Top management must set and resource policies and objectives, appoint a management representative and make the system documentation available to the people who need it.
What applies today
Top management must set, write down and keep current its policies and objectives for fulfilling the standard and the certification scheme, and ensure they are acknowledged and implemented at every level of the organisation. It must provide evidence of its commitment to developing and implementing the management system and to its effectiveness in achieving consistent fulfilment. It must appoint a member of management who, whatever else they do, is responsible and authorised to ensure that the processes and procedures needed for the system are established, implemented and maintained, and to report to top management on the system's performance and any need for improvement. All documentation, processes, systems and records related to the standard must be included, referenced or linked to the management system documentation. Everyone involved in certification must be able to reach the sections of the documentation and related information that apply to their responsibilities.
Why it matters
The clause is about a system that is actually used. Policies and objectives that exist only for the audit, or a management representative with a title and no authority, do not meet it. The access rule is practical: an evaluator who cannot find the current procedure will invent a way of working. The link rule stops the certification process from sitting outside the management system as a separate collection of files.
The public FDIS contents lists clause 8.2 as General management system documentation (Option A). This site uses the shorter label General management system documentation for the page. The FDIS requirement wording is not held, so the requirement above is the 2012 text that applies until publication.
Where this clause lands in the revision
Clause 8 is where the 8.8 replacement meets management review, internal audit and corrective action. The public record confirms the titles; the requirement wording is not held. A first artefact an assessor commonly asks for here is current policies and objectives with acknowledgement records. The party this touches first is Top management and the management representative.
What the assessor asks for
| Category | Artefact to have ready |
|---|---|
| Policies and objectives | Current policies and objectives with acknowledgement records |
| Commitment | Board minutes, resources or decisions showing top management involvement |
| Appointment | Written appointment and authority of the management representative |
| System map | Map linking the standard's requirements to documents and records |
| Access | Evidence that each role can reach the documents it needs |
One common question. ask an evaluator to find the current procedure for their task. A system that only the quality manager can navigate fails the access test.
Common failures
- The management representative is the quality manager with no authority over certification
- Objectives are financial only and never touch certification performance
- The system map stops at clause level and does not link to records
Prepare before publication
Ask three people in different roles to find the document that governs their next task. Record how long it takes.
Dates that matter
The public record gives stage 50.20 on 4 August 2026 and voting to 27 October 2026. The planning date, 15 February 2027, is an estimate from that stage and not an ISO date, and clause 8.2 has no separate date.
Cross-references
5.1 Organizational structure and top management · 8.1 Management system options · 8.3 Control of documents · 8.5 Management review
Source
Source for 8.2: ISO/IEC 17065:2012, Clause 8.2, with the ISO/IEC FDIS 17065 public record. Our statement, not the instrument verbatim; the FDIS wording is not held.
Not legal advice; does not certify. A reading of the requirement and the evidence an assessor commonly samples, not a substitute for the standard or your accreditation body's rules.