Controlling Production and Service Delivery Under ISO 9001
ISO 9001 Clause 8.5
This clause requires the organisation to ensure that products and services are provided under controlled conditions.
What Does ISO 9001 Clause 8.5 Require?
Clause 8.5 of ISO 9001:2015 covers the controlled conditions under which products must be produced and services delivered. It has six sub-clauses covering the general control of production and service provision, identification and traceability, property belonging to customers or external providers, preservation of outputs, post-delivery activities, and control of changes.
Clause 8.5.1 - Control of Production and Service Provision
Production and service provision must be carried out under controlled conditions. These conditions include the availability of documented information defining product characteristics and results to be achieved, suitable monitoring and measuring resources, monitoring and measurement at appropriate stages, use of suitable infrastructure and working environment, appointment of competent people, validation of processes where outputs cannot be verified by subsequent monitoring, implementation of measures to prevent human error, and implementation of release, delivery and post-delivery activities.
Not all of these conditions will apply to every organisation - the clause uses the phrase "as applicable". The relevant conditions for a given organisation depend on the nature of its products and services and the risks involved in their delivery.
Clause 8.5.2 - Identification and Traceability
Where required, the organisation must use suitable means to identify outputs throughout production and service provision. The status of outputs must be identified with respect to monitoring and measurement requirements. Where traceability is a requirement, the organisation must control the unique identification of outputs and retain the documented information needed to enable traceability.
Traceability requirements vary significantly by sector. Manufacturing organisations - particularly those in automotive, aerospace, food, medical devices or pharmaceuticals - typically have specific traceability requirements. Service organisations often have more limited traceability needs, though some sectors (construction, engineering, professional services) may have specific record-keeping obligations.
Clauses 8.5.3 to 8.5.6 - Property, Preservation, Post-Delivery and Changes
Clause 8.5.3 requires the organisation to care for and safeguard property belonging to customers or external providers while it is under the organisation's control or being used by it. Clause 8.5.4 requires preservation of outputs to the extent necessary to maintain conformity - covering identification, handling, contamination control, packaging, storage, transmission and protection. Clause 8.5.5 covers post-delivery activities, requiring the organisation to meet requirements for those activities to the extent determined by applicable legal and regulatory requirements, customer requirements, and the nature, use and intended lifetime of the product or service. Clause 8.5.6 requires that changes to production or service provision are reviewed and controlled to maintain conformity with requirements.
For Clause 8.5, I'll typically observe operations on site and check that what I see matches the documented procedures. For production organisations, I'll look at how product is identified through the process, how status is indicated - whether it has passed inspection or is awaiting further processing - and how the release process works before goods go to the customer. For service organisations, I'm looking for evidence of controlled service delivery - that there are defined processes, that people know what they're doing, and that appropriate records are being kept. Traceability requirements will depend on the sector, but where they apply, I'll check that the systems in place are adequate.
The practical focus for Clause 8.5 is demonstrating that products and services are delivered in a controlled, consistent way. For most organisations, a combination of documented procedures describing how work is done, records confirming it was done as planned, and a clear release process before delivery covers the core requirements. Traceability - where it applies - needs specific thought about how products or service outputs are uniquely identified and how records are linked to those identifiers throughout the delivery process.
Clause 8.5 is essentially asking whether you have your production or service delivery process under control. If you have written procedures, people follow them, you check the right things at the right stages, and you keep records - you're satisfying this clause. The traceability sub-clause only matters if traceability is a genuine requirement for your products or services. If it isn't, a simple note in your scope or procedures confirming this is sufficient.
Practical Compliance Guidance
To comply with Clause 8.5, the organisation needs controlled production or service delivery processes with appropriate documented procedures, monitoring at key stages, and records confirming that outputs have been produced or delivered as planned.
| alphaZ document | How it supports Clause 8.5 |
|---|---|
| ISO 9001 Management System Toolkit | The complete toolkit including operational procedures, job cards and all documents supporting controlled production and service delivery. |
| IMS1 Integrated Management System Manual | covers the operational process framework, providing the documented basis for controlled production and service provision under Clause 8.5.1. |
Note - all the above files can be downloaded with an alphaZ subscription
