Clause 8 focuses on Operation and includes clarifications that make implementation and audits more unambiguous. Key updates cover operational planning, control, design, externally provided processes, production, release, and nonconforming outputs.

8.1 Operational Planning and Control

Requirements lists are now bulleted and structured clearly. The draft replaces “retain” with “available” for documented information, ensuring accessibility regardless of format.

Organizations are now explicitly required to implement controls according to criteria, demonstrating they are in place and effective.

The term “outsourced processes” is updated to “externally provided processes, products, or services relevant to the QMS,” reflecting modern supply chains.

8.2 Requirements for Products and Services

Minor title changes improve clarity, e.g., “Determining the requirements related to” → “Determining the requirements for.”

New notes include modern examples such as websites, FAQs, training, and social media. Contingency communication is emphasized, requiring organizations to address potential disruptions clearly.

Documentation must be “available” rather than merely retained. Updates must be communicated to relevant interested parties when requirements change.

8.3 Design and Development

Notes help implementers and auditors, emphasizing design cycles, verification, validation, and feedback. Documented information must be available as evidence.

“Identify design changes” is replaced with “determine design changes,” requiring a method to decide on design modifications rather than passive identification.

8.4 Control of Externally Provided Processes, Products, and Services

ISO emphasizes communication and clarity for interactions between external providers, customers, and other interested parties. Supply chain control is strengthened.

8.5 Production and Service Provision

Documented information must be available and actively used. Verification, validation, or both are allowed, depending on context.

Explicit clarification allows multiple people to authorize changes, strengthening accountability.

8.6 Release of Products and Services

Documented Information and Authorization

Multiple people can authorize releases. Documented information must be available as evidence, consistent with other areas of Clause 8.

8.7 Control of Nonconforming Outputs

Requirements for documented information to be available “as evidence” are maintained, replacing the older “retained” terminology.

Key Takeaways

• Documented information must be “available as evidence” to align with digital workflows.
• Explicit emphasis on implementing process controls.
• Clearer communication for contingency actions.