GN-IS-01

Quality Management System (Iso 9001)

1.0 — April 2026Review April 2027RICS-regulated QS firms (England & Wales)

Purpose

A Quality Management System (QMS) is the documented framework through which a QS firm controls and continually improves the quality of its professional services. ISO 9001:2015 — 'Quality Management Systems: Requirements' — is the internationally recognised standard against which a firm's QMS is assessed. It is applicable to organisations of any size and sector, including professional services firms such as quantity surveying practices.

For a QS firm, operating to ISO 9001:2015 principles directly supports compliance with RICS Rule 3 (good-quality and diligent service) and Rule 2 (professional competence). A well-implemented QMS helps the firm consistently deliver cost plans, valuations, and contract advice of a defined and controlled standard — reducing errors, managing risk, and demonstrating systematic quality assurance to clients, frameworks, and regulatory monitoring bodies.

While formal ISO 9001 certification requires third-party audit by an accredited certification body (such as BSI, NQA, or Bureau Veritas), many QS firms implement a QMS that conforms to the standard's principles without seeking external certification. Whether certified or not, operating to ISO 9001 gives the firm an auditable quality framework that supports both RICS compliance and client confidence.

Key Principles

  • ISO 9001:2015 Structure — Clauses 4–10 — The standard has 10 clauses; Clauses 1–3 are introductory. The operative requirements are Clauses 4 (Context), 5 (Leadership), 6 (Planning), 7 (Support), 8 (Operation), 9 (Performance Evaluation), and 10 (Improvement). Clause 8 is the most operationally detailed — it governs how professional services (cost plans, reports, valuations) are delivered, reviewed, and released. (BS EN ISO 9001:2015, BSI)
  • Risk-Based Thinking (Clause 6.1) — A fundamental shift in the 2015 revision is the explicit requirement for risk-based thinking throughout the QMS. The firm must identify risks and opportunities affecting QMS performance — not just quality of deliverables, but risks to the system itself (e.g., key person dependency, IT failure, loss of accreditation, market change). These must be addressed through planned actions, not merely documented. (ISO 9001:2015, Clause 6.1)
  • Leadership Commitment (Clause 5) — ISO 9001:2015 requires top management — the principals or directors — to personally demonstrate commitment to the QMS. This means setting a Quality Policy, assigning responsibilities, ensuring adequate resources, and actively participating in management review. The QMS cannot be fully delegated to an office manager or quality coordinator. (ISO 9001:2015, Clause 5.1)
  • The Four Mandatory Documents — Under ISO 9001:2015, only four documents are explicitly mandatory: (1) the QMS Scope (Clause 4.3); (2) the Quality Policy (Clause 5.2); (3) measurable Quality Objectives (Clause 6.2); and (4) documented supplier/subconsultant evaluation criteria (Clause 8.4.1). The Quality Manual — mandatory under the 2008 version — is no longer required, though many firms retain one as a consolidated reference. (ISO 9001:2015, Clauses 4.3, 5.2, 6.2, 8.4)
  • Competence and Training Records (Clause 7.2) — The firm must determine the competence required for each role affecting quality, ensure staff have that competence (through education, training, or experience), take action where gaps exist, and retain evidence of competence. For a QS firm, this means: a competence/training matrix for all fee earners; training records; CPD logs; and RICS membership records linked to role requirements. Effectiveness of training must be evaluated — not just attendance recorded. (ISO 9001:2015, Clause 7.2)
  • Commission Review and Service Delivery Control (Clause 8) — Before accepting an instruction, Clause 8.2 requires the firm to review and document client requirements and its own capability to deliver. During delivery, Clause 8.5 requires controlled processes. Before releasing a deliverable (cost plan, report, valuation) to the client, Clause 8.6 requires evidence of authorisation — a peer-review or partner sign-off record showing that the output was checked before issue. (ISO 9001:2015, Clauses 8.2, 8.5, 8.6)
  • Client Satisfaction Measurement (Clause 9.1.2) — The firm must monitor client perception of how well services meet their requirements. This does not prescribe a specific method, but in practice a QS firm should implement post-project client feedback forms, track results over time, and address any recurring negative themes. Client satisfaction data must feed into the Annual Management Review as one of the required inputs. (ISO 9001:2015, Clause 9.1.2)

Practical Application

Step 1
Define the QMS Scope: Write a one-page Scope document stating: (a) which services are covered (e.g., cost planning, tendering, contract administration, final account — all RIBA stages); (b) which locations or offices are included; (c) any exclusions from the standard and justification (e.g., Clause 8.3 design and development may be excluded where the firm does not design products, but must be justified). The scope must be documented and available as a controlled document.
Step 2
Write and Issue the Quality Policy: Draft a short (half-page) Quality Policy signed by the principal/director: (a) state the firm's commitment to meeting client requirements and continually improving; (b) provide the framework for setting Quality Objectives; (c) ensure it is communicated to all staff — circulate at induction and display in the office/shared drive. Review annually. The policy need not be elaborate — a clear, genuine statement of intent suffices.
Step 3
Set Measurable Quality Objectives: Establish at least 3–5 specific, measurable Quality Objectives. Examples for a QS firm: 'All cost plans are peer-reviewed before issue — target: 100% compliance'; 'Client satisfaction survey score: minimum average 4/5'; 'Zero cost plan errors reported by clients per quarter'; 'All RICS members complete 20 hours CPD — target: 100% compliance'; 'Annual Return filed by RICS deadline — 100%'. Track objectives monthly and review at management review.
Step 4
Document Key Procedures: Create written procedures for the following processes (1–2 pages each): (a) Commission Review Procedure — how the firm assesses and accepts instructions; (b) Document Control Procedure — version numbering, template management, archiving; (c) Subconsultant Evaluation Procedure — how specialists are approved and monitored; (d) Client Communication and Feedback Procedure — how client satisfaction is measured; (e) Nonconformance and Corrective Action Procedure. These are the five procedures a QS firm most needs for a functional QMS.
Step 5
Implement Document Control: Number and date-stamp every template, procedure, and reference document in the QMS. Maintain a Document Register listing: document title, reference number, version, date, owner, and status (current/superseded). Ensure only current versions are in active use — move superseded versions to an archive folder. All mandatory records (commission reviews, audit reports, NCRs, management review minutes, competence records) must be retained for a minimum of 6 years.
Step 6
Build the Competence Matrix: Create a simple table: rows = all fee earner roles; columns = competence requirements for that role (e.g., RICS qualification, NRM knowledge, JCT contract experience, BIM competence, CPD hours). For each cell, record: current status (competent/in development/gap) and evidence reference (training record, RICS membership number, CPD log). Review and update when roles change or new staff join. This is the primary evidence document for Clause 7.2 audits.
Step 7
Conduct Annual Management Review: At least once per year, hold a formal Management Review meeting with all principals/directors. The agenda must cover all required inputs under Clause 9.3.2: internal audit results; client satisfaction data; nonconformance and corrective action status; objectives performance; supplier/subconsultant performance; resource adequacy; risk register; and changes to external context. Record formal minutes documenting decisions made. The minutes are a mandatory record under the standard.

Common Mistakes to Avoid

  • Setting quality objectives that are not measurable — for example, 'improve client satisfaction' without a defined metric, baseline, and target. ISO 9001:2015 Clause 6.2 explicitly requires objectives to be measurable and monitored. Unmeasurable objectives are one of the most common major nonconformities raised by certification body auditors.
  • Failing to evaluate the effectiveness of training (Clause 7.2d). Recording that an employee attended a CPD event is necessary but not sufficient — the firm must also assess whether the training improved competence. This can be as simple as a post-training conversation, assessment, or review of subsequent work quality, but it must be documented.
  • Creating a QMS that exists only as documents — procedures that are written but not followed in practice. Internal audits must verify that documented procedures are actually applied to real projects and commissions. A gap between documented procedures and actual practice is the most common category of audit finding across all industries, including professional services.
  • Excluding Clause 8.3 (Design and Development) from scope without adequate justification. While a standard QS firm can legitimately exclude 8.3 (which relates to designing new products or services rather than delivering established services), this must be documented and justified. Simply not mentioning it is insufficient — the scope document must explicitly note the exclusion and the reason.
  • Treating client satisfaction as optional. Clause 9.1.2 is mandatory — if the firm does not have a documented mechanism for measuring client perception, it does not conform to the standard. A simple annual client satisfaction survey or post-project debrief form with results retained on file is sufficient for a small QS firm.

APC Competency & Quick Reference

This topic is relevant to the following APC competencies:

  • Conduct Rules, Ethics and Professional Practice (Level 3)
  • Client Care (Level 2)
  • Quality Management (where applicable)
  • Business/Practice Management
What are the four documents explicitly mandated by ISO 9001:2015, and how does this differ from the 2008 version?
ISO 9001:2015 mandates only four documents: (1) QMS Scope (Clause 4.3); (2) Quality Policy (Clause 5.2); (3) measurable Quality Objectives (Clause 6.2); and (4) documented supplier/subconsultant evaluation criteria (Clause 8.4.1). The 2015 version removed the mandatory requirement for a Quality Manual that existed in ISO 9001:2008. The manual is now optional but many firms retain it as a consolidated QMS reference. The 2015 revision also introduced risk-based thinking (Clause 6.1) and elevated the role of leadership (Clause 5) as explicit requirements.
How does ISO 9001:2015 Clause 8.6 apply to the release of a QS cost plan to a client?
Clause 8.6 requires that planned arrangements be implemented to verify that service outputs conform to requirements before they are released to the client. For a QS cost plan, this means having a documented and consistently applied peer-review or partner sign-off process before issue. The firm must retain evidence of this authorisation — typically a sign-off record, email confirmation, or a completed QA checklist attached to the job file. A cost plan issued without documented review fails Clause 8.6 and constitutes a nonconforming output under Clause 8.7 if an error is subsequently identified.
A QS firm is implementing its first QMS. What are the five most important procedures to document, and why?
The five most operationally critical procedures are: (1) Commission Review Procedure (Clause 8.2) — controls how the firm accepts instructions and documents client requirements; (2) Document Control Procedure (Clause 7.5) — prevents use of superseded templates and manages version control; (3) Subconsultant Evaluation Procedure (Clause 8.4) — governs how specialists are approved and monitored; (4) Nonconformance and Corrective Action Procedure (Clause 10.2) — ensures errors are documented, root-cause analysed, and resolved; and (5) Internal Audit Procedure (Clause 9.2) — defines how audits are planned, conducted, and reported. Together these address the most common audit findings and support effective QMS operation.

Quality Management System (ISO 9001) Checklist

QMS Scope document written, approved, and available
Quality Policy signed by principal/director and communicated to all staff
Measurable Quality Objectives set, monitored, and reviewed
Risks and opportunities formally identified and addressed
Competence/training matrix in place for all fee earners
Document Register maintained — all templates version-controlled
Commission Review Procedure documented and applied to all new instructions
Pre-issue peer-review/sign-off applied to all deliverables before client release
Subconsultant Register maintained — evaluation criteria documented
Client satisfaction measurement in place — results retained
Annual Management Review conducted and minuted — all Clause 9.3.2 inputs covered
Nonconformance Register maintained — all NCRs root-cause analysed

CPD Learning Outcomes

  • Explain the structure and operative requirements of ISO 9001:2015 Clauses 4–10 as applied to a QS professional services firm, distinguishing between mandatory documents, mandatory records, and recommended practice.
  • Design a proportionate Quality Management System for a small QS practice, including QMS Scope, Quality Policy, Quality Objectives, and the five key operational procedures.
  • Apply ISO 9001:2015 Clause 8.6 controls to the pre-issue review and release of QS deliverables, and identify the evidence requirements that demonstrate conformance during an internal or external audit.

Further Reading

  • BS EN ISO 9001:2015 — Quality Management Systems: Requirements — BSI Group: https://www.bsigroup.com/en-GB/standards/bs-en-iso-9001/
  • RICS Rules of Conduct, October 2021 (effective 2 February 2022) — Rule 3: Good-Quality and Diligent Service — RICS: https://www.rics.org/content/dam/ricsglobal/documents/standards/2021_roc_en.pdf
  • Advisera — List of Mandatory Documents Required by ISO 9001:2015: https://advisera.com/9001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-90012015/
  • ASQ — ISO 9001:2015 Overview: https://asq.org/quality-resources/iso-9001
  • RICS Practice Management Guidelines — RICS: https://www.rics.org/profession-standards/rics-standards-and-guidance
Subscriber Content

Sections 3–8 are for subscribers

Your subscription unlocks Practical Application steps, Common Mistakes to Avoid, APC Quick Reference, the Stage Checklist, CPD Learning Outcomes, Further Reading, and all production-ready templates.