Is Any Exclusion in the ISO 9001:2015 Quality Management System Acceptable, and If Yes, In What Situation?

In the current business environment, it is important to keep up to date with high standards of quality management. Many organizations are trying to improve their processes and systems, improve customer satisfaction levels, and move towards compliance with internationally accepted standards. ISO 9001:2015 is one of the foremost recognized quality management systems that provide structured guidance to be certain of the quality of products and services in a consistent manner. Businesses striving for excellence will obtain the ISO 9001:2015 certificate not only to demonstrate to the world they are serious about paying attention to quality, but also to instill trust with their clients, partners, and stakeholders. The primary happiness of a quality manager and owner of a quality business is often the question: Is there an acceptable exclusion in an ISO 9001:2015 quality management system, and if so, under what circumstances? Organizations considering obtaining ISO 9001 Quality Assurance Certificate or applying for ISO 9001:2015 Degree - With hold this to be specifically important. This article will examine the exclusions of ISO 9001: "The acceptability of the exclusion," and apply those exclusions.

Understanding ISO 9001:2015 and the Concept of Exclusions

ISO 9001:2015 is a worldwide recognized standard established by the International Organization for Standardization (ISO). The standard specifies the requirements for a quality management system (QMS) that assists organizations consistently provide products and services that meet customer expectations and regulation mandates.

The standard is based on the following principles:

1. Customer Focus - Understanding and meeting customer needs

2. Leadership - Providing clear vision and direction for the management of quality

3. Engagement of People – Building personal competence, trust, and resourcefulness within the organization

4. Process Approach - Managing activities as processes to enable an increase in efficiency and results

5. Improvement - Managing improvement within the organization

6. Evidence-Based Decision Making - Making decisions based on factual data

7. Relationship Management - Managing relationships that are mutually beneficial for suppliers and other stakeholders.

These principles will not only allow a company to achieve operational excellence, but will also enable the company to qualify for the ISO9001:2015 certificate service to validate its focus and commitment to quality.

Which ISO 9001:2015 Requirements Can Be Excluded?

ISO 9001:2015 permits exclusions only for Clause 8 - Operation, and it must pertain to design and development. Generally Accepted Exclusion: Clause 8.3 (Design and Development)

This is the most common exclusion in practice and is accepted if:

• Your organization does not design any new products.

• You only manufacture products from designs supplied by your customer or have the customer design a product for you.

• You offer a service that is standardized and not customized.

• You are a trading/wholesaling organization that does not develop a product.

Examples:

• A retail store that buys a finished product to sell (i.e., no design) cannot be expected to perform any design or development requirements.

• A courier service that delivers parcels does not design the parcels.

• A distributor who sells machines made for it by another brand does not take responsibility for the design.

When Are Exclusions in ISO 9001:2015 Considered Acceptable?

Here are instances where exclusions are fully justifiable:

1.When a Process Does Not Exist with the Organizational Entity

If your organization simply does not perform activity, the requirement does not apply.

Example:

A transportation company does not manufacture vehicles, so it can exclude product design.

2. If Activity is Fully Sub-contracted, the Activity Can Be Excluded

If the activity is fully outsourced, the organization may exclude the requirement as it is qualified through supplier evaluation for the organization.

Example:

A business that has maintenance and calibration serviced through certified vendor.

3. If Industry Type Does Not Require Clause to Apply

There are some industries (I.T., consulting, finance, etc) that may not have product design or service engineering.

For example, a software reseller resells and distributes products that already exist, so design and development do not apply.

4. When the Requirement Does Not Impact Customer Satisfaction

ISO 9001 is about:

• Meeting customer needs

• Providing consistency of products & services

• Operating processes & systems efficiently

A requirement can be excluded, if that excluded requirement does not impact any of those things.

5. When the Exclusion Does Not Diminish the QMS

A justified exclusion must not diminish the systems:

• Effectiveness

• Reliability

• Compliance

• Ability to meet statutory or regulatory requirements

6.When the Business Does Not Has Design and Development Activities

This exclusion is very common, and generally accepted throughout the ISO 9001:2015 standard.

Example:

A trading company brings in ready-made products & sells them thereafter. They do not have control over modifying the specifications of the products they bring in. In this case the Clause 8.3 (Design & Development) would not be applicable because it is excluded.

There are other examples like:

• Logistics companies

• Retail chains

• Resellers

• Contract manufacturers if they strictly just follow the customer design with a signed contract

• Generally, any service businesses that do not design anything (e.g., housekeeping, security services)

In all these situations the auditor accepts the justification as the company does not design the product or service, therefore the requirement is irrelevant.

When the Requirement Is Not Relevant Due to the Nature of the Product or Service

There can be clauses that are relevant to processes that not all organizations implement.

Example:

An IT consulting organization may not use measuring devices that require calibration.

So, clause 7.1.5--Monitoring & Measuring Resources may only be partially applicable.

Example:

A financial service organization may not need controls related to manufacturing processes such as:

• maintenance of production equipment

• verification of physical products

• validating processes

So, parts of Clause 8 (Operation) could reasonably be non-applicable.

When Legal or Contractual Requirements Clearly Exclude a Process

There are instances when outside authorized entities are required to perform certain processes based on the industry.

Example:

An organization that develops medical software may not be allowed to perform some aspect of the testing in the location based on government policy.

In cases where the responsibility is mandated to an outside entity, the clause requirements with respect to those processes may be considered non-applicable.

When the Organization Outsources Certain Functions Completely

If a business outsources a process completely and does not take on any responsibility for planning or execution, exclusion of the outsourcing process is possible - be careful.

Example:

A small manufacturing company has outsourced:

• calibration services

• testing processes

• logistics

Although the company is still responsible to control the outsourced process, the area related to the company's internal performance may be excluded.

Nonetheless, outsourcing does not mean you are free from responsibility. ISO 9001:2015 still requires that you manage external processes (Clause 8.4).

When Resources or Infrastructure Specified in the Standard Are Not Required

Some businesses operate entirely within a virtual/remotely able context.

Example:

A digital marketing agency does not have physical equipment and does not produce anything on-site.

Thus, certain requirements for:

• environmental conditions

• physical workspace

• production infrastructure
may not app

However, the business must still ensure an environment, regardless of location or surroundings, for its performance (e.g., digital security, remote work guidelines).

What Exclusions Are Not Allowed?

Although ISO 9001:2015 does allow for justified non-applicability, there are some exclusions which are not permitted in any event.

Requirements related to the following cannot be excluded:

·         Customer Satisfaction

·         Internal Audits

·         Corrective Actions

·         Context of the Organization

·         Leadership Dimension and Planning

·         Risk-based thinking

·         Documented Information

·         Control of Externally Provided Processes

·         Performance Evaluation

These are part of a central scaffold that is the substance of the ISO 9001 Quality Management System. They lead directly to the purpose stated in the ISO 9001 Quality Assurance Certificate.

How to Justify an Exclusion Correctly

Auditors do not merely accept exclusions; they request clear, documented evidence to support the exclusions. Your documentation should include:

• Why the requirement is not applicable, or not relevant.

• How the exclusion does not detract from customer satisfaction.

• How the company is maintaining consistent quality as prescribed by ISO 9001.

• A rational connection linking the exclusion to the company's business operations.

An example of a professionally constructed justification for the exclusion would be:

"The organization does not generate design and development activities since it manufactures products based only on designs and specifications provided by the customer." Therefore, Clause 8.3 Design & Development is not applicable.

Benefits of Allowing Exclusions in ISO 9001:2015

Exclusions can provide significant advantages to organizations earning an ISO 9001 Quality Assurance Certificate, such as:

1.Flexibility.

ISO 9001:2015 is tailored to your type of business, thus addressing the need for the QMS not to be completely rigid.

2. Better Implementation.

Your teams can focus on processes they are tasked with, which often enhances implementation.

3. Documentation Loads are Reduced.

Reducing complexity normally leads to better operational efficiency.

4. Cost-Effective.

An organization should not have a process which does not return value to the operation.

5. Quicker Certification Process.

Excluding unnecessarily unnecessary processes will lead to a quicker operational compliance, and in view of the context of an ISO9001:2015 certificate in India, this is a significant benefit to the business.

How Exclusions Affect ISO 9001:2015 Certification

Certifications will only remain valid if exclusions are justified, the certification scope accurately reflects the exclusions, and certifying bodies verify that your certification process meets the business model. Conversely, if exclusions cannot be justified, the following could happen:

• a non-conformity may be raised

• certification may be delayed

• corrective action may be required

• eligibility for certification may be rejected

This is why it is so important to recognize exclusions for a positive certification experience.

Role of Certification Bodies in Approving Exclusions

Certification bodies in India when you apply for the ISO 9001:2015 certificate, will use strict guidelines in their processes.

They will verify the following:

• scope of your activities

• business processes

• regulatory requirements

• customer requirements

• supply chain practices

They will only approve exclusions when they feel the justification is logical and meets the compliance requirements to issue the ISO 9001:2015 certificate.

Guidelines for Applying Exclusions

While exclusions are permissible, organizations need to adhere to specific requirements to retain their credibility.

1. Relevance and Reasonability – Exclusions should only be made to clauses that are truly irrelevant to the business. Exclusions that are made arbitrarily may jeopardize the QMS.

2. Documentation – The exclusions made to the scope must be documented unambiguously in the Quality Manual or QMS scope statement.

3. Customer and Regulatory Impact - Exclusions should not affect its ability to meet customer requirements nor should exclusions impact its ability to comply with regulations.

4. Audit Clarity - During certification audits, auditors will review exclusions that have been made to determine the exclusion is appropriate and does not impact the integrity of the QMS.

For example, if a company only provides a service that consumes a component and the company does not produce or design tangible products, the company may exclude clauses related to production and product design as long as the exclusion is documented in its QMS scope.

Common Misconceptions About ISO 9001:2015 Exclusions

The question of exclusions is another area where misunderstanding often occurs, either involving too broad of exclusions or avoiding exclusions altogether from fear of non-conformance. Some common misunderstandings are listed below:

• Exclusion = Loophole: Exclusions are often considered a way of skipping the standard. Exclusions are only allowed if certain clauses are not applicable.

• All Clauses Can Be Excluded: ISO 9001:2015 states that exclusions must not affect the organization's ability to ensure the delivery of conforming products or services. Clauses related to quality must remain no matter if they are excluded.

• Exclusions are Optional: While exclusions are permissible, a well-defined scope of an organization's "quality management system" will add clarity and support the organization's case for being awarded an ISO 9001 Quality Assurance Certificate."

Importance of ISO 9001:2015 Certificate and Exclusion Management

Acquiring an ISO 9001:2015 certificate signifies that an organization is dedicated to quality and continuous improvement. Effectively managing exclusions is important for the following reasons:

• It allows stakeholders to know where the boundaries of your QMS are.

• To be compliant with ISO 9001:2015, while protecting your operational effectiveness.

• It avoids unnecessary audits or documentation for processes that are not relevant.

• It increases credibility for firms applying for ISO9001:2015 certificate service or seeking clients who value certified quality management systems.

For organizations in India, applying for the ISO 9001:2015 certificate in India allows them to apply international standards for their business and accommodate operational reality through acceptable exclusions.

Steps to Justify Exclusions in ISO 9001:2015

To apply exclusions to your QMS use to process these steps:

1.Identify Non-Applicable Requirements

Review each clause of ISO 9001:2015 and determine which don't truly apply to your processes.

2. Document Rationale

For each exclusion, provide a cogent rationale explaining why the clause does not apply.

3. Consider Implications for Customers and Compliance

Confirm that the exclusions will not affect customer satisfaction, and regulatory compliance isn't a problem.

4. Include in QMS Scope Statement

Have all exclusions explicitly stated in the QMS scope statement to create a transparent process.

5. Keep Records for Auditors

Have all records ready in case any ISO auditors want to confirm that your exclusions were justified and reasonable.

Conclusion

Exclusions in the ISO 9001:2015 quality management system are allowed only in specified situations in which particular requirements are genuinely inapplicable because of the nature of your organization's processes, products, or services. Exclusions, when documented correctly and justified will enable organizations to consolidate their quality management process, without endangering the QMS integrity. To obtain certification, organizations need to be mindful that exclusions do not influence customer satisfaction, regulatory requirements, and/or the overall QMS performance. If exclusions are properly documented and managed, it will enhance organizational efficiencies and help to achieve the ISO 9001:2015 certificate, demonstrating the organization's commitment to quality and excellence.