Oh come on, don't be coy. Educate me. Pretty please.
Ok, I'll give it a shot. Just for you.
Let's assume a machine shop operating an element-by-element QMS.
If directed to write it up as a
nonconformity, it might look like this (on steroids):
ISO 9001:2008, 4.1a states that, "The organization shall . . . a) determine the processes needed for the quality management system and their application throughout the organization."
Because your realization processes are [. . . confirmed by whatever basis during stage 1]
: Sales, Purchasing, Receiving, Production, and Shipping, while the QMS is defined (Quality manual , rev Z, x.y.z) as being composed of the following realization processes [guessing here, as they could be based on 1994 requirements!]
: "Planning of Product Realization," "Customer-Related Processes," "Product Identification," "Production and Service Provision," Identification and Traceability," "Customer Property," "Preservation of Product," . . . the QMS as defined does not reflect QMS processes. [Notice an auditor really wouldn't even need to visit the organization to suspect this documentation structure if the documents were provided ahead of time.]
Although the "Customer-Related Processes" procedure ("Contract Review" procedure?) corresponds to the Sales process and the Purchasing procedure corresponds to the Purchasing process, the balance of the "procedures" do not address the remaining realization processes--Receiving, Production, and Shipping--in a process approach fashion. Rather, an element-by-element approach is apparent. [The existing correlation between the two realization procedures and their respective processes appears to be coincidental, as the applicable requirements naturally pertain to these two realization processes; further, the balance of the QMS "procedures" addressing realization requirements appear to confuse activities and processes, again failing to properly determine processes needed for the management system.]
Thus, by failing to determine processes needed for the quality management system, the organization has CLEARLY not met the requirements of ISO 9001:2008, 4.1a to "determine the processes needed for the quality management system." Please refer to the following guidance regarding the process approach . . . [ISO/IAF APG guidance . . . N544R. . . ISO 9000:2005 . . . ISO 9001:2008 . . . not a lot out there, really, is there? ISO 9004:2009 could be referenced, but only after organizations have adopted the process approach, it seems. Then sustain it.]
As an
observation, it might look more like this:
The QMS, as defined, is in questionable conformity with the intent of ISO 9001:2008, 4.1a. [Use as much of the language from the above finding as you like to properly describe the nature of the finding.]
This finding is raised as an observation pending further direction to raise it as a nonconformity. [?] And/or . . .
an opportunity to streamline and simplify the defined QMS exists. And/or . . . what other opportunities for improvement might the process approach offer? Again direct the auditee to good information about the process approach.
Another thought: it seems common practice to offer thinly-veiled (and not necessarily inappropriate) advice by saying, "I've seen other companies do it successfully this way . . ." If this "commentary" is acceptable, all an auditor needs to know is one good example of a company using the process approach. "I've seen XYZ company use the process approach . . ."