Customer Property Cl. 7.5.4 - Where does ISO 9001 stop and ISO 27001 start?

G

glenn0004

#1
As write, we are currently undergoing our anual internal audit - as always our external auditor has has made links between the protection of customer data (documents and records containing names and addresses) being classed as customer property. Other than basic controls of visitors, access to areas of data processing and processes and policies controling the retention and destruction of company documents and records - with no evidence that these controls have failed under 7.5.4 where does ISO 9001 stop and ISO 27001 start.
 
Elsmar Forum Sponsor
P

Phiobi

#2
Re: 7.5.4 Customer Property

Thats a tough one for you and your auditor. Does your process describe how and to what extent you control customer property? If so and you are doing just that then you should have it covered.
As a foot note though you need to be aware of your customer expectation with this kind of thing and it might be worth adding it as a check at contract, if you think it is worth it to your business in the aim of achieving customer satisfaction ;-)
 

Jim Wynne

Staff member
Admin
#3
Re: 7.5.4 Customer Property

As write, we are currently undergoing our anual internal audit - as always our external auditor has has made links between the protection of customer data (documents and records containing names and addresses) being classed as customer property. Other than basic controls of visitors, access to areas of data processing and processes and policies controling the retention and destruction of company documents and records - with no evidence that these controls have failed under 7.5.4 where does ISO 9001 stop and ISO 27001 start.
You say that this was an internal audit, and then make reference to an external auditor, so it's not clear what type of audit you're referring to. Was a nonconformity identified by an auditor? If so, can you give us the exact wording of the NC statement?
 

qusys

Trusted Information Resource
#4
Re: 7.5.4 Customer Property

As write, we are currently undergoing our anual internal audit - as always our external auditor has has made links between the protection of customer data (documents and records containing names and addresses) being classed as customer property. Other than basic controls of visitors, access to areas of data processing and processes and policies controling the retention and destruction of company documents and records - with no evidence that these controls have failed under 7.5.4 where does ISO 9001 stop and ISO 27001 start.
Are you auditing vs ISO 9001 standards and/or internal procedures or vs ISO 27001?:bigwave:
 
T

treesei

#5
Re: 7.5.4 Customer Property

You say that this was an internal audit, and then make reference to an external auditor, so it's not clear what type of audit you're referring to.
These days many companies outsource their internal audit to external contract auditors.
 
Last edited by a moderator:

somashekar

Staff member
Super Moderator
#7
customer data (documents and records containing names and addresses) being classed as customer property.
Such Customer data becomes a customer property if and when the provided data is used for incorporation into the product and / or the customer clearly mentions so, and is concerned about its loss.
The same applies to customer's intellectual property and personal data.
It is not about security of all customer data from the view of information security and possible leaks.
The application is more towards tangible customer property and at times customer's intellectual property and personal data can be an inclusion depending upon some joint assessment between you and particular customer.
Classification of such customer data is of importance before consideration as customer property within the ISO9001 scope.
 
G

glenn0004

#8
Re: 7.5.4 Customer Property

Thanks for your reply - my apologies for information error. We are undergoing our anual external audit.
 
G

glenn0004

#9
Re: 7.5.4 Customer Property

Thanks for your reply - my apologies for information error. We are undergoing our anual external audit - at the moment I dont have the wording details of the NC.
 
G

glenn0004

#10
Re: 7.5.4 Customer Property

We're being audited against the 9001 standard and our own internal procedures, we're not yet 27001 registered.
 
Thread starter Similar threads Forum Replies Date
C What falls under the 'Customer Property' according to ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 10
S Customer Property - If at all the customer return the product ISO 13485:2016 - Medical Device Quality Management Systems 2
M Damaged Customer Property - ISO 13485:2016 Clause 7.5.10 ISO 13485:2016 - Medical Device Quality Management Systems 7
A Identification of Customer Property: Customer-Supplied Thumb Drives & Ext Hard Drives ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 1
M Receiving Inspection of Customer Owner Property IATF 16949 - Automotive Quality Systems Standard 5
E Owns Customer Property but No Product Integration ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
Uriel Alejandro 7.5.4 Customer Property in a Repair Station AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 7
S ISO 9001 Clause 7.5.4 - Damaged or Lost Customer Property Record ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
E ISO 9001 - 7.5.4 Customer Property - Services (e.g.: Training) on Rental Property ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
M Does anyone have an example Customer Property Procedure AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 11
B Customer Property Exclusion as it applies to Personal Data ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
C Identification of Customer Property - Requirements ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
P Is a Drawing (Print) Customer Intellectual Property? ISO 13485:2016 - Medical Device Quality Management Systems 16
L Customer Property Checklist example wanted ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
somashekar FDA cGMP on Feedback, Advisory Notice and Customer Property 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
C Customer Property Log example wanted ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
E How Do You VERIFY Customer Property? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
D Customer Property Identification Requirement - ISO 9001 Clause 7.5.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 77
Q Customer Property Tools - par. 7.5.4.1 - Electronic identification of a certain tool IATF 16949 - Automotive Quality Systems Standard 6
J Customer Property ISO 9001:2008 Clause 7.5.4 - Does this include E-mails? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
P Supplier's Property - Does 7.5.4 Customer property apply to supplier's property ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 15
N Customer Property Logs - Tracking customer property, specifically production tooling IATF 16949 - Automotive Quality Systems Standard 5
B What is Customer Owned Property for moulds and spare parts factory ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
T Notification of lost/damaged Customer Property - Customer Requirement ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
B Customer Property - The best way to inspect MLO and what acceptance criteria AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 1
D TS 16949 Clause 7.5.4 Customer Property, Intellectual Property requirements IATF 16949 - Automotive Quality Systems Standard 5
M 7.5.4 Customer Property - ISO 9001:2008 Intellectual Property ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
D Can I exclude Customer Property? ISO 9001 Clause 7.5.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 36
D Clarification on "Customer Property" - TS 16949 Clause 7.5.4 IATF 16949 - Automotive Quality Systems Standard 4
6 Customer Property documentation (Audit Finding) - Clause 7.5.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
H Can the documents supplied by the client categorised as customer property?? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
H What can be customer supplied properties (property) for the software industry? Software Quality Assurance 18
K Customer Property - Notifying Customers ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
D Purchase Order and its relationship with customer property ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
D Absence Of Any Form Of Customer Property ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
K Identifying production dies to satisfy the 7.5.4 Customer Property clause ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
H Not having a form for Customer Property Damage - ISO 9001 Clause 7.5 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 24
P Customer Supplied Property - System breakdowns at every level including sales ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
A How is Customer Property defined by TS 16949? IATF 16949 - Automotive Quality Systems Standard 4
G 7.5.4 Customer Property (Shipping Containers) IATF 16949 - Automotive Quality Systems Standard 2
K Defining Customer Property - Specifications, templates, patterns from customers ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
T Customer Property ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
Claes Gefvenberg Customer Property - 7.5.4 (intellectual property) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
P Customer Property - 7.5.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
P Customer Corrective Action Requests in OASIS? AS9100, IAQG 9100, Nadcap and related Aerospace Standards and Requirements 4
Ooi Yew Jin Customer E audit preparation Quality Manager and Management Related Issues 2
Q Managing a "special" customer into the QMS? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
C Certificate of Conformance Form - COC for each customer a controlled document? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
R Who is the customer in the ISO/IEC 17025:2017? ISO 17025 related Discussions 1
BeaBea ISO 9001 Customer Feedback Methods - What has worked for your company? Service Industry Specific Topics 16
Similar threads


















































Top Bottom