Document Control Audit Checklist [FREE PDF]

Document control is a foundational requirement of every major quality management system standard, ensuring that personnel use only current, authorized information to perform work. ISO 9001:2015 Clause 7.5 establishes detailed requirements for the creation, updating, and control of documented information including version control, access management, and protection from unintended alteration or use of obsolete documents. Inadequate document control is consistently among the most cited ISO audit fi

  • Industry: Quality Assurance
  • Frequency: Quarterly
  • Estimated Time: 45-75 minutes
  • Role: QA Manager
  • Total Items: 41
  • Compliance: ISO 9001:2015 Clause 7.5 – Documented Information, ISO 13485:2016 Clause 4.2 – Documentation Requirements, AS9100 Rev D Clause 7.5 – Documented Information Control, IATF 16949:2016 Clause 7.5.3 – Control of Documented Information, ISO 9001:2015 Clause 9.2 – Internal Audit Requirements

Document Management System (DMS) Overview

Assess whether a documented procedure and enabling system exist for controlling all quality documentation.

  • Is there a documented procedure that defines the process for creating, reviewing, approving, and distributing controlled documents?
  • Is a Document Management System (DMS) or electronic quality management system (eQMS) in use to manage controlled documents?
  • Is a master list or document register maintained that identifies the current revision status of all controlled documents?
  • Are document control responsibilities clearly assigned to a designated Document Control Administrator or equivalent role?
  • Is the document control procedure itself a controlled document with current revision, approval, and effective date?

Document Creation & Approval Process

Verify that all new and revised documents undergo a defined review and approval workflow before issuance.

  • Is there a defined approval matrix or authorization table specifying who is authorized to approve documents by type or category?
  • Do sampled documents reviewed during this audit show evidence of proper review and approval signatures or electronic approvals?
  • Is a Document Change Request (DCR) or Change Notice (CN) process in place to control revisions to existing documents?
  • Are reasons for document changes recorded and traceable in the revision history or change log?
  • Is there a minimum review cycle (e.g., annual or biennial periodic review) defined for all controlled documents?

Version Control & Document Identification

Confirm that all controlled documents carry adequate identification metadata to prevent confusion with obsolete versions.

  • Do all controlled documents include a unique document number, title, revision level, and effective date in the header or footer?
  • Is a revision history table or change log included within each controlled document recording all previous revisions?
  • Are documents clearly marked as 'CONTROLLED' or 'UNCONTROLLED COPY' to distinguish their status?
  • Are document revision levels progressing systematically (e.g., alphabetical or numerical) without gaps or duplicate revision designations?
  • For electronic documents, does the DMS automatically track and display the current version, preventing access to superseded versions for day-to-day use?

Document Distribution & Access Control

Evaluate whether current document versions are available at points of use and whether access is appropriately restricted.

  • Are controlled documents available at all points of use (workstations, production floor, labs) where they are needed?
  • Is access to create, edit, or approve controlled documents restricted to authorized personnel through role-based permissions?
  • Is there a controlled distribution list maintained for all documents issued in hard copy format?
  • Are externally originated documents (customer drawings, regulatory standards, supplier specifications) identified and controlled within the DMS?
  • Are remote workers or satellite locations provided with the same access to current controlled documents as the main facility?

Obsolete Document Retrieval & Control

Confirm that superseded documents are promptly removed from points of use and segregated or destroyed to prevent unintended use.

  • Is there a defined process for retrieving and segregating obsolete documents when a new revision is released?
  • Are any obsolete documents found at points of use during this audit (spot check of work areas and shared drives)?
  • Are obsolete documents that must be retained for legal or knowledge-preservation purposes clearly marked as 'OBSOLETE – DO NOT USE'?
  • Is there a defined retention period and disposition method (shredding, archive, secure delete) for obsolete documents?
  • Are records of obsolete document destruction or archival maintained and traceable?

Quality Records Management

Distinguish between controlled documents and quality records, and verify that records retention, legibility, and retrieval requirements are met.

  • Does the organization maintain a documented records retention schedule that defines retention periods for each quality record type?
  • Are quality records stored in a manner that ensures legibility, readability, and protection from damage, deterioration, or loss?
  • Can sampled quality records be retrieved within a reasonable time (e.g., within 24 hours for audit requests)?
  • Are electronic quality records backed up regularly with backup frequency and restoration procedures documented and tested?
  • Are customer-supplied records or customer-specific quality records managed per customer-specific requirements (CSRs)?

Training & Competency on Document Control

Verify that staff interacting with controlled documents understand requirements and have received appropriate training.

  • Have all employees whose work is governed by controlled documents received training on the current document control procedure?
  • Are training records for document control and DMS system use maintained and current for all relevant personnel?
  • Are personnel notified of document revisions that affect their work scope through a formal communication or read-and-sign process?
  • Is the Document Control Administrator trained on relevant sections of the applicable QMS standard (ISO 9001, AS9100, or ISO 13485)?
  • Are any gaps in document control training or competency identified during this audit requiring corrective action?

Audit Findings & Corrective Action Summary

Summarize audit findings, assign severity ratings, and document required corrective actions and target completion dates.

  • Were any major nonconformances (MNCs) identified during this document control audit?
  • Were any minor nonconformances or observations identified that require documented follow-up?
  • What is the overall document control audit rating for this audit cycle?
  • Detailed audit findings, nonconformances, observations, and required corrective actions?
  • Has the audit report been distributed to the process owner and quality management representative for review and acknowledgment?
  • Photograph of audit evidence samples reviewed (e.g., document register, sample controlled documents, training records)?

Related Quality Assurance Checklists

Related Continuous Improvement Checklists

Why Use This Document Control Audit Checklist [FREE PDF]?

This document control audit checklist [free pdf] helps quality assurance teams maintain compliance and operational excellence. Designed for qa manager professionals, this checklist covers 41 critical inspection points across 8 sections. Recommended frequency: quarterly.

Ensures compliance with ISO 9001:2015 Clause 7.5 – Documented Information, ISO 13485:2016 Clause 4.2 – Documentation Requirements, AS9100 Rev D Clause 7.5 – Documented Information Control, IATF 16949:2016 Clause 7.5.3 – Control of Documented Information, ISO 9001:2015 Clause 9.2 – Internal Audit Requirements. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Document Control Audit Checklist [FREE PDF] cover?

This checklist covers 41 inspection items across 8 sections: Document Management System (DMS) Overview, Document Creation & Approval Process, Version Control & Document Identification, Document Distribution & Access Control, Obsolete Document Retrieval & Control, Quality Records Management, Training & Competency on Document Control, Audit Findings & Corrective Action Summary. It is designed for quality assurance operations and compliance.

How often should this checklist be completed?

This checklist should be completed quarterly. Each completion takes approximately 45-75 minutes.

Who should use this Document Control Audit Checklist [FREE PDF]?

This checklist is designed for QA Manager professionals in the quality assurance industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists