Overdue Plug Gauge Calibration and Retrospective Product Risk
During an internal ISO 9001:2015 audit of a medical-device contract manufacturer, the auditor finds that three of twelve go/no-go plug gauges used on a catheter hub (Ø 4.00 ± 0.02 mm) have calibration stickers expired by four months. The calibration vendor's records show the gauges were last verified 16 months ago against a 12-month interval. Production records show roughly 2,400 hubs were inspected with these gauges and shipped in that period. One gauge checked against the retained master setting ring reads 0.004 mm oversize on the go side; the other two are within 0.001 mm. The calibration procedure requires a 10:1 gauge-to-tolerance ratio, but the current gauge tolerance is 0.002 mm against a part tolerance of 0.040 mm, which is not 10:1. The quality manager wants to record this as a minor nonconformity and close it by calibrating the gauges. The customer's supplier quality agreement requires notification within 48 hours of any condition affecting shipped product.
1. Classify the nonconformity and justify your classification. What objective evidence is needed?
Read the worked answer
This is a major nonconformity, not a minor one. Classification should rest on systemic failure, product risk, and whether existing controls would have detected the condition.
Systemic failure: three gauges are overdue against a defined 12-month interval, and the vendor records show 16 months. That is not a single missed sticker; it indicates the calibration due-list and recall process is not functioning. A minor finding would be appropriate for an isolated lapse where the system detected and corrected it; that is not the case.
Product risk: a gauge is a measuring resource, and its nonconformance can affect acceptance decisions on 2,400 shipped hubs. The 0.004 mm oversize condition on a go gauge is directionally important: an oversize go member can accept a bore that is undersize, so the risk is to the lower specification limit, not the upper.
Measurement adequacy: the 10:1 rule is not met. With a part tolerance of 0.040 mm and a gauge tolerance of 0.002 mm, the ratio is 20:1 on the gauge tolerance alone, but the relevant comparison also includes gauge wear, repeatability, and the master-ring uncertainty. The procedure itself is being violated, which is a separate nonconformity.
Objective evidence needed: calibration certificates and due dates, the calibration procedure and interval rationale, the master-ring verification record, the nonconforming gauge identified and segregated, a list of affected lots and dates, production and shipping records for those lots, and previous audit and calibration-compliance history. If the site cannot show why the interval was extended, the finding stands as written.
2. Describe containment and retrospective verification. What data do you need, and what decision rule determines whether shipped product must be recalled or the customer notified?
Read the worked answer
Containment: immediately remove the three gauges from service, tag them as out of calibration, and replace them with verified gauges. Quarantine any remaining WIP and finished goods inspected with them. Recalibrate the gauges and record the as-found condition, especially the 0.004 mm oversize gauge, because as-found data drive the retrospective risk assessment.
Retrospective verification: identify all lots inspected in the 16-month window and retrieve retained samples or CMM variable data. Re-measure a risk-based sample with a verified instrument, for example 32 parts per affected lot, and compare against the specification limits. If retained samples are unavailable, review the process capability from CMM data and the bore's historical distribution; if the distribution is comfortably centered with Cpk above 1.33, the probability of a part near the lower limit is low, but not zero.
Decision rule: notify the customer and escalate if any re-measured part is outside 3.98–4.02 mm, if the process distribution shows a meaningful fraction below the lower limit, or if the as-found gauge error is large enough relative to the guard band to change an acceptance decision. Also notify within 48 hours regardless, because the supplier agreement is triggered by a condition affecting shipped product; the notification can state that the risk assessment is in progress.
The quality manager's plan to calibrate and close is inadequate: calibration fixes the instrument, not the 2,400 shipped parts, and not the recall process that allowed the lapse.
3. Write the audit finding and the CAPA requirements, including how effectiveness will be verified.
Read the worked answer
Finding statement: 'Nonconformity - ISO 9001:2015 clause 7.1.5.2. Three of twelve plug gauges used for final acceptance of the 4.00 ± 0.02 mm hub bore were in use with calibration 16 months old against a 12-month interval. The gauge-to-tolerance ratio required by procedure QP-7.1.5 (10:1) is not met for the current gauge tolerance. Approximately 2,400 hubs were inspected with these gauges and shipped between [dates].' Objective evidence: gauge IDs, calibration certificates, procedure, master-ring check, lot list.
CAPA requirements: root cause must address why the due date was not triggered (no owner for the calibration due-list, no automatic reminder, vendor not obligated to notify, interval extended without validation) and why the gauge tolerance was accepted despite the 10:1 rule. Corrective action: recalibrate and requalify all gauges, implement an ERP or calendar-driven due-date system with a 30-day look-ahead, block gauge use at expiry, and revise gauge specifications to meet the 10:1 rule or justify an alternative with an MSA study. Preventive action: read-across to all measuring equipment on site, add calibration compliance to the internal audit checklist, and require the calibration vendor to notify the site of upcoming due dates.
Effectiveness verification: at 3 and 6 months, audit a sample of all gauges for 100% calibration compliance, confirm zero overdue gauges in the system report, review gauge R&R results for the revised gauges, and verify that no escapes occurred from the retrospective check. Verification is evidence-based, not a statement that training was completed. The customer notification must be issued within 48 hours and linked to the CAPA record.