AS9100D Objective Evidence Requirements: Part 1 Documentation
AS 9100D is an incredibly poorly written QMS standard littered with ambiguous / vague requirements that have resulted in subjective interpretations and inconsistent implementation.
This article discusses the minimum “Objective Evidence” actually by the standard. Any interpretations beyond these minimum requirements (e.g., by an internal or external auditor) are based purely on subjective opinion.
The first confusing point to address is whether there are any actual documented procedures required by AS 9100D.
AS 9100:2016 (Rev. D) Annex A states:
A.6 Documented Information
Where ISO 9001:2008 used specific terminology such as “document” or “documented procedures”, “quality manual” or “quality plan”, ISO 9001:2015 defines requirements to maintain documented information.
Where ISO 9001:2008 used the term “records” to denote documents needed to provide evidence of conformity to requirements, this is now expressed as a requirement to retain documented information.
As the chart below describes, there are only 2 requirements for documented “procedures”. And these 2 procedures can be (and often are) combined into a single procedure. These are required to address “nonconformity control” (8.7.1) & corrective action (10.2.1).
# | “Maintain” as Documented Information (Documents) | Sec. |
---|---|---|
1 | To the extent necessary, the organization shall: a. maintain documented information to support the operation of its processes; [SUBJECTIVE requirement - to be determined by the ORGANIZATION (as per 7.5.1b)… NOT the auditor.] | 4.4.2 |
2 | a general description of relevant interested parties (see 4.2 a); | 4.4.2 |
3 | the scope of the quality management system, including boundaries and applicability (see 4.3); | 4.3 & 4.4.2 |
4 | a description of the processes needed for the quality management system and their application throughout the organization; | 4.4.2. |
5 | the sequence and interaction of these processes; | 4.4.2 |
6 | assignment of the responsibilities and authorities for these processes. | 4.4.2 |
7 | Quality policy | 5.2.2.a |
8 | Quality objectives | 6.2.1 |
9 | a register of the monitoring and measuring equipment (that includes: the equipment type, unique identification, location, and the calibration or verification method, frequency, and acceptance criteria). | 7.1.5.2 |
10 | The organization shall “determine” and “maintain” documented information “to the extent necessary:” 1. to have confidence that the processes have been carried out as planned; 2. to demonstrate the conformity of products and services to their requirements; [SUBJECTIVE requirement - to be determined by the ORGANIZATION (as per 7.5.1b)… NOT the auditor.] | 8.1.e |
11 | Controlled conditions shall include, as applicable: a. the availability of documented information that defines: 1. the characteristics of the products to be produced, the services to be provided, or the activities to be performed; 2. the results to be achieved; [This documented information may be provided by the customer (e.g., Drawings)] | 8.5.1.a |
12 | c. the implementation of monitoring and measurement activities at appropriate stages to verify that criteria for control of processes or outputs, and acceptance criteria for products and services, have been met; 1. ensuring that documented information for monitoring and measurement activity for product acceptance includes: - criteria for acceptance and rejection; - where in the sequence verification operations are to be performed; - measurement results to be retained (at a minimum an indication of acceptance or rejection); - any specific monitoring and measurement equipment required and instructions associated with their use; | 8.5.1.c1 |
13 | The organization’s nonconformity control process shall be maintained as documented information including the provisions for: − defining the responsibility and authority for the review and disposition of nonconforming outputs and the process for approving persons making these decisions; − taking actions necessary to contain the effect of the nonconformity on other processes, products, or services; − timely reporting of nonconformities affecting delivered products and services to the customer and to relevant interested parties; − defining corrective actions for nonconforming products and services detected after delivery, as appropriate to their impacts (see 10.2). | 8.7.1 |
14 | The organization shall maintain documented information that defines the nonconformity and corrective action management processes. | 10.2.1 |
<note tip># 2 thru 8
While AS 9100 does NOT require a Quality Manual, it is generally a good idea to do so as a “defensive measure”. By addressing all of the requirements of AS 9100D in a “Quality Manual” (at a policy level) the business can argue that it has addressed the more subjective requirements, contained throughout AS 9100D, that do not specifically require “objective evidence”. Also, a “Quality Manual” can improve efficiency through providing a single source addressing items 2 thru 8 from the above chart.</note>
<note important># 9
The IAQG official "AS 9100:2016 Series Clarifications" states: The 9100-series clause 7.1.5.2 was not intended to force organizations to have the register specifically include the “equipment type, unique identification, location, and the calibration or verification method, frequency, and acceptance criteria.” The organization is required to have this information for equipment listed on the calibration register but not specifically in the register.
Almost no one identifies the “method” or “acceptance criteria” in their “register” (database)… unless they have a full in-house calibration laboratory. What auditors typically see is:
1. the “method” identified on the calibration certificate (from the calibration/metrology lab).
2. the “acceptance criteria” either identified in the calibration certificate (from the calibration/metrology lab) OR for the company to have a copy of the calibration “method” that was used (containing the acceptance criteria).
While the company could have the instrument specifications, if those specifications can’t be matched to the actual calibration method used, then there is no way to confirm that was the actual “acceptance criteria” used in performing the calibration.</note>
<note important># 11
When asked whether clause no. 8.5.1a) of ISO 9001:2015 “availability of documented information” means “maintain documented information”, the ”
Official ISO 9001:2015 Inerpretations from ISO TC/176/SC2” stated “No”. And explained “The terms “available” and “maintain” are not synonyms, and the use of “availability” was deliberate. “Available” means “able to be used or obtained, or accessible”, whereas “maintain” means “cause or enable to continue”. The “maintenance” of documented information is not explicitly required by Clause 8.5.1(a), but is addressed by other parts of ISO 9001:2015. Clause 8.5.1 (a) requires the documented information to be “available” so that it can be used, not just “maintained” (i.e. preserved). The documented information that needs to be available under Clause 8.5.1(a) is part of the quality management system documentation, and therefore has to be managed in accordance with Clause 7.5.”.</note>