How to meet the competence requirements for ISO certification

Qudos Management Pty Ltd.
November 2025

ISO standard clause 7.2 Competence

Qudos Management Pty Ltd. September 2025

All of the ISO management system certification standards have requirements for ensuring the competence of your workers. In all the major standards, those requirements are in Clause 7.2 Competence– there’s consistency for you!

This clause ensures that people are competent to perform their roles effectively and is critical to the success of any management system. Those people may be employees or others involved in your organisation (e.g. volunteers, contractors etc.).

For businesses preparing to implement a management system and achieve certification to one or more standards such as ISO 9001 (Quality Management), ISO 27001 (Information Security), and ISO 14001 (Environmental), understanding and meeting the competence requirements in Clause 7.2 is essential.

Here, we sum up the 4 major elements of those requirements and explain what you might do to meet them:

1. Define role-specific competence

Start by identifying the skills, qualifications, and experience required for each role that affects quality or information security. This includes frontline staff, managers, and support personnel. Tip: Clear Job Descriptions and a competence matrix can help you to map out these requirements.

For ISO 27001, this step is particularly important for roles with access to sensitive data or responsibility for security controls. ISO 9001 would naturally focus on roles that might impact your service delivery or product quality experienced by your customers. The same principle applies to all the other certification standards with respect to their relevant topic.

You also need to consider the issue competence for those with responsibility for developing and maintaining the management system itself.

2. Evaluate current capabilities

Assess whether your team meets those defined requirements. This can be done through:

• Reviewing resumes, experience and qualifications
• Conducting performance appraisals / periodic reviews
• Using skills assessments or feedback tools

This step helps identify gaps that need to be addressed.

3. Address gaps proactively

If gaps are found, there are really 3 alternative options to obtain the necessary competency. They are:

• Providing training or mentoring to enhance the competency of existing workers
• Hiring new personnel that already have the required competency
• Outsourcing tasks to competent providers

Tip: Documented training plans aligned with business objectives or address identified risks will show certification auditors that you’re serious about competence.

4. Keep records of competency

Maintaining evidence of competence is a certification requirement. Keep records such as:

• Training attendance and completion
• Professional qualifications
• Competency assessments

These records demonstrate compliance and support continual improvement. You can keep records in any form that works for you – from hard copies to computer files.

Tip: The modern trend is to use a software application that will secure store your records centrally, aid searching, and automatically generate reminders for licences or training that need to be refreshed.

Why It Matters

Competence isn’t just a checkbox-it’s a foundation for building trust, reducing risk, and achieving certification success. By following a structured approach, your business will develop a more robust management system, be better prepared for certifcation audits and be more capable of sustaining long-term performance.

Contact Qudos today to learn how we can help you build a secure, compliant, and high-performing integrated management system. Contact us