Mandatory Documentation IATF 16949 en
Mandatory Documentation IATF 16949 en
Mandatory Documentation IATF 16949 en
In this document, you will find an explanation of which documents are mandatory according to the IATF
16949:2016 standard, and which non-mandatory documents are commonly used in the QMS
implementation, in the same order and numbered clauses as in IATF 16949.
Although it is sometimes helpful, this can be counterproductive, because it makes the implemented
processes and respective QMS hard to use and maintain, as well as making the QMS a bureaucratic
burden. While taking such an approach, organizations are missing a chance to improve their processes
for their own benefit, as well as that of their customers.
This white paper is written in plain English to help you learn the minimum IATF 16949 requirements for
the documentation. It also provides a list of documents that are commonly in place and can help you
make your QMS more efficient.
Since IATF 16949 is referring to requirements of ISO 9001:2015, mandatory documents required by ISO
9001 will also be included so, the organization will have the full picture of what is required regarding
documented information.
These are the documents and records that are required to be maintained for the IATF 16949 Quality
Management System. You should also maintain any other records that you have identified as necessary
to ensure that your management system can function, be maintained, and improve over time.
Remember, these processes and procedures are not required to be documented; however, many
companies choose to do so. One rule of thumb when deciding if you want to document a process is this:
if there is a chance that the process won’t be carried out as planned, then you should document it. In
many cases this is the best way to ensure that your Quality Management System is reliably implemented.
Does the order of operations matter? If there are several ways to get the same outcome, and the
important thing is the outcome, then there is no need to write down what process to use. An example
would be certain design analyses. There are several ways to analyze the mechanical design of a product,
and many different computer design tools to use, but all give very similar results. If the result of any of
the available processes is acceptable, then why prescribe which one to use?
Can any simple requirements be covered by training or forms? As a corollary to the first question, there
are other ways to ensure things are done properly. If you have a standard form (paper or electronic) for
purchasing that highlights all the required information to be sent to a supplier for the purchase of product,
do you really need a written procedure to tell someone how to fill out the form to place the order? If the
important thing is for the required information to be there, the form can stand for itself. Any additional
information, such as how to find a part number in your system, may be acquired through training, without
needing to write a document.
Does the process need the same level of change control that is afforded Quality Management System
documents? Some companies like to document all of their Human Resource Policies as part of the Quality
Management System, but you need to consider the costs of having a procedure as part of that system.
Does the procedure need to have change control that is as strict as other documents, or could having
controlled change access on a computer drive be just as effective? Does every detail of the procedure
need to be audited, or is it there mostly for the information of employees when they need it (such as a
travel policy)?
Remember that, just because some information is important, it doesn’t mean that it needs to be
controlled in the Quality Management System documentation; other avenues are also available. This is
also a good thing to consider when deciding if something needs to be a controlled form or not. Often, a
company’s Documentation Procedure will specify the change control on forms. Some checklists, however,
can be more effective if their content is easily controlled by the few people who use instead of a more
complicated change control system. For example, the shipping department may have a checklist for what
they need to do to ship product. If a problem occurs, and they all agree to add an additional check to
make sure the problem doesn’t happen again, this change can happen more quickly and can help prevent
the same problem from recurring in the future.
Does competence of the workers make a written procedure unnecessary? One beneficial addition to the
ISO 9001 standard, and consequently in IATF 16949, is the separation of Competence from Training. If
your hiring practices for a machine shop comprise only hiring licensed machinists or their apprentices,
then you don’t really need written instructions on how to use a lathe. This is part of the competence of a
machinist. The old version of the standard adage of “write what you do, do what you write” need not
apply.
Why written documentation for every process may be bad? When you document a specific order of
operations for a process, you can limit the participants in the process from having any flexibility in how
they do their job. This can potentially lower job satisfaction, employee engagement and indeed can hinder
any efforts to find process improvements. In the worst cases, the effort to try to change the process for
the better can be seen as greater than just continuing to use the flawed or imperfect process. Sharing of
best practices should be encouraged, and by writing a prescriptive process, you may hinder employees’
desire to improve what they do.
For more information, see: How to define the context of the organization in IATF 16949:2016.
Scope of the Quality Management System. This document is usually rather short, and written at the
beginning of the implementation. Its purpose is to define the boundaries of the QMS and to determine
which parts of the organization the QMS will apply. Normally, it is a standalone document called Scope of
the QMS, although it can be merged into a Quality Manual.
For more information, see: How to define scope of the QMS according to IATF 16949:2016.
Documented process for the management of product safety related products and manufacturing
processes. The standard requires an organization to document the procedure which ensures its products
are safe for the end user. The procedure needs to cover various topics, from identification of product
safety regulations to product traceability and lessons learned for new product introduction. Although it
is meant to control the manufacturing process, it is often merged with the Procedure for Addressing Risks
and Opportunities, since the product and manufacturing process should be designed in a way that ensures
product safety.
Quality Policy. The Quality Policy is intended to be a company’s documented intention to comply with
appropriate requirements, increase customer satisfaction, and continually improve. The policy is the
focus for the company and should readily convey the goal of the organization. It is a standalone document,
but is often documented in a Quality Manual. It is also sometimes posted throughout the organization as
a way of communicating to all employees, since it is important that every employee understand how the
policy relates to his or her job.
Responsibilities and authorities. The standard requires responsibilities and authorities within the QMS
to be defined, communicated and documented. This can be done in two ways: the organization can have
a separate document that contains information about all roles and responsibilities, or it can list the roles
and responsibilities within the documents that describe processes and activities, e.g. procedures and
work instructions.
Considering the importance of this new requirement and the fact that it introduces a completely new
process into the organization, it is recommended that it be documented in the form of a procedure.
FMEA Procedure. Failure Mode Effect Analysis (FMEA) is a widely used risk assessment methodology in
automotive quality management system and the standard mentions it in several places. In order to ensure
consistent results from the risk assessment, organizations document procedure for FMEA risk assessment
methodology. With this documentation, everyone who uses it is familiar with the methodology and
criteria that the organization has adopted.
For more information about the FMEA risk assessment methodology, see: What is FMEA, and how to
apply it in IATF 16949.
Quality Objectives and Plans for Achieving Them. The requirements regarding setting the quality
objectives remained as they were in the previous version of the standard; they still need to be measurable
and timed. However, the standard now requires plans for achieving the objectives, meaning that the
organization will have to assign responsibilities and dedicate resources for achieving the objectives. These
requirements can be met in separate documents, but it is much easier to create a Quality Objectives
document and fulfill all the above-mentioned requirements.
For more information, see: How to Write IATF 16949 Quality Objectives.
Workplace Organization Procedure. The environment where the processes are conducted can
significantly influence their effectiveness and the conformity of the products. Some organizations find it
useful to document the procedure to ensure that occupational health and safety, state of order,
cleanliness, and repair is consistent with the product and manufacturing process needs.
Procedure for Control of Gauges. Application of appropriate measuring methods and fitness of the
gauges used is crucial for ensuring compliance of the product with the requirements. Documenting this
Procedure for control of gauges aims to ensure that appropriate methods are applied and the instruments
used are fit for the purpose.
Procedure for Equipment Maintenance and Measuring Equipment. The purpose of the monitoring and
measuring is to provide evidence of conformity of the product to determined requirements. In order to
ensure that monitoring and measuring can be carried out and are conducted properly, the organization
needs to document Procedure for Equipment Maintenance and Measurement Equipment.
Documented process for identification of training needs including awareness and achieving awareness.
This procedure should describe how the process of identification and achieving necessary competence is
performed as well as how the company raises awareness of its employees regarding the QMS. This
procedure is usually part of Procedure for Competence, Training and Awareness.
Documented process to verify competence of internal auditors. Internal audit is one of the key tools to
determine the compliance of the QMS to IATF 16949 and the overall state of the QMS. To achieve this,
the auditor must be competent to perform the audit and add value to the organization. Since there are
so many different requirements in the standard, it makes sense to define and document the necessary
competencies of the auditors and how those competencies are verified. This procedure can be easily
merged with Procedure for Competence, Training and Awareness.
For more information, see: Requirements for competence of IATF 16949 internal auditors.
Documented process to motivate employees. Motivation of employees is important for productivity and
effectiveness of the process and the organization as a whole. Therefore, the standard requires the
organization to document procedures to motivate employees. The document describes responsibilities
and methods for motivating employees and, in order to decrease amount of documentation, the
organization can merge it with the Procedure for Competence, Training and Awareness.
Quality manual. This is a roof document for your QMS, it usually includes the QMS scope, role(s)
undertaken by the organization, exclusions from the standard, references to relevant documents, and the
business process model. For more information on how to write the Quality Manual, see: How to write the
IATF 16949 Quality Manual.
Procedure for Document and Record Control. Managing documented information is defined by many
requirements within clause 7.5 in the standard. Activities of approval, update, managing changes, and
ensuring that the relevant version of the document is in use are best to be defined and documented in a
Procedure for document and record control.
The company must also define rules to maintain its records that show the QMS is implemented and
maintained. The records must also include how they identify, store, and protect the records so that they
can be retrieved as necessary, for the correct amount of time, and destroyed when no longer needed, but
not before. If you need more information, see A new approach to document and record control in IATF
16949.
Laboratory Management Procedure. This procedure should describe the laboratory technical
procedures, competencies of personnel, methods of testing the product, and requirements for external
laboratories.
Sales Procedure. Although it is not a mandatory procedure, the standard prescribes numerous rules
regarding communication with customers, determining requirements related to product and services, and
activities regarding review of these requirements. The best way to conform to all these requirements is
to document them, together with responsibilities.
Procedure for design and development. Requirements regarding the design and development process
are among the most demanding in the standard. Every step of the process needs to be documented in
the form of a record, from design and development inputs, controls, and outputs, to changes in design
and development. Considering all the requirements regarding this process, it is best to document the
Procedure for Design and Development and define all mandatory records that should accompany the
procedure.
Documented process to identify special characteristics. The organization needs to establish, document
and implement a process to identify special characteristics including the ones determined by the
customer or risk analysis. Special characteristics are important input for the design and development of
processes and products. They are usually a part of the Procedure for Design and Development.
Procedure for Purchasing. Creators of the standard decided to use this rather robust formulation of what
is basically the Procedure for Purchasing and Evaluation of Suppliers. Although the purchasing process
doesn’t have to be documented, the standard requires companies to establish control over its externally
provided processes, products, and services. The standard does require the criteria for evaluation,
selection, monitoring, and reevaluation of the suppliers to be documented, and the best way to do this is
through the procedure.
Documented supplier selection process. Considering the importance of supplier reliability in the
automotive industry, it seems reasonable for an organization to document the selection process as well
as the criteria for the selection. In the case of smaller organizations, or organizations with a smaller or
limited number of suppliers, this procedure can be merged to Procedure for Purchasing and Evaluation
of Suppliers.
Documented process to identify and control externally provided processes, products and services. It is
the organization’s responsibility to ensure that the products, services or processes provided by suppliers
are compliant with its requirements. Depending on the nature of the product, process and service or the
relationship with the supplier, the organization needs to define the type and amount of control to be
Documented process to ensure compliance with statutory and regulatory requirements of purchased
processes, products and services. Just as with the previous procedure, this one aims to ensure that the
processes, services or products provided by suppliers are compliant to requirements, not of the
organization itself, but of the statutory and regulatory bodies. Again, it can be merged with the Procedure
for Purchasing and Evaluation of Suppliers.
Documented process and criteria for supplier evaluation. Keeping in mind how important the supplier is
to automotive industry, it is no wonder there are so many requirements to document different segments
of interaction with the supplier. The standard requires an organization to document procedures for
supplier evaluation. This can be easily merged with the purchasing process and documented in one single
Procedure for Purchasing and Evaluation of Suppliers.
Procedure for Production and Service Provision. The standard requires production and service provision
processes to be controlled in terms of: availability of necessary documented information regarding
product or service characteristics, intended results, availability of needed resources, monitoring and
measurement activities, etc. This rather complex process will not achieve the intended outcomes without
clearly defined rules. These rules are documented in the Procedure for Production and Service Provision.
Warehousing Procedure. The importance and necessity of this procedure will vary depending on the type
of business the company performs. In cases where the storage conditions can have great influence on the
product quality, rules for preservation of the product during storage should be documented in the
Warehousing Procedure.
Documented process to control and react to changes in product realization. In case of changes to the
product or the manufacturing process, the organization must remain compliant with requirements,
regardless of the source of change. The sources of change can include the organization itself, customers
or suppliers. This procedure aims to achieve its goal by describing how the organization reacts to the
change, verification, validation and other aspects that impact the product. Considering this to be a part
of the production process, this procedure is often amended to Procedure for Production and Service
Provision.
Documented process for management of the use of alternate control methods. In cases where the
adopted process controls cannot be enforced, the organization needs to identify, document and maintain
a process that manages the use of alternate control methods. Keeping in mind that normal operational
controls are part of the production process, this procedure can be merged with the Procedure for
Production and Service Provision.
Documented process for rework confirmation. The organization needs to define and document the
process of obtaining confirmation that any rework is in accordance with the control plan or other relevant
documented information. This will help to verify that conformance with original specifications will be
Documented process for repair confirmation. As in case of reworking, the organization must obtain
confirmation for repair by the customer and this process must be fully documented. Similar to the
procedure for rework confirmation, this procedure can be either part of the Procedure for Production
and Service Provision or documented as a separate procedure.
Documented process for disposition of nonconforming product. What actions are in place, and who is
responsible for making sure that a nonconformity is addressed? How do you ensure that corrections are
made, and what process records are kept? How do you review nonconformities, determine causes, and
evaluate the need for actions to correct them? How do you implement the necessary actions, review that
the actions were effective, and keep records of the actions taken? With the Quality Management System,
you will find non-conformances within your processes must be corrected. When you investigate the root
cause of these problems, you will take corrective actions. You will also need to keep records of these
activities to show improvement.
Procedure for Measuring Customer Satisfaction. Although not required by IATF 16949, it is very common
for organizations to have a documented Procedure for measuring of customer satisfaction. Customer
satisfaction surveys allow an organization to learn more about the needs and expectations of its
customers. It also helps them to understand how customers perceive the organization, and this can be a
valuable input for improvement of the QMS.
Documented internal audit process. How do you audit your Quality Management System to make sure
that it is performing as planned and is effective? Who is responsible for planning and carrying out the
audits? How do you report the results, and what records are kept? How do you follow up on corrective
actions noted in audits? Learn more in this article about the Five Main Steps in an IATF 16949:2016
Internal Audit. You must also keep records of these activities and document a procedure to show QMS
conformance and improvement.
Procedure for Management Review. Management review as a process hasn’t undergone any changes in
in terms of how, and how often, it should be conducted. However, the mandatory inputs and outputs of
the management review have changed. It is now a requirement for the top management to review
internal and external issues relevant to the QMS, as well as the effectiveness of actions taken to address
risks and opportunities. As a result of the management review, there should be decisions regarding
opportunities for improvement of the QMS, the need for changes to the system, and resources needed.
The best way to keep track of what must be reviewed, and the expected results of the management
review, is to document the Procedure for Management Review.
Documented process for problem solving. As a part of conducting corrective actions, an organization
needs to apply a problem-solving process that has defined approaches to different types and scales of
processes, root cause analysis and other activities. The procedure can be documented separately or as a
part of Procedure for Management of Nonconformities and Corrective Actions.
To learn more about error-proofing, see: How to establish an error-proofing process according to IATF
16949.
Documented process for continual improvement. The process for continual improvement needs to be
documented. It should include identification of the methodology used, objectives, measurement
effectiveness and required documented information. The aim is to ensure continual improvement of the
QMS as one of its key features. The process can be documented in the Procedure for continual
improvement.
References
16949Academy