We use essential cookies to make the site work and, if you allow it, aggregated analytics cookies to improve the content. We do not use marketing cookies.
Clause 8.5.1 requires operational control. A well-written SOP is just the start. The next leap is automated recording from the ERP.
ISO 9001:2015 clause 8.5.1 requires controlling production and service under conditions that ensure conformity. In traditional plants this becomes Standard Operating Procedures (SOPs) nobody reads after day one. The next maturity level is operational control with automated recording from transactional systems.
Clause 8.5.1 lists seven elements:
Meeting all seven takes more than an SOP.
Three maturity levels we see in clients:
Level 1 — written SOP. Word document. Operator reads on hiring. May or may not be updated. Risk: high shift-to-shift variability.
Level 2 — SOP with checklist. Each production order ships with verification checklist. Operator signs. Stored in folder. Better traceability but still manual.
Level 3 — automated control. Critical parameters captured automatically from PLCs, SCADA or MES. Alerts when out of range. Immediate record in the transactional store.
Level 3 automatically meets clause 8.5.1 because evidence is generated without human intervention.
Clause 8.5.1 explicitly requires "actions to prevent human error." In practice this means auditable poka-yokes:
The auditor values a physical poka-yoke more than three pages of written instructions.
When conformity can't be verified by later inspection (e.g. welding, heat treatment, curing), the standard requires process validation. Typically:
Validation renews on major process change or per sector-standard frequency.
The fastest win for an SMB with ERP is connecting operational controls to the transactional flow:
Identify the three processes with the most internal nonconformities in the last quarter. Assess each one's maturity level. If all three sit at level 1, the next ISO project isn't more documentation; it's automated recording. The gain shows in the first weeks.
Clause 8.5.2 requires identification and traceability. If you rely on Excel, you'll fail an automotive or pharma audit. Here's the replacement.
Clause 8.4 requires controlling suppliers and outsourced processes. An annual form no longer meets the bar. Here's what actually works.
Clause 6.1 introduced risk-based thinking. You can meet it with a well-built matrix — no full ERM system required.