External Document Control

C

Crodge

#1
How do I need to show that our externally generated documents are controlled? We are a high-level aviation security company and the documents in question include highly confidential directives from various agencies. These directives are passed on to us via airlines and then disseminated amongst the relevant members of staff by the GM. None of these documents can be shown to auditors, how should we control them??? Any ideas will be gratefully received.
Thanks in advance..
 
Elsmar Forum Sponsor
#2
Hello Crodge, and welcome to the Cove. :bigwave:

We discussed something similar recently, in the thread Defining Customer Property.

Anyway, besides document control, you also need to consider clause 7.5.4, Customer property. (In this case intellectual property - business secrets).

Concerning the documents: Having a procedure for how to handle secret information does not necessarily mean that you have to let the auditors see the concerned documents. You will however have to convince them that you control them...

/Claes
 

ccochran

Southern Gentleman
#3
External docs

Crodge,

Howdy. Strictly speaking, the only things you must do with external documents is identify them and control their distribution. This comes directly from 4.2.3-f. The other requirements of document control do not apply (unless you want them to apply).

To identify them, you could simply list them on some kind of master listing. To control their distribution, you could also indicate where copies of these are been distributed. If you're going to set up a master list, I would also indicate the revision level/date of the external document, just as an additional control measure.

It's worth noting that this is the only place in 4.2.3 where it requires you to control distribution. The reality is, however, that if you have hardcopy internal documents, distribution control is a very good idea. Not a requirement, but a *very* good idea.

For more information on document control from my perspective, check this article of mine from Quality Digest (June 2002): http://www.qualitydigest.com/june02/html/doccontrol.html. I'd enjoy hearing your feedback on it, positive or negative, after you've had a chance to give it a look. And, of course, feedback is welcome from everybody else, too.

Talk to you soon,
CC

~~~~~~~~~~~~~~~~~~~~~~~~~
Craig Cochran
Economic Development Institute
Georgia Institute of Technology
[email protected]
 
Thread starter Similar threads Forum Replies Date
R External Standards List (Document Control) Document Control Systems, Procedures, Forms and Templates 3
M Document Control Management - External documents flowed down from customers Document Control Systems, Procedures, Forms and Templates 2
smryan Satisfying the ISO 9001:2008 4.3.2.f External Document Control requirement ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
T External Document (Documents of External Origin) Control Template example wanted Document Control Systems, Procedures, Forms and Templates 14
N How do you control weblinks used for external document requirements? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
A Document Control - Control of external documents ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
T Document Control at Suppliers - Control of External Documents ISO 13485:2016 - Medical Device Quality Management Systems 2
C Document Control for External and Internal Projects (overseas projects) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
H External Document Control Procedure advice wanted ISO 13485:2016 - Medical Device Quality Management Systems 9
L Sample of Control of Document Procedure and Control of External Documents Document Control Systems, Procedures, Forms and Templates 2
M How to Document Internal & External Communications - Suggestions/examples pls IATF 16949 - Automotive Quality Systems Standard 3
F Can a website be considered a Document of External Origin? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
P ISO 13485 Audit - EN 62366:2008 not in External Document File IEC 62366 - Medical Device Usability Engineering 1
D Customer Quality Manuals - Document of external origin and must be controlled? Document Control Systems, Procedures, Forms and Templates 14
D Customer Packaging Specification - File as a document of external origin? Document Control Systems, Procedures, Forms and Templates 1
A IEC 62304 safety classification, External Controls and off-label use related risks IEC 62304 - Medical Device Software Life Cycle Processes 5
R External Audit and Certificate prorogation due to the pandemic General Auditing Discussions 10
N Audit non-compliance API Q1 - Use of External Documents 4.4.4 in Product Realization Oil and Gas Industry Standards and Regulations 5
J 510(k) for a control kit for an external IVD test kit 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
R Is it required to have an SOP for external audits? Medical Device and FDA Regulations and Standards News 7
Pmarszal External Standards and Regulations Management Process Document Control Systems, Procedures, Forms and Templates 10
I What kind of wine best complements the Friday that you close out your external audit findings? Opinions are welcome. Coffee Break and Water Cooler Discussions 12
B How to apply external voltage to SIP/SOP IEC 60601 - Medical Electrical Equipment Safety Standards Series 2
P Qualifying commercial off the shelf (COTS) external suppliers ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
B Internal and external auditor competency to CSR's IATF 16949 - Automotive Quality Systems Standard 20
N IATF 16949:2016 7.1.5.3.2 External Laboratory - How to approve the Testing Laboratory without accreditation scope IATF 16949 - Automotive Quality Systems Standard 2
A OHSAS 18001 external auditor finding personal interpretation? Occupational Health & Safety Management Standards 5
L External power supplies: How close does the safety report have to match the end-use application? IEC 60601 - Medical Electrical Equipment Safety Standards Series 4
D Reduction of software class based on multiple external risk controls IEC 62304 - Medical Device Software Life Cycle Processes 5
C Identifying and Controlling External Documents Document Control Systems, Procedures, Forms and Templates 3
C External Laboratories and OEM Calibration IATF 16949 - Automotive Quality Systems Standard 0
Q AS9120B flow down to external providers: Records Retention AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
Casana IATF 16949 7.1.5.3.2 External Laboratory - On Site Calibration IATF 16949 - Automotive Quality Systems Standard 8
B Using external FDA and ISO 13485 audit as internal audit Internal Auditing 6
C ISO 17025 2017, Requirement 6.6.3 - Communicate requirements to external providers ISO 17025 related Discussions 4
C Determining if Maintenance Contractor is an External Service subject to ISO 9001 Clause 8.4 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 43
qualprod The Perfect audit? External Audit causes a significant negative impact in a company General Auditing Discussions 9
K AS9100D 8.4.1.1 external providers question - Walmart, Home Depot, our lawn care team. etc. AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 20
A External Auditor issue with Internal Audits Internal Auditing 7
R Do we need to treat local law as external origin documents? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 15
D ISO 9001:2015 Clause 8.4.3 "Information for External Providers" buying from online retailers. ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
M Applicability of Means of Protection, working voltage in an Automated External Defibrillator IEC 60601 - Medical Electrical Equipment Safety Standards Series 0
D Necessity of external watchdog next to internal watchdog ISO 14971 - Medical Device Risk Management 1
B How to reply NCR on ineffectiveness of corrective action during IATF external audit? This is repeated issue whereby some mistake was done. IATF 16949 - Automotive Quality Systems Standard 7
I AS9100 8.4.2 Type and Extent of Control - External provider test reports Manufacturing and Related Processes 24
P AS9120B Control of External Providers for Franchised Distribution AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 0
S Tools and equipment provided by customer - Considered as external provider? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
T Transportation - External Service Provider ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
S ISO9001:2015 Clause 9.1 - What the external auditor will look at? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
N IATF 16949 7.1.5.3.2 External Laboratory - Calibration of Nikon machine in factory IATF 16949 - Automotive Quality Systems Standard 24

Similar threads

Top Bottom