Control Over Outsourced Processes - Share some experiences and methods

somashekar

Staff member
Super Moderator
#1
My interest is in gathering the best practices of control over outsourced processes, more so if the outsourcing is from an other city or country. Just an ISO 9001 tag of the supplier does no good as its not a direct control. The point is control of every batch that is outsourced. Processes like PCB assembly, Moulding, Metal finishing, and such. Can we share some experiences and methods in getting the desired results from the control methods adopted ..... and further, do IS0 13485 certified companies drive the suppliers who provide such outsourced processes to be certified to same quality system standard ??
:cool:
 
Elsmar Forum Sponsor
T

Trackerii

#3
The requirement is to show control over the outsorced processes. To show control you should have a written agreement/specification and a metric to prove that you are indeed in control. Lately FDA has been very interested on this subject see below:

Of particular interest is the last paragraph that clearly recognizes the existance of "internal suppliers."

FDA is stressing the importance of complying with supplier controls in an effort to stem the rising number of recalls associated with vendor-provided products.
“We as an industry have to start focusing in on this,” Kim Trautman, FDA GMP/quality systems expert, told “The Silver Sheet.” As industry has “become more globalized,” she says, “it has started to outsource a lot more things. In doing so, it has now started to stretch its controls of those suppliers thinner and thinner.”
Trautman and other FDA officials are speaking at industry conferences and workshops to highlight vendor issues and remind companies of their responsibility to abide by the purchasing controls section of the Quality System Regulation.
The agency’s interest in boosting manufacturers’ understanding of this issue was sparked in part by an observation it made when analyzing recall information provided by firms, Trautman says. The data often indicates that companies are reporting supplier troubles as the root cause of failure in their devices.
“When the recalls come in and they’re identifying some of the causes for the recall, it seems to be more prevalent within the past five or so years that they are supplier issues,” she says.
Although Trautman admits that there has not been a formal FDA analysis to determine whether poor supplier controls are leading to more recalls, she notes that “when we looked at ... some of the very specific examples we’ve had on the device side recently, there have been a lot of supplier issues.”
One of the more high-profile examples Trautman points to is the supplier trouble that plagued Guidant and forced the company to conduct numerous recalls of implantable cardioverter defibrillators (ICDs) and pacemakers. In a 2005 recall, the firm blamed a faulty supplied magnetic switch as the reason why some Contak Renewal devices were malfunctioning.
More recently, Boston Scientific – which purchased Guidant last year – initiated a recall April 5, warning users that batteries in 73,000 Contak Renewal and Vitality ICDs could run out faster than indicated on their label. In a letter to physicians, Boston Scientific said it identified low-voltage capacitors from a former supplier that may be subject to degradation and cause accelerated battery depletion.
The action was reminiscent of three Class II recalls carried out by the company last year in which devices also were malfunctioning due to the failure of capacitors from a component supplier.
When a company encounters supplier problems such as those faced by Boston Scientific, “what they’re not doing well is one of two things. Either they’re not controlling internal ... suppliers between different divisions or parts of the company, or they’re not controlling their external suppliers to the degree that may be necessary for the risk of that product or service,” Trautman says.
:D
 
F

freelovefest

#4
Having worked as an SQE, and with Boston as an SQE, I would say that the citing the supplier as the cause of recalls is almost always a poor excuse. I was brought in to work on some of the above mentioned recalls and from what I have seen the issues are typically design related; the product was not designed to be mass produced or there was a poor transition from R&D to design and subsequently from Design to manufacturing. There is an understandable rush to get to market to recoup R&D expense

Supplier Quality is tricky and relies a lot of risk management and data analysis. It also relies on the supposition that the component as designed is reproducible and can be consistently made. Most of the issues I have seen stem from poor designs often resulting from a lack of ME or EE experience. Often the designer is an ME, but not an EE and does not understand how the software should interface, etc....

The best way I have seen people control suppliers is by going back to the risk assessment and identifying the hazards which can result from the failure of each compenent. The critical components are the ones to focus on. Once you know who are your most critical suppliers, like a battery supplier, you focus your efforts on them. One mistake I see people do is performing a QMS audit and seeing that as sufficient. If you identify anything as high risk, you should perform a technical audit as well. This generally requires someone with experience specifc to the component.

The other side of the coin is receiving inspection. You want to show due dilligence in evaluating your suppliers, but in reality all your efforts on evaluating a supplier don't always mean a whole lot. It is like hiring a new employee; you can take all the precautions you want, but in the end you won't know if they are going to show up late, drink on the job, etc, until they start work. If you make sure your RI group is looking at critical dimensions and adequately inspecting things based off of the criticality determined by the risk management plan, you will prevent a lot of recall issues. Even though all these firms had recalls related to supplier issues, they should have caught the issue prior to distribution, and there is no excuse for not doing so. you either did a poor risk management, have a poor design, or have a poor RI process.

This is all a bit of a soap box, but I don't think audits or surveys constitute effective supplier control; there are simply too many other more effective methods that allow you to have better control over the output of your suppliers.
 
F

freelovefest

#5
I forgot to add this in the last post. Here is an article I have found useful in dealing with risk and Suppliers and talks a little about some of the concerns in the industry and how they are being addressed by some people.

Hope this is helpful!
 

Attachments

T

treesei

#6
We seem to have forgotted the original poster's last question:

and further, do IS0 13485 certified companies drive the suppliers who provide such outsourced processes to be certified to same quality system standard ??

I would say: If the supplier is your contract manufacturer, i.e., if they make the same products as you do, then if your products require 13485, the supplier must have 13485. But if the supplier is a service or component/part supplier, then it depends.
 

Marcelo

Inactive Registered Visitor
#7
MDDI (Medical device and diagnostic industry) has an annual issue dedicated to outsourcing. In fact the curret issue (march 2008) has a guide to outsourcing that can provide some experiences. The link: http://www.devicelink.com/mddi/08/03.html

Also look for past issues.

And, again, this seems to me a quality systems parity issue. As always, take a look at this link and this link (The Empirical Value of Risk Management) for a view on quality and other systems parity.
 
Thread starter Similar threads Forum Replies Date
Q Control of outsourced processes - drop shipped products ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
A Outsourced Processes Control (Finished Medical Device Delivery, Storage) ISO 13485:2016 - Medical Device Quality Management Systems 10
D Approved Supplier Control Requirements for Outsourced Special Processes Supplier Quality Assurance and other Supplier Issues 4
A The auditor documented that we did not have control of Outsourced Processes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
A Additional Control Measures for Outsourced Processes under ISO 9001:2008 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
O Methods used to Control Outsourced Processes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
J Control of Outsourced Processes defined within the Quality Management System ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
E Control of Outsourced Processes (not properly described in the quality manual) ISO 13485:2016 - Medical Device Quality Management Systems 44
Q Type and Control of Outsourced Processes - ISO 9001 Clause 4.1 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 38
P Definition and control of outsourced processes - Service Company ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
R How Can We Show Control Over Outsourced Processes? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 37
Sidney Vianna Outsourced Processes - Type and Extent of Control to be Applied - ISO 9001:2008 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 40
F Outsourced special processes - How to control outsourced special processes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
T ISO 9001:2000 - Clause 4.1 - How to control outsourced processes? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
R Outsourcing Processes - What is appropriate control over the outsourced operations? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
I Control of Outsourced Process - Shipping ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 15
L Control of Calibration as an Outsourced Process ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
M Control of Work Transfer vs. Control over Outsourced Process - Differences AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 16
B Control of Outsourced Production (Contract Templates) - ISO 13485:2003 ISO 13485:2016 - Medical Device Quality Management Systems 3
I Outsourced Process Control Procedure review ISO 13485:2016 - Medical Device Quality Management Systems 11
M Design Control - Outsourced Process Requirements Design and Development of Products and Processes 8
D Control Number for Class III and IV devices Canada Medical Device Regulations 0
J Document Control Metrics Document Control Systems, Procedures, Forms and Templates 3
I Document Control Software Document Control Systems, Procedures, Forms and Templates 2
T Controlling Expandable Forms in Paper-Based Document Control System Document Control Systems, Procedures, Forms and Templates 10
N ISO 13485 7.3.9 Change control in medical device software ISO 13485:2016 - Medical Device Quality Management Systems 6
C UDI Questions on Control Units Other US Medical Device Regulations 6
A Quality Control Datasheets Inspection, Prints (Drawings), Testing, Sampling and Related Topics 0
M Control-self assessment Internal Auditing 5
GreatNate Master Control QMS software Quality Tools, Improvement and Analysis 0
A Prototype control plan FMEA and Control Plans 2
J Records Control - Does each individual record need to be numbered? Records and Data - Quality, Legal and Other Evidence 2
shimonv Document Control Procedure Header Content Document Control Systems, Procedures, Forms and Templates 3
W FMEA - Current control and occurrence rating FMEA and Control Plans 3
S Which department should prepare the control plan? could you show me a standard regarding to this matter. FMEA and Control Plans 17
G Control Plan & PFMEA Review Procedure? FMEA and Control Plans 1
N What are the software audit and control steps Reliability Analysis - Predictions, Testing and Standards 2
A Fabric roll inspection - What type of Control Chart to use? Inspection, Prints (Drawings), Testing, Sampling and Related Topics 2
C Monitoring and Control Instruments RoHS, REACH, ELV, IMDS and Restricted Substances 3
M ISO14971:2019 - Verification of implementation and effectiveness of risk control ISO 14971 - Medical Device Risk Management 3
T Risks arising from control measures vs. ineffective control measures ISO 14971 - Medical Device Risk Management 11
J Need Change Control Yes/No Decision Tree Template ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 1
P IQ, OQ, PQ protocol, and report templates for Distributed Control Systems in Pharmaceutical Manufacturing Systems. Qualification and Validation (including 21 CFR Part 11) 0
R Risk control measures as per ISO 14971 ISO 14971 - Medical Device Risk Management 6
T Linking Control Plans and PFMEA's FMEA and Control Plans 3
L How to add exemption or statement to control of document procedure? ISO 13485:2016 - Medical Device Quality Management Systems 5
T PFMEA and Control Plans on legacy product FMEA and Control Plans 5
P IATF 16949 requirement - error-proofing in control plan IATF 16949 - Automotive Quality Systems Standard 3
C 8.5.1.1 Control of Equipment, Tools, and Software Programs - Questions about the extent of control of NC programs AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
Q Version/Revision Control of CAD files Document Control Systems, Procedures, Forms and Templates 2

Similar threads

Top Bottom