ISO 9001:2015 Clause 10.2, “Nonconformity and Corrective Action,” addresses the process an organization should follow when its quality management system (QMS) deviates from its established requirements. It focuses on the requirements for managing nonconformities within the Quality Management System (QMS) and implementing corrective actions to prevent recurrence. This clause emphasizes a systematic approach to identifying, addressing, and eliminating nonconformities and their causes.
Clause 10.2 Nonconformity and Corrective Action Explained
The organization must have processes to detect and identify instances where its products, services, or processes do not conform to the specified requirements. When a nonconformity occurs, the organization must take appropriate action to control and correct it and deal with any consequences. This might involve immediate actions to mitigate the impact of the nonconformity (aka correction).
- Evaluation and Decision: Upon detection of nonconformities, an evaluation is required to determine the significance and potential causes. It is essential to evaluate the need for actions to eliminate the causes of the nonconformity to prevent recurrence.
- Corrective Action: When nonconformities are identified and the organization decides to take corrective action, it must address the root cause of the issue and prevent its recurrence. This means they must analyze the nonconformity to understand its nature and implications, investigate and identify the root causes of the nonconformity, and assess whether similar issues exist elsewhere in the system or could occur.
- Implement Corrective Actions: Implement the corrective actions needed to address or fix the causes of the nonconformity. This may involve changes to processes, training, documentation, or other areas to prevent recurrence.
- Review of Nonconformities: Nonconformities, including their root causes, must be reviewed to ensure effective corrective actions. Consider whether this nonconformity affects the organization’s identified risks and opportunities if necessary.
- Documentation: The organization needs to document the nature of the nonconformities, the root cause, the subsequent actions taken, and the results of corrective actions to prevent their recurrence.
Clause 10.2 Corrective Action Practical Steps
To comply with ISO 9001 Clause 10.2, organizations typically follow these steps:
- Identify Nonconformities: Establish a process for identifying nonconformities, which can occur in products, processes, services, or the QMS itself. This could include customer complaints, audit findings, inspection results, or employee observations.
- React to Nonconformities: Take immediate action to control and correct the nonconformity. This could involve stopping production, isolating defective products, or providing additional training to employees.
- Evaluate the Need for Corrective Actions: Conduct a thorough analysis to determine the root cause(s) of the nonconformity. Use tools like the 5 Whys, Fishbone diagrams, or Failure Mode and Effects Analysis (FMEA) to identify the underlying issues.
- Implement Corrective Actions: Develop and implement a corrective action plan to address the nonconformity’s root cause(s). This could involve process changes, updating procedures, or improving communication channels.
- Review Effectiveness: Monitor the implementation of corrective actions and evaluate their effectiveness. Ensure that the actions taken have eliminated the root cause and prevented recurrence.
- Update Risks and Opportunities: Review and update the risk and opportunity assessments to reflect the findings and corrective actions. Ensure that similar risks are mitigated in other areas of the organization.
- Document and Communicate: Maintain detailed records of nonconformities, corrective actions, and the results of those actions. Communicate the findings and actions taken to relevant stakeholders to ensure transparency and continuous improvement.
Clause 10.2 Example Software Development Company
- Nonconformity Detection: During routine software testing, a critical bug is identified that prevents the application from functioning as intended.
- Evaluation and Decision: The bug’s severity is evaluated and determined to affect the software’s core functionality. Corrective action is then decided upon.
- Corrective Action: A cross-functional team is formed to investigate the root cause of the bug. They identify a coding error as the cause and develop a patch to fix the issue.
- Review of Nonconformities: After implementing the patch, the organization reviews the entire software development process to ensure similar errors are not present in other modules.
- Documentation: The company records document all information related to the bug’s identification, root cause analysis, corrective actions taken, and the results of those actions.
ISO 9001 Clause 10.2 Example Manufacturing Company
Imagine a manufacturing company identifying a defect in a batch of products due to a machine malfunction. The organization would:
- React to the Nonconformity: Immediately halt production, quarantine affected products, and address any immediate safety concerns.
- Evaluate the Need for Action: Investigate the machine malfunction, determine the root cause, and assess whether similar issues could occur elsewhere.
- Implement Corrective Actions: Repair the machine, conduct thorough testing, and implement changes in maintenance procedures.
- Review Effectiveness: Monitor subsequent production to ensure the issue doesn’t recur and assess whether the corrective actions were successful.
- Update Risks and Opportunities: Consider if there are new risks or opportunities related to machine maintenance and update the risk register.
- Make Changes to the Quality Management System: If the issue points to a broader problem in maintenance procedures, update relevant processes in the quality management system.
- Retain Documented Information: Keep records detailing the nature of the nonconformity, actions taken, and the results of corrective actions.
ISO 9001:2015 Clause 10.2 Nonconformity and Corrective Action
Clause 10.2 of ISO 9001:2015 establishes a systematic approach for dealing with nonconformities, emphasizing the need for thorough investigation, effective corrective actions, and ongoing monitoring to prevent recurrence. Clause 10.2 ensures a systematic and documented approach to addressing nonconformities, aiming not only to correct the immediate issue but to prevent its recurrence and improve the overall quality management system through corrective action. The goal is to maintain the integrity of the QMS and ensure continuous improvement in the organization’s processes.
