I am over a warehouse operation that serves as a remote site to several manufacturing locations. We recently received a NCR for clause 6.1.1. The auditor stated on the report "The process for risk assessment for interested parties is not fully effective. There was no objective evidence that a risk analysis was performed for interested parties". We have a PFMEA (fairly detailed from order paperwork thru order pulling and staging), process maps with risks noted, contingency plan...not really sure what the expectation is here. We technically only have two processes: warehousing and production control. Has anyone else had this same NCR?