Determining if Maintenance Contractor is an External Service subject to ISO 9001 Clause 8.4

chetws

Starting to get Involved
#1
I've read several articles on the net about what constitutes an externally provided process, product, or service under clause 8.4 of the 2015 standard. Some articles say that processes covered under clause 8.4 are ones that directly affect the product (we're a manufacturer), while other articles seem to imply 8.4 applies to everything under the sun including the trash pick up service.

I work for a small chemical manufacturer that produces raw materials for other industries. The Instrument and Electrical (I&E) Manager is a company employee. The electricians that work under him daily are from a maintenance contractor company. Although I&E is a support department, and is not directly involved in manufacturing product, is the maintenance contractor company considered an external provider subject to clause 8.4?
 
Elsmar Forum Sponsor

Tagin

Trusted Information Resource
#2
Consider, from 9002:2016 8.4.2:

The intent of this subclause is to establish the controls for external providers, in order for the organization to have confidence that the products and services to be provided will meet requirements.

The type and extent of control is based on what the potential impact that the externally provided process, product or service can have on the organization’s ability to consistently deliver conforming products and services.

EXAMPLE In a printing organization, the paper quality could be critical. However, a travel agency might use normal, commercial stationery without the need for any quality related purchasing controls. The printing organization needs to monitor the performance of its paper providers very closely to ensure that the quality of its printed products remains at the expected level.

The organization should determine which controls are to be implemented by or for an external provider. The intent of these controls is to ensure that product or service provision will be carried out according to planned arrangements and that the product or service will conform to requirements.
So, its up to you to determine what kinds of controls (if any) are needed "in order for the organization to have confidence that the products and services to be provided will meet requirements" for this maintenance contractor company.
 

qualprod

Trusted Information Resource
#3
I've read several articles on the net about what constitutes an externally provided process, product, or service under clause 8.4 of the 2015 standard. Some articles say that processes covered under clause 8.4 are ones that directly affect the product (we're a manufacturer), while other articles seem to imply 8.4 applies to everything under the sun including the trash pick up service.

I work for a small chemical manufacturer that produces raw materials for other industries. The Instrument and Electrical (I&E) Manager is a company employee. The electricians that work under him daily are from a maintenance contractor company. Although I&E is a support department, and is not directly involved in manufacturing product, is the maintenance contractor company considered an external provider subject to clause 8.4?
Consider this scenario.
Your external supplier provides raw material for your products, well this is directly related to your product.
As such, a close monitoring is needed to apply, supplier evaluation and monitoring, you could also perform audits in his facilities, sometimes there are some agreed contracts.
While a supplier which provides you services for training in Microsoft office and windows apps, well maybe will be evaluated every six months, because such services are not directly related to the product, normally is the practice followed.
 

Sidney Vianna

Post Responsibly
Staff member
Admin
#4
is the maintenance contractor company considered an external provider subject to clause 8.4?
In my (professional) assessment, based on your description, NO. This external service source is not required to be managed under section 8.4 of the ISO 9001:2015 Standard. Lines have to be drawn somewhere; otherwise, the slippery slope can get ludicrous, fast.
 

chetws

Starting to get Involved
#5
In my (professional) assessment, based on your description, NO. This external service source is not required to be managed under section 8.4 of the ISO 9001:2015 Standard. Lines have to be drawn somewhere; otherwise, the slippery slope can get ludicrous, fast.
I agree with you Sid. The vice president of manufacturing, who has been here for thirty years, has never considered the maintenance contractors a critical vendor. I agree with Tagin that the standard implies that it should be up to the company.

I agree with the slippery slope getting ludicrous. The problem I have is some CB auditors choose to inject their personal opinion about how you should run your company. Let me share an unrelated example. In the last CB audit we had, the CB auditor insisted that we had to have the safety department part of our QMS (keep in mind we're a manufacturer). As such, all safety near misses should be logged in our NCR system. I told her that the safety department has never been part of our QMS, and isn't going to be because it doesn't directly affect the quality of our product. She kept replying that safety does affect the company, so "we can't have can't have blinders on looking only at quality." Now clause 4.4 of the standard implies that the organization determines its processes. So I believe clause 4.4 gives my company the right to "put on blinders" and not include safety as a process because the safety department has it's own system. Some "holier than though" CB auditors seem to think that they determine what the organization processes are during the CB audit. Using this auditor's logic, everything, including the company that cuts the grass around the front office, needs to be part of the QMS.

Perhaps this should be another thread, but is there any advise for dealing with the inevitable CB auditor that will insist this maintenance contractor is a critical vendor, even though the company's upper management does not?
 

Sidney Vianna

Post Responsibly
Staff member
Admin
#6
In the last CB audit we had, the CB auditor insisted that we had to have the safety department part of our QMS (keep in mind we're a manufacturer). As such, all safety near misses should be logged in our NCR system. I told her that the safety department has never been part of our QMS, and isn't going to be because it doesn't directly affect the quality of our product. She kept replying that safety does affect the company, so "we can't have can't have blinders on looking only at quality." Now clause 4.4 of the standard implies that the organization determines its processes.
Make her read 0.4 of ISO 9001:2015

9001 04.jpg

Based on the description of the situation, I would bet this auditor's background and forte' is on occupational safety and she also became qualified for quality management system audits (ISO 9001) and she is trying to navigate where her comfort level is. By making occupational safety a part of a QMS audit, she is trying to avoid discomfort. But she would be wrong in doing so.
 

chetws

Starting to get Involved
#7
Make her read 0.4 of ISO 9001:2015


Based on the description of the situation, I would bet this auditor's background and forte' is on occupational safety and she also became qualified for quality management system audits (ISO 9001) and she is trying to navigate where her comfort level is. By making occupational safety a part of a QMS audit, she is trying to avoid discomfort. But she would be wrong in doing so.
Sidney, you are the best. You've lowered my blood pressure by at least 10 points, my friend. Dealing with auditors who think their opinion is equivalent to a Supreme Court ruling is very frustrating to say the least.
 

Ed Panek

QA RA Small Med Dev Company
Trusted Information Resource
#8
I've read several articles on the net about what constitutes an externally provided process, product, or service under clause 8.4 of the 2015 standard. Some articles say that processes covered under clause 8.4 are ones that directly affect the product (we're a manufacturer), while other articles seem to imply 8.4 applies to everything under the sun including the trash pick up service.

I work for a small chemical manufacturer that produces raw materials for other industries. The Instrument and Electrical (I&E) Manager is a company employee. The electricians that work under him daily are from a maintenance contractor company. Although I&E is a support department, and is not directly involved in manufacturing product, is the maintenance contractor company considered an external provider subject to clause 8.4?
Define it in your supplier evaluation process. Category 1 - High risk to customer satisfaction/product safety or effectiveness Category 2- Low risk Category 3 -NO RISK (Trash, Lawn care, Toilet paper, vending machine) Category 3 requires no management and may not be defined or controlled.
 

qualprod

Trusted Information Resource
#9
I agree with you Sid. The vice president of manufacturing, who has been here for thirty years, has never considered the maintenance contractors a critical vendor. I agree with Tagin that the standard implies that it should be up to the company.

I agree with the slippery slope getting ludicrous. The problem I have is some CB auditors choose to inject their personal opinion about how you should run your company. Let me share an unrelated example. In the last CB audit we had, the CB auditor insisted that we had to have the safety department part of our QMS (keep in mind we're a manufacturer). As such, all safety near misses should be logged in our NCR system. I told her that the safety department has never been part of our QMS, and isn't going to be because it doesn't directly affect the quality of our product. She kept replying that safety does affect the company, so "we can't have can't have blinders on looking only at quality." Now clause 4.4 of the standard implies that the organization determines its processes. So I believe clause 4.4 gives my company the right to "put on blinders" and not include safety as a process because the safety department has it's own system. Some "holier than though" CB auditors seem to think that they determine what the organization processes are during the CB audit. Using this auditor's logic, everything, including the company that cuts the grass around the front office, needs to be part of the QMS.

Perhaps this should be another thread, but is there any advise for dealing with the inevitable CB auditor that will insist this maintenance contractor is a critical vendor, even though the company's upper management does not?
I wouldn't be completely convinced about that .
When the standard States, " comply with customer and local regulations"
Local laws to have safety in buildings for personnel, anti fire systems, are they local regulations to comply with or no?
Yes it doesn't affect directly the product but, you have to comply with local laws. What is your thinking?
 
Thread starter Similar threads Forum Replies Date
P Determining Defects per Opportunity/AQL - Vehicle & Equipment Repair and Maintenance AQL - Acceptable Quality Level 1
D Determining the the maximum number of reprocessing cycles of attachments CE Marking (Conformité Européene) / CB Scheme 2
R Determining Uncertainty from Gage R&R Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 1
A IATF 16949 4.3.1 - Determining the scope of the quality management system - supplemental IATF 16949 - Automotive Quality Systems Standard 9
D ISO 9001:2015 4.3 Determining the Scope of the QMS ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
J Determining SPC tolerance Statistical Analysis Tools, Techniques and SPC 21
B Determining SAT Offsets vs TUS Offsets per SAE AMS 2750E AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 0
B Determining sample size for device sterility Inspection, Prints (Drawings), Testing, Sampling and Related Topics 3
D Determining of sample size for 'Operational Qualification' AQL - Acceptable Quality Level 5
R Question on determining defective units - I am not recording fixture to part rejected Statistical Analysis Tools, Techniques and SPC 5
S Clause 8.2.2 Determining the requirements for products and services ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
D Determining Calibration Frequency schedule for items used in production Manufacturing and Related Processes 2
S AS9100D PEAR - Examples for organization's method for determining process results? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
I Determining Calibration Tolerance of a Measurement Device General Measurement Device and Calibration Topics 2
J ISO 17025 Documented Procedure for 6.2.5 - Determining competency ISO 17025 related Discussions 4
V Determining FDA 820 (registration) vs ISO 13485 - Supplier gives us the kit ISO 13485:2016 - Medical Device Quality Management Systems 1
J ISO 9001 8.4.1 - Determining controls applied to externally provided processes ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
E Determining what is good and what is bad can be subjective - when is it a quality issue? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
F Determining what type of scrap to include in my internal PPM calculation Quality Manager and Management Related Issues 5
M Determining number of employees within the "Scope" of the QMS ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
A Determining the Scope of the QMS during Stage 1? Registrars and Notified Bodies 11
W Minor Audit Nonconformance Against Determining the scope of QMS IATF 16949 - Automotive Quality Systems Standard 12
D Determining Critical Components for conformity with IEC 60601-1 IEC 60601 - Medical Electrical Equipment Safety Standards Series 21
Q ISO 9001, section 4.3 Determining the scope of our QMS ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
R Determining Sample Size for Medical Device Component Validation Inspection, Prints (Drawings), Testing, Sampling and Related Topics 0
A What does 8.2.2.1, Determining the requirements related to products and services,mean IATF 16949 - Automotive Quality Systems Standard 1
A Determining Retention Period for Medical Device QMS documents Document Control Systems, Procedures, Forms and Templates 5
S Surveillance Sampling Test - Determining Sample Size Inspection, Prints (Drawings), Testing, Sampling and Related Topics 5
F ISO 9001:2015 4.3 - Determining the scope of the quality management system ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
B Standards Needed In House - Determining what standards are applicable Various Other Specifications, Standards, and related Requirements 3
W Determining Medical Device Classification in Mexico Other Medical Device Regulations World-Wide 5
K Determining Effect of Failure without a DFMEA (Design FMEA) FMEA and Control Plans 1
W Determining the Status and Importance of the Processes and Areas to be Audited Internal Auditing 7
T Determining Customer Requirements for the US Postal Service (USPS) IATF 16949 - Automotive Quality Systems Standard 4
Crimpshrine13 Rules of achieving and maintaining IATF recognition - Determining audit days IATF 16949 - Automotive Quality Systems Standard 2
R Developing procedure for Determining Company's Context And Interested Parties ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 53
W Determining Asset Life or Depreciation Life for M&TE General Measurement Device and Calibration Topics 1
N Reason for determining no adverse effect on reworked product ISO 13485:2016 - Medical Device Quality Management Systems 7
N Procedure for determining pinhole position in condom Inspection, Prints (Drawings), Testing, Sampling and Related Topics 1
alonFAI Determining PCBA Xray Test Sampling Size Statistical Analysis Tools, Techniques and SPC 1
S Determining sample size for inspection to achieve x% confidence re defects Misc. Quality Assurance and Business Systems Related Topics 10
S Determining Sample Size - AQL & LQ AQL - Acceptable Quality Level 10
R Determining the feasibility/scope for FDA IQ/OQ against a very simple application US Food and Drug Administration (FDA) 2
B Determining the "storage volume" (ISO 8536-8:2004 clause 6.14) Other Medical Device Related Standards 4
N Procedure/calculation for determining the foot pressure of dial thickness gauge General Measurement Device and Calibration Topics 10
B Bayes Success-Run on Attribute Data - Determining Sample Size Statistical Analysis Tools, Techniques and SPC 2
H Determining Takt Time in Metal Stamping Lean in Manufacturing and Service Industries 9
J Determining if there is Tin Plating on an Aluminum Bar Inspection, Prints (Drawings), Testing, Sampling and Related Topics 6
C Determining PFMEA Severity for Armored Parts FMEA and Control Plans 5
E Correlated data or not? Determining the significance of differences in means Statistical Analysis Tools, Techniques and SPC 3

Similar threads

Top Bottom