Clause Explorer

ISO 9001, IATF 16949, ISO 14001, ISO 45001, ISO 22000 (food safety) & VDA 6.3 — what each clause really asks, what auditors look for, and how to comply. Search by number or keyword.

212 clauses
P1Potential analysis (pre-award readiness check)VDA 6.3

A short pre-award assessment of whether a new supplier or a new location can realistically deliver the part before the business is committed.

P2Project managementVDA 6.3

How a new-part project is planned, resourced, and steered so it lands on time, on cost, and at the required quality.

P3Planning the product and process developmentVDA 6.3

The up-front planning that turns customer requirements into a defined product and a defined manufacturing process — the 'what we will make and how' stage.

P4Realization of the product and process developmentVDA 6.3

Carrying out the plan from P3 — actually building the product and the process, validating them, and confirming readiness for series production.

4.1Understanding the organization & its contextISO 9001

Know the world your business operates in — the outside pressures and internal realities that help or hurt your ability to deliver quality — and keep that picture current.

4.1Understanding your organisation and its contextISO 14001

Working out the bigger picture around your business — the external and internal issues that can affect how well your environmental management actually performs.

4.1Understanding your organisation and its contextISO 45001

Working out the internal and external factors that can help or hinder your ability to keep people safe and run a working OH&S system.

4.1Understanding your business and its food-safety landscapeISO 22000

Step back and map the bigger picture around your operation - the things outside and inside the factory that can help or hurt your ability to make safe food.

4.2Needs & expectations of interested partiesISO 9001

Know who has a legitimate stake in your quality — customers, authorities, employees, suppliers, owners — and what each of them actually requires of you.

4.2Understanding interested parties and their needsISO 14001

Identifying who cares about your environmental performance — regulators, neighbours, customers, staff — and deciding which of their needs and expectations you will treat as your own obligations.

4.2Needs and expectations of workers and interested partiesISO 45001

Identifying who has a stake in your health and safety performance, including your own workers, and deciding which of their needs you will treat as requirements.

4.2Knowing who your interested parties are and what they needISO 22000

Work out who has a stake in your food being safe - customers, regulators, your supply chain, consumers - and what each of them legitimately requires of you.

4.3Determining the scope of the QMSISO 9001

Draw the boundary honestly: which products, sites and processes your QMS covers — and justify anything you claim does not apply to you.

4.3Scope of the environmental management systemISO 14001

Drawing a clear boundary around what your EMS covers — which sites, activities, products and services are in, and being honest about it.

4.3Scope of the OH&S management systemISO 45001

Defining clearly what activities, sites, people and processes your safety system actually covers, in writing.

4.3Setting the boundaries of your food-safety systemISO 22000

Be clear and honest about exactly which products, processes and sites your food-safety management system covers.

4.3.1Scope — supplemental (IATF only)IATF 16949

IATF closes the scope loopholes: supporting functions — on site or remote (head office, design centres, distribution) — must be inside the QMS, and the ONLY permitted exclusion is product design (8.3), never manufacturing process design.

4.3.2Customer-specific requirements (IATF only)IATF 16949

Every automotive customer adds their own rulebook (CSRs) on top of IATF — these must be evaluated and woven into your QMS, not filed and forgotten.

4.4QMS and its processesISO 9001

Run the business as a set of connected processes — each with an owner, inputs, outputs, performance measures and risks — supported by the documents and records they need.

4.4The environmental management system itselfISO 14001

Actually establishing, running and improving the EMS as a connected set of processes — not a binder of procedures, but how the place really works environmentally.

4.4The OH&S management systemISO 45001

Having an actual system of connected processes for managing health and safety, not just a folder of documents.

4.4Running food safety as a connected systemISO 22000

Treat your PRPs, HACCP plan, procedures and records as one joined-up system of processes - not a pile of separate documents.

4.4.1.1Conformance of products & processes (IATF only)IATF 16949

You are accountable for the conformity of everything you supply — including outsourced processes and service/spare parts — to every customer, statutory and regulatory requirement.

4.4.1.2Product safety (IATF only)IATF 16949

Safety-related products and characteristics demand documented, end-to-end management — from identification and special approvals to trained people, traceability and cascading the requirements down your supply chain.

P5Supplier managementVDA 6.3

How the supplier manages its own sub-suppliers so that purchased material and services do not become the weak link in the chain.

5.1Leadership and commitmentISO 14001

Top management owning the EMS for real — resourcing it, steering it, and being seen to care about environmental performance, not delegating it to one overworked coordinator.

5.1Leadership and commitmentISO 45001

Top management visibly owning health and safety and being accountable for it, not delegating it away to a safety officer.

5.1Leadership actually owning food safetyISO 22000

Top management must visibly drive food safety, not delegate it entirely to the technical team and walk away.

5.1.1Leadership & commitment — generalISO 9001

Top management must personally own the QMS — accountable for whether it works, not spectators who delegated quality to the quality manager.

5.1.1.1Corporate responsibility (IATF only)IATF 16949

The company must define and live corporate responsibility policies — at minimum an anti-bribery policy, an employee code of conduct, and an ethics escalation ('whistle-blower') policy.

5.1.1.2Process effectiveness & efficiency (IATF only)IATF 16949

Top management must review not only whether processes work (effectiveness) but what they cost in waste and resources (efficiency) — and the results must reach management review.

5.1.1.3Process owners (IATF only)IATF 16949

Every QMS process needs an identified owner who understands the role and is competent to do it — names, not vague departments.

5.1.2Customer focusISO 9001

Leadership must make sure customer requirements — including the legal ones — are understood and met, the risks to conformity are managed, and enhancing customer satisfaction stays the visible aim.

5.2Quality policy (establish & communicate)ISO 9001

A quality policy that genuinely fits your business: a frame for objectives, a commitment to meeting requirements and improving — written, communicated, understood and applied, not laminated and ignored.

5.2Environmental policyISO 14001

A short, signed statement of your environmental intent — including commitments to protect the environment, meet your obligations and keep improving — that genuinely guides the business.

5.2OH&S policyISO 45001

A short top-level statement, signed by leadership, committing the business to safe working, legal compliance, worker consultation and continual improvement.

5.2A food-safety policy that means somethingISO 22000

A short, clear statement from leadership of their commitment to making safe food - communicated, understood and actually lived.

5.3Roles, responsibilities & authoritiesISO 9001

Everyone with a QMS role must know it — responsibilities assigned, communicated and understood, including who ensures conformity, who reports on QMS performance, and who guards system integrity during changes.

5.3Roles, responsibilities and authoritiesISO 14001

Making sure everyone knows their part in the EMS — who is responsible for what, and who has the authority to report on how the system is performing.

5.3Roles, responsibilities and authoritiesISO 45001

Making sure everyone knows who is responsible and accountable for which parts of safety, and that they have the authority to act.

5.3Clear roles, including the food-safety team leaderISO 22000

Everyone with a part in food safety should know their responsibilities, and one named person must lead the food-safety team.

5.3.1Roles & responsibilities — supplemental (IATF only)IATF 16949

Top management must put names against the customer-facing duties: special characteristics, quality objectives and training, corrective and preventive actions, product design and development, capacity analysis, logistics, customer scorecards and customer portals.

5.3.2Conformity & corrective action authority (IATF only)IATF 16949

The people responsible for product conformity must have the power to stop shipment and stop production to contain a problem — on every shift — and nonconforming product must not move without proper disposition.

5.4Worker consultation & participationISO 45001

Genuinely involving workers, especially non-managers, in building and running the safety system, and removing the barriers that stop them speaking up.

P6Production process analysis (overview)VDA 6.3

The heart of the audit — a structured walk of the actual series production process to judge how robustly it makes conforming parts, broken into six sub-elements.

6.1Actions to address risks & opportunitiesISO 9001

Before things go wrong, work out what could — and what could go right — and plan actions proportionate to the impact on your product and customers.

6.1Tackling risks and opportunities to the systemISO 22000

Think ahead about what could undermine your food-safety system as a whole, and what could strengthen it, then plan to deal with both.

P6.1Process inputs (what enters production)VDA 6.3

Whether everything the process needs to start correctly — released material, approved tooling, valid data, and confirmed requirements — is actually in place at the point of use.

6.1.1Planning — actions to address risks and opportunities (general)ISO 14001

Pulling together your context, interested parties, aspects and obligations to decide which risks and opportunities your EMS must plan around — heading off problems and capturing the improvements worth pursuing.

6.1.1Actions to address risks and opportunities - generalISO 45001

Planning the safety system around the risks and opportunities you have identified, taking your context, interested parties and scope into account.

6.1.2Environmental aspectsISO 14001

Identifying how your activities, products and services touch the environment, judging which of those interactions matter most, and keeping that list current — with a lifecycle view.

6.1.2Hazard identification and assessment of risks and opportunitiesISO 45001

Systematically finding the hazards in your work and judging the risk they pose to people, including risks from the system itself and chances to improve.

6.1.2.1Risk analysis (IATF only)IATF 16949

Risk analysis must include, at minimum, the hard lessons: product recalls, audit findings, field returns and complaints, scrap and rework — learn from what has already hurt you.

6.1.2.2Preventive action (IATF only)IATF 16949

Stop problems before they occur: a defined process to find potential nonconformities and act on them proportionate to their impact — including using lessons learned from similar processes elsewhere.

6.1.2.3Contingency plans (IATF only)IATF 16949

Plan for the bad days: documented, tested contingency plans for whatever could interrupt supply — equipment failure, utility interruption, labour shortage, key supplier failure, cyber-attack — so the customer keeps receiving conforming parts.

6.1.3Compliance obligationsISO 14001

Knowing every environmental legal requirement and other commitment that applies to you, having access to them, and understanding what each one means for your operation.

6.1.3Determination of legal and other requirementsISO 45001

Knowing which safety laws and other obligations apply to you, keeping that list current, and understanding what each one actually requires.

6.1.4Planning actionISO 14001

Turning your significant aspects, compliance obligations and risks into concrete planned actions — and building those actions into how the business actually runs.

6.1.4Planning actionISO 45001

Turning your identified risks, opportunities and obligations into concrete actions and building them into your processes.

6.2Quality objectives & planningISO 9001

Set measurable quality objectives where they matter — relevant functions, levels and processes — consistent with the policy, and plan concretely how each will be achieved: what, who, when, with what, and how judged.

6.2Environmental objectives and planning to achieve themISO 14001

Setting measurable environmental goals for the functions that matter and laying out a real plan — what, who, when, resources and how you will judge success.

6.2OH&S objectives and planning to achieve themISO 45001

Setting measurable safety goals that flow from your policy and risks, then planning realistically how you will reach them.

6.2Food-safety objectives you can actually measureISO 22000

Set clear, measurable food-safety goals at relevant levels and plan how you'll reach them.

P6.2Production process steps and material flowVDA 6.3

Whether the sequence of operations and the flow of material through the plant are defined, controlled, and protect the product from mix-ups and damage.

6.2.2.1Quality objectives — supplemental (IATF only)IATF 16949

Objectives must include customer expectations, be achievable in defined timeframes, and be reviewed at least annually by top management — automotive customers expect their targets inside your targets.

6.3Planning of changesISO 9001

Change the QMS deliberately, never by drift: consider why, what could go wrong, who needs resources and where responsibilities move — before the change, not after the chaos.

6.3Managing change without breaking food safetyISO 22000

When you change something that touches food safety, plan it deliberately so the change doesn't introduce new hazards.

P6.3Personnel and qualificationVDA 6.3

Whether the people running the process are competent, qualified for their tasks, and available in sufficient numbers — including for special tasks and shifts.

P6.4Material and equipment resourcesVDA 6.3

Whether the machines, tooling, gauges, and material handling are capable, maintained, and properly managed so the process can hold its requirements.

P6.5Process effectiveness, efficiency and managementVDA 6.3

Whether the process is actively steered using its own data — targets, key figures, problem-solving, and continual improvement — so it stays in control and improves.

P6.6Process outputs and resultsVDA 6.3

Whether what actually leaves the process — quantity, quality, on-time delivery, and final release — meets the customer's requirements.

P7Customer care, satisfaction and serviceVDA 6.3

How the supplier handles the customer relationship after the part ships — requirements, complaints, field performance, service parts, and overall satisfaction.

7.1ResourcesISO 14001

Providing what the EMS needs to run and improve — people, time, money, infrastructure and monitoring equipment.

7.1ResourcesISO 45001

Providing the people, time, money and equipment needed for the safety system to actually work.

7.1Having the people, plant and environment to make safe foodISO 22000

Make sure you've got the right staff, buildings, equipment and working conditions - including external help - to keep food safe.

7.1.1/7.1.2Resources — general & peopleISO 9001

Provide the resources the QMS actually needs — money, people, equipment, time — looking honestly at what you have, what constrains you, and what must come from outside.

7.1.3InfrastructureISO 9001

Provide and maintain the buildings, equipment, utilities, transport and IT your processes need to make conforming product — maintained being the operative word.

7.1.3.1Plant, facility & equipment planning (IATF only)IATF 16949

Plant layout and equipment plans must be developed cross-functionally using risk thinking and lean principles — optimise material flow and value-add, and re-evaluate whenever capacity or processes change.

7.1.4Environment for operation of processesISO 9001

Provide and maintain the working environment your processes need for conforming product — the relevant mix of physical conditions and, where it genuinely affects quality, the human climate.

7.1.4.1Environment — supplemental (IATF only)IATF 16949

Keep premises in order: clean, orderly and in good repair, consistent with product and process needs — institutionalised housekeeping, automotive style.

7.1.5Monitoring & measuring resourcesISO 9001

Making sure the instruments and methods you use to check product are themselves trustworthy — the right tool, working properly, calibrated where it matters.

7.1.5.1.1Measurement system analysis (IATF only)IATF 16949

Knowing your gauge is calibrated is not enough — MSA asks whether the whole measurement SYSTEM (gauge + operator + method + environment) can actually distinguish good from bad on each control-plan measurement.

7.1.5.2.1Calibration / verification records (IATF only)IATF 16949

Calibration records must tell the full story: traceable standards, as-found/as-left readings, and — critically — documented assessment of product risk whenever an instrument is found out of specification.

7.1.5.3Laboratory requirements (IATF only)IATF 16949

Internal labs need a defined scope and demonstrated competence for every test they perform; external labs must be accredited (ISO/IEC 17025 or national equivalent) or specifically customer-approved.

7.1.6Organizational knowledgeISO 9001

Capture and protect the knowledge your business runs on — the recipes, fixes and customer quirks living in people's heads — and plan how to gain what you will need next.

7.2CompetenceISO 9001

Make sure everyone whose work affects quality can actually do their job — define what competent means per role, check against it, close gaps, and prove it with records.

7.2CompetenceISO 14001

Making sure people whose work affects the environment, or your compliance, are genuinely capable — through the right mix of education, training and experience.

7.2CompetenceISO 45001

Making sure everyone whose work affects safety is genuinely trained and capable, and keeping proof of it.

7.2Making sure people are competent for their food-safety rolesISO 22000

Anyone whose work affects food safety must be properly competent - through training, experience or education - and you must prove it.

7.2.1/7.2.2Competence & OJT — supplemental (IATF only)IATF 16949

A documented training process covering awareness and competence needs (including customer requirements), plus structured on-the-job training for any new or changed role affecting quality — down to contract and agency staff.

7.2.3Internal auditor competency (IATF only)IATF 16949

Internal auditors must be demonstrably competent for what they audit — system, process or product — with documented criteria covering audit approach, automotive process thinking, CSRs, core tools and the standards themselves, and competence maintained over time.

7.2.4Second-party auditor competency (IATF only)IATF 16949

The people you send to audit your suppliers must meet documented competence requirements too — supplier audits done by the unqualified create risk, not assurance.

7.3AwarenessISO 9001

Everyone working under your control — including contractors — must know the policy, their relevant objectives, how they contribute to quality, and what it costs when requirements are not met.

7.3AwarenessISO 14001

Everyone on site understanding the environmental policy, the significant aspects they affect, how they contribute, and what happens if they ignore the rules.

7.3AwarenessISO 45001

Making sure workers understand the hazards around them, the policy, their part in safety, and what can go wrong if controls fail.

7.3Staff awareness of food safety and their part in itISO 22000

Everyone on site should understand the food-safety policy, why their work matters, and the consequences of getting it wrong.

7.3.1/7.3.2Awareness suppl. & motivation (IATF only)IATF 16949

People must demonstrably know their impact on quality and the risks of bad product reaching the customer — and the company must actively work on motivation and empowerment, including making improvement everyone's business.

7.4CommunicationISO 9001

Decide deliberately how the QMS communicates — what gets said, when, to whom, how and by whom — internally and externally, instead of leaving it to corridor chance.

7.4CommunicationISO 14001

Handling environmental information both ways — telling the right people inside and outside what they need to know, and properly receiving and responding to what comes in.

7.4CommunicationISO 45001

Having clear arrangements for safety communication, both within the business and with outside parties, that work in both directions.

7.4Talking to the right people, inside and outISO 22000

Set up reliable communication - with suppliers, customers, regulators and your own teams - so food-safety information flows when it needs to.

7.5Documented informationISO 9001

Keep the documents the standard and your own processes need — created properly, identified, current, available where the work happens, protected, and with records that cannot quietly change.

7.5Documented informationISO 14001

Keeping the documents and records your EMS needs under control — current, available where used, protected, and properly versioned.

7.5Documented informationISO 45001

Keeping the documents and records your safety system needs, controlling them properly, and making sure people use the current version.

7.5Controlling your documents and recordsISO 22000

Keep the documents and records your food-safety system needs - current, available, protected and under control.

7.5.1.1QMS documentation (IATF only)IATF 16949

Your QMS must be documented as a quality manual (one document or a set) including scope, documented processes, their sequence and interactions, and a matrix showing where customer-specific requirements are addressed.

7.5.3.2.1Record retention (IATF only)IATF 16949

A defined retention policy sized to automotive reality: production part approvals, tooling records, design records and purchase orders kept for the production life plus one calendar year — minimum — unless the customer or law says longer.

7.5.3.2.2Engineering specifications (IATF only)IATF 16949

When a customer engineering standard or spec changes, you must have a documented process to review, distribute and implement it fast — within the timeframe the customer sets, or two weeks if they set none — including updating your own documents and records of the change.

8.1Operational planning & controlISO 9001

Plan how each product gets made before making it: requirements, criteria for processes and acceptance, resources, controls, and the records that will prove it was done right.

8.1Operational planning and controlISO 14001

Putting real controls on the activities tied to your significant aspects — including how you manage outsourced processes and the lifecycle of your products and services.

8.1Planning and running the operations that make safe foodISO 22000

Plan, carry out and control the day-to-day processes needed to make safe product, and manage any planned or unplanned changes to them.

8.1.1/8.1.2Op. planning suppl. & confidentiality (IATF only)IATF 16949

Product planning must include customer requirements and technical specs as inputs, plus logistics, feasibility, project planning and acceptance criteria — and you must keep customer projects and product information confidential.

8.1.1Operational planning and control - generalISO 45001

Putting the controls from your risk planning into day-to-day operations, and making sure work happens within them.

8.1.2Removing hazards & cutting risk (hierarchy of controls)ISO 45001

Choosing controls in the right order, starting with getting rid of the hazard and only using PPE as a last resort.

8.1.3Management of changeISO 45001

Assessing the safety impact of changes before you make them, so a new machine, layout or process does not introduce fresh hazards.

8.1.4Procurement, contractors and outsourcingISO 45001

Making sure what you buy, the contractors you bring in, and the work you outsource all meet your safety requirements.

8.2Emergency preparedness and responseISO 14001

Being ready for the environmental emergencies that could realistically happen — spills, fires, leaks — with planned responses you have actually practised.

8.2Emergency preparedness and responseISO 45001

Planning for the emergencies that could realistically happen, and testing that your response actually works.

8.2Prerequisite programmes - your hygiene foundationISO 22000

The basic hygiene and operating conditions - cleaning, pest control, maintenance, personal hygiene, allergen segregation - that keep the whole environment fit to make food.

8.2.1Customer communicationISO 9001

Define how you talk with customers: product information, enquiries and orders, feedback and complaints, handling their property, and contingency requirements when relevant.

8.2.2/8.2.3/8.2.4Determining, reviewing & changing requirementsISO 9001

Before you promise, know what you are promising: capture all requirements (stated, unstated-but-necessary, statutory), review that you can actually meet them, and manage changes so everyone works to the same requirement.

8.2.3.1.2Customer-designated special characteristics (IATF only)IATF 16949

Whatever the customer marks as special — safety, fit, function, regulatory — must be identified, documented and controlled exactly as they require, with their symbols and approval rules followed.

8.2.3.1.3Manufacturing feasibility (IATF only)IATF 16949

Before accepting new or changed work, a multidisciplinary team must analyse whether you can actually make it — to spec, at rate, at capacity — and the analysis must be evidenced.

8.3Traceability - knowing what went whereISO 22000

Be able to trace ingredients, packaging and product one step back and one step forward, fast enough to act in a recall.

8.3.1/8.3.2Design & development — general & planningISO 9001

If you design products (or under IATF, processes), do it as a managed project: defined stages, reviews, verification and validation activities, clear responsibilities, the right people, and records throughout.

8.3.1.1/8.3.2.1D&D of products AND processes — supplemental (IATF only)IATF 16949

IATF widens design to include manufacturing process design and demands a documented D&D procedure; planning must include all affected stakeholders — APQP in all but name.

8.3.2.2/8.3.2.3Design skills & embedded software (IATF only)IATF 16949

People doing design must be competent in the applicable tools and techniques; products with embedded software need a documented software quality assurance process with capability assessment.

8.3.3Design & development inputsISO 9001

Gather everything the design must satisfy before designing: functional and performance requirements, lessons from previous designs, statutory rules, standards, and the consequences of failure — complete, unambiguous, conflicts resolved.

8.3.3.1/8.3.3.2Product & process design inputs (IATF only)IATF 16949

IATF specifies the input lists: for product design — requirements from contract review, targets for quality/life/reliability/cost, customer make/buy intent, lessons learned; for process design — product outputs, capacity targets, error-proofing methods, and experience from previous developments.

8.3.3.3Special characteristics (IATF only)IATF 16949

Identify special characteristics through a defined process — from risk analysis, customer designations and your own knowledge — and carry them visibly through every document: drawings, FMEA, control plan, work instructions.

8.3.4Design & development controlsISO 9001

Control the design as it progresses: reviews to judge progress, verification that outputs meet inputs, validation that the product works in the real application — problems acted on, everything recorded.

8.3.4.1-8.3.4.3D&D monitoring, validation suppl., prototypes (IATF only)IATF 16949

Measure design projects at defined stages and report to management (and customer if required); validate per customer requirements including any industry/government timing; run a prototype programme with control plan when the customer requires one.

8.3.4.4Product approval process — PPAP (IATF only)IATF 16949

Before shipping, products and processes must pass the customer's approval process (typically PPAP) — and you must apply the same discipline to your suppliers before their parts enter your approved product.

8.3.5Design & development outputsISO 9001

Design outputs must let the rest of the business succeed: meeting input requirements, adequate for production and service, including monitoring/measuring needs and acceptance criteria, and stating what is essential for safe, proper use.

8.3.5.1/8.3.5.2Product & process design outputs (IATF only)IATF 16949

IATF specifies what design must hand over: for product — DFMEA, results, special characteristics, error-proofing, drawings/GD&T, service/repair information; for process — PFMEA, control plan, layout, work instructions, capacity analysis, process approval acceptance criteria and more.

8.3.6Design & development changesISO 9001

Once designed, change carefully: identify and review every change, control it to prevent harm to conformity, and record changes, reviews, authorisations and actions.

8.3.6.1D&D changes — supplemental (IATF only)IATF 16949

Every design change after product approval gets evaluated for impact, validated before implementation, and where required by the customer — approved by them first; embedded software changes are documented at both software and hardware level.

8.4Being ready for emergenciesISO 22000

Plan for the food-safety emergencies that could hit your site - power loss, flood, contamination, fire, supply failure - and test your response.

8.4.1Externally provided processes, products & services — generalISO 9001

Everything you buy that ends up in or affects your product must conform — so evaluate, select, monitor and re-evaluate providers against defined criteria, and keep the records.

8.4.1.1-8.4.1.3Supplier selection & directed-buy (IATF only)IATF 16949

Supplier processes get included in your QMS scope where you control them; selection follows a documented process assessing risk, quality, delivery, cost and capability; customer-directed suppliers still get your controls applied.

8.4.2Type & extent of controlISO 9001

Match your control effort to the risk: ensure purchased items cannot degrade your output, define controls for both the provider and the incoming result, and verify adequacy.

8.4.2.1/8.4.2.2Control suppl. & statutory requirements (IATF only)IATF 16949

Define your incoming verification process explicitly, and guarantee that all purchased products and services comply with the statutory and regulatory requirements of the countries of receipt, shipment AND customer destination.

8.4.2.3Supplier QMS development (IATF only)IATF 16949

Push your supply chain up the QMS ladder: unless the customer agrees otherwise, suppliers should be developed from basic conformity toward ISO 9001 certification and beyond (with automotive-software suppliers assessed appropriately).

8.4.2.4Supplier monitoring & 2nd-party audits (IATF only)IATF 16949

Monitor supplier performance on defined indicators — delivered conformity, disruptions including field issues, delivery performance, premium freight — plus customer disruptions caused by suppliers; use second-party audits per your risk-based programme.

8.4.2.5/8.4.3.1Supplier development & information (IATF only)IATF 16949

Act on what monitoring finds: prioritised supplier development based on performance and risk — and pass down to suppliers all applicable requirements, statutory/regulatory ones and special characteristics included, cascading the chain.

8.4.3Information for external providersISO 9001

Tell suppliers exactly what you need before they supply it: the processes/products/services, approval rules, competence requirements, interactions, your monitoring of them, and any verification you or your customer will do at their site.

8.5.1Control of production & service provisionISO 9001

Running production under controlled conditions — people know what to make, how to make it, how to check it, and the equipment and environment are up to the job.

8.5.1Getting ready for hazard analysis - the homeworkISO 22000

Before analysing hazards, gather the facts: describe your products and ingredients, define intended use, and draw and verify accurate process flow diagrams.

8.5.1.1Control plan (IATF only)IATF 16949

The control plan is the production rulebook: for every part (or family), at every phase — prototype, pre-launch, production — what is controlled, how, how often, by whom, and what happens when it goes wrong.

8.5.1.2-8.5.1.4Standardised work, set-up & restart verification (IATF only)IATF 16949

Operators work to standardised instructions they can actually use, in their language; every job set-up gets verified (first-off/last-off comparison where applicable); after any shutdown, verify before running.

8.5.1.5-8.5.1.7TPM, tooling management & scheduling (IATF only)IATF 16949

Maintain production capability as a system: documented TPM with objectives and improvement, full lifecycle management of production tooling (in-house and at suppliers), and order-driven production scheduling fed by key planning information.

8.5.2Identification & traceabilityISO 9001

Know what every item is and its inspection status at every stage — and where traceability is required, be able to trace it, with records.

8.5.2Hazard analysis - finding and assessing the hazardsISO 22000

Identify every realistic biological, chemical, physical and allergen hazard, decide which are significant, and choose how to control each one (HACCP principle 1).

8.5.2.1Traceability — supplemental (IATF only)IATF 16949

Traceability is risk-based but with teeth: documented analysis of traceability requirements per product, ability to identify nonconforming/suspect product clearly, and where customers require it, serialised or lot traceability that supports rapid containment.

8.5.3Property belonging to customers or external providersISO 9001

Other people's property in your care — tooling, material, designs, data — gets identified, verified, protected, and any loss or damage reported to the owner with records kept.

8.5.3Proving your controls actually workISO 22000

Before relying on a control measure, validate it - show with evidence it's capable of achieving the level of hazard control you need.

8.5.4PreservationISO 9001

Protect the product from the process of getting it to the customer: identification, handling, contamination control, packaging, storage, transmission/transport — preserved to the extent conformity requires.

8.5.4The hazard control plan - CCPs, limits, monitoring and correctionsISO 22000

Document the live plan for controlling significant hazards: critical control points and operational PRPs, their limits, how you monitor them, and what you do when they fail (HACCP principles 2-5).

8.5.4.1Preservation — supplemental (IATF only)IATF 16949

Preservation gets automotive specifics: contamination control, detailed storage rules, cleaning, ESD where relevant — plus inventory management (FIFO expected), obsolescence control, and periodic stock condition assessment.

8.5.5Post-delivery activitiesISO 9001

Your responsibility does not end at the gate: meet the post-delivery requirements that apply — warranty, service, recalls, disposal — scaled to risk, product life and customer requirements.

8.5.5.1/8.5.5.2Service feedback & service agreements (IATF only)IATF 16949

Information from service must flow back into manufacturing and design (including analysis where the customer requires), and where you have a service agreement with the customer, its centres must meet the agreed requirements.

8.5.6Control of changesISO 9001

Production changes — planned or forced — get reviewed and controlled so conformity survives, with records of the review, who authorised, and what actions followed.

8.5.6.1Changes & temporary process controls (IATF only)IATF 16949

Production changes get a documented process with risk-based validation before implementation and customer approval where required; temporary deviations from the control plan (the backup method when the poka-yoke breaks) come from an approved, customer-aware list with restoration discipline.

8.6Release of products & servicesISO 9001

Nothing ships until planned verification proves it conforms — and the release record names the evidence and the person who authorised it.

8.6Keeping PRP and hazard-plan information currentISO 22000

After completing the control plan, refresh the supporting information - product specs, characteristics, flow diagrams and PRPs - so the system stays accurate.

8.6.1/8.6.5/8.6.6Release suppl., regulatory conformity & acceptance criteria (IATF only)IATF 16949

Layered automotive tightening: control-plan-defined release arrangements at all stages, evidence of statutory/regulatory conformity before release, and acceptance criteria — with sampling plans for attribute data set at zero-defect acceptance.

8.6.2/8.6.3Layout inspection, functional testing & appearance items (IATF only)IATF 16949

Periodically re-prove the whole part: layout inspection (every dimension) and functional verification per control plan and customer frequency — and for appearance parts, masters, evaluation conditions and qualified people.

8.6.4Verification of externally provided product (IATF only)IATF 16949

Purchased product conformity gets assured by a defined mix: receiving inspection, supplier data with verification, assessments/audits, certificate review — your choice, but documented and risk-matched.

8.7Control of nonconforming outputsISO 9001

Bad product must not travel: identify it, control it, decide its fate (correct, segregate, contain, return, inform the customer, concession), verify corrections, and record what was found, done and decided — including who decided.

8.7Controlling the equipment you measure and monitor withISO 22000

The thermometers, scales, metal detectors, pH meters and timers you rely on for food-safety decisions must themselves be accurate and verified.

8.7.1.1/8.7.1.2/8.7.1.6/8.7.1.7Concessions, customer processes & notification (IATF only)IATF 16949

Deviating from spec needs the customer's written word: concession/deviation approval before further processing, records of expiry and quantity, compliance with customer-specified processes, prompt customer notification when nonconforming product has shipped, and disposal rules that make unusable product truly unusable.

8.7.1.3/8.7.1.4/8.7.1.5Suspect, reworked & repaired product (IATF only)IATF 16949

Suspect product is treated as nonconforming until proven otherwise; rework and repair follow risk-assessed, documented processes with customer approval where required, full traceability, and disposition records.

8.8Verification - confirming the system is doing its jobISO 22000

Check, by methods other than routine monitoring, that your PRPs and hazard control plan are implemented and effective (HACCP principle 6).

8.9Handling failures, unsafe product, withdrawals and recallsISO 22000

Deal properly with nonconformities and potentially unsafe product - contain it, correct it, fix the cause, and withdraw or recall when needed.

9.1Measuring and evaluating food-safety performanceISO 22000

Decide what to measure, gather the data, and actually analyse it to judge how well your food-safety system is performing.

9.1.1Monitoring, measurement, analysis & evaluation — generalISO 9001

Decide what to measure, how, when, and when to analyse it — then actually evaluate QMS performance and effectiveness from the data, keeping the evidence.

9.1.1Monitoring, measurement, analysis and evaluationISO 14001

Measuring what matters environmentally — the right parameters, with calibrated equipment — then analysing the results to judge how you are really performing.

9.1.1Measuring & evaluating OH&S performanceISO 45001

Measuring how your safety system is actually performing, with the right indicators, calibrated equipment and proper analysis.

9.1.1.1Monitoring & measurement of manufacturing processes (IATF only)IATF 16949

Prove your manufacturing processes can do the job and stay capable: process studies on new processes, capability maintained as the control plan specifies, and the documented reaction plan executed when capability or stability slips — including 100% containment and customer notification when required.

9.1.1.2/9.1.1.3Statistical tools & concepts (IATF only)IATF 16949

Statistical methods are chosen deliberately during planning (APQP/PFMEA stage), included in the control plan — and the people using them actually understand variation, control, capability and over-adjustment.

9.1.2Customer satisfactionISO 9001

Track how customers actually perceive you — not how you hope they do — using defined methods, and act on what the perception data says.

9.1.2Evaluation of complianceISO 14001

Actively checking that you are meeting your legal and other environmental obligations, at a planned frequency, and keeping the proof of your compliance status.

9.1.2Evaluation of complianceISO 45001

Regularly checking, and proving, that you actually meet the safety laws and other obligations that apply to you.

9.1.2.1Customer satisfaction — supplemental (IATF only)IATF 16949

Customer satisfaction gets measured by hard performance, continuously: delivered part quality, customer disruptions including field returns, delivery schedule performance (and premium freight), and customer notifications on quality or delivery issues — internal indicators verified against the customer's own portal view.

9.1.3Analysis & evaluationISO 9001

Turn your data into decisions: analyse and evaluate to judge conformity, satisfaction, QMS performance, planning effectiveness, risk actions, supplier performance and improvement needs.

9.1.3.1Prioritization (IATF only)IATF 16949

Trends and performance data must drive the priority order of improvement actions — worst and most customer-critical first, visibly.

9.2Internal auditISO 9001

Audit your own system at planned intervals: does it meet your requirements and the standard's, and is it effectively implemented — with objective auditors, defined criteria, results to management, corrections without delay, and records.

9.2Internal auditISO 14001

Checking your own EMS at planned intervals — against the standard and your own arrangements — using objective auditors and acting on what they find.

9.2Internal auditISO 45001

Checking your own safety system at planned intervals, by impartial auditors, to confirm it meets the standard and is actually working.

9.2Internal audits of the food-safety systemISO 22000

Run planned internal audits to check the FSMS meets the standard and your own requirements, and is working in practice.

9.2.2.1-9.2.2.4Audit programme & the three audit types (IATF only)IATF 16949

IATF demands a documented audit process and three distinct audit layers over each three-year cycle: full QMS audits (CSRs sampled in), manufacturing process audits covering all shifts (with process approach effectiveness, PFMEA/control plan adherence), and product audits at appropriate stages — programme prioritised by risk, performance and changes.

9.3Management reviewISO 9001

Leadership reviews the whole QMS at planned intervals against a defined input list and produces real decisions: improvement opportunities, change needs, resource needs — minuted and retained.

9.3Management reviewISO 14001

Top management formally stepping back at planned intervals to judge whether the EMS is still suitable, adequate and effective — and deciding what to change.

9.3Management reviewISO 45001

Top management formally stepping back at planned intervals to judge whether the safety system is working and decide what to change.

9.3Management review of the food-safety systemISO 22000

Leadership periodically reviews the whole FSMS using real data, and decides on changes, resources and improvements.

9.3.1.1/9.3.2.1/9.3.3.1Management review — supplementals (IATF only)IATF 16949

At least annually (more often when risk demands), with automotive-specific inputs — cost of poor quality, process effectiveness AND efficiency, warranty, field failures, customer scorecards, feasibility results — and a documented action plan when customer performance targets are missed.

10.1Improvement — generalISO 9001

Find and act on improvement opportunities deliberately — better products, fewer future failures, better QMS results — covering correction, corrective action, continual improvement, breakthrough change, innovation and reorganisation.

10.1Improvement (general)ISO 14001

Continually looking for ways to improve environmental performance and the EMS, and acting on the opportunities you find.

10.1Improvement - generalISO 45001

Continually looking for ways to make the safety system better and reduce risk further, not just maintaining the status quo.

10.1Fixing failures at the root so they don't returnISO 22000

When something goes wrong, react to it, find the real cause, fix it so it doesn't come back, and check the fix worked.

10.2Nonconformity & corrective actionISO 9001

When something goes wrong, contain it, fix it, find the real cause, and stop it coming back — then check the fix actually worked.

10.2Nonconformity and corrective actionISO 14001

When something goes wrong environmentally, controlling the immediate problem, finding the real cause, fixing it so it does not recur, and proving the fix worked.

10.2Incident, nonconformity and corrective actionISO 45001

Reporting, investigating and properly fixing incidents and nonconformities by tackling the root cause, not just the symptom.

10.2Continually improving the systemISO 22000

Keep making the food-safety system better over time, using the evidence the system produces.

10.2.3Problem solving (IATF only)IATF 16949

One documented problem-solving process (with defined approaches for different issue types and scales) covering containment through verified effectiveness and systemic prevention — using the customer's format where they prescribe one.

10.2.4Error-proofing (IATF only)IATF 16949

Error-proofing is a documented, planned discipline: opportunities identified in the FMEA process, devices tested per the control plan with failures triggering reaction plans, and challenge parts controlled like gauges.

10.2.5/10.2.6Warranty & field failure analysis (IATF only)IATF 16949

Where you have warranty obligations: a documented warranty management process including claim analysis and NTF (no trouble found) decisions agreed with the customer; returned parts and field failures get analysed with results reported and corrective action triggered.

10.3Continual improvementISO 9001

Keep making the QMS itself better — suitability, adequacy, effectiveness — using what analysis and management review reveal as needs or opportunities.

10.3Continual improvementISO 14001

Steadily raising the suitability, adequacy and effectiveness of the EMS over time to keep enhancing your environmental performance.

10.3Continual improvementISO 45001

Steadily improving the suitability, adequacy and effectiveness of the safety system over time, with workers involved.

10.3Keeping the whole FSMS up to dateISO 22000

Make sure the food-safety management system as a whole stays current - leadership ensures it evolves with the business and its risks.

10.3.1Continual improvement — supplemental (IATF only)IATF 16949

A documented continual improvement process: identification of methodology, objectives, measurement, effectiveness — with manufacturing process improvement focused on variation and waste reduction, acting once processes are already capable and stable.