Deep Interpretation of ISO9001 Clause (25) | 8.7 Control of Nonconforming Output: Disposal Methods and the Boundaries of Concession Acceptance

1. Key Points of the Clause

ISO 9001:2015 Clause 8.7 is divided into two parts.

The core requirements of 8.7.1 can be summarized in four sentences: The organization should ensure the identification and control of nonconforming output to prevent its unintended use or delivery; appropriate measures should be taken based on the nature and impact of the nonconformity; this clause also applies to nonconforming output discovered after product delivery or during or after service provision; the disposal of nonconforming output should include one or more of the following methods: a) corrective action; b) isolation, restriction, return, or suspension of the provision of products and services; c) notification to the customer; d) obtaining authorization for concession acceptance. Additionally, it is clearly stated that after corrective action has been taken on nonconforming output, it should be verified whether it meets the requirements.

8.7.2 requires the retention of documented information covering four aspects: a description of the nonconformity; a description of the measures taken; a description of the concession obtained; and identification of the authorization for disposing of the nonconformity.

It is particularly important to note several terms used in the clause. "One or more methods" indicates that a) to d) are a list of optional tools, not a sequence of mandatory process steps; "preventing unintended use or delivery" reveals the purpose of the clause—disposal methods are just means, preventing the misuse or misdelivery of nonconforming output is the ultimate goal; "applicable after delivery" extends the responsibility boundary to the customer side, rather than ending at the moment of shipment.

2. Interpretation of Intent

The first deep logic is the separation of judgment and disposal authority. 8.7.2 d) requires "identification of the authorization for disposing of the nonconformity," which means that the person who discovers the nonconformity and the person who approves the disposal are two different roles. The discoverer can determine the nonconformity based on inspection standards, but decisions on rework, repair, concession, or scrapping must be made by authorized personnel. In summary: the disposal of nonconformities cannot be decided by "any available person."

The second logic is the principle of risk classification in disposal. The phrase "appropriate measures should be taken based on the nature and impact of the nonconformity" gives the organization discretionary space while also setting a red line: the greater the impact, the more conservative the disposal method must be, and the higher the authorization level must be. Scrapping an entire batch of screws due to a slight color difference is wasteful, while releasing a nonconforming item involving safety characteristics as a concession is disastrous—the standard delegates the responsibility for judgment to the organization, on the condition that the organization has a coherent set of judgment rules.

The third logic, which is often overlooked, is that 8.7 and 10.2 are two different lines. 8.7 answers "how to dispose of this batch of nonconforming output"—corrective action, isolation, notification, or concession; 10.2 answers "why did this type of nonconformity occur and how to prevent it from happening again." Reworking a product may save it, but the root cause of the nonconformity still exists. If repeated nonconformities are not transferred from 8.7 to 10.2, the system will become increasingly numb to the issues. Many companies that appear to have complete disposal procedures are precisely where the system breaks down at this juncture.

Another point about the boundaries of "concession acceptance." Concession acceptance is a conditional acceptance, not a denial of nonconformity. It requires at least three limitations: authorization source (internal authorization, including customer consent if necessary), scope (specific batch, specific quantity, specific use), and risk (consideration of safety, regulations, and key characteristics). Any "leniency" that crosses these boundaries is essentially canceling the acceptance criteria.

3. Implementation Practices

Step One: Convert "appropriate measures" into a comparison table. Classify nonconformities into three levels based on their severity and impact range (minor, general, serious), and pre-bind the allowable disposal methods and authorization levels for each level. For example, minor nonconformities can be approved for rework by a quality engineer; general nonconformities requiring concessions must be co-signed by the quality and technical responsible persons; nonconformities involving safety, regulations, and customer special requirements must not be conceded and can only be reworked, repaired, and re-verified in full or scrapped. The comparison table is the smallest tool to make 8.7 executable on-site.

Step Two: Implement physical isolation and status locking simultaneously. Red zones, red boxes, and red cards address visible isolation, but true prevention of misuse relies on status locking—setting the status of nonconforming batches to "frozen" in the inventory system or production execution system to prevent them from being used or passed to the next process. Physical isolation without system locking can lead to red cards being "temporarily borrowed" when on-site material turnover is tight.

Step Three: Set up a "non-concession list" for concession acceptance. The authorization form for concession acceptance should include fixed fields: a description of the nonconformity and its comparison with standard clauses, impact assessment (on the product, subsequent processes, and final use), scope limitation, authorization signature, and customer notification or consent records. Include safety characteristics, regulatory requirements, and customer-designated special characteristics in the "non-concession list" to ensure that the approver sees the red line before signing.

Step Four: Re-verification is mandatory after correction. After rework or repair, the output should be re-verified according to specified items and the verification results recorded. The difference between repair and rework is that repair may alter the original characteristics of the product. Therefore, in addition to verifying the original nonconformity, the impact of the repair on other characteristics, subsequent assembly, and service life should also be assessed. If necessary, update the control plan, work instructions, and failure mode analysis documents to prevent "fixing one place and creating new problems elsewhere."

Step Five: Convert disposal data into improvement inputs. Summarize and analyze nonconformity disposal records monthly, statistics on the distribution of nonconformity types, the proportion of rework and repair, the frequency of concession acceptance, and the points of concentrated occurrence. Projects that occur repeatedly or in clusters should trigger corrective actions under 10.2; single occurrences should be included in 9.1 analysis. Without this step, 8.7 will remain a form that is always being filled out but never concludes.

4. Auditor's Perspective

Common Finding One: Disposal has conclusions but no basis. The disposal form states "concession acceptance" or "scrapping" but lacks a basis: no comparison with standard clauses, no impact assessment, and no explanation of the authorization level. When auditors ask why one batch can be conceded while another cannot, the on-site response is often vague, indicating that the disposal actually depends on personal experience rather than established rules.

Common Finding Two: Concession acceptance signed by a single person without assessing downstream impact. A quality manager signs off on a nonconforming item involving critical dimensions without consulting the technical department, assessing the impact on subsequent assembly and final product function, or informing the customer. Such single-person signatures can lead to a broken traceability chain if batch issues occur.

Common Finding Three: Repeated concession acceptance of the same nonconformity over multiple months without transferring to corrective actions. This is the most typical evidence of a break between 8.7 and 10.2. Auditors typically view more than three repeated concessions as a strong signal that the system is not effectively running—while the standard does not prohibit concessions, long-term reliance on them to maintain delivery indicates that the root cause has never been addressed.

Common Finding Four: Nonconformities discovered after delivery do not follow the same channel. When a nonconformity is found at the customer's site, only a replacement is made without issuing a nonconformity disposal record within the system. This leads to a lack of nonconformity description (8.7.2 a), making it impossible to perform trend analysis or determine whether it is a common defect.

Common Misunderstanding One: Treating rework as a corrective action. Rework falls under 8.7.1 a) "corrective action," which means eliminating the identified nonconformity; it is not the same as a corrective action that eliminates the cause. Confusing the two can lead to a long-term absence of root cause analysis.

Common Misunderstanding Two: Believing that a customer's verbal "it's usable" constitutes authorization for concession acceptance. Verbal consent without written authorization and scope limitation is considered no authorization in audits.

Common Misunderstanding Three: Isolating only finished products, not nonconforming outputs during the process. Work-in-progress, semi-finished products, returned materials, and scrapped items are all subject to 8.7. In particular, if scrapped items are not promptly cleared and disposed of, they can become a high-risk area for material mix-ups.

5. Self-Inspection Checklist

• A comparison table for nonconformity classification and disposal methods has been established, with each level clearly defining the authorization level.
• Nonconformity areas are controlled through both physical isolation and system status freezing.
• A "non-concession list" is in place for concession acceptance, and records of impact assessment, authorization signatures, and customer notifications are maintained.
• Re-verification after rework and repair has specific items, conclusions, and traceability, with necessary updates to relevant technical documents.
• Nonconformity disposal data is summarized and analyzed monthly, and repeated occurrences have been transferred to corrective actions and are being tracked and verified.

Disposal depends on impact, concession depends on authorization, and records depend on closure.

Knowledge code: 2.1.1

Version: v20260923

Author: QTank QTank is dedicated to providing systematic professional knowledge, methodologies, and practical tools for quality management practitioners, helping companies continuously improve their quality capabilities.