Additional Control Measures for Outsourced Processes under ISO 9001:2008

A

Alex Brezinski

#1
What are the additional controlling measures that an organization must take in respect of their processes outsourced to external party under ISO 9001:2008 compared to ISO 9001:2000? What are the major differences and how do we implement the additional requirement? Thank you.
 
Elsmar Forum Sponsor
J

JaneB

#2
Re: Additional control measures for outsourced processes under ISO 9004:2008

What are the additional controlling measures that an organization must take in respect of their processes outsourced to external party under ISO 9001:2008 compared to ISO 9001:2000? What are the major differences and how do we implement the additional requirement? Thank you.
It isn't an 'additional' requirement. At all. There are NO - repeat, NO, new or changed or additional requirements in the 2008 version.

All the 2008 version did was clarify some points that some folks appeared to be having difficulty with.

In a nutshell: if you outsource processes or parts thereof, YOU remain responsible for the quality of the product or service. (You always were in the 2000 version, but some misguided people apparently believed that the mere act of outsourcing removed all accountability and responsib ility from them! How on earth they managed this I have no idea).

Therefore, then and now, you must have reasonable controls in place to do that. The how depends upon what you do.
 
A

Alex Brezinski

#3
Re: Additional control measures for outsourced processes under ISO 9004:2008

Hi Jane B,
Thank you very much for the reply. Appreciate it.
 
#4
I wish to add to Jane's fine response.

What is required in 4.1 is that somewhere in your quality management system you need to define the controls for outsourcing. Some auditors seem to believe that this must be done in the quality manual. Some also believe that it must be written. Neither is correct although both are good ideas.

It would be wise to at least think it through so you can demonstrate that you have good outsourcing controls. Outsourcing is usually controlled through the purchasing process. Control usually involves passing the requirements on to your supplier with purchase orders or other purchasing documentation (such as contracts). Control also involves confirming that you got what you asked for, including certificates of conformance or certificates of analysis when needed. Confirming that you got what you asked for may be a little tricky when you are dealing with services, so make sure you address that too.
 

qusys

Trusted Information Resource
#5
I wish to add to Jane's fine response.

What is required in 4.1 is that somewhere in your quality management system you need to define the controls for outsourcing. Some auditors seem to believe that this must be done in the quality manual. Some also believe that it must be written. Neither is correct although both are good ideas.

It would be wise to at least think it through so you can demonstrate that you have good outsourcing controls. Outsourcing is usually controlled through the purchasing process. Control usually involves passing the requirements on to your supplier with purchase orders or other purchasing documentation (such as contracts). Control also involves confirming that you got what you asked for, including certificates of conformance or certificates of analysis when needed. Confirming that you got what you asked for may be a little tricky when you are dealing with services, so make sure you address that too.
Agree.
Another way is to set KPI to monitor their performance , for instance.
Besides, in the case of outsourced maintenance process, you could think to have maintenance report prepared by your supplier and checked by the organization. These report of well dome maintenance could be records to show the control on the supplier. You can also have ad hoc meeting to monitor their services as well as supplier audit on their premises.
In case on construction, you can also organize audit during the time they performe agreed job. These are some examples:bigwave:
 
Thread starter Similar threads Forum Replies Date
G Sample Report to justify additional Document Control workforce Document Control Systems, Procedures, Forms and Templates 3
B AS9100 Certification Audit Accounting for Additional Customer QMS Requirements AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 15
S Additional registration requirements for different EU-states on top of standard CE-registration? EU Medical Device Regulations 3
C Performing Additional Inspections IATF 16949 - Automotive Quality Systems Standard 10
V Certified Auditor - Need of additional certification specific to industry ( GMPs) ASQ vs ECA vs others Professional Certifications and Degrees 1
L Impact on 510(k) to use an additional manufacture US Food and Drug Administration (FDA) 0
I Additional National requirements for placing MD in the EU countries EU Medical Device Regulations 7
B GM GP-12 Exit Criteria - Additional Safe Launch Inspection - (Also see GM1927-28 ) Customer and Company Specific Requirements 2
A Medical device Reporting : Good Faith Effort for Additional information Other US Medical Device Regulations 2
J CE Certificate and additional processing EU Medical Device Regulations 4
dgrainger Informational Additional Guidance Regarding the Vigilance System as outlined in MEDDEV 2.12-1 rev. 8 EU Medical Device Regulations 1
V Additional Controls for processing the raw data on different computers (processing system) Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 5
A Selling CE marked self-test in Malta - any additional requirements? EU Medical Device Regulations 0
K Letter to file vs Special 510 for additional accessory in orthopaedic kit Other US Medical Device Regulations 1
W FAIR to AS9102 additional documentation Document Control Systems, Procedures, Forms and Templates 5
C Additional Training for CCT (Certified Calibration Technician) Recertification Training - Internal, External, Online and Distance Learning 5
P Adding an additional distributor to a current Mexico Medical Device Registration Other Medical Device Regulations World-Wide 0
Q Additional KPI to Top Management beside Quality Objectives ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
Q Risk Management - Additional Process in ISO 9001:2015? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
M Changes in MDSAP regarding to CMDCAS - Are there any new additional requirements? Canada Medical Device Regulations 1
L How document an additional software of my main device software?? IEC 62304 - Medical Device Software Life Cycle Processes 3
B Additional requirements for selling Class I Medical Device in Poland EU Medical Device Regulations 3
A Special Characteristics -> Any specific additional requirements to be met? IATF 16949 - Automotive Quality Systems Standard 7
J Example of additional Audits of Remote Supporting Functions IATF 16949 - Automotive Quality Systems Standard 2
F Additional Isolation Required? Doppler Probe Desktop Device IEC 60601 - Medical Electrical Equipment Safety Standards Series 7
B Airbus & Boeing Standard and Additional Requirements AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 6
Z Getting Charged for AS9104/1 Additional Audit Time General Auditing Discussions 6
C AS 9102 Form 0 "Additional Information for High Risk Characteristics" AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
M Additional Procedures required for QA Department Document Control Systems, Procedures, Forms and Templates 10
P Does a 'recommended' additional Audit need to be conducted? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
P ISO13485 Clause 7.2.1 (d) Additional Requirements - Need advise ISO 13485:2016 - Medical Device Quality Management Systems 2
G MDLA - Extensions allowed for 60 day Request for Additional Information? Canada Medical Device Regulations 4
G Additional Intended Use Predicate 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
T Shipping Additional Product ("Bundle") with a Class 2 Medical Device 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 3
B CMDCAS versus ISO 13485 - What are the additional requirements Canada Medical Device Regulations 21
A TS 16949 5.6.2.1 - Input to Management Review - Additional Management Review Meetings and related Processes 7
B Additional Handset added to System - Additional 510(k) Requirements 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 4
S Adding an additional site to our current TS 16949 registration scope IATF 16949 - Automotive Quality Systems Standard 5
M Refurbishing a Medical Device - Any additional information needed 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
P CMDCAS Checklist with the additional requirements for Health Canada Canada Medical Device Regulations 4
B Additional site to be included in TS Cert. (Common owners & some functions) IATF 16949 - Automotive Quality Systems Standard 5
J Restructuring and Additional Responsibilities - Need New Quality Title Quality Manager and Management Related Issues 15
C Allowance for Slip Fit - Additional Allowance applied to GO NO GO Plug Gage General Measurement Device and Calibration Topics 26
Govind Additional discount on certification fee Professional Certifications and Degrees 4
S EC Official Journal Harmonized Standards - Additional requirements? ISO 13485:2016 - Medical Device Quality Management Systems 3
S Number of copies for an FDA additional information request? ISO 13485:2016 - Medical Device Quality Management Systems 3
J RoHS Compliance - Steel - Customer wants additional samples tested RoHS, REACH, ELV, IMDS and Restricted Substances 32
W Additional Regulatory Requirements for Medical Device ISO 13485:2016 - Medical Device Quality Management Systems 4
K Lead Internal Auditor Training - Does the lead auditor require additional training? Internal Auditing 6
H Additional sources for ASQ CQT exam sample questions Professional Certifications and Degrees 6

Similar threads

Top Bottom