I often wish we could shed the "Quality" term because it scares people so. It is treated as a
Jedi religion. What is
quality? It is simply
Doing things well to result in customer satisfaction. Doing stuff right so we are successful. ISO 9001 is still viewed as some kind of arduous and maybe painful initiation ceremony when the standard pretty closely resembles every business plan template or tool kit I have seen. If you can convince people in the organization of that, then buy in is easier.
You have no doubt already identified what your customers care about, what might go wrong while trying to meet their requirements and what will be done. That is
context, risk and planning.
Okay, people are doing things from memory. The term for that is
organizational knowledge. Are they doing the right thing? If yes, good. Your determining their ability to repeatedly do the right thing is
competency. Record how and when you decided that and you're good. Documenting processes - how things are done - should be based on that which would be bad if people got it wrong or the knowledgeable person disappeared and a new person needed to learn what to do.
If they are not doing the right thing, what you do in response is called
corrective action. That gets documented, you get to claim credit for it. Actions done to make sure there are no repeats are important learnings, both to give yourselves credit for that and to make tweaks if you want to make the actions better still. Doing that is
preventive action.
If you take notice of what you did while correcting a process mistake in a different process or area, that is
preventive action too. Repeating this effort is thought of as
Continual improvement and
Actions taken to address risk. Keep records of these to share with managers in Management Review.
What I am trying to say is, don't make this harder than it needs to be. I often suggest Craig Cochran's book
ISO 9001:2015 In Plain English because it does such a nice job of demystifying the standard.
I hope this helps.