SBS - The Best Value in QMS software

ISO 10007 - Configuration Management Requirements

L

Lorenzo

#1
Looking for quick help in understanding "Configuration Management", what in general is required. We are being required as a supplier to have an AS 9100 compliant system, at this time. I am ordering the ISO 10007 for future reference, but don't yet have.
 
Elsmar Forum Sponsor
B

BadgerMan

#2
The requirement states that the config mgmt system must be "appropriate to the product" which seems to be somewhat open to interpretation by the auditor. Our system is quite complex as are our products. We also develop software for airborne systems so the config mgmt of that process is done in accordance with RTCA DO-178B. We use some fairly elaborate software tools to manage configuration during the software development/lifecycle because the task is so complex. We have never had a registrar/auditor write an observation against our system so I must conclude that it is somewhere in the adequacy ballpark relative to our products.

I don't have much knowledge of other systems and have not read 10007 so maybe somebody who is more "worldly" can enlighten us.
 
A

ARUMPLE

#3
Reference - 4.3 Config. management.
When you receive the guide ISO 10007, you will find the "key elements", to document within your QMS manual. I don't remember exactly how many, but you should see them in several areas.

Best regards
 
R

Raptorwild

#4
Re: Configuration Management

Hello All!

Would anyone out there like to share how they meet the requirement for clause 4.3 Configuration Management?

I ask this because our QM has a section stating the following below, and would like some feedback on wether you all feel it is adequate.

4.3 Configuration Management
Maricopa Controls Inc. has established, documented and maintains a Configuration Management process to ensure that our products continue to function safely and reliably when individual components are changed.
This is achieved through the use of a Product Matrix, located on the Server and in the Blue Books listed by Part Number.

We have no seperate process for CM at this time, our CM is broken down by part number.

Thanks Paula :)
 
Q

QualityPhD

#5
CM and 10007

When looking at configuration management the standard defines configuration as the functional and physical characterisitcs of a product as defined in technical documents and is achieved on the product.

Looking at the configuration of the product first identify the configuration item, whether it is a part or an assembly. From that point, usually an engineering drawing, look to how the organization documents and justifies changes to the product, evaluates the risk of the change, shows evidence that the change of the configuration has been approved (usu. and ECN) and that the change has been implemented (changed production orders) or a process deviation or waiver has been received.

Structure of CM is normally acheived in the project design phase and includes all the functional or performance characteristics of the product that are to be maintained throughout the life cycle of the product.

Configuration identification should include such things as a listing of the technical specifications used, the numbering system that will identify the specification, drawing or any changes, how serial numbers or other traceability will be addresses and the proper procedure or tech. specs required for release of the product.

Hope this is of some assistance to you.

Ann Morgan
 
R

Raptorwild

#6
QualityPhD said:
When looking at configuration management the standard defines configuration as the functional and physical characterisitcs of a product as defined in technical documents and is achieved on the product.

Looking at the configuration of the product first identify the configuration item, whether it is a part or an assembly. From that point, usually an engineering drawing, look to how the organization documents and justifies changes to the product, evaluates the risk of the change, shows evidence that the change of the configuration has been approved (usu. and ECN) and that the change has been implemented (changed production orders) or a process deviation or waiver has been received.

Structure of CM is normally acheived in the project design phase and includes all the functional or performance characteristics of the product that are to be maintained throughout the life cycle of the product.

Configuration identification should include such things as a listing of the technical specifications used, the numbering system that will identify the specification, drawing or any changes, how serial numbers or other traceability will be addresses and the proper procedure or tech. specs required for release of the product.

Hope this is of some assistance to you.

Ann Morgan
:thanx: Ann,
This is right on with what I was thinking and is verifiable during an audit and also during everyday operations. Great Response! :bigwave: Paula
 

Cari Spears

Super Moderator
Staff member
Super Moderator
#7
Raptorwild said:
...Would anyone out there like to share how they meet the requirement for clause 4.3 Configuration Management?...
This is something I've been wondering about for us. We manufacture products in accordance with someone else's configuration management plan - we're not design responsible. So I think our procedures need to address cmp's as they pertain to us - like change control/contract review and document control, etc. In the same manner that we control and use technical orders and repair manuals given to us by some of our customers (customer specific requirements).

I'm also not sure about configuration audits - who does them? The design responsible function who created the CMP? Or is it our final product inspection? 10007 says "A CA may be required for the formal acceptance of a configuration item."

What do you guys think?
 

Marc

Hunkered Down for the Duration with a Mask on...
Staff member
Admin
#8
I got this in my personal e-mail so I guess someone pushed the wrong button:

The organization shall establish, document and maintain a configuration "management process", "appropriate to the product":.
****
Sounds a little confusing, almost describes why we need a change process.

I do not see the whole, so its inadequate. looking for something in other processes. What's the QMS scope, and its exclusions, if any?

Phillip
 
N

nodakbil

#9
I am also waiting on my copy of ISO 10007 for clarification on configuration management. I am curious if this affects products which are altered per OEM (bulletins), FAA (AD's), and/or customer requirements (PMA manufacturing)?
As an aerospace rework facility we continually update products per customer request and FAA mandate. This usually is accompanied by a part number and/or change letter/number change. We also provide a number of FAA/DER internal repairs. Would this procedure only include those internal processes, or will it need to include the additional requirements?
 

howste

Thaumaturge
Super Moderator
#10
It should include whatever processes you use to control the configuration of product. This would apply to both internal and external requirements. Here are a few quotes from ISO 10007 that may be helpful:
5.1
The configuration management process should focus on customer requirements for the product and should take into account the context in which it will be performed.
5.4.1
After the initial release of product configuration information, all changes should be controlled. The potential impact of a change, customer requirements and the configuration baseline will affect the degree of control needed to process a proposed change or concession.
A.3
The configuration management plan should detail the configuration management policies that have been agreed with the customer or suppliers.
 
Thread starter Similar threads Forum Replies Date
K Example of ISO 10007 - Configuration Management Plan AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
B Configuration Management and ISO 10007 (again) AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 8
L Configuration Management, Need to review ISO 10007, anybody have one? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 1
S ISO 10007 Standard for Configuration Management AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
D Lead time to schedule an ISO 13485 audit Auditing Quality and Environmental Management Systems 2
T Do we need an SOP for ISO 9001? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
K ISO 9001 Auditing in a Healthcare setting Auditing Quality and Environmental Management Systems 15
S Does anyone have a checklist to prepare for ISO 13485, Stage I audit? ISO 13485:2016 - Medical Device Quality Management Systems 1
H QMS ISO 13485:2016 - ISO14971 IEC60304 etc ISO 13485:2016 - Medical Device Quality Management Systems 2
Y How can i integrate ISO 13845 into ISO 27001? ISO 13485:2016 - Medical Device Quality Management Systems 4
vickyva ISO 14155:2020 CIP CIR templates Other Medical Device Related Standards 0
C ISO 9001:2015 8.3.2. h) Design and Development Planning - What is required? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
B Employee Handbook in ISO 9001:2015 Section 7 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
B Operational Procedures for ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 7
Q ISO 9001/IATF 16949 Audit Finding Question - Document Retention IATF 16949 - Automotive Quality Systems Standard 10
D ISO 14971 applicability in ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 7
G Trying to get a financially reasonable ISO Certification Body Registrars and Notified Bodies 8
L ISO 45001:2018 - Clause 5.4: Consultation and Participation of Workers Process Maps, Process Mapping and Turtle Diagrams 1
E ISO 13485 in Clinical Trial conduct: Applicable or No ISO 13485:2016 - Medical Device Quality Management Systems 2
G ISO 13485 Certification - Can we get the ISO 13485 certification prior to shipment of the device? ISO 13485:2016 - Medical Device Quality Management Systems 6
Richard Regalado Informational ISO/IEC DIS 27001:2021, to be published soon. IEC 27001 - Information Security Management Systems (ISMS) 0
Q Audit report template ISO 9001/14001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
N Does anyone use SGS for ISO 13485 / CE certification Registrars and Notified Bodies 0
Q Process matrix examples of ISO 9001 & 14001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
S Need ISO 15189:2012 Documentation toolkit. Document Control Systems, Procedures, Forms and Templates 0
chris1price Archiving of paper records - ISO 9001 7.5.3.1b Records and Data - Quality, Legal and Other Evidence 4
M Transferring ISO 17025 from one company to another ISO 17025 related Discussions 1
D Common practices in ISO 9001 deployment ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 17
Q ISO 9001-2015 Internal audit finding Internal Auditing 12
P Audit check for IT company (ISO 9001) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
M Label Making & Printing Standards ISO / ASTM ISO 13485:2016 - Medical Device Quality Management Systems 5
Sidney Vianna Interesting Discussion Should ISO 9004 be changed from a guidance document to a requirements standard? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Ed Panek ISO 13485:2016 Section 5.5.3 ISO 13485:2016 - Medical Device Quality Management Systems 3
Q Do these certificates of calibration meet ISO 9001 requirements for traceability to NIST? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
ebrahim QMS as per ISO 13485, Clause 4.2 Requirements for regulatory purposes for Medical Devices Authorized Representatives. ISO 13485:2016 - Medical Device Quality Management Systems 3
S ISO 2768-mk print call out Other ISO and International Standards and European Regulations 11
T ISO 17024, clauses 4.3.8. and 5.1.1. Other ISO and International Standards and European Regulations 4
C ISO 14001:2015 6.1.3 Compliance Obligations - Legal requirements monitoring ISO 14001:2015 Specific Discussions 0
C Requirement to link Quality Manual to ISO 9001 clause numbers? ISO 13485:2016 - Medical Device Quality Management Systems 13
D ISO 13485 scope (implantable) - Polymers for dental application EU Medical Device Regulations 9
W First time being audited (ISO 9001), asking for advice ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
John C. Abnet ISO 26262 ISO 26262 - Road vehicles – Functional safety 3
Marc ISO 26262- Road vehicles – Functional safety ISO 26262 - Road vehicles – Functional safety 0
John C. Abnet ISO 26262 IATF 16949 - Automotive Quality Systems Standard 0
A ISO/DIS 15223-1:2020 - Country of manufacture label (IEC 60417 No. 6049) - Which national law requires this symbol? Other Medical Device Related Standards 0
P ISO 14644 Class 8 Cleanroom Air Filter Requirements Other Medical Device Related Standards 4
K PDCA cycle and ISO processes alternative model Quality Management System (QMS) Manuals 14
N ISO 13485 7.3.9 Change control in medical device software ISO 13485:2016 - Medical Device Quality Management Systems 6
A ISO 13485 procedure change and reflect to legacy manufacture items ISO 13485:2016 - Medical Device Quality Management Systems 2
D ISO 13485 & CE Certification for Surgical Gloves CE Marking (Conformité Européene) / CB Scheme 0

Similar threads

Top Bottom