ISO 10007 - Configuration Management Requirements

L

Lorenzo

#1
Looking for quick help in understanding "Configuration Management", what in general is required. We are being required as a supplier to have an AS 9100 compliant system, at this time. I am ordering the ISO 10007 for future reference, but don't yet have.
 
Elsmar Forum Sponsor
B

BadgerMan

#2
The requirement states that the config mgmt system must be "appropriate to the product" which seems to be somewhat open to interpretation by the auditor. Our system is quite complex as are our products. We also develop software for airborne systems so the config mgmt of that process is done in accordance with RTCA DO-178B. We use some fairly elaborate software tools to manage configuration during the software development/lifecycle because the task is so complex. We have never had a registrar/auditor write an observation against our system so I must conclude that it is somewhere in the adequacy ballpark relative to our products.

I don't have much knowledge of other systems and have not read 10007 so maybe somebody who is more "worldly" can enlighten us.
 
A

ARUMPLE

#3
Reference - 4.3 Config. management.
When you receive the guide ISO 10007, you will find the "key elements", to document within your QMS manual. I don't remember exactly how many, but you should see them in several areas.

Best regards
 
R

Raptorwild

#4
Re: Configuration Management

Hello All!

Would anyone out there like to share how they meet the requirement for clause 4.3 Configuration Management?

I ask this because our QM has a section stating the following below, and would like some feedback on wether you all feel it is adequate.

4.3 Configuration Management
Maricopa Controls Inc. has established, documented and maintains a Configuration Management process to ensure that our products continue to function safely and reliably when individual components are changed.
This is achieved through the use of a Product Matrix, located on the Server and in the Blue Books listed by Part Number.

We have no seperate process for CM at this time, our CM is broken down by part number.

Thanks Paula :)
 
Q

QualityPhD

#5
CM and 10007

When looking at configuration management the standard defines configuration as the functional and physical characterisitcs of a product as defined in technical documents and is achieved on the product.

Looking at the configuration of the product first identify the configuration item, whether it is a part or an assembly. From that point, usually an engineering drawing, look to how the organization documents and justifies changes to the product, evaluates the risk of the change, shows evidence that the change of the configuration has been approved (usu. and ECN) and that the change has been implemented (changed production orders) or a process deviation or waiver has been received.

Structure of CM is normally acheived in the project design phase and includes all the functional or performance characteristics of the product that are to be maintained throughout the life cycle of the product.

Configuration identification should include such things as a listing of the technical specifications used, the numbering system that will identify the specification, drawing or any changes, how serial numbers or other traceability will be addresses and the proper procedure or tech. specs required for release of the product.

Hope this is of some assistance to you.

Ann Morgan
 
R

Raptorwild

#6
QualityPhD said:
When looking at configuration management the standard defines configuration as the functional and physical characterisitcs of a product as defined in technical documents and is achieved on the product.

Looking at the configuration of the product first identify the configuration item, whether it is a part or an assembly. From that point, usually an engineering drawing, look to how the organization documents and justifies changes to the product, evaluates the risk of the change, shows evidence that the change of the configuration has been approved (usu. and ECN) and that the change has been implemented (changed production orders) or a process deviation or waiver has been received.

Structure of CM is normally acheived in the project design phase and includes all the functional or performance characteristics of the product that are to be maintained throughout the life cycle of the product.

Configuration identification should include such things as a listing of the technical specifications used, the numbering system that will identify the specification, drawing or any changes, how serial numbers or other traceability will be addresses and the proper procedure or tech. specs required for release of the product.

Hope this is of some assistance to you.

Ann Morgan
:thanx: Ann,
This is right on with what I was thinking and is verifiable during an audit and also during everyday operations. Great Response! :bigwave: Paula
 

Cari Spears

Super Moderator
Staff member
Super Moderator
#7
Raptorwild said:
...Would anyone out there like to share how they meet the requirement for clause 4.3 Configuration Management?...
This is something I've been wondering about for us. We manufacture products in accordance with someone else's configuration management plan - we're not design responsible. So I think our procedures need to address cmp's as they pertain to us - like change control/contract review and document control, etc. In the same manner that we control and use technical orders and repair manuals given to us by some of our customers (customer specific requirements).

I'm also not sure about configuration audits - who does them? The design responsible function who created the CMP? Or is it our final product inspection? 10007 says "A CA may be required for the formal acceptance of a configuration item."

What do you guys think?
 

Marc

Fully vaccinated are you?
Staff member
Admin
#8
I got this in my personal e-mail so I guess someone pushed the wrong button:

The organization shall establish, document and maintain a configuration "management process", "appropriate to the product":.
****
Sounds a little confusing, almost describes why we need a change process.

I do not see the whole, so its inadequate. looking for something in other processes. What's the QMS scope, and its exclusions, if any?

Phillip
 
N

nodakbil

#9
I am also waiting on my copy of ISO 10007 for clarification on configuration management. I am curious if this affects products which are altered per OEM (bulletins), FAA (AD's), and/or customer requirements (PMA manufacturing)?
As an aerospace rework facility we continually update products per customer request and FAA mandate. This usually is accompanied by a part number and/or change letter/number change. We also provide a number of FAA/DER internal repairs. Would this procedure only include those internal processes, or will it need to include the additional requirements?
 

howste

Thaumaturge
Super Moderator
#10
It should include whatever processes you use to control the configuration of product. This would apply to both internal and external requirements. Here are a few quotes from ISO 10007 that may be helpful:
5.1
The configuration management process should focus on customer requirements for the product and should take into account the context in which it will be performed.
5.4.1
After the initial release of product configuration information, all changes should be controlled. The potential impact of a change, customer requirements and the configuration baseline will affect the degree of control needed to process a proposed change or concession.
A.3
The configuration management plan should detail the configuration management policies that have been agreed with the customer or suppliers.
 
Thread starter Similar threads Forum Replies Date
K Example of ISO 10007 - Configuration Management Plan AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
B Configuration Management and ISO 10007 (again) AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 8
L Configuration Management, Need to review ISO 10007, anybody have one? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 1
S ISO 10007 Standard for Configuration Management AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
E ISO 13485 software validation ISO 13485:2016 - Medical Device Quality Management Systems 3
B ISO 11197, Venting of Medical Supply Units - cl. 201.11.2.2.101 Other Medical Device Related Standards 2
D Management reviews ISO 17025 ISO 17025 related Discussions 3
L Change Log in (controlled) Forms? (ISO 9001:2015) Document Control Systems, Procedures, Forms and Templates 6
K ISO 9001 Clause 8.3 & 8.6 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 1
I ISO 17025:2017 / ANAB 3125 - Articulating / Communicating Risks vis-a-vis Audit Findings ISO 17025 related Discussions 2
A Management of change procedure for ISO 45001 Occupational Health & Safety Management Standards 3
S Transition training for Internal Auditor from ISO 9001: 2008 to the ISO 9001:2015 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
D Notified Bodies - ISO 13485 & MDR Technical Files ISO 13485:2016 - Medical Device Quality Management Systems 3
E Comparison of Personal Protective Equipment Standards EN 14605 vs GB24539 and ISO 13982 vs GB 24539 Occupational Health & Safety Management Standards 0
H R&D Lab ISO 9001 certification ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
C Biologic Evaluation based on ISO 10993-1 EU Medical Device Regulations 2
D Deviations - Where in ISO 13485 deviations are covered? ISO 13485:2016 - Medical Device Quality Management Systems 7
B ISO 13485 Certification ISO 13485:2016 - Medical Device Quality Management Systems 2
J ISO 9001:2015 Clause 8.5.1 Control of Production and service provision - Help with Work Instruction Access ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
Y ISO 13485:2015 Software Validation IQ/OQ/PQ ISO 13485:2016 - Medical Device Quality Management Systems 12
Ajit Basrur Any ISO standard or guidance documents on barcode and scanning? Other Medical Device Related Standards 1
J ISO 13485 for Metal Finishing Medical Device and FDA Regulations and Standards News 5
S How to calculate Effective Number of People for ISO 13485 Certification? General Auditing Discussions 2
C ISO Question - Do you say "I-S-O" or "I-Soh"? Misc. Quality Assurance and Business Systems Related Topics 14
D Question regarding where "validations" fit according to ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 1
H Asset Inventory - documents and people (ISO 27001) IEC 27001 - Information Security Management Systems (ISMS) 1
A ISO 20417:2021 Country of Manufacture Medical Device and FDA Regulations and Standards News 0
D ISO 26262 functional safety : how to get started Other ISO and International Standards and European Regulations 3
E Any template/ form of Monitoring and Measurement of Processes and product to ISO 13485? ISO 13485:2016 - Medical Device Quality Management Systems 1
S IATF 16949 - Summary at a glance Clause wise - changes from ISO TS IATF 16949 - Automotive Quality Systems Standard 4
N ISO 22716 - GMP Training for GMP trainer Other ISO and International Standards and European Regulations 2
H ISO 13485-paragraphs for a SaaS SAMD needed or not? ISO 13485:2016 - Medical Device Quality Management Systems 2
M ISO 12944 Understanding the thickness guidlines Oil and Gas Industry Standards and Regulations 0
A Anxiety - ISO Re-registration Audit ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 69
M Does the scope of ISO 9001:2015 applies to tenders, pricing and sales department of a medical devices distributor? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
P ISO 20400:2017 Sustainable Procurement Implementation Sustainability, Green Initiatives and Ecology 0
R ISO 27001 implementation IEC 27001 - Information Security Management Systems (ISMS) 3
D Can an ISO 9001 Certificate have Remote Locations? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
W What is okay to use as a reference material for ISO 17025? ISO 17025 related Discussions 4
R ISO 14971 not harmonized ISO 14971 - Medical Device Risk Management 4
A ISO 14001:2015 clause 4.4 ISO 14001:2015 Specific Discussions 2
A Internal audit plan and processes for ISO 14001:2015 ISO 14001:2015 Specific Discussions 3
Moncia Implementing ISO 50001 Sustainability, Green Initiatives and Ecology 17
D Question on using audit checklist ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 20
C ISO 80601-2-56 Laboratory accuracy Other Medical Device Related Standards 7
D ISO 9001 - 8.4.1 Evaluate All Suppliers? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 66
M Looking for a copy of ISO 10651 Hospitals, Clinics & other Health Care Providers 6
M ISO 13485 and document control for programs ISO 13485:2016 - Medical Device Quality Management Systems 6
Sidney Vianna ISO 9001 News ISO 9001 Quality Check - spinning facts in LinkedIn ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
AllTheThings ISO-17025 accredited TEST lab performing internal calibrations (Yes: Here is how) ISO 17025 related Discussions 6

Similar threads

Top Bottom