Does Changing an Organizational Structure Affect ISO Certification?

Does Changing a Company's Organizational Structure Affect Its ISO Certification? Organizations frequently change their organizational structures as their businesses grow, enter new markets, create new departments, merge functions, or redistribute responsibilities. Organizational restructuring may include: Creating a new department. Merging two departments. Eliminating a department. Changing responsibilities and authorities. Appointing new top management. Moving certain functions to another location. Establishing new branches or operational sites. Changing relationships between departments. These changes often raise an important question for organizations holding ISO certification: Does changing the organizational structure affect the ISO certificate? The answer is: Not every organizational change automatically affects ISO certification. However, certain changes may affect the management system or certification scope and therefore need to be evaluated. Can a Company Change Its Organizational Structure and Keep Its ISO Certificate? Yes. An organization can restructure its management structure while maintaining its ISO certification, provided that the management system continues to operate effectively and meet applicable requirements. For example, if a company merges its Quality Department with its Operations Department, this does not automatically make the ISO certificate invalid. However, the organization should continue to ensure that: Responsibilities remain clearly defined. Authorities are established. Processes remain controlled. Necessary resources are available. The management system remains capable of achieving its intended results. When Does Organizational Change Become Important for ISO Certification? Organizational change becomes more significant when it affects key elements of the management system. Examples include: 1. Change in Certified Activities If the organization starts a new activity or stops an activity covered by the certification scope, the certification scope may need to be evaluated. 2. Change in Locations Adding a factory, branch, or operational site may require an assessment of its effect on the certification scope and audit arrangements. 3. Major Changes to Key Processes If the way critical processes are performed changes significantly, the organization may need to demonstrate that its management system continues to meet applicable requirements. 4. Changes in Responsibilities When key responsibilities move between departments, roles and authorities should remain clearly defined and effective. 5. Change in Legal Entity Changing the legal entity is different from simply changing the organizational structure and may have a different effect on the certification. Does the Certification Body Need to Be Notified About Every Organizational Change? Not every minor organizational adjustment necessarily requires the same level of action. However, when a change may affect: Certification scope. Legal entity. Organizational sites. Certified activities. Key processes. Management system responsibilities. the organization should communicate with its certification body so that the impact of the change can be evaluated according to applicable certification requirements. What Happens During an ISO Audit After Restructuring? During a surveillance, recertification, or other applicable audit, the certification audit may consider how the organization has managed significant organizational changes. The auditor may evaluate: Current organizational structure. Distribution of responsibilities and authorities. Changes since the previous audit. Impact of restructuring on processes. Available resources. Effectiveness of the management system after the change. The objective is not to prevent organizations from restructuring, but to determine whether the management system remains effective and conforms to applicable requirements. Does Changing a Manager or Top Management Cancel ISO Certification? No. Changing the general manager or members of top management does not automatically invalidate an ISO certificate . However, management system responsibilities must remain clearly assigned, and the system must continue to operate effectively. The organization may also need to update relevant information and documented information depending on the nature of the change and applicable requirements. What Happens When Two Departments Are Merged? Merging departments is common when organizations seek to simplify their management structures. For example: Quality Department + Operations Department or: Procurement Department + Supply Chain Department The merger itself does not result in loss of ISO certification. However, the organization should ensure that responsibilities previously distributed between the departments remain properly assigned and that relevant management system processes continue to be effectively controlled and monitored. What If a New Department Is Created? Creating a new department does not automatically require an amendment to the ISO certificate. However, if the new department becomes responsible for processes within the management system scope, its responsibilities should be clearly defined and its activities should meet applicable requirements. The change may need to be evaluated by the certification body if it affects the certification scope or audit arrangements. Can Organizational Restructuring Affect the Certification Scope? It can, but not always. The key question is: Did the restructuring change the activities, locations, processes, or entities covered by the certification scope? For example, simply changing department names may have little or no significant effect. However, if restructuring introduces a new certified activity or transfers key operations to another legal entity, the certification scope may need to be reviewed. What Information Should the Company Maintain After Restructuring? The organization should maintain appropriate evidence of how significant organizational changes are managed, according to the applicable management system requirements. This may include: Updated organizational structure. Defined responsibilities and authorities. Updated process information. Changes to the management system scope where applicable. Evidence related to change management. Evaluation of the impact of significant changes where required. Maintaining appropriate information helps demonstrate that the organization has managed the restructuring in a controlled manner. Can Restructuring Result in a Nonconformity? Yes, but not because restructuring itself is a problem . A nonconformity may arise if the organizational change creates a gap in the management system. Examples include: Responsibilities for a new department are not defined. A key process loses effective control. Authorities are unclear after departments are merged. Necessary resources are no longer available. Relevant information is not updated. The organization continues operating according to an outdated structure that no longer reflects actual operations. The issue is therefore not the organizational change itself, but the organization's ability to manage the change and maintain management system effectiveness . What If Responsibility for a Process Moves to Another Department? During restructuring, responsibility for a process may move from one department to another. For example: Supplier evaluation may previously have been managed by the Procurement Department , but after restructuring it becomes the responsibility of the Supply Chain Department . This change is not necessarily a problem. However, the new responsibility should be clearly defined and the process should continue to meet applicable management system requirements. During an audit, the auditor may consider: Who is currently responsible for the process? Are responsibilities and authorities clearly defined? Do relevant employees understand their roles? Has the process continued without significant gaps? Is there objective e