ISO 21001:2025: Documentation and Compliance Requirements

It covers 81 requirements across 7 main areas.

This is not meant to be a checklist. A checklist only asks, “Do you have this?” This document explains what you need to do and what evidence can show that you are actually doing it.

If you first want to understand where your organisation currently stands, you can use an ISO 21001:2025 readiness assessment to identify gaps and measure your level of preparedness.

________________________________________

4. Understanding Your Organisation and the People You Serve

Clauses 4.1, 4.2, 4.3 and 4.4

Understand external factors

You need to identify the outside factors that can affect your organisation, such as:

• Laws and regulations

• Accreditation requirements

• Funding

• Competition

• Technology

• Changes in learner numbers

Evidence an auditor may ask for:

A documented list of these factors, including when they were last reviewed.

Understand internal factors

You also need to identify internal factors that affect your organisation, such as:

• Employees and staffing

• Buildings and facilities

• Financial resources

• Organisational structure

• Internal processes

Evidence:

A documented list of internal issues.

Identify learners and other beneficiaries

You need to identify your learners as well as other people or groups who benefit from your services, such as:

• Parents or guardians

• Employers

• Funding organisations

• Government bodies

• The wider community

Evidence:

A list clearly separating learners from other beneficiaries.

Understand their needs

You must identify what each group expects or needs from your organisation.

Evidence:

A documented list of needs and expectations for each group.

Identify applicable requirements

You need to know which requirements apply to your organisation, including:

• Laws

• Regulatory requirements

• Accreditation requirements

• Affiliation requirements

• University or awarding-body requirements

Evidence:

A legal, regulatory, accreditation and affiliation requirements register with review dates.

Define the scope of your education system

You must clearly define what your management system covers, including:

• Programmes

• Education levels

• Campuses or locations

• Learner groups

• Delivery methods such as classroom, online, blended or work-based learning

Evidence:

A documented scope statement.

Identify your main processes

You need to understand your key processes and how they are connected.

Evidence:

A process map or a list of processes with responsible persons.

________________________________________

5. Leadership and Focus on Learners

Clauses 5.1.1, 5.1.2, 5.1.3, 5.2 and 5.3

Top management must be involved

Senior management should be able to show that important decisions are made using the education management system.

Evidence:

• Management review records

• Academic board minutes

• Staffing decisions

• Resource approvals

• Other management decisions

An auditor may ask management directly about these decisions.

Understand learner needs

You should find out what learners actually need instead of making assumptions.

Evidence:

• Learner surveys

• Learner councils

• Student representatives

• Feedback systems

• Records showing that feedback was acted upon

Understand other beneficiaries

You should also understand the needs of parents, employers, funders and other relevant groups.

Evidence:

• Employer feedback

• Parent engagement records

• Stakeholder meetings

Focus on learner outcomes

Your decisions should consider learner results and outcomes, not only the number of learners.

Evidence:

• Achievement results

• Progression rates

• Completion rates

• Decisions based on learner performance

Support learners with special educational needs

If you provide education to learners with special educational needs, this must be considered in your management and delivery arrangements.

Evidence:

• Special-needs policy

• Support arrangements

• Relevant resources

If this does not apply, document why it is not applicable. Simply assuming that no learner has additional needs is not sufficient.

Have an education policy

You need a documented education policy that commits the organisation to:

• Meeting applicable requirements

• Improving continuously

• Providing quality education

Evidence:

A signed and dated policy.

The policy should reflect your mission

The policy should match your educational purpose and the principles of ISO 21001, including:

• Fair access

• Inclusion

• Ethical behaviour

• Learner focus

Evidence:

A clear connection between your policy and your educational mission.

Communicate the policy

Staff and learners should know about the policy.

Evidence:

• Website

• Notice boards

• Student handbooks

• Staff communication

• Other published information

Define responsibilities

Everyone should know who is responsible for teaching, administration and other important activities.

Evidence:

• Organisation chart

• Roles and responsibilities

• Job descriptions

________________________________________

6. Planning

Clauses 6.1, 6.2 and 6.3

Identify risks and opportunities

You must identify things that could negatively affect your education system as well as opportunities for improvement.

Consider areas such as:

• Academic risks

• Operational risks

• Learner safety

• Financial risks

• Reputation

Evidence:

A risk and opportunity register with actions and responsible persons.

Set measurable objectives

You need clear objectives that can be measured.

They may relate to:

• Learning outcomes

• Learner satisfaction

• Progression

• Completion

• Retention

Evidence:

Objectives with measurable targets.

Create action plans

For every objective, clearly define:

• What needs to be done

• Who will do it

• When it will be completed

• What resources are needed

• How success will be measured

Evidence:

An action plan covering these points.

Control changes

When you introduce a major change, you should plan it before implementing it.

Examples include:

• New programme

• New campus

• New delivery method

• New technology

• Change in regulations

Evidence:

Change-management records showing that the impact was considered before implementation.

________________________________________

7. Support – People, Facilities and Information

Clauses 7.1.1 to 7.5.3

Provide necessary resources

Your organisation must provide the people, money, facilities, equipment and systems needed to deliver education effectively.

Evidence:

• Budgets

• Staffing plans

• Facilities

• Equipment

• IT systems

Define staff competence

You need to know what qualifications, knowledge and skills are required for each teaching and support position.

Evidence:

A competence matrix or role-wise competence requirements.

Verify staff competence

You should be able to prove that employees actually have the required qualifications and skills.

Evidence:

• Qualification records

• Registration records

• Recruitment records

• Experience records

• Expiry tracking

Develop teaching staff

Teaching staff should receive appropriate professional development, and the organisation should check whether the training is effective.

Evidence:

• Training plans

• Training records

• Teaching observations

• Performance reviews

• Peer reviews

Maintain suitable facilities

Classrooms, laboratories, workshops, libraries and other facilities should be suitable, safe and properly maintained.

Evidence:

• Facility inspection records

• Maintenance records

• Safety records

• Safeguarding arrangements

Ensure accessibility

Buildings, learning materials and digital platforms should be accessible to learners and staff with disabilities.

Evidence:

• Accessibility arrangements

• Reasonable adjustments

• Accessible learning materials

Provide a suitable learning environment

The learning environment should support learners' safety, wellbeing and development.

Evidence:

• Anti-bullying arrangements

• Wellbeing support

• Pastoral support

• Learner conduct rules

Ensure measurement and assessment are reliable

Where equipment or assessment tools are used to measure important results, you need to ensure that the results can be trusted.

Evidence:

• Calibration records

• Equipment checks

• Assessment reliability checks

Protect organisational knowledge

Important knowledge should not exist only in one person's mind.

Evidence:

• Course materials

• Schemes of work

• Documented processes

• Handover arrangements

Maintain competence records

You should be able to show what competence each role requires and how each person meets those requirements.

Evidence:

Competence criteria and supporting evidence for each employee.

Special-needs staff competence

If you support learners with special educational needs, the staff supporting them should have suitable training.

Evidence:

Specialist training records.

If not applicable, document the reason.

Make staff and learners aware

Staff and learners should understand:

• Relevant policies

• Their responsibilities

• What to do when something goes wrong

Evidence:

• Induction records

• Awareness sessions

• Communication records

An auditor may also ask staff or learners directly.

Plan communication

You should decide:

• What needs to be communicated

• To whom

• When

• How

Evidence:

A communication plan or communication matrix.

Communicate with all learner groups

Communication should reach:

• Full-time learners

• Part-time learners

• Online learners

• Distance learners

• Work-based learners

Evidence:

Records showing how each group receives information.

Make communication accessible

Information should be understandable and accessible.

This may include:

• Simple language

• Different languages

• Alternative formats

• Accessibility support

Evidence:

Translated or adapted communication materials.

Control documented information

You need to maintain the documents and records required by the standard.

Evidence:

A document and record register.

Approve documents before use

New or revised documents should be reviewed and approved before they are used.

Evidence:

Approval records or approval details on the document.

Ensure people use current documents

Staff and learners should be able to access the latest versions of relevant:

• Curriculum documents

• Assessment documents

• Policies

• Procedures

Evidence:

Document distribution or access arrangements.

Protect learner records

Learner records must be:

• Secure

• Accessible only to authorised people

• Retained for the required period

• Protected from loss or damage

Evidence:

• Retention schedule

• Secure storage

• Access controls

• Backup arrangements

________________________________________

8. Delivery of Education

Clauses 8.1.1 to 8.7

Plan programme delivery

Each programme should be properly planned, including:

• Staff

• Timetable

• Learning resources

• Facilities

Evidence:

• Programme plans

• Academic calendar

• Timetable

• Resource allocation

Define learner performance requirements

You should clearly define what learners need to achieve.

Evidence:

• Pass marks

• Progression requirements

• Award criteria

Prepare for disruptions

You need arrangements for situations such as:

• Teacher absence

• Facility problems

• Technology failure

• Other disruptions

Evidence:

Backup and contingency arrangements.

Support learners with special needs

Where applicable, special educational needs should be considered during:

• Teaching

• Learning materials

• Assessment

• Support activities

Evidence:

• Individual support plans

• Adjustments

• Specialist involvement

• Parent involvement where appropriate

Provide clear programme information

Before enrolment, learners should know:

• Learning outcomes

• Entry requirements

• Programme duration

• Delivery method

• Assessment method

• Award or qualification

Evidence:

Approved programme specifications.

Provide honest pre-enrolment information

Prospective learners should receive clear information about:

• Fees

• Responsibilities

• Programme outcomes

• Other important conditions

Evidence:

• Prospectus

• Website information

• Fee schedule

• Pre-enrolment documents

Confirm the organisation can deliver the programme

Before launching a programme, confirm that you have:

• Qualified staff

• Suitable facilities

• Required resources

• Necessary approvals

Evidence:

Programme approval or readiness review.

Apply admission criteria consistently

Admission requirements should be applied fairly and consistently.

Evidence:

• Admission records

• Applied criteria

• Approved exceptions

Control programme design

When creating or changing a programme, the process should be planned and approved.

Evidence:

Programme design plan with responsibilities, stages and approvals.

Define design requirements

Before designing a programme, understand:

• Learner needs

• Legal requirements

• Regulatory requirements

• Accreditation requirements

• Employer expectations

• Accessibility needs

Evidence:

Documented design inputs.

Document programme design outputs

The final design should cover:

• Syllabus

• Teaching methods

• Assessment

• Resources

• Learning outcomes

Evidence:

Approved programme documents.

Review and verify programme design

A suitable person should review and verify the design before delivery.

Evidence:

• Design review records

• Verification records

• Validation records

• Independent or external feedback

Control programme changes

Changes to programmes should be controlled, including consideration of their effect on learners who are already enrolled.

Evidence:

Change records and impact assessments.

Control external providers

If you use external organisations or people, such as:

• Partner institutions

• Franchise partners

• Guest lecturers

• Placement providers

• Outsourced services

you must control and monitor them.

Evidence:

• External provider register

• Agreements

• Performance monitoring

• Verification of teaching or assessment

Monitor delivery

You should confirm that education is being delivered as planned.

Evidence:

• Attendance records

• Session records

• Syllabus coverage checks

Control assessments

Assessments should be:

• Fair

• Secure

• Properly designed

• Properly conducted

• Properly marked

Evidence:

• Assessment policy

• Examination security

• Academic integrity controls

• Plagiarism controls

Moderate marking

Marks should be reviewed or checked to ensure consistency and fairness.

Evidence:

• Internal moderation

• External examiner reports

• Verification records

Handle complaints and appeals

Learners should have a clear way to:

• Make complaints

• Appeal results

These should be handled within defined timelines.

Evidence:

• Complaint procedure

• Appeal procedure

• Complaint/appeal register

• Outcomes

• Resolution timelines

Trace learner work

You should be able to identify and track each learner's work throughout the assessment process.

Evidence:

Identification and tracking of assignments, examination scripts and assessment records.

Protect learner property

If you hold property belonging to learners or other parties, it must be protected.

Evidence:

• Property records

• Records of loss or damage

Protect learner information and work

Learner records and work should be protected against:

• Loss

• Damage

• Unauthorised access

Evidence:

• Storage controls

• Backups

• Access controls

Protect learner data

Learners should know:

• What personal data you collect

• Why you collect it

• How it is used

• Who it may be shared with

Evidence:

• Privacy notice

• Data records

• Purpose of data collection

• Consent records where consent is used

Control access and deletion of data

Access to learner records must be controlled, and data should be deleted when the retention period ends.

Evidence:

• Access controls

• Retention schedule

• Disposal records

• Controls over third-party learning platforms

Control changes during delivery

If the programme needs to change after it has started, the change should be controlled and communicated to learners.

Evidence:

• Change records

• Communication records

Approve results and awards

Results, progression decisions and certificates should be reviewed and approved by authorised people before being released.

Evidence:

• Result approval records

• Certificate controls

• Transcript controls

Correct problems

If something goes wrong, such as:

• Incorrect marking

• Missed syllabus content

• Invalid assessment

the organisation must identify and correct the problem.

Evidence:

• Nonconformity records

• Corrective actions

• Records showing how affected learners were supported

• Authorisation records

________________________________________

9. Monitoring and Evaluation

Clauses 9.1, 9.2 and 9.3

Decide what to measure

You need to define what will be measured and how often.

Examples include:

• Achievement

• Progression

• Retention

• Completion

• Learner destinations

Evidence:

A monitoring and measurement plan.

Measure learner satisfaction

You should regularly find out what learners think.

Evidence:

• Satisfaction surveys

• Results

• Trends

• Improvement actions

Get feedback from other beneficiaries

Feedback should also be collected from relevant groups such as:

• Parents

• Employers

• Funders

Evidence:

Feedback records and analysis.

Get staff feedback

You should understand how staff view the organisation and its education system.

Evidence:

Staff surveys or feedback records.

Analyse the results

Collecting data is not enough. You should analyse it and take action where needed.

Evidence:

• Data analysis

• Comparison between learner groups or cohorts

• Improvement actions

Conduct internal audits

The management system should be audited regularly, covering all relevant requirements over time.

Evidence:

• Internal audit programme

• Audit plans

• Audit reports

• Findings

• Corrective actions

Ensure auditor independence

Auditors should be competent and should not audit their own work.

Evidence:

• Auditor training records

• Competence records

• Audit assignments

Conduct management reviews

Senior management should review the education management system at planned intervals.

Evidence:

• Management review schedule

• Meeting records

• Attendance

Cover required topics during management review

The review should consider areas such as:

• Previous actions

• Changes affecting the organisation

• Learner feedback

• Beneficiary feedback

• Objectives

• Programme performance

• Audit results

• External providers

• Resources

• Opportunities for improvement

Take decisions and actions

Management review should result in actual decisions and actions, not just meeting minutes.

Evidence:

• Decisions

• Action plans

• Responsible persons

• Target dates

________________________________________

10. Corrective Action and Continuous Improvement

Clauses 10.1, 10.2, 10.3 and 4.4

Look for opportunities to improve

You should actively look for ways to improve instead of waiting for problems to occur.

Evidence:

• Improvement register

• Improvement projects

• Completed actions

Correct problems and find the cause

When something goes wrong, you should:

1. Identify the problem

2. Correct it

3. Find out why it happened

4. Take action to prevent it from happening again

Evidence:

Nonconformity and corrective action records with root-cause analysis.

This applies to both academic and administrative problems.

Check whether the problem exists elsewhere

If a problem occurs in one programme or campus, check whether the same issue exists in:

• Other programmes

• Other campuses

• Other learner groups

• Other cohorts

Evidence:

Records showing that the organisation checked for similar problems elsewhere.

Check whether corrective action worked

After taking corrective action, you should check whether the solution was effective.

Evidence:

Follow-up records with dates and results.

Show improvement in learner outcomes

Improvement should be visible in actual results, not only in documentation.

Look at trends in:

• Achievement

• Progression

• Retention

• Completion

• Learner destinations

Evidence:

Comparison of results across different cohorts or periods.

Demonstrate inclusion and social responsibility

Fair access, inclusion and social responsibility should be visible in actual operations.

Examples include:

• Fair admission policies

• Fair fee policies

• Support for financially disadvantaged learners

• Language support

• Physical accessibility

• Monitoring participation of under-represented groups

• Monitoring their outcomes

These are important principles of ISO 21001:2025, not simply optional activities.

________________________________________

How to Use This Document

ISO 21001:2025 does not simply require you to create a large manual, hundreds of templates or a complicated filing system.

The main requirement is that your organisation should be able to show that important decisions have been properly planned, implemented, monitored and reviewed.

The focus should be on what your organisation actually does.

More documents do not automatically mean compliance.

A long procedure that nobody follows can create a bigger problem than having a short, practical procedure.

An auditor will look for the difference between what is written and what actually happens.

The best approach is to document your processes in a way that reflects the real work of your organisation.

In simple terms:

Do what you say.

Document what matters.

Keep evidence of what you do.

Review the results.

Correct problems.

Keep improving.

That is the practical approach to implementing an effective ISO 21001:2025 Education Management System.