* ISO 9001:2008 specifically requires the organization to have “documented procedures” for the following six activities: 4.2.3 Control of documents 4.2.4 Control of records 8.2.2 Internal audit 8.3 Control of nonconforming product 8.5.2 Corrective action 8.5.3 Preventive action * These documented procedures have to be controlled in accordance with the requirements of clause 4.2.3 * Some organizations may find it convenient to combine the procedure for several activities into a single documented procedure (for example, corrective action and preventive action). Others may choose to document a given activity by using more than one documented procedure (for example, internal audits). Both are acceptable. * Some organizations (particularly larger organizations, or those with more complex processes) may require additional documented procedures (particularly those relating to product realization processes) to implement an effective QMS. * Other organizations may require additional procedures, but the size and/or culture of the organization could enable these to be effectively implemented without necessarily being documented. However, in order to demonstrate compliance with ISO 9001:2008, the organization has to be able to provide objective evidence (not necessarily documented) that its QMS has been effectively implemented.