ensure the document aligns with the nature of the business and any requirements that need to be met.

Thou shall not use the standard’s name in vain

The ISO gives general rules for document control, that when used appropriately, do help businesses.

At Factor Quality, we’ve heard statements about document control such as:

“This document cannot be used because it is not in an ISO format.”

“That document requires to be approved by two supervisors, a manager and the CEO per ISO requirements.”

“That document is missing a document #, what section of the standard it belongs to so that I know how to number it.”

“That document is only important to our department, so it does not need to be controlled.”

Did you know ISO provides a general requirement for organizations, it does not tell you how many approvers certain documents need to have?

Nor does it prescribe a document format or a document ID# (i.e. QAP-1001ab). These are misconceptions that have been circulating for a long time.

Let’s clear some misconceptions:

  1. ISO 9001 does not establish a minimum of approvals required,
  2. ISO 9001 it does not provide a format for documents nor does it require you to have a document number.

In my opinion, the “bad rep” of document control has mostly been driven by the way companies have decided to control their documents and some lack of understanding of the standard, leaving many confused and somewhat irritated. All these requirements are self-imposed by each organization. The company defines the policy of how many approvers are needed for documents, what type of format is to be used and how to identify it.” – Pierre Survan, Factor Quality

Important Note: Stay Curious and Question Decision Making – If you don’t like current document control methods within your organization, ask the owners of document control why they consider the current method correct. And under no circumstance should you accept “Because ISO requires it,” as an answer.

How Do We Control Documents?

While ISO 9001 does not mandate specific formats, identifier or number of approvals, the documents created for the organization must meet a certain set of criteria to be considered as controlled effectively.

Remember –when you create a document you need to make sure the correct version is available to all in the business.

Requirements You Need to be Aware of with ISO 9001

Documents can be in any media

“Any Media” means document scan be written in paper, electronic, even video formats. The documents can be written, pictorials, flow charts, or a combination of these. Just remember it needs to make sense to your organization.

Documents Need to be Identified

There is no need to have document numbers unless you believe these are needed and are helpful to your business. A simple identifier is the title of the document and if this appears in the footer or header of each page, the document is indeed identified.

Documents Need to be Approved

Designate a person or group of people with the authority to determine suitability for your business. Ideally, that person is always aligned to the strategic direction of the business and understands the implications of such a document.

Documents Need to be Controlled

  • Version Control: Documents must have an identifiable version visible throughout the document. This allows you to determine if the right version of the document is being used. The version can be alphanumeric or by date.
  • Distribution Control: Documents must be made available and accessible for use. They need to be maintained in a manner so points of use can be readily updated when changes occur, that only authorized changes are made, and documents remain legible over time.

Keeping Document Control Effective

Over the years some of the most infamous controls deployed by overly careful document control administrators have been:

  • Document Stamps: Stamps showing the document status such as: “Reference Only,” “Uncontrolled,” “Not a Controlled Document,” “Master Copy,” etc.
  • Footer Controls: “Not valid if printed,” “Check system for latest version,” “Not valid after 24 Hours,” etc.
  • Watermark Controls: Using watermark to notate “Draft”, “Controlled”, “Uncontrolled”, etc.

All these are methods of control but can be misunderstood by those using them. For example, could you have the correct stamp, footer, or watermark, but have no way to ensure that people do not change the document, even on accident? Can these controls show that the document approvals were adequate? Can a stamp prevent someone from receiving an outdated version of the process?

Do not assume that if the correct stamp, footer, or watermark is used, that is enough to demonstrate robust document controls.

Remember, these are just controls and as such, auditors will always check for effectiveness.

It doesn’t matter how big and bright the stamp, footer, or watermark is – when evaluating Document Control, auditors will consider valid the document the employee/operator points or shows.

What is the Most Common Document Control Issue When Employees are Asked: “What Document do you Use?”

“Employees proudly say, ’this one’, as they pull it out from their toolbox or desk drawer, and in most cases, these copies are out of date”. – Pierre Survan, Factor Quality

Summary of document control

Document Control’s purpose is to help the business document those items that are critical to its own functionality. 

These documents should align with the strategy and help the business meet requirements in a consistent manner.

How much or how little you control these documents is a decision made by each company.

At Factor Quality, our best advice is to Keep it Simple! The well-being of the organization should always be put before the need of a group or department. Make sure every document is needed, because when a document is really needed it will be easy to control, maintain and keep relevant.

Document control structures can be reviewed, revamped and reset during the lifetime of a Quality Management System. Organizations should review their systems and ensure that they are leveraging existing and available resources to support their own documented systems. Factor Quality is here to guide you through this unpopular mythical creature called Document Control without Process Improvement Services. We have experience using several document control systems, from software solutions to self-contained systems, we can recommend the best simple, but effective solution for your business.

Let us help you set a new document control structure or revamp your current system to its most effective. Take advantage of our knowledge in the industry! This article was originally published here by Factor Quality and has been published on ISOUpdate with permission from Pierre Servan.


About the Author

Pierre Servan | CEO, Principal Consultant, Factor Quality Inc.

Factor Quality - ISOUpdate.comFactor Quality was founded in 2011, with a vision to help fix quality issues, improve businesses, and help them get certified. Pierre never thought he would encounter such a rewarding industry with clients that appreciated his work, students that appreciated his words, partners that helped him and consultants/colleagues that appreciated him and what he had to say. Today, Factor Quality helps organizations take the next step in their quality journey and service the following certification: ISO 9001, ISO 14001, ISO 13485, ISO 16949, ISO 17025, ISO 45001, AS9100, AS9110 & AS9120. If you are interested in learning more about Factory Quality, visit them at www.factorquality.com/

12 COMMENTS

  1. Hello,

    Not to underestimate all importance of having documentations control, but I feel this is a little frustrating factor in how agile organizations want to be. I’m saying so for a simple situation that I’m currently facing. I joined a year back, and I wanted to have as efficient business processes as possible, thus we decided to move towards digitizing all approved forms and move them to SharePoint as much as we can. By doing this, not to mention the benefit of utilizing everyone’s time efficiently, minimizing the approval cycle-time, monitoring & reporting the activities, etc., but it will also imply that these new digital forms are by default controlled ones. Thus, in my opinion they need not to be pre-checked by the Quality team as it will take them time (even few days!) to get them approved. Having said that, I still totally agree that some kind of documentations to illustrate this form is a must, but can be done later on.

    How do you see that view?

    Hope to hear from you soon.

    Regards,

    • I agree, not every single document, in your case-forms, warrants an approval of the Quality Department. That should be the role of the process owner to do so. The fact that a company utilizes electronic systems for their document control is just a step in the right direction. However, the approval workflow might indeed reflect the culture of the organization. – Factor Quality

  2. What are thoughts of wanting to pilot a new document structure concurrent with the existing document in the company’s QMS? Should the details of how this will be done be captured in a change control or can the redlines of this proposed document structure be available without a need for controlling their existence?

    • Provided the requirements of ISO 9001, 7.5 are met, the standard does not prescribe a specific approach to this type of situation and it would be up to the individual organization to decide how to implement their new document structure. I hope that this response has been helpful.

  3. If you are only changing the Document Number or say a type-o do you have to give it a new revision number?

    • This is a great question! However, this is not something the ISO 9001:2015 standard dictates. It would be the organizations’ responsibility to address this within their own Documentation Control procedures. Consider defining this process well to determine what warrants a revision and what does not. Hope that helps! – ISOUpdate

  4. Hello,
    If the document has a form#, revision and date and the format did not change, but the information on it did, as an example for a Job Description Document, the person’s title changed and who they report to changed and it was approved and dated, would the revision for the document itself have to change?

    Thank-You,
    Maura

Leave a Reply