ISO/UNDP 53001 clause 7: what the auditor checks
ISO 53001 clause 7 groups the support requirements: resources, competence, awareness, communication and documented information. The auditor checks that the means allocated can deliver the SDG objectives, that key people are competent, that staff know the policy and their own contribution, and that documents and records are kept under control.
Updated: · edition covered: ISO/UNDP 53001:2026
ISO 53001 clause 7: means that match the objectives
In ISO 53001, clause 7 is about means. The logic of the harmonized structure is straightforward. The organisation determines and provides the human, material and financial resources the system needs. It defines the competence required of people whose work affects results, acquires or develops that competence and keeps evidence of it. It ensures that staff know the policy, how they personally contribute and what happens when requirements are not met. It decides what to communicate, to whom, when and how. And it controls both the documented information the standard requires and whatever else it considers necessary.
Where the SDGs call for particular attention
Measuring a contribution to the Sustainable Development Goals draws on skills rarely needed in a quality standard: collecting social and environmental data, calculating impact indicators, engaging with communities. The auditor therefore looks closely at whether the corresponding competences have been identified and who holds them. There is a natural link with SDG 4 on quality education when the organisation makes it a priority goal, and with SDG 8 on decent work as regards the conditions offered to staff.
As in any standard built on the harmonized structure, the communication requirement asks the organisation to decide what it communicates, when, with whom and how. For external statements about the SDG contribution, the auditor compares what the organisation says publicly with what its records show.
Five subclauses, five assessment angles
| Subclause | Purpose of the check | Preferred audit technique |
|---|---|---|
| 7.1 Resources | The means allocated (time, budget, tools, data) are sufficient to achieve the planned objectives | Interview with top management and the system manager; comparison between the action plan and the resources assigned |
| 7.2 Competence | Required competences are defined, held or acquired, and evidence is retained | Sampling of files for people in key positions; technical questions put to those people |
| 7.3 Awareness | Staff know the policy, the selected SDGs and how their work affects results | Workplace interviews with employees chosen by the auditor, including people without management duties |
| 7.4 Communication | Internal and external communications relating to the system are decided and carried out as planned | Review of a sample of materials and messages; cross-check against the expectations of interested parties |
| 7.5 Documented information | Documents are identified, current, accessible and protected, and records are retained | Document review; observation of access to documents at the workplace; a test of retrieving a given version |
Grading the findings
- Conformity: what the auditor finds on the ground matches what the documents describe, and the employees questioned can explain their part in the SDG contribution.
- Minor: one incomplete competence file among those sampled, a document circulated in an out-of-date version, a planned external message that was never published.
- Major: no real resources are assigned to the system, the people who calculate the indicators lack the competence to do so, or required documented information is missing to the point that evaluation becomes impossible.
- Aggravating factor: widespread unawareness of the policy among the staff interviewed, which points to awareness that does not exist rather than an individual lapse.
Gaps that come up repeatedly
These gaps are observed generally on the support clause of management systems; no feedback specific to ISO 53001 exists yet.
- No competence requirements defined for the roles that produce SDG data.
- Training attended but never evaluated for effectiveness.
- Frontline staff unaware that the system exists.
- Several versions of the same document in circulation with no identification rule.
- Monitoring data stored without backup or access control.
Clearance conditions on support
Under ISO/IEC 17021-1, a major nonconformity requires a correction and a corrective action that the certification body verifies before ruling. On competence, that verification rests on observable facts: training completed and evaluated, a recruitment, outside expertise brought in. The auditor may ask to question the people concerned again.
A minor nonconformity is covered by a corrective action plan accepted by the certification body, and the effectiveness of the actions is checked at the next audit. The certification decision is taken by people who did not carry out the audit.
The resources assessed here serve the operational control dealt with in clause 8 on operation; the objectives they support come from clause 6 on planning.
Frequently asked questions
Which employees does the auditor question about awareness?
The auditor picks a sample of people personally, at different levels and in different departments within the scope, and does not stick to the contacts the organisation suggests. The questions stay simple: knowledge of the policy, of the selected SDGs and of how one's own work contributes. The aim is not to test recited knowledge but to confirm genuine understanding.
Does documented information have to be on paper?
No. Any medium is acceptable: a digital tool, an intranet, paper. The auditor checks that the information is identified, current, available to those who need it and protected against loss or unintended changes. As in any harmonized-structure standard, this covers both the documented information the standard requires and the information the organisation has itself judged necessary for its system to work.
Is competence provided by an external contractor acceptable?
Yes. The harmonized structure allows competence to be acquired, including by engaging people from outside. The auditor then checks that the organisation defined the competence required and evaluated that of the contractor. Using outside expertise does not relieve the organisation of its responsibility for the results.
What does communication mean under 7.4?
It covers communications relating to the management system: what the organisation decides to communicate, internally and externally, on which subjects, at what time, to whom and through which channel. The auditor checks that these decisions exist and are applied. The editorial quality of a report is not assessed; the consistency between what is said and what the system demonstrates is.