ISO 9001 Clause 8.4.1, titled “Control of externally provided products and services,” pertains to how an organization manages processes related to externally sourced products and services, including those provided by suppliers, contractors, or other external entities like IT agencies or temporary help firms. It ensures that externally provided processes, products, and services meet specified requirements. This clause is critical for maintaining the integrity and quality of the organization’s final products or services.
Breakdown of Clause 8.4.1 Key Points
- Determining the Externally Provided Processes, Products, and Services: The organization identifies and documents external parties’ processes, products, and services relevant to the quality management system. Note: special care should be taken regarding outsourced processes like heat treating, plating, painting, and tumbling.
- Ensuring Conformity: The organization must ensure that any products, services, or processes obtained from external providers meet its requirements. This includes adherence to customer requirements and applicable regulatory standards.
- Supplier Evaluation: The organization must establish and apply criteria for evaluating, selecting, monitoring performance, and re-evaluating external providers. This involves assessing the external providers’ ability to deliver processes, products, and services to the organization’s requirements. Popular methods include performance monitoring, supplier scorecards, surveys, and supplier visits.
- Communication with Suppliers: Maintain open and effective communication with external providers to ensure they understand your requirements and expectations. This includes providing feedback on their performance and any areas for improvement. Supplier scorecards work quite well here.
- Determining Controls: The organization must determine the controls to be applied to externally provided processes, products, and services. This determination is based on:
- Products and Services Incorporated into the Organization’s Own Products and Services: Controls must be applied to ensure that externally provided products and services that become part of the organization’s final product meet the required standards.
- Direct Supply to Customers by External Providers: When external providers supply products and services directly to the organization’s customers, controls must be applied to ensure conformity with the agreed specifications and requirements.
- Processes Provided by External Providers: If a part of the process is outsourced, the organization must apply controls to ensure these processes are performed according to the required standards.
- Application of Controls: These controls must ensure that externally provided products and services do not adversely affect the organization’s ability to consistently deliver conforming products and services to its customers. Examples of controls include receiving inspection, sampling, testing, supplier audits, and requiring certificates of conformance.
- Documented Information: The organization must retain documented information on the criteria for evaluating, selecting, monitoring, and re-evaluating external providers. This includes records of the results of these activities and any necessary actions arising from the evaluations.
Practical Steps for Implementation
1. Identify External Providers: List all external providers that supply products, services, or processes critical to your operations. This includes suppliers, contractors, and subcontractors.
2. Define Requirements: Clearly define external providers’ requirements. This includes product specifications, delivery timelines, quality standards, and regulatory compliance.
3. Evaluate and Select Providers: Develop criteria for evaluating and selecting external providers. This may include past performance, quality certifications, cost, delivery reliability, and technical capability.
4. Establish Controls: Determine the type and extent of controls needed for each external provider. This may include:
- Supplier Audits: Regular audits of the external provider’s facilities and processes.
- Inspections: Inspecting incoming products and services to verify conformity.
- Performance Monitoring: Monitoring the performance of external providers through metrics such as delivery performance, quality levels, and response times.
5. Maintain Communication: Maintain open and effective communication with external providers to ensure they understand your requirements and expectations. This includes providing feedback on their performance and any areas for improvement.
6. Document and Retain Information: Keep detailed records of evaluations, selections, monitoring activities, and re-evaluations of external providers. Document any actions taken as a result of these evaluations.
Manufacturing Company Example of Clause 8.4.1
HighTech Electronics Co. sources various components for its electronic devices from external providers. To ensure the quality and reliability of its final products, it implements stringent controls over its suppliers. To do this, it follows the following steps:
- Identify Providers: HighTech maintains a list of all its critical suppliers, including those that provide microchips, resistors, and other electronic components.
- Define Requirements: They provide detailed specifications to each supplier, outlining the required quality standards, performance criteria, and compliance with industry regulations.
- Evaluate and Select Providers: Potential suppliers are evaluated based on their technical capabilities, quality management systems, previous performance, and pricing. HighTech selects suppliers who meet their stringent criteria.
- Establish Controls: HighTech regularly audits their suppliers’ manufacturing processes and quality control systems. Incoming components are inspected for defects and conformity to specifications. Supplier performance is continuously monitored, and regular feedback is provided.
- Maintain Communication: HighTech maintains open communication with its suppliers, ensuring they are aware of any changes in requirements or specifications. Quarterly meetings are held to review performance and discuss improvements.
- Document and Retain Information: HighTech records all supplier evaluations, audits, and performance reviews. Any corrective actions or improvements are documented and tracked.
The company has identified suppliers, defined the requirements and criteria, instituted continuous performance evaluations, established controls, and maintained documentation of all activities. By implementing these controls, HighTech Electronics Co. ensures that its external providers consistently supply components that meet high standards, enabling it to produce reliable, high-quality electronic devices.
This approach aligns with ISO 9001 Clause 8.4.1, which helps maintain the integrity of its quality management system and ensures that the externally provided components meet its quality standards, contributing to its electronic devices’ overall reliability and performance. The company’s documentation also serves as a record of its commitment to quality and continuous improvement.
ISO 9001:2015 Clause 8.4.1 Control of Externally Provided Products and Services
Clause 8.4.1 emphasizes the need for organizations to have clear and effective (purchasing) criteria, controls, and processes for selecting and evaluating external providers to ensure that they meet specified quality requirements and contribute to the organization’s overall quality objectives.
