8.4 Control of externally provided products and services 8.4.1 General The organization shall ensure that How do you ensure externally externally provided processes, provided processes, products and products, and services conform to services conform to specified specified requirements. requirements? 8.4.1 q1 The organization shall apply the Show me how you apply specified specified requirements for the requirements for the control of control of externally provided externally provided products and products and services when: services when: a) products and services are Products and services are provided by external providers for provided by external providers for incorporation into the incorporation into your own own products and products and services; organization’s services; You provide products and services b) products and services are directly to customers by external provided directly to the providers on your behalf; 8.4.1 customer(s) by external providers A process or part-process is q2 on behalf of the organization; provided by an external provider c) A process or part of a process as a result of a decision to is provided by an external provider outsource a process or function. as a result of a decision by the organization to outsource a process or function. The organization shall establish Show me how you establish and and apply criteria for the apply criteria for evaluation, evaluation, selection, monitoring of selection, monitoring of performance and re-evaluation of performance and re-evaluation of external providers based on their external providers. How do you ability to provide processes or assess their ability to provide products and services in processes or products and 8.4.1 accordance with specified services in accordance with q3 requirements. specified requirements? The organization shall retain What documented information Documented information of external appropriate documented do you have of the results of providers’ performance. information of the results of the evaluations, monitoring of evaluations, monitoring of the performance and re-evaluations of performance and re-evaluations of external providers? 8.4.1 the external providers. q4
8.4 Control of externally provided products and services 8.4.1 General 8.4.1 q1 The organization shall ensure that externally provided processes, products, and services conform to specified requirements. How do you ensure externally provided processes, products and services conform to specified requirements? 8.4.1 q2 The organization shall apply the specified requirements for the control of externally provided products and services when: a) products and services are provided by external providers for incorporation into the organization’s own products and services; b) products and services are provided directly to the customer(s) by external providers on behalf of the organization; c) A process or part of a process is provided by an external provider as a result of a decision by the organization to outsource a process or function. Show me how you apply specified requirements for the control of externally provided products and services when: Products and services are provided by external providers for incorporation into your own products and services; You provide products and services directly to customers by external providers on your behalf; A process or part-process is provided by an external provider as a result of a decision to outsource a process or function. 8.4.1 q3 The organization shall establish and apply criteria for the evaluation, selection, monitoring of performance and re-evaluation of external providers based on their ability to provide processes or products and services in accordance with specified requirements. Show me how you establish and apply criteria for evaluation, selection, monitoring of performance and re-evaluation of external providers. How do you assess their ability to provide processes or products and services in accordance with specified requirements? 8.4.1 q4 The organization shall retain appropriate documented information of the results of the evaluations, monitoring of the performance and re-evaluations of the external providers. What documented information do you have of the results of evaluations, monitoring of performance and re-evaluations of external providers? Documented information of external providers’ performance.
Portrait-Audit-Checklist.docx