ISO 9001 Quality Manual Template: What to Include and What Auditors Check

Your ISO 9001 quality manual is the document that describes how your quality management system works. It tells auditors — and your own staff — what your business does to manage quality, who is responsible, and how processes connect.

Most UK SMBs get the quality manual wrong. They produce 80-page documents nobody reads, or thin summaries that leave auditors asking questions for hours. This ISO 9001 quality manual template gives you a practical structure with detail on what UKAS-accredited auditors actually check.

Does ISO 9001 require a quality manual?

Strictly speaking, no. ISO 9001:2015 removed the explicit requirement that existed in the 2008 edition. Clause 7.5 requires "documented information" but does not prescribe a manual format.

In practice, every UKAS-accredited auditor expects one. Without it, they search through scattered documents, which extends your audit days and cost. A typical Stage 1 audit for a 10-50 person company is 1-2 days (per IAF MD 5 audit duration tables). A well-organised manual keeps you at the lower end.

Write one. Keep it between 15 and 25 pages. Treat it as a working document.

ISO 9001 quality manual template: 8 sections

1. QMS scope and exclusions (Clause 4.3)

List your products/services by name, every site where the QMS applies, and any clause exclusions with justification. The most common exclusion is Clause 8.3 (Design and Development) for businesses manufacturing to customer specifications.

Auditors check: Is the scope realistic and consistent with what you deliver? Are exclusions justified?

2. Normative references

One paragraph referencing ISO 9001:2015 (or the 2026 revision) and ISO 9000:2015 for vocabulary. Auditors rarely spend time here.

3. Context of the organisation (Clause 4)

Document external issues (regulations, market conditions — reference specific legislation like the Building Safety Act 2022 or UK GDPR where relevant), internal issues (staff capability, infrastructure), interested parties, and their requirements.

Auditors check: Is this specific to your business? "Our key customers require 48-hour turnaround on quotations" passes. "Customer requirements are met" does not.

4. Quality policy (Clause 5.2)

One page from top management. Must include commitments to meeting requirements and continual improvement. Avoid generic statements. "We deliver structural engineering reports with zero calculation errors, reviewed by a chartered engineer before release, within 10 working days" is useful. "We are committed to excellence" is not.

Auditors check: Can the MD explain it? Can a site worker describe what it means for their work?

5. Quality objectives (Clause 6.2)

Each objective needs: what will be achieved, how measured, resources required, who is responsible, and a deadline. Example: "Reduce complaint rate from 4.1% to below 2.5% by December 2026, measured monthly."

Auditors check: Are they measurable? Is there tracking data? Objectives unchanged for two years suggest the system is inactive.

6. Roles, responsibilities, and authorities (Clause 5.3)

Define top management, quality manager, process owners, and all staff responsibilities. Use a RACI chart for teams above 20 people.

Auditors check: Do staff know their QMS responsibilities? Is the quality manager given authority to act?

7. Process map and interactions (Clause 4.4)

This is the section auditors value most and SMBs under-invest in. Map customer-facing processes (enquiry to delivery), support processes (purchasing, HR, maintenance), and management processes (audit, review, corrective action).

Use a one-page interaction diagram showing inputs, outputs, and connections. For each process, identify the owner, applicable clauses, records generated, and KPIs.

Auditors check: Do documented processes match reality? Can staff explain how their process connects to others?

8. Reference to supporting procedures

Do not embed every procedure. Reference them: internal audit (Clause 9.2), management review (Clause 9.3), corrective action (Clause 10.2), control of nonconforming outputs (Clause 8.7), document control (Clause 7.5). The manual provides the map; procedures provide the detail.

What auditors actually focus on

UKAS auditors spend most quality manual review time on four things:

1. Scope and exclusions — accurate and justified?
2. Process interactions — does the business understand how processes connect?
3. Consistency with practice — does the manual match what employees do?
4. Management involvement — is top management engaged?

They spend minimal time on formatting or length. A 15-page manual passes the same audit as a 60-page one — usually faster.

Common over-documentation mistakes

Copying ISO clauses verbatim. Describe what your business does, not the standard's requirements. Auditors can read ISO 9001 themselves.

Documenting aspirational processes. If the manual says you hold monthly data analysis meetings but you never have, that is a nonconformity. Only document what you do.

Including every work instruction. Work instructions belong in a separate library. The manual describes what; instructions describe how.

Neglecting version control. A manual last reviewed in 2023 raises questions at a 2026 audit. Review annually, aligned with your management review (Clause 9.3).

Practical takeaway checklist

1. Use the 8-section structure above as your template
2. Keep each section to 1-3 pages (15-25 pages total)
3. Write in plain English — not ISO jargon
4. Include a one-page process interaction diagram
5. Reference supporting procedures rather than embedding them
6. Have someone outside the quality function read it — if they cannot understand your QMS, rewrite
7. Set a review date and record who approved each version

If you are preparing for the ISO 9001:2026 revision, your manual structure will need updating. Use the clause comparison tool to see what moved. For a quick readiness assessment, try the ISO 9001 readiness quiz. And if you have not done a structured gap analysis yet, start with our ISO 9001 gap analysis checklist.

This article is for general informational purposes only and does not constitute legal, regulatory, or professional compliance advice. ISO certification requirements vary by scope, sector, and certification body. Always verify requirements with your UKAS-accredited certification body or a qualified consultant before making compliance decisions.