ISO 41001:2018: Documentation and Compliance Requirements

This guide explains, in simple language, what ISO 41001:2018 requires an organisation to have, clause by clause, and what an auditor may ask to see as evidence.

It covers the requirements under Clauses 4 to 10, including the key documents, records, processes and evidence needed to demonstrate compliance.

This is not designed as a simple checklist. Instead of only asking, “Do you have this document?”, it explains what is required and what evidence can demonstrate that the requirement is actually being followed.

4. Understanding Your Organisation and Its Facilities Needs
Clauses 4.1, 4.2, 4.3 and 4.4

Understand external factors

You need to identify the outside factors that can affect your facilities, such as:

• Changes in laws and regulations

• Property market conditions

• Health and safety requirements

• Technology changes

• Energy costs

• Weather and environmental conditions

Evidence: A documented list of these factors, including when they were last reviewed.

Understand internal factors

You also need to identify internal factors that may affect facilities, such as:

• Organisational changes

• Building occupancy

• Age and condition of buildings

• Available skills

• Budget and resources

Evidence: A documented list of relevant internal issues.

Understand organisational objectives

You need to understand what the organisation is trying to achieve and how facilities management will support those goals.

Evidence: Business plans, organisational objectives or strategic plans showing the connection with facilities management.

Identify interested parties

You need to identify people and organisations that have an interest in your facilities, such as:

• Employees and occupants

• Visitors

• Landlords

• Contractors and service providers

• Regulators

• Neighbours

• The organisation receiving the facilities service

Evidence: A list of interested parties and their relevant needs or expectations.

Understand user needs

You should ask the people who actually use the buildings what they need rather than making assumptions.

Evidence: Surveys, feedback forms, meetings or user-group records.

Identify legal requirements

You need to know which laws and regulations apply to your facilities, including requirements related to:

• Fire safety

• Health and safety

• Accessibility

• Energy

• Water

• Waste

• Other applicable statutory requirements

Evidence: A legal and regulatory register, including permits, certificates and expiry dates where applicable.

Define the scope of the facilities management system

You need to clearly define what your facilities management system covers, including:

• Buildings

• Sites

• Facilities services

• Organisational units

It should also state whether services are provided internally, externally or through a combination of both.

Evidence: A documented scope statement.

Clearly define the client and service provider

Even if the client and facilities team are part of the same organisation, their roles should be clear.

Evidence: Documentation identifying the organisation receiving the service, the facilities provider and the responsibilities of each.

Define your main processes

You need to understand the main facilities processes and how they work together.

Evidence: A process map or documented list of processes and their owners.

5. Leadership
Clauses 5.1, 5.2 and 5.3

Senior management involvement

Senior management should be actively involved in facilities-related decisions.

Evidence: Management review records, approved budgets, project decisions and other records showing management involvement.

Facilities involvement in business decisions

Facilities management should be involved early in decisions that affect buildings, workplaces and facilities, such as:

• New projects

• Office moves

• Building changes

• Organisational restructuring

Evidence: Meeting records, project documents or planning records showing facilities involvement.

Facilities management policy

You must have a documented facilities management policy.

The policy should demonstrate commitment to:

• Meeting applicable requirements

• Supporting organisational objectives

• Continually improving the facilities management system

Evidence: An approved, signed and dated policy.

Policy alignment

The facilities policy should support the overall objectives of the organisation.

Evidence: A documented connection between organisational objectives and facilities objectives.

Communication of the policy

The policy should be communicated to:

• Facilities staff

• Service providers

• Building users

Evidence: Records showing how and where the policy has been communicated.

Define responsibilities and authority

Everyone should understand who is responsible for what, including:

• The client or demand organisation

• Facilities management team

• External service providers

Evidence: Organisation charts, responsibility matrices or RACI-type documents.

Define authority and escalation

People should know:

• What they can approve

• What decisions require higher approval

• When an issue needs to be escalated

Evidence: Approval limits, escalation procedures and defined authority levels.

6. Planning
Clauses 6.1 and 6.2

Identify risks and opportunities

You need to identify what could go wrong and where improvements may be possible.

This may include:

• Equipment or asset failure

• Service failure

• Safety issues

• Legal or compliance risks

• Contractor failure

• Cost increases

• Staff shortages

Evidence: A risk and opportunity register.

Address identified risks

Risks should not simply be listed. Appropriate controls should be included in actual facilities operations.

Evidence: Controls included in maintenance plans, service specifications, procedures and contracts.

Set measurable objectives

Facilities objectives should be clearly defined and measurable.

Examples include:

• Improving service availability

• Improving safety

• Achieving compliance targets

• Reducing costs

• Improving user satisfaction

• Improving comfort

Evidence: Objectives with measurable targets or indicators.

Link facilities objectives to business needs

Objectives should focus on the results the organisation needs, rather than simply measuring how busy the facilities team is.

For example, completing 500 work orders shows activity. It does not necessarily show that facilities performance improved.

Evidence: A clear link between organisational objectives and facilities objectives.

Create action plans

For every objective, you should define:

• What will be done

• Who will do it

• When it will be completed

• What resources are required

• How success will be measured

Evidence: A documented action plan.

7. Support – People, Information and Documents

Clauses 7.1 to 7.6

Provide necessary resources

You need to provide the people, budget, equipment, technology and systems required to operate the facilities management system.

Evidence: Budgets, staffing plans, systems and equipment records.

Manage maintenance backlog

You should understand what maintenance work has been delayed and what the consequences could be.

Evidence: A backlog maintenance register showing outstanding work and associated risks or consequences.

Identify required skills and competence

You need to know what skills are required for each facilities-related role.

This may include legally required qualifications or permits for:

• Electrical work

• Gas work

• Working at height

• Confined spaces

• Water hygiene

• Asbestos-related work

• Lifting equipment

Evidence: Competency requirements by role.

Verify staff and contractor competence

You should be able to demonstrate that employees and contractors have the required qualifications and that they are still valid.

Evidence: Certificates, training records and expiry-date tracking.

Awareness of facilities requirements

Facilities staff and service providers should understand:

• The facilities policy

• Their responsibilities

• What they need to do when something goes wrong

Evidence: Induction, training and awareness records.

Building user awareness

Building users should know important information such as:

• How to report a fault

• What to do during an emergency

• Site rules

• Relevant safety requirements

Evidence: User guides, signage, induction records and communication materials.

Communication arrangements

You need to define:

• What information must be communicated

• Who needs to receive it

• When it should be communicated

• Who is responsible for communication

Evidence: Communication plan or communication matrix.

Fault and service request system

There should be a process for users to report faults and make service requests.

Requests should be:

• Logged

• Prioritised

• Responded to

• Closed properly

Evidence: Helpdesk or service-request records.

Communicate planned disruptions

Users should be informed in advance about work that may affect them, such as:

• Maintenance

• Shutdowns

• Construction

• Other planned disruptions

Evidence: Communication or notification records.

Control documents and records

You need to maintain the documents and records required by the standard.

Evidence: A document and record register.

Documents should be reviewed and approved before they are used.

Evidence: Approval records or document-control history.

Control document versions

Users should have access to the latest approved version, while obsolete versions should be controlled or removed.

Evidence: Document-control system and evidence that current versions are available where needed.

Record retention

Records should be kept for the required period, including records that must legally be retained for long periods.

Evidence: A record-retention schedule.

Manage facilities information

You should identify what information is required to operate and maintain your facilities.

This may include:

• Asset information

• Drawings

• Manuals

• Compliance records

• Maintenance information

Evidence: Documented information requirements.

Maintain an accurate asset register

Your asset register should accurately reflect the assets actually present at the site.

It should include information such as:

• Asset hierarchy

• Criticality

• Condition

• Location

Evidence: Asset register and records showing when it was physically verified.

Maintain drawings and technical information

You should have the information needed to operate, maintain and repair buildings and equipment.

Evidence: O&M manuals, drawings and as-built information.

Manage information during contract changes

When a facilities contractor changes, important information should be properly transferred to the new provider.

Evidence: Contract handover requirements and records showing that the information was transferred.

Protect organisational knowledge

Important knowledge should not be lost when an experienced employee or contractor leaves.

Evidence: Site knowledge, asset history, handover arrangements and succession plans.

8. Delivering Facilities Services

Clauses 8.1, 8.2 and 8.3

Define service requirements

For each facilities service, clearly define:

• What needs to be delivered

• Required service levels

• Quality requirements

• Response times

Evidence: Service specifications, scopes of work and performance requirements.

Plan preventive maintenance

Maintenance should be planned according to:

• Asset importance

• Asset condition

• Manufacturer requirements

• Legal requirements

• Risk

Evidence: Planned maintenance schedules and completed work orders.

Complete statutory inspections and tests

You need to ensure required inspections and tests are completed on time, such as:

• Fire safety

• Electrical systems

• Water systems

• Lifting equipment

• Pressure systems

• Gas systems

Evidence: Valid inspection certificates and records showing completion dates.

Manage reactive maintenance

Faults and urgent requests should be handled within the agreed response and resolution times.

Evidence: Records showing response and completion times.

Select and manage service providers

You need defined criteria for selecting facilities service providers.

Evidence: Selection criteria, tender documents, evaluation records and contracts.

Contracts should clearly state:

• Services to be provided

• Applicable standards

• Performance requirements

• Responsibilities

Monitor provider performance

Service provider performance should be monitored using reliable information.

Evidence: Performance reports, KPIs and verification of provider-reported information.

Manage poor provider performance

You should have evidence of how previous service failures were handled.

Evidence: Records showing the problem, corrective action and any applicable commercial consequences.

Manage contract start and end

Both mobilisation and contract exit should be properly planned.

Evidence: Mobilisation plans and exit plans covering:

• Data

• Assets

• Keys/access

• Documentation

• Knowledge transfer

Coordinate with affected parties

Before carrying out work, relevant people should be informed and involved where necessary.

This may include:

• Building occupants

• Client representatives

• Landlords

• Neighbours

• Authorities

Evidence: Meetings, minutes and agreed access or working arrangements.

Manage multiple service providers

Where several providers work at the same site, responsibilities should be clearly defined.

Evidence: Interface matrix, responsibility matrix and joint coordination meetings.

Integrate different facilities services

Facilities services should work together rather than operate as completely separate activities.

Evidence: Common reporting, shared systems, coordinated processes and clear accountability.

Identify gaps between services

You should identify areas where responsibilities may overlap or where something could be missed.

Evidence: Interface maps, incident records and corrective actions taken to close identified gaps.

________________________________________

9. Monitoring and Evaluating Performance
Clauses 9.1, 9.2 and 9.3

Define what you will monitor

You should decide:

• What will be measured

• Why it will be measured

• How it will be measured

• How often it will be reviewed

Areas may include:

• Service performance

• Legal compliance

• Asset condition

• Safety

• Energy use

• Costs

• User satisfaction

Evidence: Monitoring and measurement plan.

Verify performance information

Performance data should be reliable, especially when it comes from contractors.

Evidence: Spot checks, verification records and data validation.

Measure user satisfaction

You should obtain feedback from people using the facilities.

Evidence: User satisfaction surveys, feedback records and trend analysis.

Analyse results and take action

Simply collecting information is not enough. Results should be reviewed and appropriate actions taken.

Evidence: Analysis reports and action records.

Conduct internal audits

The facilities management system should be audited over time to check whether it meets the standard and is being effectively implemented.

Evidence: Audit programme, audit reports and findings.

Ensure auditor competence and independence

Auditors should have the appropriate knowledge and should be independent of the activities they audit.

Evidence: Auditor training, competency records and audit assignments.

Conduct management reviews

Senior management should review the facilities management system at planned intervals.

The organisation receiving the facilities service should also be involved.

Evidence: Management review records, attendance and dates.

Cover required review topics

Management reviews should consider areas such as:

• Previous actions

• Organisational changes

• Performance results

• Effectiveness of the system

• Nonconformities

• Monitoring results

• Audit results

• Objectives

• User and interested-party feedback

• Resources

• Improvement opportunities

Take decisions and actions

A management review should result in decisions and actions, not simply meeting minutes.

Evidence: Action plans showing responsibilities and target dates.

________________________________________

10. Corrective Action and Continual Improvement
Clauses 10.1, 10.2 and 10.3

Manage problems and nonconformities

When something goes wrong, such as:

• Service failure

• Missed inspection

• Safety incident

• Compliance issue

you should address the problem and identify why it happened.

Evidence: Nonconformity and corrective-action records, including root-cause analysis.

Check whether the problem exists elsewhere

You should consider whether the same issue could occur:

• At another site

• With another asset

• With another service provider

Evidence: Records showing that wider checks were carried out.

Check whether corrective action worked

After taking corrective action, you should verify that the action was effective.

Evidence: Follow-up records showing the date and results of the verification.

Demonstrate improvement

You should be able to demonstrate that facilities performance is improving over time.

Possible indicators include:

• Service performance

• Compliance completion

• Asset condition

• Energy consumption

• Costs

• User satisfaction

Evidence: Performance trends and records showing measurable improvements.

Take preventive action

You should also act on potential problems before they become actual failures.

These opportunities may be identified through:

• Asset condition surveys

• Performance trends

• Near misses

• Risk assessments

Evidence: Records showing preventive action taken before a failure occurs.

________________________________________

How to Use This Guide

ISO 41001:2018 does not simply require you to create a large manual or a collection of templates.

The main focus is on showing that important facilities management decisions have been properly planned, implemented, monitored and reviewed.

In simple terms:

Documentation alone is not compliance.

A procedure may look perfect on paper, but if employees do not actually follow it, an auditor can identify the gap between the documented process and what happens in practice.

The real test is:

Does the documented system reflect how people actually perform their facilities management responsibilities?

A practical ISO 41001:2018 system should therefore be:

• Clear

• Relevant

• Practical

• Easy to use

• Properly implemented

• Supported by objective evidence

• Regularly reviewed and improved

The goal is not to create more paperwork. The goal is to establish a facilities management system that supports the organisation, controls risks, meets applicable requirements and continuously improves performance.