ISO 9001 - Reseller Exclusions

#1
Hi there. My company is a reseller of COTS Information Technology equipment and software. We take orders from enterprise and government, then purchase and resell from OEMs and authorized distributors. All product is drop shipped from OEM/distributor to customer. I have a few questions:
1) Can we exclude clauses 7.1.5, 8.3, 8.5.1?
2) Does anyone have a sample quality manual for this type of company (I'm struggling with 8.5.1)

Thanks so much!
 
Elsmar Forum Sponsor

John C. Abnet

Teacher, sensei, kennari
Staff member
Super Moderator
#2
Hi there. My company is a reseller of COTS Information Technology equipment and software. We take orders from enterprise and government, then purchase and resell from OEMs and authorized distributors. All product is drop shipped from OEM/distributor to customer. I have a few questions:
1) Can we exclude clauses 7.1.5, 8.3, 8.5.1?
2) Does anyone have a sample quality manual for this type of company (I'm struggling with 8.5.1)

Thanks so much!

Good day @qualitygal ;
1- ISO 9001 allows for "exclusions" (the term is now applicability) to any part of the standard, which...
A.5 Applicability
This International Standard does not refer to “exclusions” in relation to the applicability of its
requirements to the organization’s quality management system. However, an organization can review
the applicability of requirements due to the size or complexity of the organization, the management
model it adopts, the range of the organization’s activities and the nature of the risks and opportunities
it encounters.
The requirements for applicability are addressed in 4.3, which defines conditions under which an
organization can decide that a requirement cannot be applied to any of the processes within the scope
of its quality management system. The organization can only decide that a requirement is not applicable

if its decision will not result in failure to achieve conformity of products and services.

2- I would caution about being biased (potentially) by "someone else's...". Keep in mind, there is no need/requirement by ISO 9001 for a "quality manual". In fact, ISO 9002:2015 (current) version, does not even require "procedures" as did previous versions.

Summary:
Do what is best for YOUR organization. ISO 9001 prescribes very little in regards to HOW the standard is met. Take a look at what your organization already does, and then reverse engineer that towards what the standard requires. Most established/sustaining organizations "meet" most of the ISO 9001requirements. The goal is to simply identify any gaps and correct them, and "capture"/articulate how your organization meets the applicable aspects of the standard. While it is not possible for me/"us" to know exactly which aspects of the standard may not be appicable to the scope of your organization, it does seem (based on what you describe), that 7.1.5 and 8.3 may not apply. However, 8.5.1 encompasses operational control. I can not see how all aspects of clause 8.5 would not apply. This section requires your organization to consider how it controls what it DOES do...(regardless of what that is).

Hope this helps.

Be well.
 

Tagin

Trusted Information Resource
#3
Hi there. My company is a reseller of COTS Information Technology equipment and software. We take orders from enterprise and government, then purchase and resell from OEMs and authorized distributors. All product is drop shipped from OEM/distributor to customer. I have a few questions:
1) Can we exclude clauses 7.1.5, 8.3, 8.5.1?
7.1.5 and 8.3 - almost certainly you can exclude them.

8.5.1 - I would say definitively NOT. You have to do almost all of a-e in order to successfully operate your business.

For 8.5.1, you have a process to provide a product to your customer. It's just that most of the physical aspects of that process are outsourced to your supplier. So, your 'controlled conditions' fall mainly into two categories:
  • Informational (e.g., infrastructure, procedures, training, controls, and monitoring are involved in taking orders, transmitting to suppliers, monitoring supplier shipping updates and tracking numbers, info, etc.)
  • Control of outsourced services (your suppliers)
If you approach 8.5.1a-e step by step, and consider these two categories, I think you will find it pretty straightforward.
 
#4
Hi There - I have another question, this time related to clause 8.6 "release of products". As mentioned earlier, we don't touch product. Instead, we purchase product from suppliers and they drop ship to our customers. I'm wondering how we can comply with the record requirement "retain documented info on release of products, including a. evidence of conformity with acceptance criteria and b) traceability to person authorizing the release." Would an invoice along with tracking number from the supplier work? As far as "conformity with acceptance criteria" - we are selling COTS only, warrantee is in sealed box that is drop shipped to customer. Not sure what we should "retain" at our site as evidence of conformity. Your feedback is so greatly appreciated!
 

Tagin

Trusted Information Resource
#5
In your case, the release occurs when your organization issues the signal to your supplier to dropship the product.

So, who in your company is allowed to issue such signals? Maybe the 'signal' is a PO? If so, who can issue a PO? What approval steps do they need, or is it written into their job role that they are authorized?

How do you know when such a signal has been sent? Maybe the PO changes to another stage in your system?

How do you know who issued that signal? Maybe your ERP system records who changed the PO status, or maybe you keep copies of all PO's sent as records as an audit trail?
 
#6
In your case, the release occurs when your organization issues the signal to your supplier to dropship the product.

So, who in your company is allowed to issue such signals? Maybe the 'signal' is a PO? If so, who can issue a PO? What approval steps do they need, or is it written into their job role that they are authorized?

How do you know when such a signal has been sent? Maybe the PO changes to another stage in your system?

How do you know who issued that signal? Maybe your ERP system records who changed the PO status, or maybe you keep copies of all PO's sent as records as an audit trail?
Thank you! Very helpful. So, just to confirm, we don't need to keep record of release of shipment from supplier (as part of supplier control)?
 

Tagin

Trusted Information Resource
#7
Thank you! Very helpful. So, just to confirm, we don't need to keep record of release of shipment from supplier (as part of supplier control)?
That is up to your organization and its processes. Presumably, you receive back some kind of response from the supplier that they 1) received your signal and 2) confirm that they are actually going to ship it. What you do with those responses (attach them to the PO, save them in a folder, just read them and delete them, etc.) is up to what your org has defined.

What the supplier does internally for their release controls is a separate matter. If you wanted to make sure their process was good, that would fall under supplier approval/monitoring.
 
#8
That is up to your organization and its processes. Presumably, you receive back some kind of response from the supplier that they 1) received your signal and 2) confirm that they are actually going to ship it. What you do with those responses (attach them to the PO, save them in a folder, just read them and delete them, etc.) is up to what your org has defined.

What the supplier does internally for their release controls is a separate matter. If you wanted to make sure their process was good, that would fall under supplier approval/monitoring.
Got it! Thanks very much for your assistance!
 
Thread starter Similar threads Forum Replies Date
I Does BSI require suppliers to be ISO 9001 Certified? EU Medical Device Regulations 8
Ron Rompen ISO 9001 Sanctioned Interpretations and FAQs ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
K Need Help With Auditing Suppliers Against ISO 9001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 49
G Compliance with ISO 9001-2015 for ISO 17025 Accredited Labs? ISO 17025 related Discussions 5
L Change Log in (controlled) Forms? (ISO 9001:2015) Document Control Systems, Procedures, Forms and Templates 6
K ISO 9001 Clause 8.3 & 8.6 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
S Transition training for Internal Auditor from ISO 9001: 2008 to the ISO 9001:2015 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
H R&D Lab ISO 9001 certification ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
J ISO 9001:2015 Clause 8.5.1 Control of Production and service provision - Help with Work Instruction Access ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
M Does the scope of ISO 9001:2015 applies to tenders, pricing and sales department of a medical devices distributor? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
D Can an ISO 9001 Certificate have Remote Locations? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
D ISO 9001 - 8.4.1 Evaluate All Suppliers? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 66
Sidney Vianna ISO 9001 News ISO 9001 Quality Check - spinning facts in LinkedIn ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
A ISO 9001 Internal Audits - No production right now due to furloughs Internal Auditing 5
T Do we need an SOP for ISO 9001? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
K ISO 9001 Auditing in a Healthcare setting Process Audits and Layered Process Audits 15
C ISO 9001:2015 8.3.2. h) Design and Development Planning - What is required? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
B Employee Handbook in ISO 9001:2015 Section 7 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
Q ISO 9001/IATF 16949 Audit Finding Question - Document Retention IATF 16949 - Automotive Quality Systems Standard 11
Q Audit report template ISO 9001/14001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
Q Process matrix examples of ISO 9001 & 14001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
chris1price Archiving of paper records - ISO 9001 7.5.3.1b Records and Data - Quality, Legal and Other Evidence 4
D Common practices in ISO 9001 deployment ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 17
Q ISO 9001-2015 Internal audit finding Internal Auditing 14
P Audit check for IT company (ISO 9001) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Q Do these certificates of calibration meet ISO 9001 requirements for traceability to NIST? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 23
C Requirement to link Quality Manual to ISO 9001 clause numbers? ISO 13485:2016 - Medical Device Quality Management Systems 13
W First time being audited (ISO 9001), asking for advice ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
R AS9100D internal audit checklist or ISO 9001 2015 to AS9100 D AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
N ISO 9001 - Training business with fewer than 5 employees ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
J Opportunity in ISO 9001:2015 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 27
D Reports under change management | ISO 13485:2016 & ISO 9001:2015 ISO 13485:2016 - Medical Device Quality Management Systems 3
K Integrating ISO 9001:2015 with ISO 17025:2017 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
R Remote Audits for ISO 9001 (or any other standard) General Auditing Discussions 31
T Relationship between ISO 9001 and ISO – IEC BS EN 870079- 34 2020 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
S Sequence of ISO 9001:2015 Implementation Steps ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
qualprod Business Continuity Planning in ISO 9001? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
Brizilla Employee Data Privacy Policy - ISO 9001:2015 requirement(s)? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
S ISO 9001:2015 Internal Auditing Internal Auditing 8
Q Process: Knowledge Section 7.1.6 of ISO 9001:2015 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
P ISO 9001 certification with zero customers? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
A What must be recorded? (ISO 9001:2015, subclause 10.2) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
B Updated IATF 16949 - Will IATF 16949 get revised when ISO 9001:202X is released? IATF 16949 - Automotive Quality Systems Standard 4
S ISO 9001:2015 vs 21 CFR Part 211 matrix Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 0
S ISO 9001 implementation in a Gold exporting business ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
M Does the ISO 9001:2015 standard require a disaster recovery plan or emergency response plan ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 16
A Tips and Tricks to understand ISO 9001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
M ISO 9001 Major Nonconformance Internal Audit Schedule/COVID-19 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 18
B ISO 9001 - "Remote Audit Fee" Registrars and Notified Bodies 13
John C. Abnet ISO 9001 4.4.1 "...shall determine the processes needed..." ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 72

Similar threads

Top Bottom