ISO 9001 and AS9100 Quality Management System Manual CONTROLLED COPY For a certified copy of this controlled document, contact
[email protected].
Updated 4/10/16 Certified By_____________
ISO 9001 AND AS9100
Craig Technologies
www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Quality Manual
ISO 9001 and AS9100 Quality Management System Manual 8550 Astronaut Blvd. Cape Canaveral, FL 32920
ISO 9001 and AS9100 www.craigtechinc.com
2 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Introduction Craig Technologies was founded in 1999 with the objective of providing quality software solutions and related computer services to the Department of Defense and commercial businesses. The company is developing and implementing a Quality Management System in order to document the company’s best business practices, better satisfy the requirements and expectations of its customers, and improve the overall management of the company. The Quality Management System of Craig Technologies meets the requirements of the International Organization of Standardization ISO 9001 and AS9100. This system addresses the design, development, production, installation, and servicing of the company’s products and services. The manual is divided into eight sections that correlate to the Quality Management System sections of ISO 9001 and AS9100. Each section begins with a policy statement expressing the Craig Technologies obligation to implement the basic requirements of the referenced Quality Management System section. Each policy statement is followed by specific information pertaining to the procedures that describe the methods used to implement the necessary requirements. This manual describes the Quality Management System and delineates authorities, interrelationships, and responsibilities of the personnel responsible for performing within the system. The manual also provides procedures or references for all activities comprised in the Quality Management System to ensure compliance with the necessary requirements of the standard. This manual is used internally to guide the company’s employees through the various requirements of the ISO/AS standards that must be met and maintained in order to ensure customer satisfaction and continual improvement and to provide the necessary instructions that create an empowered work force. This manual is used externally to introduce our Quality Management System to our customers and other external organizations or individuals. The manual is used to familiarize them with the controls that have been implemented and to assure them that the integrity of the Quality Management System is maintained and focused on customer satisfaction and continual improvement.
Chief Executive Officer
3 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Quality Policy Craig Technologies is committed to providing the highest quality products and services that meet or exceed the requirements and expectations of our customers. We will actively pursue opportunities for continual improvement of service quality.
Chief Executive Officer
The CEO of Craig Technologies has formulated the quality policy. The policy is explained and discussed at the general orientation training given to all new employees and has been reviewed with all current employees. All employees are expected to know what the quality policy means to them as it affects their job or position within the company. The policy is posted in prominent locations throughout the facility.
4 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Quality Manual Distribution A controlled electronic copy of the Quality Manual is notated “CONTROLLED COPY” in red ink on the cover page and is located on the corporate SharePoint site and is password protected. All other electronic and printed copies of this document are copies of a controlled document and must be certified before use.
5 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Contents Quality Manual Distribution ...................................................................................................................... 5 1. Scope ................................................................................................................................................ 10 1.1. General .......................................................................................................................................... 10 1.2. Corporate Overview ..................................................................................................................... 10 1.3. Introduction .................................................................................................................................. 10 1.4. Application .................................................................................................................................... 10 1.5. Regulation ..................................................................................................................................... 11 1.5.1. Control ....................................................................................................................................... 11 1.5.2 Distribution ................................................................................................................................ 11 1.5.3 Revisions .................................................................................................................................... 11 Section 2: Normative Reference............................................................................................................ 12 2. Quality Management System References ....................................................................................... 13 Section 3: Terms and Definitions ............................................................................................................ 14 3. Quality Management System Definitions ....................................................................................... 15 Section 4: Quality Management System ................................................................................................ 16 4. Quality Management System .......................................................................................................... 17 4.1 General Requirements .................................................................................................................. 17 4.2 Documentation Requirements ..................................................................................................... 19 4.2.1 General .................................................................................................................................. 19 4.2.2 Quality Manual ...................................................................................................................... 20 4.2.3 Control of Documents ........................................................................................................... 20 4.2.4 Control of Quality Records .................................................................................................... 21 4.2.5 Related Procedures and Documents .................................................................................... 21 5. Management Responsibility ............................................................................................................ 23 5.1 Management Commitment ......................................................................................................... 23 5.2 Customer Focus ............................................................................................................................ 23 5.3 Quality Policy ................................................................................................................................ 23 5.4 Planning ........................................................................................................................................ 23 5.4.1 Quality Objectives ................................................................................................................. 23 5.4.2 Quality Management System Planning................................................................................ 24 5.5 Responsibility, Authority, and Communication........................................................................... 24 5.5.1 Responsibility and Authority................................................................................................. 24 5.5.2 QMS Management Representative ...................................................................................... 24 5.5.3 Internal Communication ....................................................................................................... 25 5.5.4 Organizational Structure .......................................................Error! Bookmark not defined. 5.6 Management Review .................................................................................................................... 25 5.6.1 General .................................................................................................................................. 25 5.6.2 Review Input .......................................................................................................................... 25 5.6.3 Review Output ....................................................................................................................... 26 5.6.4 Related Procedures: .............................................................................................................. 26 6. Resource Management .................................................................................................................... 28 6 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Craig Technologies Quality Manual 6.1 Provision of Resources.................................................................................................................. 28 6.2 Human Resources ......................................................................................................................... 28 6.2.1 General .................................................................................................................................. 28 6.2.2 Competence, Awareness, and Training ................................................................................ 28 6.3 Infrastructure ................................................................................................................................ 28 6.4 Work Environment ....................................................................................................................... 29 6.5 Related Documents ...................................................................................................................... 29 7. Product Realization .......................................................................................................................... 31 7.1 Planning of Product Realization ................................................................................................... 31 7.1.1 Project Management............................................................................................................. 31 7.1.2 Risk Management.................................................................................................................. 31 7.1.3 Configuration Management.................................................................................................. 32 7.1.4 Control of Work Transfers ..................................................................................................... 32 7.2 Customer-Related Processes ....................................................................................................... 33 7.2.1 Determination of Requirements Related to the Product ..................................................... 33 7.2.2 Review of Requirements Related to the Product ................................................................. 33 7.2.3 Customer Communication .................................................................................................... 33 7.3 Design and Development ............................................................................................................. 34 7.3.1 Design and Development Planning ...................................................................................... 34 7.3.2 Design and Development Inputs........................................................................................... 35 7.3.3 Design and Development Outputs ....................................................................................... 35 7.3.4 Design and Development Review ......................................................................................... 35 7.3.5 Design and Development Verification .................................................................................. 36 7.3.6 Design and Development Validation .................................................................................... 36 7.3.6.1 Design and Development Verification and Validation Testing ............................................... 36 7.3.6.2 Design and Development Verification and Validation Documentation ................................. 37 7.3.7 Control of Design and Development Changes ..................................................................... 37 7.4 Purchasing .................................................................................................................................... 37 7.4.1 Purchasing Process................................................................................................................ 37 7.4.2 Purchasing Information......................................................................................................... 38 7.4.3 Verification of Purchased Product ........................................................................................ 39 7.5 Production and Service Provision ................................................................................................ 39 7.5.1 Control of Production and Service Provision ........................................................................ 39 7.5.1.1 Production Process Verification ............................................................................................... 40 7.5.1.2 Control of Production Process Changes .................................................................................. 40 7.5.1.3 Control of Production Equipment, Tools and Software Programs ......................................... 40 7.5.1.4 Post-Delivery Support .............................................................................................................. 40 7.5.2 Validation of Processes for Production and Service Provision............................................. 41 ISO 9001 and AS9100 www.craigtechinc.com
7 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Craig Technologies Quality Manual 7.5.3 Identification and Traceability .............................................................................................. 41 7.5.4 Customer Property ................................................................................................................ 41 7.5.5 Preservation of Product ........................................................................................................ 42 7.6 Control of Monitoring and Measuring Devices ............................................................................ 42 7.7 Related Documents ...................................................................................................................... 43 8 Measurement, Analysis, and Improvement .................................................................................... 46 8.1 General .......................................................................................................................................... 46 8.2 Monitoring and Measurement ..................................................................................................... 46 8.2.1 Customer Satisfaction ........................................................................................................... 46 8.2.2 Internal Audit ......................................................................................................................... 47 8.2.3 Monitoring and Measurement of Processes ......................................................................... 47 8.2.4 Monitoring and Measurement of Product ............................................................................ 48 8.3 Control of Nonconforming Product ............................................................................................. 48 8.4 Analysis of Data ............................................................................................................................ 49 8.5 Improvement ................................................................................................................................ 50 8.5.1 Continual Improvement ........................................................................................................ 50 8.5.2 Corrective Action ................................................................................................................... 50 8.5.3 Preventive Action .................................................................................................................. 51 8.5.4 Related Documents ............................................................................................................... 51
ISO 9001 and AS9100 www.craigtechinc.com
8 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Craig Technologies Quality Manual
Section 1: Scope
ISO 9001 and AS9100 www.craigtechinc.com
9 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
1.
Scope 1.1.
General
This Quality Manual addresses the requirements of the International Organization of Standardization ISO 9001 Standard and the SAE Aerospace Standard AS9100. The Quality Manual defines the Quality Management System (QMS) as it applies to Craig Technologies locations in Cape Canaveral, FL along with various on-site and remote locations. The QMS addresses the design, development, production, implementation, maintenance, and support of software for Craig Technologies based on specific customer requirements and the provision of quality software solutions and related Information Technology (IT) services to the Department of Defense (DoD) and commercial businesses. The Software Certificate oversees the Software Development, as well as activities associated with the provision of full-life cycle systems development, systems engineering, requirements analysis, training, modeling and simulation, software engineering, and IT support services. The QMS also addresses the Aerospace & Defense Manufacturing Center (ADMC), which handles the manufacture and assembly of precision components. Equipment that is not activated and does not contribute to the manufacturing and assembly is not within the scope of the AS certificate.
1.2.
Corporate Overview
Craig Technologies was formed in 1999 under the laws of the State of Delaware and maintains its headquarters at 8550 Astronaut Blvd, Cape Canaveral, FL. Craig Technologies provides engineering, IT, and technical support services including project management, systems engineering, infrastructure installation, software development, Research and Development (R&D), Modeling and Simulation (M&S), training, and many other custom IT services. Serving defense, government, aerospace, and corporate organizations for over 12 years, our services offer our customers quality solutions and a cost-effective price.
1.3.
Introduction
This manual contains three introductory sections numbered 1 to 3, and five process definition sections numbered 4 to 8. All eight sections correspond to the ISO 9001 and AS9100 Standard. Supporting documentation is identified and referenced within the corresponding section of this manual. Unless otherwise defined, the definition of terms used within this manual are described in the ISO 9001 and AS9100 Standard. Other definitions are contained within the Terms and Definitions section of this manual.
1.4.
Application
The Craig Technologies ADMC claims exclusion for Clause 7.3. The justification for this exclusion is 10 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
that the ADMC does not perform any product design. Craig Technologies Headquarters claims exclusion for Clauses 7.1.4, 7.5.1, 7.5.1.1, 7.5.1.2, 7.5.1.3, 7.5.1.4, 7.5.2, 7.5.5, and 7.6. The justification for these exclusions is that the Craig Technologies Headquarters not perform any production operations for hardware and there are no products for preservation. As such, no calibration is required and inspection, measuring, and test equipment is not utilized. No work transfers are used to meet customer requirements.
1.5.
Regulation
1.5.1.
Control
Any changes and/or distribution of this Quality Manual are controlled and approved by the CEO and the QMS Management Representative.
1.5.2
Distribution
Distribution is addressed on page 4, Quality Manual Distribution, of this Manual. This Quality Manual has two options for distribution as stated below: [ X ] This manual is provided under controlled distribution. A Part Number and Revision Level have been assigned and controlled updates are provided as they occur. [ ] This manual is not on a controlled distribution and is not updated as changes occur.
1.5.3
Revisions
Requests for changes to this Quality Manual may be submitted by any employee of Craig Technologies. Each Request for Change must be submitted to the QMS Management Representative of Craig Technologies. Revisions to the Quality Manual are at the discretion of the CEO and QMS Management Representative.
ISO 9001 and AS9100 www.craigtechinc.com
11 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 2: Normative Reference
12 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
2.
Quality Management System References
The following documents were used as reference during the preparation of the QMS:
American National Standard ANSI/AS 9001/ASQ Q9000-2005, Quality Management Systems - Vocabulary
American National Standard ANSI/AS 9001/ASQ Q9001-2008, Quality Management Systems – Requirements
American National Standard ANSI/AS9001/ASQ Q9004-2009, Quality Management Systems – Guidelines for performance Improvements
Society of Automotive Engineers SAE AS9100 Rev C (2009) - Quality Management Systems – Requirements
Society of Automotive Engineers SAE AS9101 Rev D (2010) - Quality Management Systems Audit Requirements for Aviation, Space and Defense Organizations
13 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 3: Terms and Definitions
14 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
3.
Quality Management System Definitions
This section is for definitions unique to Craig Technologies.
Customer-owned property – Any type of equipment, accessories, or manuals that are owned and controlled by a customer
Customer-supplied product – Any type of service or material supplied to be utilized in the manufacture, modification, or repair of customer-owned property
Product – The end-item result of meeting all contractual terms and conditions. (e.g. Software)
Service – The end-item result of meeting all contractual terms and conditions (e.g. nonpersonal support services)
Quality Records – Documentation or records which provide evidence of conformity to QMS procedural requirements.
15 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 4: Quality Management System
16 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
4.
Quality Management System 4.1
General Requirements
Craig Technologies has established, documented, and implemented a QMS in accordance with the requirements of ISO 9001 and AS9100. The system is maintained and continually improved through the use of the quality policy, quality objectives, audit results, analysis of data, corrective and preventive action, and management review. Craig Technologies' quality management system also addresses customer and applicable statutory and regulatory quality management system requirements. To design and implement the QMS, Craig Technologies has:
Determined the processes needed for the QMS and their application throughout the organization according to the ISO/AS Process-Based Model (Figure 1) and documented the processes in the A-400-001 Key Processes Flow Diagram (Figure 2)
Determined the sequence and interaction of these processes according to the ISO/AS Process-Based Model (Figure 1) and documented the processes in the A-400-001 Craig Technologies ‘Key Processes Flow Diagram (Figure 2) and A-400-002 ADMC Key Processes Flow Diagram (Figure 3)
Determined criteria and methods needed to ensure both the operation and control of the processes are effective according to the ISO Process-Based Model (Figure 1) and referenced these criteria and methods in quality plans, procedures, work instructions and records, and the Measuring, Monitoring and Analysis Table (F-500-001)
Ensured the continuing availability of resources and information necessary to support the operation and monitoring of these processes
Monitored, measured where applicable, and analyzed these processes
Implemented actions necessary to achieve planned results and continual improvement of these processes.
Figure 1 – ISO Process-Based Model
17 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Figure 2 – Craig Technologies Key Processes Flow Diagram (A-400-001)
Figure 3 – ADMC Key Processes Flow Diagram (A-400-002)
ISO 9001 and AS9100 www.craigtechinc.com
18 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
4.2
Documentation Requirements
4.2.1
General
The QMS documentation includes:
Documented Quality Policy and Quality Objectives (Section 5.4.1) This Quality Management System Manual Documented Procedures and Forms required by ISO 9001 and AS9100 Documents determined to be necessary to ensure the effective planning, operation, and control of our processes including Records.
A documentation system has been established by Craig Technologies consisting of the Quality Manual, supporting documentation, and records that are required to support effective planning, operation, and control of the organization’s processes. The Craig Technologies QMS Manual has been reviewed by management and is approved by the CEO as indicated by her signature affixed to this manual. A quality policy has been created to lead the organization toward continual improvement of its performance. The quality policy is continually reviewed at Management Review meetings for its continuing suitability (Reference Section 5.3, Quality Policy). Craig Technologies top management establishes corporate quality objectives in line with the strategy of the company. Corporate quality objectives are measurable and consistent with the corporate Quality Policy. Additional Quality Objectives are established at relevant levels within the company (Reference Section 5.4, Planning). The QMS is comprised of five levels of documentation that are organized hierarchically to include the Quality Manual, Procedures, Processes, Work Instructions, and Quality System Forms and Databases (records) as shown in Figure 4. Craig Technologies ensures that personnel have access to, and are aware of, relevant quality management system (QMS) documentation and changes.
ISO 9001 and AS9100 www.craigtechinc.com
19 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Figure 4
4.2.2
Quality Manual
This Quality Manual has been prepared to describe the Craig Technologies QMS and defines the eight requirements of the ISO 9001 and AS9100 standard as it pertains to Craig Technologies. The scope and permissible exclusions of the QMS are described in Section 1. of this manual. Each section of the manual references documented QMS procedures relating to the requirements outlined in that Section.
4.2.3
Control of Documents
All QMS documents are controlled according to the Document Control Procedure (P-423). This procedure defines the process for:
Approving documents for adequacy prior to issue Reviewing, updating, and re-approving documents as necessary Ensuring that changes and current revision status of documents are identified Ensuring that relevant versions of applicable documents are available at points of use Ensuring that documents remain legible, readily identifiable, and retrievable Ensuring that external origin documents are identified and their distribution controlled Preventing the unintended use of obsolete documents and applying suitable identification to them if they are retained for any purpose.
ISO 9001 and AS9100 www.craigtechinc.com
20 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Note: Any typographical errors and minor editorial changes are not considered as a document revision for the purpose of this quality manual.
4.2.4
Control of Quality Records
Quality records are maintained to provide evidence of conformity to requirements and of the effective operation of the QMS. The records are maintained according to the Control of Quality Records Procedure (P-424). This procedure requires that quality records remain legible, readily identifiable, and retrievable. The procedure defines the controls needed for identification, storage, protection, retrieval, retention, and disposition of quality records. The procedure also defines the method for controlling records that are created by and/or retained by suppliers.
4.2.5
Related Procedures and Documents
Document Control Control of Quality Records
P-423 P-424
ISO 9001 and AS9100 www.craigtechinc.com
21 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 5: Management Responsibility
22 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
5.
Management Responsibility 5.1
Management Commitment
The Craig Technologies CEO has been actively involved in implementing the QMS. She has provided the vision and strategic direction for the growth of the QMS and established quality objectives and the quality policy. To continue to provide leadership and show commitment to the improvement of the QMS, the CEO will:
Communicate the importance of meeting customer, statutory, and regulatory requirements Establish quality objectives Establish the quality policy Conduct management reviews Ensure the availability of resources.
5.2
Customer Focus
Craig Technologies strives to identify current and future customer needs and to not only meet but to exceed customer requirements and expectations. Top management also ensures that product/service conformity and on-time delivery performance are measured and that appropriate action is taken if planned results are not, or will not be, achieved. The CEO ensures that customer requirements are understood and met by requiring compliance with documented customer communication procedures. Customer requirements are determined and converted into internal requirements and communicated to the appropriate people in our organization (Customer Related Processes, P-720).
5.3
Quality Policy
The CEO ensures that the Quality Policy is communicated to all employees. It is included in new employee training and QMS training. It is posted in prominent places throughout our facilities to maintain high standards within our organization. Training is performed using the on-line training module at https://sso.craigtechinc.com/Training/History.aspx. Acknowledgement of completed training is to be submitted by employees to the People Department for upload to the Training Database. Management reviews the Quality Policy at each Management Review to determine the policy’s continuing suitability for our organization. The Quality Policy is documented on page 4.
5.4
Planning
5.4.1
Quality Objectives
Quality objectives are established to support our organization’s efforts in achieving our Quality Policy and all are reviewed annually for suitability. Quality objectives are measurable 23 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
and reviewed against performance goals at each Management Review meeting. Quality Objectives are as follows: Provide exceptional Human Resources services that support operations and promote employee satisfaction. Ensure customer satisfaction through continual customer feedback. Deliver quality products on time and in accordance with customer requirements. Maintain an IT infrastructure that provides minimal system downtime and supports operations
5.4.2
in a 24/7 environment. Require superior performance by suppliers and subcontractors. Continually improve the Quality Management System.
Quality Management System Planning
The QMS has been planned and implemented to meet our quality objectives and the requirements of 4.1 of the ISO 9001 and AS9100 Standard. Quality planning takes place as changes that affect the QMS are planned and implemented. The Craig Technologies QMS planning is within the framework of Management Review meetings. Data presented at the Management Review meetings is used to provide input for quality planning and continual improvement. Quality planning may include, but is not limited to:
5.5
Quality objectives QMS Process Resources needed Continual improvement of the QMS.
Responsibility, Authority, and Communication
5.5.1
Responsibility and Authority
An organizational chart has been established to show the interrelation of personnel in the organization. Job descriptions define the responsibilities and authorities of each of the positions on the organizational chart. Job descriptions and the organizational chart are reviewed and approved by the CEO for adequacy. These documents are available throughout the organization to help employees understand responsibilities and authorities. An Organizational Chart 5.5.4 is located on the corporate document repository.
5.5.2
QMS Management Representative
The CEO appointed the Director of Internal Support as the QMS Management Representative. The QMS Management Representative has the following responsibility and authority:
Ensure that processes needed to support the QMS are established and implemented Report to the CEO on the performance of the QMS and identify needed improvements Promote awareness of customer requirements throughout the organization Resolve Quality Management issues with organizational freedom and unrestricted access to top management
ISO 9001 and AS9100 www.craigtechinc.com
24 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
5.5.3
Act as liaison with external parties including customers or auditors on matters relating to the QMS.
Internal Communication
Processes are established for communication within the organization. Methods of communicating the effectiveness of the QMS include department, Management, and Management Review meetings, results of Management Review and External/Internal Audit results are communicated as applicable. Craig Technologies maintains a corporate-wide electronic network supplying multiple means of electronic communication including: Regular Staff Meetings Email Craig’s Corner (Employee Intranet) CT ELEMENT (Internal Newsletter) Corporate Website SharePoint Site Databases o Gen4 – Active Employee Qualifications o Taleo – Position Requirements
5.5.4 The Craig Technologies organizational structure located on the corporate document repository.
5.6
Management Review
5.6.1
General
The CEO and/or QMS Management Representative schedules and reviews the QMS is reviewed annually at Management Review meetings. This review assesses the continuing QMS suitability, adequacy, and effectiveness and identifies opportunities for improvement and needed changes. Records are maintained for each Management Review meeting (F-500003).
5.6.2
Review Input
Assessment of the QMS is based on a review of information inputs provided for management review. These inputs include the following:
Results of Internal Audits (P-822) Customer feedback (P-720) Process performance and product conformity (P-824) Company level quality data Status of preventive and corrective actions (P-852, P-853) Follow-up actions from previous management reviews
ISO 9001 and AS9100 www.craigtechinc.com
25 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
5.6.3
Director feedback (P-560) Employee satisfaction results (P-623) Planned changes that could affect the QMS Recommendations for improvement.
Review Output
During these review meetings, management will identify appropriate actions to be taken regarding the following issues: Improvement of the effectiveness of the QMS and its processes Improvement of products and services related to customer requirements Resource needs. Responsibilities for required actions are assigned to members of the Management Review team. Any decisions made during the meeting, assigned actions, and their due dates are recorded in the minutes of Management Review meetings.
5.6.4
Related Procedures:
Management Responsibility Director Feedback Employee Satisfaction Customer Related Processes Design and Development Internal Audits Corrective Actions Preventive Actions
P-500 P-560 P-623 P-720 P-730 P-822 P-852 P-853
ISO 9001 and AS9100 www.craigtechinc.com
26 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 6: Resource Management
27 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
6.
Resource Management 6.1
Provision of Resources
Craig Technologies has implemented a QMS that complies with the ISO 9001 and AS9100 Standard. This implementation was achieved with management commitment and with sufficient resources. To effectively maintain, and continually improve the system, management determines and provides the necessary resources to meet customer needs.
6.2
Human Resources
6.2.1
General
Traditional industry-standard human resource tasks are performed by our People Department. Job descriptions have been prepared identifying the qualifications required for each position that affects and service quality to ensure competence of our personnel. Qualifications include requirements for education, skills, and experience. Appropriate qualifications and required training provide the competence required for each position.
6.2.2
Competence, Awareness, and Training
Competence and requirements for the job are determined following the determination of a job opening. Qualifications are reviewed prior to hire, when an employee changes positions, or when the requirements for a position change. Human Resources maintain records of both employee qualifications and the requirements of the job. If any differences between the employee’s qualifications and the requirements for the job are found, training or other action is taken to provide the employee with the necessary competence for the job. The results are evaluated to determine if they were effective. These records are recorded and stored according to the Control of Quality Records Procedure (P-424). Training and evaluation are conducted according to the Competence, Awareness, and Training Procedure (P-622). All employees are trained on the relevance and importance of their activities and how they contribute to the achievement of the quality objectives. All security training is recorded and maintained by the People Department utilizing a web based training platform.
6.2.3
Employee Satisfaction
The People Department is responsible for assessing employee satisfaction. Through formal assessment or informal contact, differences between the employee’s desires and the status quo are attained. Methods of conducting formal assessments are outlined in the Employee Satisfaction Procedures (P-623). Feedback is communicated to the CEO as outlined in the Management Responsibility Procedures (P-500) and the results are evaluated to determine their effectiveness in reducing annual turnover rates.
28 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
6.3
Infrastructure
The current Craig Technologies infrastructure includes a Corporate Headquarters office with many employees working from home or remote offices and at customer sites. New infrastructure requirements will be documented in quality plans. All corporate documentation is stored on the company SharePoint site which is backed up daily. Working documentation is the responsibility of the employee. It is recommended that employees backup their working documentation weekly. Employees use a combination of Carbonite and CrashPlan. All corporate computers have virus protection software installed with up-to-date virus definitions. All personal computers used for corporate work (e.g. remote access, travel) are also required to have up-to-date virus protection software (See Section 7.5.5 Preservation of Product). Craig Technologies’ Preventive Maintenance procedure (P-630) outlines the process for ensuring all equipment is maintained to the corporate quality standard. This procedure identifies the recurring maintenance times for each of the machines within the manufacturing facility, under which standards they are to be maintained, and the responsible parties for performing the maintenance.
6.4
Work Environment
Craig Technologies has determined, and maintains its facilities based upon, the identification and management of the human and physical factors of the work environment needed to achieve product/service conformity. These factors include but are not limited to:
Lighting, temperature, and cleanliness Electrostatically controlled environment in appropriate areas
Noise, humidity, and weather.
6.5
Related Documents
Competence, Awareness, and Training P-622 Employee Satisfaction
P-623
ISO 9001 and AS9100 www.craigtechinc.com
29 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 7: Product Realization
30 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
7.
Product Realization 7.1
Planning of Product Realization
Quality planning is required before new products or processes are implemented. The quality planning process is defined in the Planning of Product Realization Process (P-710), and may take place as a standalone design project or service as part of the project planning stage (Design and Development, P-730). During product realization quality planning management or assigned personnel identify:
Quality objectives and requirements for the product/service, including but not limited to: - product and personal safety, - reliability, availability and maintainability, - producibility and inspectability, - suitability of parts and materials used in the product, - selection and development of embedded software, and - recycling or final disposal of the product at the end of its life Processes, documentation, and resources required Verification, validation, monitoring, inspection, and test requirements Criteria for product/service acceptance
Configuration management appropriate to the product/service
Resources to support the use and maintenance of the product.
Planning of product realization is initiated at the Design Phase of a product or at the beginning of a service contract. Objectives and requirements for the product/service are established and documented throughout the product development lifecycle. Production and test processes are developed taking into consideration the appropriate verification, validation, monitoring, inspection, and test activities. Appropriate records are created and maintained. Complete and detailed information on quality and product planning can be found in the Design and Development Procedure (P-730).
7.1.1
Project Management
Craig Technologies plans and manages product realization in a structured and controlled manner to meet requirements at acceptable risk and within resource and schedule constraints.
7.1.2
Risk Management
Craig Technologies establishes, implements and maintains a process for managing risk, according to the Risk Management procedure (P-712), to the achievement of applicable requirements that includes the following to the organization and the product/service: assignment of responsibilities for risk management definition of risk criteria (e.g., likelihood, consequences, risk acceptance) identification, assessment and communication of risks throughout product realization 31 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
identification, implementation and management of actions to mitigate risks that exceed the defined risk acceptance criteria, acceptance of risks remaining after implementation of mitigating actions.
7.1.3
Configuration Management
Configuration management is defined in P-713, Configuration Management. Craig Technologies establishes, implements and maintains a configuration management process that includes, as appropriate to the product/service: configuration management planning configuration identification change control configuration status accounting configuration audit. The Craig Technologies Software Configuration Management (CM) process provides a mechanism for identifying, controlling, and tracking the versions of each software item. In many cases, earlier versions still in use must also be maintained and controlled. Craig Technologies uses version control and CM to effectively manage source code and configuration changes throughout the process. Craig uses UBER SVN which enables users to work at file- and project-levels while also promoting file reuse. The UBER SVN project-oriented features increase the efficiency of managing day-to-day tasks associated with team-based software and Web content development. Craig Technologies uses VSS for all internally-produced software. Externally-produced software is controlled using the CM tools and procedures of the customer. The Craig Technologies CM system:
Identifies each unique version of each software item Identifies the versions of each software item which together constitute a specific version of a complete product Identifies the build status of software products in development or delivered and installed Controls simultaneous updating of a given software item by more than one person Provides coordination for the updating of multiple products in one or more locations Identifies and tracks all actions and changes resulting from a change request from initiation to product release.
Craig Technologies also uses SharePoint for versions of all corporate documentation. This software enables administrators to control access to documentation by user definition.
7.1.4
Control of Work Transfers
Craig Technologies establishes, implements and maintains a process to plan and control the temporary or permanent transfer of work (e.g., from one organization facility to another, from the organization to a supplier, from one supplier to another supplier) and to verify the conformity of the work to requirements. Transfer of products internally, from one work center to another, will ISO 9001 and AS9100 www.craigtechinc.com
32 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
be managed by use of a Job Router. This process will ensure the identification and traceability of components on the shop floor.
7.2
Customer-Related Processes
7.2.1
Determination of Requirements Related to the Product
Craig Technologies customer requirements include statutory, regulatory, and organizational requirements that are an important input to the product realization process. These requirements are defined during the early phases of product development/ contract start and include:
Requirements specified by the customer including the requirements for delivery and post-delivery activities. These may be captured in a Statement of Work (SOW) or similar document format Requirements not stated by the customer but necessary for specified or intended use, where known Statutory and regulatory requirements related to the product Any additional requirements determined by Craig Technologies.
Customer requirements are determined according to the Customer Related Processes Procedure. (P-720)
7.2.2
Review of Requirements Related to the Product
Craig Technologies has a Customer Related Process (P-720) in place for the review of requirements or Statements of Work (SOW) related to a product. The process ensures that:
7.2.3
Product/service requirements are well defined Contract or task order requirements differing from those previously expressed are resolved Craig Technologies has the ability to meet the defined requirements Craig Technologies has determined any special requirements of the product/service Risks (e.g., new technology, short delivery time frame) have been identified (see 7.1.2). Records are maintained demonstrating the results and actions arising from the review Customer requirements are confirmed before acceptance in cases where a customer does not provide a documented SOW Craig Technologies communicates changes to relevant personnel, amends relevant documents, and/or creates supplemental documentation when product/service requirements are changed.
Customer Communication
Craig Technologies has implemented an effective procedure (P-720) for communicating with customers in relation to:
Product/service information Inquiries, order handling, and amendments
ISO 9001 and AS9100 www.craigtechinc.com
33 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Customer feedback including customer complaints Operational Conflicts of Interest (OCIs) Contractual Questions
In addition to traditional Customer Communication processes, Craig Technologies has registered with the International Trade and Armament Regulation (ITAR) authority to ensure that no sensitive data or defense articles are exported from Craig Technologies to foreign entities. This is established by verifying that customers and suppliers are US persons and/or corporations, and by putting in place the controls required to prevent export. These controls are outlined in the Craig Technologies’ ITAR Compliance Procedure Manual (P-723), and are strictly adhered to by all Craig Technologies’ personnel. If there is a change in facility or equipment move, ADMC will notify the customer to determine if the change requires an audit or re-qualification. ADMC customers will be notified promptly, if the results of an audit internal, customer or third party, findings could potentially have direct impact on product.
7.3 Design and Development 7.3.1
Design and Development Planning
The Design and Development Procedure (P-730) outlines the process for controlling the Design and Development Phase. The Software Engineering project team creates their Design and Development Plan according to this procedure. The plan includes:
Design and development stages Required design reviews Verification and validation methods appropriate to each design and development stage Responsibilities and authorities for design and development Where appropriate, division of the design and development effort into distinct activities and, for each activity, definition of the tasks, necessary resources, responsibilities, design content, input and output data and planning constraints Design and development tasks to be carried out will be based on the safety and functional objectives of the product in accordance with customer, statutory and regulatory requirements Design and development planning considers the ability to produce, inspect, test and maintain the product Identification of the technical interfaces required for the project Updating the design plan as the project progresses.
Design and Development Planning is a process followed throughout the execution of a project to provide for, but not limited to, the following: ISO 9001 and AS9100 www.craigtechinc.com
34 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
7.3.2
Definition of distinct stages that a project follows through its lifecycle Definition of the processes to be followed throughout the project lifecycle including review, verification, and validation processes Control and insight into the project's status for Management Clear definition of responsibilities and authorities with regard to each aspect of the design and development process Clear definition of the interfaces (with respect to deliverables) between the various departments involved in the project.
Design and Development Inputs
Inputs relating to product requirements are determined and documented according to the Design and Development Procedure (P-730). All inputs are reviewed for adequacy and completeness and to resolve any ambiguous inputs. Inputs include:
7.3.3
Functional and performance requirements Applicable regulatory and legal requirements Information derived from similar designs where applicable Other requirements essential for design and development Estimated costs.
Design and Development Outputs
Outputs of design and development are documented according to the Design and Development Procedure (P-730). They are documented in a format that enables verification against the inputs and are approved prior to release. Outputs:
Meet the input requirements for design and development Provide appropriate information for purchasing, production and service provision Contain or reference product acceptance criteria Specify the characteristics of the product that are essential for its safe and proper use Specify, as applicable, any critical items, including any key characteristics, and specific actions to be taken for these items. Craig Technologies will define the data required to allow the product to be identified, manufactured, inspected, used and maintained; including:
7.3.4
Drawings, part lists and specifications necessary to define the configuration and the design features of the product Material, process, manufacturing and assembly data needed to ensure conformity of the product.
Design and Development Review
The design plan specifies suitable stages of the project to conduct design and development reviews. Reviews take place according to the design and development procedure with the results being recorded in minutes of the design review meetings and maintained as a quality record. Design reviews:
ISO 9001 and AS9100 www.craigtechinc.com
35 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Evaluate the results of design and development activities and determine if they fulfill requirements Identify any problems and propose necessary corrective actions Authorize progression to the next stage Include participation by representatives of functions concerned with the design and development stage being reviewed.
Formal design reviews are conducted at each iteration of the design process and documented.
7.3.5
Design and Development Verification
Design and development verification is planned and performed to ensure that the design and development outputs have satisfied the design and development input requirements. Records of the results of the verification and any necessary actions are maintained according to the Design and Development Procedure (P-730).
7.3.6
Design and Development Validation
Design and development validation is performed according to the design plan to ensure that the resulting product is capable of fulfilling the requirements for the specified or known intended use or application. Validation is completed prior to implementation whenever practical. Records of the validation activities are maintained according to the Design and Development Procedure (P-730). Product validation is performed prior to wide-spread deployment of the product. Validation is typically performed as part of a Beta cycle at the customer site. The purpose of validation is to demonstrate that the product design meets the requirements stated in the Project Plan and its intended application.
7.3.6.1 Design and Development Verification and Validation Testing Where tests are necessary for verification and validation, these tests will be planned, controlled, reviewed and documented to ensure and prove the following: Test plans or specifications identify the product being tested and the resources being used define test objectives and conditions, parameters to be recorded and relevant acceptance criteria
Test procedures describe the method of operation, the performance of the test and the recording of the results
The correct configuration of the product is submitted for the test
The requirements of the test plan and the test procedures are observed, and
The acceptance criteria are met.
ISO 9001 and AS9100 www.craigtechinc.com
36 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
7.3.6.2 Design and Development Verification and Validation Documentation At the completion of design and/or development, Craig Technologies ensures that reports, calculations, test results, and other criteria demonstrate that the product definition meets the specification requirements for all identified operational conditions.
7.3.7
Control of Design and Development Changes
The Design and Development Procedure (P-730) defines the process for identifying, recording, verifying, validating, and approving design changes. The review of design and development changes includes an evaluation of the effect of the changes on constituent parts and implemented products. Records are maintained to demonstrate the results of the review and any necessary actions identified during the review. Software design changes occurring during the design and development cycle are tracked, controlled, and documented in the Bug Tracker. Design changes on products following release either initiated by Craig Technologies or requested by the customer are reviewed and treated as new development using the iterative process described in the Design and Development Procedure (P-730). Design and development changes are controlled in accordance with the Configuration Management process (see 7.1.3).
7.4 7.4.1
Purchasing Purchasing Process
Product or services purchased on behalf of Craig Technologies will be adequately specified in terms of technical content and commercial requirements. Suppliers are selected on the basis of their ability to meet requirements including their quality system and ability to provide services when required. Craig Technologies is responsible for the conformity of all products or services purchased from suppliers, including product or services from sources defined by the customer. Previous supplier performance or experience in supplying similar products or services is evaluated. An on-site assessment of the supplier may be performed if warranted based upon the product/service. The CEO has the authority to grant supplier conditional approval. A criterion for supplier re-evaluation is also established in the Supplier Portal Purchasing Procedure (P-741). Records on acceptable suppliers and their ongoing performance metrics are maintained. Craig Technologies will: Maintain a register of its suppliers that includes approval status (e.g., approved, conditional, disapproved) and the scope of the approval (e.g., product/service type, process family) ISO 9001 and AS9100 www.craigtechinc.com
37 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
7.4.2
Periodically review supplier performance; the results of these reviews shall be used as a basis for establishing the level of controls to be implemented Define the necessary actions to take when dealing with suppliers that do not meet requirements Ensure where required that both the organization and all suppliers use customerapproved special process sources Define the process, responsibilities and authority for the approval status decision, changes of the approval status and conditions for a controlled use of suppliers depending on the supplier's approval status Determine and manage the risk when selecting and using suppliers (see 7.1.2).
Purchasing Information
Purchasing documents contain sufficient information for the supplier to avoid misunderstanding of specified requirements. Purchase Orders (PO) or subcontracting agreements describe the specific supplier requirements requested. The Contract Administrator (Director) and/or CEO routinely review purchasing documents prior to supplier acceptance. Purchase Orders and/or subcontracting agreements may contain but are not limited to the following: Approval/qualifications of the product/service, procedures, processes, personnel, equipments, and the supplier Quality Management System
Inspection/verification instructions and other relevant technical data
Requirements for design, test, inspection, verification (including production process verification), use of statistical techniques for product acceptance, and related instructions for acceptance by Craig Technologies, and as applicable critical items including key characteristics
Requirements for test specimens (e.g., production method, number, storage conditions) for design approval, inspection/verification, investigation or auditing
Requirements regarding the need for the supplier to
- notify the organization of nonconforming product/service, - obtain organization approval for nonconforming product/service disposition, - notify the organization of changes in product/service and/or process, changes of suppliers, changes of manufacturing facility location and, where required, obtain organization approval, and - flow down to the supply chain the applicable requirements including customer requirements, Records retention requirements
Right of access by the organization, their customer and regulatory authorities to the applicable areas of all facilities, at any level of the supply chain, involved in the order and to all applicable records.
ISO 9001 and AS9100 www.craigtechinc.com
38 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
7.4.3
Verification of Purchased Product
When Craig Technologies stipulates on a contract that purchased product or service is subject to source inspection by Craig Technologies or a Craig Technologies customer, the details for such an inspection and subsequent release of accepted material will be stated in the PO or subcontract agreement. The Purchasing Procedure (P-740) contains further details. Customer verification activities performed at any level of the supply chain will not be used by Craig Technologies or the supplier as evidence of effective control of quality. Craig Technologies will retain the responsibility to provide acceptable product/service and comply with all requirements. Where purchased product is released for production use, pending completion of all required verification activities, it shall be identified and recorded to allow recall and replacement if it is subsequently found that the product does not meet requirements. Where Craig Technologies delegates verification activities to the supplier, the requirements for delegation will be defined and a register of delegations maintained.
7.5
Production and Service Provision
7.5.1
Control of Production and Service Provision
Craig Technologies plans and carries out production and service provision under controlled conditions. Controlled conditions include, as applicable:
The availability of information that describes the characteristics of the product (including drawings, parts lists, materials and process specifications.) The availability of work instructions, as necessary The use of suitable equipment The availability and use of monitoring and measuring equipment The implementation of monitoring and measurement, the implementation of product release, delivery and post-delivery activities Accountability for all product during production (e.g., parts quantities, split orders, nonconforming product) Evidence that all production and inspection/verification operations have been completed as planned, or as otherwise documented and authorized Provision for the prevention, detection and removal of foreign objects Monitoring and control of utilities and supplies (e.g., water, compressed air, electricity, chemical products) to the extent they affect conformity to product requirements Criteria for workmanship, specified in the clearest practical way (e.g., written standards, representative samples, illustrations).
ISO 9001 and AS9100 www.craigtechinc.com
39 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Planning considers, as appropriate
Establishing, implementing and maintaining appropriate processes to manage critical items, including process controls where key characteristics have been identified, Designing, manufacturing and using tooling to measure variable data, identifying inprocess inspection/verification points when adequate verification of conformance cannot be performed at later stages of realization, and Special processes (see 7.5.2).
7.5.1.1 Production Process Verification Craig Technologies uses a representative item from the first production run of a new part or assembly to verify that the production processes, production documentation and tooling are capable of producing parts and assemblies that meet requirements. This process will be repeated when changes occur that invalidate the original results (e.g., engineering changes, manufacturing process changes, tooling changes). This first production verification process is outlined in P-824 Inspection & Quality Assurance Procedure.
7.5.1.2 Control of Production Process Changes Personnel authorized to approve changes to production processes will be identified for each production run. Craig Technologies will control and document changes affecting processes, production equipment, tools and software programs. The results of changes to production processes will be assessed to confirm that the desired effect has been achieved without adverse effects to product conformity.
7.5.1.3 Control of Production Equipment, Tools and Software Programs Production equipment, tools and software programs used to automate and control/monitor product realization processes will be validated prior to release for production and will be maintained. Storage requirements, including periodic preservation/condition checks, will be defined for production equipment or tooling in storage.
7.5.1.4 Post-Delivery Support Post-delivery support will provide as applicable for the ISO 9001 and AS9100 www.craigtechinc.com
40 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
7.5.2
Collection and analysis of in-service data
Actions to be taken, including investigation and reporting, when problems are detected after delivery Control and updating of technical documentation Approval, control and use of repair schemes Controls required for off-site work (e.g., organization's work undertaken at the customer's facilities).
Validation of Processes for Production and Service Provision
Craig Technologies validates any processes for production and service provision where the resulting output cannot be verified by subsequent monitoring or measurement and, as a consequence, deficiencies become apparent only after the product is in use or the service has been delivered. Validation demonstrates the ability of these processes to achieve planned results. Craig Technologies establishes arrangements for these processes including, as applicable, Defined criteria for review and approval of the processes Approval of equipment and qualification of personnel Use of specific methods and procedures Requirements for records (see 4.2.4) Revalidation.
7.5.3
Identification and Traceability
Where appropriate, Craig Technologies identifies the product by suitable means throughout product realization. Craig Technologies maintains the identification of the configuration of the product in order to identify any differences between the actual configuration and the agreed configuration. Craig Technologies identifies the product status with respect to monitoring and measurement requirements throughout product realization. When acceptance authority media are used (e.g., stamps, electronic signatures, passwords), Craig Technologies establishes appropriate controls for the media. Where traceability is a requirement, Craig Technologies controls the unique identification of the product and maintains records. Craig Technologies’ identification and traceability of the product will be defined in more detail within Configuration Management Procedure (P-713).
7.5.4
Customer Property
Craig Technologies exercises care with customer property while it is under control or in use by the company. Craig Technologies identifies, verifies, protects and safeguards customer property provided for use or incorporation into the product/service. If any customer property is lost, damaged, or otherwise found to be unsuitable for use it is immediately reported to the ISO 9001 and AS9100 www.craigtechinc.com
41 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
customer and records are maintained (Customer Property Procedure, P-754). This property may include intellectual property and personal data.
7.5.5
Preservation of Product
Craig Technologies preserves the conformity of products during internal processing and delivery to the intended destination in order to maintain conformity to requirements. As applicable, preservation includes identification, handling, packaging, storage and protection. Preservation also applies to the constituent parts of product. Preservation of product also includes, where applicable in accordance with product specifications and applicable statutory and regulatory requirements, provisions for Cleaning
Prevention, detection and removal of foreign objects
Special handling for sensitive products
Marking and labeling including safety warnings
Shelf life control and stock rotation
Special handling for hazardous materials.
For software purposes, virus protection of data and software stored on customer sites is performed according to customer procedures. All corporate documentation is stored on the company SharePoint site that is backed up daily. Working documentation is the responsibility of the employee. It is recommended that employees backup their working documentation weekly. Employees use a combination of Carbonite and CrashPlan. All corporate computers have virus protection software installed with up-to-date virus definitions. All personal computers used for corporate work (e.g. remote access, travel) are also required to have up-to-date virus protection software. In addition to virus protection software, Ad-Aware must also be installed on every machine utilized for corporate work.
7.6
Control of Monitoring and Measuring Devices
Craig Technologies determines the monitoring and measurement to be undertaken and the monitoring and measuring equipment needed to provide evidence of conformity of product to determined requirements. Craig Technologies maintains a register of the monitoring and measuring equipment and defines the process employed for their calibration/verification including details of equipment type, unique identification, location, frequency of checks, check method and acceptance criteria. Craig Technologies establishes processes to ensure that monitoring and measurement can be carried out and are carried out in a manner that is consistent with the monitoring and measurement requirements. ISO 9001 and AS9100 www.craigtechinc.com
42 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Craig Technologies ensures that environmental conditions are suitable for the calibration, inspection, measurement and testing being carried out. Where necessary to ensure valid results, measuring equipment is to be:
Be calibrated or verified, or both, at specified intervals, or prior to use, against measurement standards traceable to international or national measurement standards; where no such standards exist, the basis used for calibration or verification will be recorded Be adjusted or re-adjusted as necessary Have identification in order to determine its calibration status Be safeguarded from adjustments that would invalidate the measurement result Be protected from damage and deterioration during handling, maintenance and storage.
Craig Technologies establishes, implements and maintains a process for the recall of monitoring and measuring equipment requiring calibration or verification. In addition, Craig Technologies assesses and records the validity of the previous measuring results when the equipment is found not to conform to requirements. Craig Technologies takes appropriate action on the equipment and any product affected by non conformity. Records of the results of calibration and verification are maintained. When used in the monitoring and measurement of specified requirements, the ability of computer software to satisfy the intended application will be confirmed. This is to be undertaken prior to initial use and reconfirmed as necessary.
7.7
Related Documents
Planning of Product Realization Processes
P-710
ADMC Job Planning
P-711
Risk Management Process
P-712
ADMC Configuration Management
P-713
Software Configuration Management
P-714
ADMC Control of DPD/MBD
P-716
Customer Related Processes
P-720
ITAR Compliance Procedure
P-723
Business Development Procedures
P-724
Design and Development
P-730
ISO 9001 and AS9100 www.craigtechinc.com
43 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Purchasing
P-740
Supplier Portal Purchasing
P-741
Material Handling
P751
Identification and Serialization
P752
Customer Property/Production
P-754
Calibration Procedure
P-760
ISO 9001 and AS9100 www.craigtechinc.com
44 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Section 8: Measurement, Analysis, and Improvement
ISO 9001 and AS9100 www.craigtechinc.com
45 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
8
Measurement, Analysis, and Improvement 8.1
General
Craig Technologies implements the monitoring, measurement, analysis and improvement processes as needed to: Demonstrate conformity of the product Ensure conformity of the QMS Improve continually the effectiveness of the QMS. This includes determination of applicable methods including statistical techniques and the extent of their use. NOTE: According to the nature of the product and depending on the specified requirements, statistical techniques can be used to support; Design verification (e.g., reliability, maintainability, safety) Process control Selection and inspection of key characteristics, Process capability measurements, Statistical process control, Design of experiment, Inspection, and Failure mode, effect and criticality analysis.
8.2
Monitoring and Measurement
8.2.1
Customer Satisfaction
Craig Technologies monitors information relating to customer perception to determine whether the organization has fulfilled customer requirements as one of the performance measurements of the QMS. The method for obtaining and using this information is identified in the Customer Related Processes (P-720) and the Management Responsibility Procedures (P500). Craig Technologies utilizes customer surveys, direct customer contact, follow on contracts, and exercising option years based on performance to determine if the customer is satisfied with the product or services provided. Customer surveys are documented, reported, and analyzed. Information to be monitored and used for the evaluation of customer satisfaction includes, but is not limited to, product conformity, on-time delivery performance, customer complaints and corrective action requests. Craig Technologies develops and implements plans for customer satisfaction improvement that address deficiencies identified by these evaluations, and assess the effectiveness of the results. 46 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
8.2.2
Internal Audit
Craig Technologies conducts internal audits at scheduled intervals to determine whether the QMS:
Conforms to the requirements of ISO 9001 and AS9100 and to the QMS established by the organization Is effectively implemented and maintained.
An audit program has been designed and implemented that identifies an audit schedule based on the importance of the areas to be audited and the results of previous audits. The audit criteria, scope, frequency, methods, responsibilities, requirements for planning and conducting audits, reporting, and maintaining results are defined and documented in the Internal Audits Procedure (P-822). The management responsible for the area being audited is responsible for ensuring that actions are taken without undue delay to eliminate detected nonconformities and their causes.
8.2.3
Monitoring and Measurement of Processes
Craig Technologies applies suitable methods for monitoring and, where applicable, measurement of the QMS processes. These methods demonstrate the ability of the processes to achieve planned results. Appropriate corrective action is taken to ensure conformity of the product/service when planned results are not achieved. The process for identifying and accomplishing the required monitoring and measuring of processes is documented in the System Lifecycle Flow Diagram (Key Processes Flow Diagram, A-400-001), QMS Measuring, Monitoring, and Analysis Table (F-500-001), and Management Responsibility Procedures (P500). Craig Technologies has developed systems that define the measurement methods used to evaluate process performance. These methods include but not limited to:
On-Time Delivery - a method to measure the delivery process On-Time Delivery and Performance of Subcontractors
Records are documented and maintained of the measurements achieved to determine the effectiveness of processes.
In the event of process nonconformity, Craig Technologies will: Take appropriate action to correct the nonconforming process Evaluate whether the process nonconformity has resulted in product/service nonconformity Determine if the process nonconformity is limited to a specific case or whether it could have affected other processes or products/services Identify and control any nonconforming product/service (see 8.3).
ISO 9001 and AS9100 www.craigtechinc.com
47 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
8.2.4
Monitoring and Measurement of Product
Craig Technologies monitors and measures the characteristics of a product/service to verify that requirements are fulfilled. This is performed using the measures defined and documented in the Design and Development Procedure (P-730). Evidence of conformity with the acceptance criteria is maintained. Measurement requirements for product acceptance will be documented and include: Criteria for acceptance and/or rejection Where in the sequence measurement and testing operations are to be performed Required records of the measurement results (at a minimum, indication of acceptance or rejection) Any specific measurement instruments required and any specific instructions associated with their use. When critical items, including key characteristics, have been identified Craig Technologies will ensure they are controlled and monitored in accordance with the established processes. When Craig Technologies uses sampling inspection as a means of product acceptance, the sampling plan will be justified on the basis of recognized statistical principles and appropriate for use (i.e., matching the sampling plan to the criticality of the product and to the process capability). Craig Technologies’ inspection process and sampling plan are outlined in P-824 Inspection and Quality Assurance Procedure. Where product is released for production use pending completion of all required measurement and monitoring activities, it will be identified and recorded to allow recall and replacement if it is subsequently found that the product does not meet requirements. Records indicate the person(s) authorizing release of product for delivery to the customer. Where required to demonstrate product/service qualification, Craig Technologies will ensure that records provide evidence that the product/service meets the defined requirements. Product release and service delivery to the customer does not proceed until all planned arrangements have been satisfactorily completed unless otherwise approved by a relevant authority and where applicable by the customer. Craig Technologies ensures that all documents required to accompany the product/service are present at delivery.
8.3
Control of Nonconforming Product
Craig Technologies ensures that any product which does not conform to product requirements is identified and controlled to prevent its unintended use or delivery. The controls and related responsibilities and authorities for addressing with a nonconforming product are defined in the Control of Nonconforming Product Procedure (P-830).
ISO 9001 and AS9100 www.craigtechinc.com
48 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Craig Technologies' documented procedure defines the responsibility and authority for the review and disposition of nonconforming product, and the process for approving personnel making these decisions. Where applicable, Craig Technologies deals with nonconforming product/service by one or more of the following ways: By taking action to eliminate the detected nonconformity By authorizing its use, release or acceptance under concession by a relevant authority and, where applicable, by the customer By taking action to preclude its original intended use or application By taking action appropriate to the effects, or potential effects, of the nonconformity when nonconforming product/service is detected after delivery or use has started By taking actions necessary to contain the effect of the nonconformity on other processes or products/services.
'
Craig Technologies’ nonconforming product/service control process provides for timely reporting of delivered nonconforming product/service Dispositions of use-as-is or repair will only be used after approval by an authorized representative of the organization responsible for design. Craig Technologies will not use dispositions of use-as-is or repair, unless specifically authorized by the customer if the nonconformity results in a departure from the contract requirements. Product dispositioned for scrap shall be conspicuously and permanently marked, or positively controlled, until physically rendered unusable. When nonconforming product/service is corrected it shall be subject to re-verification to demonstrate conformity to the requirements. Records of the nature of nonconformities and any subsequent actions taken, including concessions obtained, will be maintained.
8.4
Analysis of Data
Craig Technologies determines, collects, and analyzes appropriate data to demonstrate the suitability and effectiveness of the QMS and to evaluate where continual improvement of the QMS can be accomplished. The process for determining, collecting, and analyzing this data is defined in the Management Responsibility Procedure (P-500). Appropriate data includes data generated as a result of monitoring and measurement and from other relevant sources. The analysis of data provides information relating to:
Customer satisfaction Conformance to product/service requirements
ISO 9001 and AS9100 www.craigtechinc.com
49 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Characteristics and trends of processes and products/services including opportunities for preventive action Subcontractors / suppliers.
8.5
Improvement
8.5.1
Continual Improvement
Craig Technologies continually improves the effectiveness of the QMS through the use of the quality policy, quality objectives, audit results, analysis of data, corrective and preventive actions, and management review. The QMS is operated to provide continual improvement through: Quality policy statement Quality objectives defined by management as specific milestones to be achieved Internal audit results to identify opportunities improvement Data analysis to reveal areas that may be subject to potential nonconformance Corrective and preventive actions to report and correct current or potential nonconformance Management reviews. A documented procedure (P-851) defines requirements for monitoring the implementation of continual improvement activities and evaluates the effectiveness of the results.
8.5.2
Corrective Action
Craig Technologies takes immediate corrective action to eliminate the cause of nonconformities in order to prevent recurrence. Corrective actions are appropriate to the effects of the nonconformities encountered. A documented procedure (P-852) defines requirements for:
Reviewing nonconformities including customer complaints Determining the causes of nonconformities Evaluating the need for corrective action to ensure non-recurrence of nonconformities Determining and implementing necessary corrective action Recording the results of corrective action (see Section 4.2.4) Reviewing corrective action Flowing down corrective action requirements to a supplier when it is determined that the supplier is responsible for the nonconformity Specific actions where timely and/or effective corrective actions are not achieved Determining if additional nonconforming product/service exists based on the causes of the nonconformities and taking further action when required.
Craig Technologies has established a corrective action system to report, investigate, and implement actions to correct and prevent the recurrence of nonconformities. The corrective action system is maintained through the use of WebEx and the Corrective and Preventative ISO 9001 and AS9100 www.craigtechinc.com
50 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Action Request Table (F-850-002). Corrective actions are assigned to a responsible individual and tracked by number and completion date. Corrective actions investigate and document the root cause and actions to correct supplier-, internal-, and customer-reported nonconformities. All corrective actions are reviewed for effectiveness with final approval provided by the QMS Management Representative.
8.5.3
Preventive Action
Craig Technologies determines preventive action to eliminate the causes of potential nonconformities in order to prevent their occurrence. Preventive actions are appropriate to the effects of the potential problems. The Preventive Action Procedure (P-853) defines requirements for:
Determining potential nonconformities and their causes Evaluating the need for action to prevent occurrence of nonconformities Determining and implementing action needed Recording results of preventive action Reviewing preventive action.
Craig Technologies has established a preventive action system to report, investigate, and prevent nonconformities. The preventive action system emulates the corrective action system.
8.5.4
Related Documents
Management Responsibility Customer Related Processes Measuring, Monitoring, and Analysis of Customer Satisfaction Internal Audits Monitoring and Measurement of Product & Realization Processes Control of Nonconforming Product Continual Improvement Action Corrective Action Preventive Action
ISO 9001 and AS9100 www.craigtechinc.com
P-500 P-720 P-821 P-822 P-824 P-830 P-851 P-852 P-853
51 Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
Quality System Manual Revisions REV.
SECTION
1 2 3 4
All Pg. 5 All 1
5
5&6
6 7
Pg 10 All
8 9 10
11 12 13 14
SUBSEC. All All 5.3 & 6.2.2
PARA. All All 3rd
All All 6.3 thru 6&7 6.6 & All 7.2.3 5&7 5.5.4 & 7 All 5.5.3, 6.1, 6.2.3, 5, 6 & 7 All 6.3, 7.4, 8.5.5, 7.7 4.2.1, Figure 3, 4, 5.6.1, All 5, 8 8.2.3 5.4.1 5.4.1 All 1.4,5.4.1, 1.4,5.4.1, 1.4,5.4.1,7.1 7.1.3,8.5. 7.1.3,8.5. .3,8.5.4 4 4 1.4 1.4 1
CHANGE REQUEST DATE # 1 10/15/2009 2 11/24/2010 3 11/28/11 4 3/26/12
AUTHORIZED BY Carol Craig Carol Craig Carol Craig Carol Craig
CA-FL-12-010
9/25/2012
Carol Craig
DCR-13-001 DCR 13-002
1/14/2013 2/8/2013
Carol Craig Carol Craig
DCR 13-009
5/7/13
Carol Craig
DCR 13-010
5/18/13
Carol Craig
DCR 14-005
3/04/14
Carol Craig
DCR 14-015
4/14/14
Carol Craig
DCR 14-019
7/15/14
Carol Craig
DCR 15-009
2/28/15
Carol Craig
DCR 16-005
4/10/16
Carol Craig
52 ISO 9001 and AS9100 www.craigtechinc.com Printed copies are good for 24 hours from time of printing: 14-Apr-16 11:03:35
