Implementation of a QMS based on ISO 9001
Domain 4 covers clauses 7 and 8 - the largest block of the standard and where the certification auditor spends most time. The exam tests whether you can match a situation to the right clause and name the missing control.
Support (clause 7)
Key requirements: resources (7.1.1), infrastructure (7.1.3), environment for the operation of processes (7.1.4), monitoring and measuring resources (7.1.5), organizational knowledge (7.1.6), competence (7.2), awareness (7.3), communication (7.4), documented information (7.5). Under 7.1.5 the criterion is fitness for the measurement purpose: equipment calibrated or verified at specified intervals, identified as to status, and safeguarded. A calibration certificate alone does not prove a gauge suits the tolerance. Clause 7.5 requires control for availability and protection - distribution, access, retrieval, retention and disposal.
Operation (clause 8)
8.1 requires planning and control of operations with criteria, resources and controls, plus control of outputs that do not conform. 8.2 covers review of requirements and customer communication. 8.3 covers design and development inputs, controls, outputs and changes. 8.4 covers evaluation, selection, monitoring and re-evaluation of external providers, with criteria and communicated requirements. 8.5 covers control of production and service provision, identification and traceability, customer property, preservation, post-delivery activities and control of changes. 8.6 release and 8.7 nonconforming outputs close the loop.
Worked example
A supplier of machined brackets is added to the approved list. Under 8.4.1 the organization defines criteria (capability, lead time, certification), evaluates the supplier and records the decision. Incoming inspection is set as a control supporting 8.6 release, and the supplier scorecard feeds re-evaluation under 9.1.3.
Traps
- Confusing 7.1.4 environment (social, psychological, physical) with 7.1.3 infrastructure.
- Keeping 8.3 in scope with no design records to show.
- No documented information evidencing external provider evaluation.