Review of Requirements Related to the Product - Clause 7.2.2

[Jim Wynne]

Hello!

My organisation is willing to get certified ISO 9001, however I am stuck with my understanding of one of the requirement.

My organization (the organization willing to get certified) handles no sales activitiy. However, we receive two kind of requirements coming from two other organizations (belonging to the same company):
- Purchase orders coming from another office (sales office)
- Specifications requirements coming from a third office

I am not sure what my organization should do?
- An exclusion to this clause because we handle no sales activity?
- a record with a review of requirements prior to my organization's commitment to supply a product to the the other offices, which would be considered as "internal customer"?
- Asking the other offices (internal customer) to have a record of the review of requirements from our external customer'company?

I hope that you can give me a hand on that, cause I am not able to find any information about this issue on the Web.

Without a better understanding of the processes involved it's hard to tell what should be happening. How do the other two offices interact? How do the specifications get developed? What role does the end customer play in that process? What happens when your division gets specifications and purchase orders? It's hard to believe that you do no review at all. What happens if there are details in the POs and specifications that are wrong, or require your division to produce something that's beyond your capabilities?

You shouldn't worry so much about the standard and start thinking about developing processes that result in everyone being happy with the results. The requirements for contract review are there not as hoops of fire for you to jump through, but as a means of making sure that everyone understands what's needed and whether you're capable of providing it or not.

 

[Caster]

You shouldn't worry so much about the standard and start thinking about developing processes that result in everyone being happy with the results. The requirements for contract review are there not as hoops of fire for you to jump through, but as a means of making sure that everyone understands what's needed and whether you're capable of providing it or not.

Nicely said. These types of issues arise from trying to "get" ISO instead of first trying to understand your business then seeing if there are any gaps against the ISO requirements. The much maligned process approach would surely help in this situation.

 

[John Martinez]

Peter - I could be wrong...but wouldn't the other division fall under the control of "outsourced" processes rather take the place of "THE" customer (the one who pays for your product or service)?
Where is the teeth in the Quality Management System, if the responsibility is shifted to the uncertified division?
Really confused because we have exactly this sort of situation.
Only our division is certified not the entire company, some things are handled by corporate, aren't we still responsible to monitor and control (meaning ensure we do everything we can on our end to ensure they don't mess up) our outsourced corporate process?
~Brunetta

Perhaps there is a communication problem when you state "division".

If your site is part of a multi-site certificate, then the "organization" is all of you. Therefore, whatever site does the customer review is who is mainly responsible.

If only certain sites are certified separate, and you are seeking certification specific to your site, then your site is the "organization" and then review of requirements is your site's responsibility, whatever that form takes.

So, it is my opinion that you must first decide what site (separate) or sites as a whole who is being certified before you can understand any requirements of the "organization".

Your certification body (registrar) will be auditing you that way.

By the way, my comments are specific to ISO 9001 as some sector specific schemes have different requirements.

Hope this helps.