Changes & temporary process controls (IATF only)
Plain-language summary
Production changes get a documented process with risk-based validation before implementation and customer approval where required; temporary deviations from the control plan (the backup method when the poka-yoke breaks) come from an approved, customer-aware list with restoration discipline.
What the clause is really asking
8.5.6.1: documented change control covering changes by you OR your suppliers, impact assessment, verification/validation before implementation, evidence retained, customer approval/notification per CSRs. 8.5.6.1.1: identify and document a list of approved alternative process controls; when primary controls (error-proofing devices etc.) fail, follow the approved backup, manage the risk (e.g. 100% inspection), restore the primary within defined timing, and keep traceability of product made under the alternative — with customer notification where required.
What auditors look for
Auditors love the broken-sensor scenario: 'Your poka-yoke failed last month — show me what happened.' They want the approved alternative-controls list (pre-approved, not improvised), the restoration record, product traceability for the deviation window, and supplier-originated changes flowing through the same control.
Typical evidence
Change control records with validation before implementation; supplier change notifications; approved alternative process control list; deviation logs with restoration timing; customer notifications.
How to comply — recommendations
Build the bypass list BEFORE failures: for each error-proofing device, the approved alternative, added controls, and a maximum bypass duration with escalation. Log every bypass like a stop-ship event. That one document turns your worst audit moment into your best.
Common nonconformities
Bypassed poka-yoke discovered with no approved alternative, no log, no restoration date; supplier changes arriving unannounced and uncontrolled; deviation product untraceable.
Related clauses
Builds on ISO 9001 8.5.6; links IATF 10.2.4
In the book
Chapter 8 — Operation — Where the Product Is Won or Lost treats this clause family in full: what it is really asking, what auditors look for, the evidence that satisfies, how to make it work on a real floor, and where companies stumble. This IATF requirement is covered in the Automotive Edition, in the same six blocks as the ISO clause around it.
Get the free ISO 9001:2026 Readiness Scorecard
Free, instant download. We'll only email you the occasional practical quality update — no spam, unsubscribe anytime.
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of the relevant standard for the authoritative text.