Yes, this is my view. I always believe that the QMS must match the business and business realities. However talking about design, I have mostly seen design and development, as owned (D&D scope included) or customer provided (D&D scope excluded, with customer justification), while in real business, the design is purchased out and controls mentioned are just paper controls (for auditor)
I do not like this.
So if the design is bought out it must stand excluded no matter what the CB / auditor opinions about this. The company may even pay to get some design modifications if the design owner agrees to do. This is not a control means. The design owner is an independent individual and will not agree to any of your controls that you put out for the sake of the scope inclusion and QMS certification.
I do not like this.
So if the design is bought out it must stand excluded no matter what the CB / auditor opinions about this. The company may even pay to get some design modifications if the design owner agrees to do. This is not a control means. The design owner is an independent individual and will not agree to any of your controls that you put out for the sake of the scope inclusion and QMS certification.
But planning and controlling design as an outsourced process may be quite simple. Perhaps all that you have to do is qualify your supplier. Do they design the same types of parts for others? Are they registered engineers? Do they provide you with a warranty? Can you have a third party review the design?
For example, your plan for design might be that you will only buy the design from registered engineers that have more than 5 years of experience designing similar products and carry $1M of professional liability insurance. And you might control the design by having a second engineer peer-review it (verification), and/or by testing a few parts (validation).
If failure of the product is inconsequential, then the controls could be very minimal indeed. But your manufacturer is likely to be controlling design in some way already or else NCs would be popping up everywhere. So I'd suggest you document what is being done, and improve from there.