certainly the path of least resistance is to add signage and tags. the visible workplace is a foundational element of Lean for a reason so it's not merely about meeting the letter of the law of the standard but what is the best way to meet the intent. There is a bit of 'risk based thinking' that would help. if it's a smallish company, your training is good, your employees are highly motivated and the probability of inadvertently shipping non-conforming material is low due to great testing capability, then you have probably met the intent. On the other hand, if are largish company with poorly motivated employees, your final acceptance tests are sieves then you probably have not met the intent. I am going to assume (since you are ISO900 certified) that you are not in aerospace & defense or other highly regulated industries where the effect of letting non-conforming material out of your control is really bad such that positive traceable controls are required...
a set of questions that comes at the central question from the opposite angle to help frame the discussion: what prevents a 'bad employee' form taking any non-conforming material simply removing the non-conforming label or walking it out of the marked quarantine area and putting it in a shipping box? or selling it on the black market or giving it to your competition? What prevents them from faking the test/inspection data and passing non-conforming material?
a set of questions that comes at the central question from the opposite angle to help frame the discussion: what prevents a 'bad employee' form taking any non-conforming material simply removing the non-conforming label or walking it out of the marked quarantine area and putting it in a shipping box? or selling it on the black market or giving it to your competition? What prevents them from faking the test/inspection data and passing non-conforming material?