ISO9001 ready with Cognidox – an overview

ISO9001 ready with Cognidox (1)

4 steps to getting ISO9001 ready

Achieving ISO9001 compliance can appear daunting, but while it requires a significant investment in time and resources, using the right document management system can help lighten the load. ISO9001:2015 has a number of  key requirements — here's how you can successfully fulfil some of these in your organisation:


A major component of ISO9001:2015 compliance for any company is to produce a Quality Manual that outlines your Quality policy and objectives. Although this is no longer a mandatory document in the 2015 guidelines, there still needs to be "documented evidence" and requirements from the Quality Manual are carried over to the new standard.  This contains the scope of what is included in the Quality System, exclusions, procedures (numbered documents) and business system processes (normally in the form of flowcharts). Your document management system can help here – look for one that provides a repository so that you can store a PDF or web-viewable version of the Quality Manual on the company intranet where it is accessible to all users. Make sure that individual employees know which policy documents they need to know about, through tailored reminders that flag areas that are relevant to their role.


This mandatory procedure is key to ISO9001 compliance, and can be time consuming unless is it automated through a document management system, which allows you to manage the entire document lifecycle of draft, review, issue, approval and publish. Make sure you can identify the timeline of documents, and their history, tracking changes and when they are made, as well as highlighting external documents. An effective document management system will also remove the risk of people accidentally using obsolete versions of still-in-use documents – the single most common cause of ISO non-compliance.


ISO9001 differentiates between documents and records. Documents, such as paper-based or electronic information covering specifications or procedures, are active and dynamic. On the other hand, records are historic in nature and report the results of the analysis of business processes and actions. ISO9001 requires you to hold 21 records covering management reviews, education and training, design and development (although this is not always relevant), supplier evaluations, internal audits, product release, and validation and verification. Your document management system should make these records easy to access, while providing a detailed and clear history of any corrective or preventative measures taken, in order to comply with ISO9001. In all of these records, your document management system should supply the identification, tracking and updates of the required process in a simple, integrated solution.


This refers to documentation covering planning, operation and control procedures. Records documenting contracts, customer satisfaction, product realisation and planning should all be stored in your document management system, providing you with identification and traceability for all of these procedures, as well as providing a platform for continuous improvement.

Want to use the right document management system to ensure effective, efficient and timely ISO9001 compliance? Find out more about how Cognidox can help by looking through our features.

New call-to-action

Tags: ISO 9001:2015, Quality Management System, Document Management and Control

Paul Walsh

Written by Paul Walsh

Paul Walsh was one of the founders of Cognidox. After a period as an academic working in user experience (UX) research, Paul started a 25-year career in software development. He's worked for multinational telecom companies (Nortel), two $1B Cambridge companies (Ionica, Virata), and co-founded a couple of startup companies. His experience includes network management software, embedded software on silicon, enterprise software, and cloud computing.

Related Posts

8 tips for documenting your SOPs (Standard Operating Procedures)

There are many reasons why organisations need to document their SOPs. From ensuring uniformity in ...

Should you use Microsoft software to build your own digital QMS?

SMEs creating a digital Quality Management System (QMS) will often reach for the most familiar ...

Document Control requirements in ISO 9001:2015; what you need to know

Document control is a key part of any Quality Management System (QMS) and, therefore, a requirement ...

A short guide to non-conformance reports; what, why and how

How do you log and deal with non-conformities so that faulty products don't end up in the hands of ...

What does it take to make your TMF an eTMF?

A Trial Master File (TMF) is a comprehensive collection of documents that ensures the conduct of ...

Data integrity in life sciences: the vital role of ALCOA principles

Data integrity is central to the safe development and manufacturing of every life-science product ...

Why not just use Google Drive as a Document Management System?

Google Drive is a cloud-based program that allows you to create, edit, store, and share documents. ...

Why not just use SharePoint for your Medical Device QMS?

A Quality Management System (QMS) is a requirement for medical device developers across the globe. ...

Why not just use Dropbox as a document management system?

Dropbox is an easy to use cloud storage and sync application that is increasingly used in work ...