IT Department Network Infrastructure - 7.3 Design and Development Requirements

J

JJ777

#1
Would this be applicable to a Networks section within an IT department. Let us assume that a network infrastructure in a building needs an upgrade or a total new building needs a network infrastructure. Do they have to follow the design and development clause 7.3.

One problem I foresee is that this is very technical and only a network specialist would know how the design would look and if it will serve the business need. Who will sign the specification to say "yes that is what I need" from the requester if they do not have any knowledge of a network infrastructure. The only want to receive e-mails and connect to the web and if I show them a drawing of severs switches bandwith specs etc. they will not know what I'm talking about.
 
Elsmar Forum Sponsor

Coury Ferguson

Moderator here to help
Staff member
Super Moderator
#2
Re: 7.3 Design and Development

Would this be applicable to a Networks section within an IT department. Let us assume that a network infrastructure in a building needs an upgrade or a total new building needs a network infrastructure. Do they have to follow the design and development clause 7.3.

One problem I foresee is that this is very technical and only a network specialist would know how the design would look and if it will serve the business need. Who will sign the specification to say "yes that is what I need" from the requester if they do not have any knowledge of a network infrastructure. The only want to receive e-mails and connect to the web and if I show them a drawing of severs switches bandwith specs etc. they will not know what I'm talking about.
My opinion: Yes it would fall under Design and Development

Have the IT department write and/or assist in writing the procedure.
 
Last edited:
A

alspread

#3
Re: 7.3 Design and Development

7.3.1 The organization shall plan and control the design and development of product.

If the network is a product, then yes.

If the network supports the organization then, no.

6.3 The organization shall determine, provide and maintain the infrastructure needed... Infrastructure includes, as applicable,... supporting services (such as transport, communication or information systems).

:2cents:

Good Luck
 

Marc

Hunkered Down for the Duration with a Mask on...
Staff member
Admin
#4
Section 7.3 is related to product and specifically addresses customer requirements (which *can* be internal customers when you think about it), but...

I think the bottom line is that any company that 'does' Network Infrastructure has to design it. A Network Infrastructure isn't a napkin back process. Whether or not it is your company's product or an internal job you will be defining inputs and outputs. I would be surprised if there isn't a design verification step early on before build (will all this work together?). I would also be surprised if there wasn't a final system validation prior to going 'live' (Does it work as expected?).

Even if it is technically not 'required' by ISO 9001 because it is not your company's 'product', it is done because 7.3 is nothing more than the basics of a design system. You may look at some relief in a few of the 7.3 sub-clauses, but none the less these are the basics.

My question is: Is there anything in section 7.3 that you are not already doing when you 'do' Network Infrastructure?
 
A

alspread

#5
I think the bottom line is that any company that 'does' Network Infrastructure has to design it. A Network Infrastructure isn't a napkin back process.
Wouldn't/couldn't this logic apply to any large project in a company? What about a complete new HVAC system, or a new ERP/MRP software, moving from one building to another?

We're often involved with many large projects that aren't 'napkin back' that demand a lot of detail, design, and management of resources, but that doesn't put them into 7.3.

:2cents:

Good Luck
 

Marc

Hunkered Down for the Duration with a Mask on...
Staff member
Admin
#7
Wouldn't/couldn't this logic apply to any large project in a company? What about a complete new HVAC system, or a new ERP/MRP software, moving from one building to another?

We're often involved with many large projects that aren't 'napkin back' that demand a lot of detail, design, and management of resources, but that doesn't put them into 7.3.

:2cents:

Good Luck
Your bottom line is that the registrar's auditors won't audit that aspect of the business. I tend to agree with you. But then again, they didn't used to audit IT at all in the 'old days'. These days they do. "Tell me about your data backup plan..." isn't an unusual question. There used to be an ISO 9003 for Service companies (as far as I know no company was ever registered to it, but it did exist). That went away when the paradigm shifted from design applying only to widgets, but also to processes. Yes, service companies absolutely do design. Their product is a service which they design.

It would absolutely apply to any large project in a company. If your company does not *design* large projects, I'd be amazed. Do they do any writing of what their plan is or do workers just come in and take a look around and say "Well, OK - Let's get on with it and see what we have to do as we go along..." if they're putting in a new HVAC system? Even moving from one building to another is often a seriously thought out (designed) plan. Would you consider moving a whole plant without a plan (aka Design")?

Design is done and typically it is done in a way that 7.3 outlines, so it's a moot point. 7.3 is just the basic elements of a basic design system regardless of it being a requirement of ISO 9001.

Back when I did implementations, large and small, I did what is in my paradigm 'design'. I called it a project, but the hallmarks of design were everywhere. I drew up a project plan in MS Project. I defined inputs and outputs for each step. There were meetings to discuss the plan (design verification) where all the steps were considered. We followed the plan. Prior to the registration audit we audited the systems internally to ensure they were working as planned (design validation). We did every step in 7.3, not because it is required by ISO 9001, but because that is the essence of planning and design.

7.3.1 Design and Development Planning
7.3.2 Design and Development Inputs
7.3.3 Design and Development Outputs
7.3.4 Design and Development Review
7.3.5 Design and Development Verification
7.3.6 Design and Development Validation
7.3.7 Control of Design and Development Changes

Now - If one is going through a registration audit, for example, I doubt that the auditor is going to the in-house IT people and ask to see the design plan for the IT infrastructure. But - If it was a company I was running I'd be ready to show them just because that's the way it's done.
 
Thread starter Similar threads Forum Replies Date
A How to prepare QMS manual for purchasing department Quality Management System (QMS) Manuals 5
P Training department ideas and development for automotive supplier Training - Internal, External, Online and Distance Learning 6
S Which department should prepare the control plan? could you show me a standard regarding to this matter. FMEA and Control Plans 17
H What ISO certification is for an IT department? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 13
BeaBea How do I incorporate the IT department Process Maps, Process Mapping and Turtle Diagrams 4
BeaBea How Many Processes should be created for each Department? Process Maps, Process Mapping and Turtle Diagrams 5
F Risk for Quality Assurance Department in a Hospital - Hospital Incident Reporting ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Armen Conflict of Interest if I audit the QC department? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 16
D ISO 13485, FDA 21 CFR 820 and Auditing the Accounting Department ISO 13485:2016 - Medical Device Quality Management Systems 5
T Question about Quality Department employee position titles Quality Manager and Management Related Issues 10
S SOPs applicable for Regulatory Affairs department Other ISO and International Standards and European Regulations 1
A ISO 17025 Requirement 6.2 - Department Manager Testing Qualifications ISO 17025 related Discussions 1
Marc From the "I'm glad I'm retired" Department (Oct 2019) Career and Occupation Discussions 7
C Neglect or legitimate deferral? Is excessive workload or lack of resources in a department or a team a valid root cause for a non-conformance? Problem Solving, Root Cause Fault and Failure Analysis 12
T Legalizing ISO 13485 certification with an US state department of health ISO 13485:2016 - Medical Device Quality Management Systems 5
S Which department manages Establishment Registration, Device Listing and GUDID? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
S Outsourced processes how to interact with projects - We are an governmental department with 2 persons ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
E Department Plan for QA and HSE (profile, plans, structure, goals, etc.) Misc. Quality Assurance and Business Systems Related Topics 2
M Medical Device News Olympus Medical pleads guilty to failing to file events notice: Justice Department Medical Device and FDA Regulations and Standards News 0
J Implementation of Total Quality Management/Starting a Quality Department Reliability Analysis - Predictions, Testing and Standards 9
L How to manage a Metrology Department or Calibration Laboratory General Measurement Device and Calibration Topics 3
Q Risks and opportunities that could be associated with the purchasing department ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
B FDA Philippines has no check or balance outside the health department Supplier Quality Assurance and other Supplier Issues 3
S My department inherited a large number CAPAs ISO 13485:2016 - Medical Device Quality Management Systems 4
T Setting up a quality department in an Engineering Firm Quality Management System (QMS) Manuals 11
S Quality Department Objectives ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 21
E ISO 9001:2015 for Information Technology Department Human Factors and Ergonomics in Engineering 2
Q How do we document a department name change? Document Control Systems, Procedures, Forms and Templates 3
V Information Technology Dashboard - IT Department Performance Metrics IEC 27001 - Information Security Management Systems (ISMS) 2
P Re-Numbering Documents from the last Standard to Department and Title Document Control Systems, Procedures, Forms and Templates 11
L Ways to improve testing on our department - Project Kickoff Misc. Quality Assurance and Business Systems Related Topics 4
Q Department Expansion as a Quality Objective? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
Y TQM Implementation in Facilities Department Misc. Quality Assurance and Business Systems Related Topics 2
A How to boost morale of Inspection Department Quality Tools, Improvement and Analysis 10
G Should the Quality Department originate a Request for Deviation to the Customer? Nonconformance and Corrective Action 3
A Quality Department - Operational Framework Service Industry Specific Topics 2
L Supplier Approval Process – Should the Quality Department be Excluded? Misc. Quality Assurance and Business Systems Related Topics 7
S Acquisitions and Joint Ventures (Business Development Department) and ISO 13485 EU Medical Device Regulations 3
A Operational Procedure for an IT Service Industry Quality Department Service Industry Specific Topics 1
T Internal Audit not done for Quality Department Internal Auditing 11
A IT Managed Services Company Quality Department - Operational Document ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
Crusader Can I Implement AS9100 in 1 Department only? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
S Preparing a Turtle Diagram for Maintenance Department Misc. Quality Assurance and Business Systems Related Topics 2
S ERP Software and Quality Department Procedures Integration Misc. Quality Assurance and Business Systems Related Topics 4
S Is it a Finding if all Internal Auditors are from the Quality Department? Internal Auditing 18
D Measurable objectives for our in-house calibration department General Measurement Device and Calibration Topics 6
S ISO 9001 Audit requirement for maintenance department ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
A ISO 27001 function wise or department wise audit questionnaire with control & clauses IEC 27001 - Information Security Management Systems (ISMS) 3
P Is Internal and external audit of Account Department applicable to any ISO standard Internal Auditing 5
M More than canned audit check-sheets? Auditing the Engineering Department Process Audits and Layered Process Audits 5

Similar threads

Top Bottom