At a glance
ISO 9001 Clause 8.7 control of nonconforming outputs: a practical guide to containment, disposition, communication, and follow-up.
- Focus: ISO 9001 Clause 8.7 · Clause 8.7 Control of Nonconforming Outputs
- Read time: 10 minutes
- Updated: September 4, 2026
The Short Answer: Contain the Output, Then Decide What It Needs
ISO 9001 Clause 8.7 Control of Nonconforming Outputs is about making an output visible and managing it before it causes an unintended result. In plain terms, when a product, service, document, data set, or process result does not meet an agreed requirement, the team needs a reliable way to stop, assess, and decide what happens next.
This Clause 8.7 Control of Nonconforming Outputs guide uses the current published ISO 9001:2015 edition as its baseline. ISO describes ISO 9001 as a quality-management requirements standard whose operational processes are planned, implemented, and controlled to meet customer requirements and enhance satisfaction. The practical aim is not one universal hold tag or form. It is an evidence path that helps the organization prevent accidental use or delivery while it makes a proportionate decision. ISO’s ISO 9001 overviewISO’s ISO 9001 overviewhttps://www.iso.org/standard/62085.html is the public starting point.
Reader snapshot: A good control process lets a colleague answer five questions quickly: What output did not meet which requirement? What was protected from unintended use? Who decided the disposition? What was communicated or verified? Does the event point to a wider issue?
First, Separate Immediate Control From Corrective Action
An isolated problem and a systemic problem need different decisions. Immediate control concerns the output in front of the organization. Corrective action asks why a nonconformity occurred and what should change to prevent recurrence. The two can connect, but treating every small issue as a full root-cause project can slow useful containment. Treating a repeating issue as only a local rework can hide a system problem.
| Situation | Immediate question | Possible evidence | Follow-up decision |
|---|---|---|---|
| A product fails an acceptance check | How can it be identified and kept from release? | Inspection result, hold status, location, owner. | Decide rework, correction, concession, segregation, or another suitable disposition. |
| A service was delivered incorrectly | What customer, user, or downstream effect needs prompt attention? | Service record, communication, recovery action, confirmation. | Decide whether the case needs a broader corrective-action review. |
| A supplier-originated item is not usable | Can the item be separated and the relevant requirement made clear? | Receiving record, supplier notice, affected order or process. | Feed evidence into proportionate supplier evaluation or action. |
| The same issue appears repeatedly | What is being contained now, and what pattern needs investigation? | Trend, repeated event records, review decision. | Start a cause and effectiveness review under the corrective-action process. |
This table is an original practical decision aid. It does not prescribe a universal ISO form, severity class, approval route, or software tool. The right depth depends on the possible effect on conformity, customers, users, legal obligations, and the organization’s own process.
The ISO 9001 corrective-action guideISO 9001 corrective-action guide/article/iso-9001-corrective-action-guide explains the distinct root-cause and recurrence-prevention decision. Use it after the organization has stabilized the immediate issue or when the event pattern warrants a deeper review.
Use a Five-Stage Control-to-Learning Loop
Stay Current
ISO expects the next edition in September 2026. Get source-checked weekly briefings.
1. Identify the output and the unmet requirement
Start with facts. Describe the output, the requirement it did not meet, where it is in the process, and who could be affected. The requirement may come from a customer specification, an approved drawing, a service commitment, an internal acceptance criterion, or an applicable obligation. A vague label such as “bad item” is not enough for the next person to make a sound decision.
For a service, the output may be a completed activity, a report, a configured system, a response, or information provided to a customer. The ISO 9001 Auditing Practices Group includes service organizations within its public educational material and discusses control of nonconforming outputs in service-provision context. Its material is useful implementation context, not a universal requirement or audit script.
2. Protect against unintended use or delivery
Choose a practical containment method. It may be physical separation, a clear system status, an access restriction, a stopped release, a revised work instruction, or an immediate customer notification. The point is not the label. It is whether the team can show that the affected output did not quietly continue through the process while a decision was pending.
Ask one useful question: Could a reasonable colleague mistake this output for an approved one? If the answer is yes, strengthen the visible control. The ISO 9001 documented-information guideISO 9001 documented-information guide/article/iso-9001-2026-documented-information-requirements can help teams make the current decision and applicable record clear at the point of use.
3. Decide a proportionate disposition
The disposition is the decision about what happens to the specific output. In some cases, correction or rework may be suitable. In others, the organization may need to reroute, replace, inform an affected party, seek appropriate authorization, or prevent further use. Do not assume that a particular option is always allowed. Check customer commitments, applicable requirements, technical limits, and internal authority before release.
| Weak shortcut | Better decision prompt | Evidence that may help |
|---|---|---|
| “It was fixed.” | What was changed, and how was the changed output checked before use or delivery? | Rework record, acceptance evidence, reviewer decision. |
| “The customer accepted it.” | What was accepted, by whom, and what record shows the scope of that decision? | Authorized communication, concession record, revised requirement. |
| “It was a supplier issue.” | What did the organization control, and what supplier information needs to affect the next decision? | Receiving record, supplier communication, impact review. |
| “It was only a service error.” | What user, customer, data, timing, or regulatory effect still needs control? | Service recovery record, communication, closure evidence. |
4. Communicate and verify when it matters
Containment is incomplete if affected people work from the wrong information. Identify the customer, user, delivery team, supplier, or internal process owner who needs to know. Then decide whether an acknowledgement, a new acceptance check, or a recovery confirmation is needed. The ISO 9001 customer-communication guideISO 9001 customer-communication guide/article/iso-9001-customer-communication-clause-8-2-1-guide provides an evidence-led way to trace significant messages, commitments, changes, and closure.
When an action changes a controlled requirement, plan the handoff. The ISO 9001 planning-of-changes guideISO 9001 planning-of-changes guide/article/iso-9001-planning-of-changes-guide can help a team assess purpose, consequences, resources, responsibilities, and QMS integrity before the change becomes routine.
5. Decide whether the event should teach the system
Close the immediate control loop, then look for a pattern. A single contained issue may need only proportionate local action. Repeated events, serious consequences, a weak inspection step, unclear requirements, or a failed handoff may indicate a system issue. That is the point to use the corrective-action process and assess the cause, necessary action, and effectiveness.
The aim is not to create a permanent record for every inconvenience. It is to retain evidence that is useful for the decision, the affected output, and any later learning. The email-gated ISO 9001 Gap Analysis TemplateISO 9001 Gap Analysis Template/resources/gap-analysis-template can help teams list the current controls, evidence, and open questions before a larger QMS review.
Audit the Path, Not Just the Folder
The most useful audit sample follows one real event. Start with the unmet requirement and trace the response. This reveals whether the organization can connect identification, containment, disposition, communication, verification, and learning.
| Audit focus | Adaptable question | Evidence path |
|---|---|---|
| Requirement | “What did this output fail to meet?” | Specification, acceptance criterion, service commitment, applicable requirement. |
| Control | “How was unintended use or delivery prevented while a decision was pending?” | Status, segregation, system restriction, stopped release, owner. |
| Disposition | “Who made this decision, and what constraints did they consider?” | Authority, approval, technical review, customer communication. |
| Verification | “What shows the chosen action achieved the intended result?” | Re-inspection, test, service confirmation, release evidence. |
| Learning | “How do you know whether this is isolated or recurring?” | Trend, review, corrective-action decision, supplier performance data. |
For broader evidence-led prompts, see the ISO 9001 internal audit questions guideISO 9001 internal audit questions guide/article/iso-9001-internal-audit-questions-guide. For supplier-originated events, the ISO 9001 supplier evaluation guideISO 9001 supplier evaluation guide/article/iso-9001-supplier-evaluation-guide helps distinguish a local supplier issue from a pattern that should change supplier controls.
An Original Practical Takeaway: Control Is About Decision Confidence
The strongest nonconforming-output process does not merely generate a form. It gives the organization confidence that an affected output is understood, protected, and resolved by someone with the right information and authority. It also helps the team recognize when a local correction is enough and when the QMS needs to learn from the event.
Warning
Keep current and future requirements separate:: ISO 9001:2015 remains the current published baseline. ISO lists the next ISO 9001 revision as under development with publication planned for September 2026. Do not claim that this control loop reflects final ISO 9001:2026 Clause 8.7 wording, transition requirements, or audit practices until the published edition and applicable guidance are available.
Frequently Asked Questions
What is ISO 9001 Clause 8.7?
Under the current published ISO 9001:2015 edition, Clause 8.7 concerns control of nonconforming outputs. Use the controlled edition and the organization’s real products, services, customer commitments, and applicable requirements for detailed implementation.
What is a nonconforming output in ISO 9001?
It is an output that does not meet a relevant requirement. The output can be tangible, digital, documented, or service-related. The useful starting point is to identify the unmet requirement and the possible effect if the output is used or delivered as it is.
Is correction the same as corrective action?
No. Correction addresses the specific issue or output. Corrective action addresses the cause of a nonconformity to prevent recurrence. One event may need both, but they are different decisions with different evidence.
Does ISO 9001 require a particular nonconforming-product form?
Do not assume that one form, hold tag, color code, or software workflow is universally required. The organization needs a controlled approach appropriate to its outputs, risks, process, and commitments.
How should a nonconforming service be handled?
Identify what service result did not meet the requirement, protect the customer or user from further unintended impact where possible, decide an appropriate recovery or disposition, communicate as needed, and determine whether the event signals a wider corrective-action issue.
Will ISO 9001:2026 change Clause 8.7?
The final published wording is not available. ISO lists the revision as under development with publication planned for September 2026. Continue to use ISO 9001:2015 as the current baseline and assess any changes after the final edition is published.
Official Sources and Related Resources
- ISO 9001:2015 catalogue record and current-edition overviewISO 9001:2015 catalogue record and current-edition overviewhttps://www.iso.org/standard/62085.html.
- ISO/TC 176 quality-management committeeISO/TC 176 quality-management committeehttps://www.iso.org/committee/53882.html.
- ISO 9001 Auditing Practices GroupISO 9001 Auditing Practices Grouphttps://committee.iso.org/home/tc176/iso-9001-auditing-practices-group.html.
- APG: Service organizationsAPG: Service organizationshttps://committee.iso.org/files/live/sites/tc176/files/PDF%20APG%20New%20Disclaimer%2012-2023/ISO-TC%20176-TF_APG-ServiceOrganizations.pdf.
- ISO/FDIS 9001 project statusISO/FDIS 9001 project statushttps://www.iso.org/standard/88464.html.
- ISO 9001 corrective-action guideISO 9001 corrective-action guide/article/iso-9001-corrective-action-guide.
- ISO 9001 customer-communication guideISO 9001 customer-communication guide/article/iso-9001-customer-communication-clause-8-2-1-guide.
- ISO 9001 supplier evaluation guideISO 9001 supplier evaluation guide/article/iso-9001-supplier-evaluation-guide.
- ISO 9001 internal audit questions guideISO 9001 internal audit questions guide/article/iso-9001-internal-audit-questions-guide.
- Free ISO 9001 Gap Analysis TemplateFree ISO 9001 Gap Analysis Template/resources/gap-analysis-template.