Our own servers in Europe · GDPR · Support in your language

Module 5 of 7 · ISO 9001 · Clause 8

Operation

This is the clause that carries the most weight in an audit: it covers the whole operational cycle, from an order coming in to the product or service going out, including whatever is bought in from outside.

Content reviewed on

Requirements for products and services

Covers communication with the customer, determining and reviewing requirements before committing to deliver, and managing changes to what has already been agreed.

Design and development, when applicable

Planning, inputs, controls, outputs and changes to the design. If the organization does not design its own products or services, this section is excluded and justified in the scope statement.

Control of externally provided processes, products and services

Evaluation and selection of external providers, the type and extent of control based on the risk they represent, and verification of what is received before it is used or built into the final product.

Production, release and nonconforming outputs

Controlled conditions for production and service delivery, identification and traceability, preservation, post-delivery activities, releasing the product only once the defined criteria are met, and handling nonconforming outputs so they do not reach the customer uncontrolled.

What an auditor usually asks for

  • A record of order review before acceptance: what was committed to and with what resources
  • Supplier evaluation and re-evaluation criteria, with their history
  • Batch or serial-number traceability from raw material to delivery
  • A nonconforming-product procedure showing who decides and how it is closed out

How to cover operation in Kimobox

  1. 1Review and approve every order through a flow that records what was committed to and with what resources.
  2. 2Onboard and re-evaluate suppliers with an incident history visible on every record, from the supplier portal.
  3. 3Log batch and traceability data from raw material to delivery, ready to feed a quality certificate.
  4. 4Handle nonconforming product through a flow that forces a decision on it before the case can be closed.

Traceability stops being rebuilt by hand before every audit: the batch stays linked from raw material to the certificate.

See batch traceability and certificates in Kimobox

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

  1. ISO 9001:2015 — Quality management systems. Requirements ISO · 2015 ed., with Amd 1:2024
  2. ISO 9000:2015 — Fundamentals and vocabulary ISO · 2015 ed.
  3. ISO 19011:2018 — Guidelines for auditing management systems ISO · 2018 ed.