4.2 Clause 8.3 — Design and Development
Key Takeaways
- Clause 8.3 can only be excluded under Clause 4.3 if it genuinely does not affect the organization's ability to ensure conformity — auditors must test, not just accept, exclusion claims.
- Design inputs (8.3.3) must be adequate, complete, and unambiguous, with conflicting inputs resolved before design proceeds.
- Review, verification, and validation (8.3.4) are three distinct controls: review evaluates progress, verification checks outputs against inputs, and validation checks the product against intended use.
- Validation must be completed before delivery or implementation unless the customer stipulates otherwise.
- Design and development changes (8.3.6) require documented review, authorization, and evidence that adverse impact on conformity was prevented.
When 8.3 Applies — and When It Can Be Excluded
Design and development is one of the few ISO 9001:2015 requirement clauses an organization can legitimately exclude, under the exclusion mechanism in Clause 4.3, if it can demonstrate the requirement does not affect its ability or responsibility to ensure conformity of products and services and to enhance customer satisfaction. Manufacturing strictly to a customer's complete specification, with no design input of its own, is the classic justified exclusion. An auditor should test this claim rigorously rather than accept it at face value: if the organization selects materials, determines dimensions, develops a formulation, or writes software logic to meet a stated functional requirement rather than a fully defined specification, it is designing - and 8.3 applies whether or not the organization's own procedures use the word "design."
8.3.1 General
Where 8.3 applies, the organization must establish, implement, and maintain a design and development process that is adequate to ensure the subsequent provision of products and services.
8.3.2 Design and Development Planning
In determining the stages and controls for design and development, the organization must consider the nature, duration, and complexity of the activities; the required process stages, including applicable reviews; required verification and validation activities; responsibilities and authorities involved; internal and external resource needs; the need to control interfaces between people involved in the process; the need for customer and user involvement; requirements for subsequent provision of products and services; the level of control expected by customers and other relevant interested parties; and the documented information needed to demonstrate that design requirements have been met.
Auditor evidence: a design and development plan - a gate chart, stage-gate schedule, or project Gantt - naming reviewers, specifying verification and validation methods, and showing resourcing against each stage.
8.3.3 Design and Development Inputs
Inputs must be determined for the specific type of product or service, and must include functional and performance requirements; information derived from previous similar design activities; statutory and regulatory requirements; standards or codes of practice the organization has committed to implement; and potential consequences of failure arising from the nature of the products and services. Inputs must be adequate for the purposes of design, complete, and unambiguous, and conflicting inputs must be resolved before proceeding. The organization must retain documented information on design and development inputs.
8.3.4 Design and Development Controls
This is the heart of the sub-clause, and it covers three distinct activities that candidates must be able to tell apart on the exam:
| Control | Purpose | Typical evidence |
|---|---|---|
| Review | Evaluate the ability of the results to meet requirements; identify problems and propose necessary actions | Design review minutes, action log |
| Verification | Confirm that design and development outputs meet the input requirements ("did we build it right?") | Test reports, calculations, independent peer check, comparison to a proven design |
| Validation | Confirm the resulting product or service meets requirements for the specified application or intended use ("did we build the right thing?") | Field trial data, customer acceptance test, prototype trial results |
Controls must ensure that results define acceptance criteria, that participants include all functions relevant to the design stage being reviewed, that problems are identified with actions determined, and that documented information on these activities is retained. Validation must, unless otherwise stipulated by the customer, be completed prior to delivery or implementation of the product or service, not afterward.
8.3.5 Design and Development Outputs
Outputs must meet input requirements; be adequate for the subsequent processes for the provision of products and services; include or reference monitoring and measuring requirements, and acceptance criteria; and specify characteristics of the products and services essential for their intended purpose and for their safe and proper provision. Documented information on design and development outputs must be retained.
8.3.6 Design and Development Changes
Changes made during or after design and development of products and services must be identified, reviewed, and controlled to the extent necessary to ensure there is no adverse impact on conformity to requirements. Documented information must cover the design and development changes, the results of reviews, the authorization of the changes, and the actions taken to prevent adverse impacts.
What the Auditor Actually Traces
A strong 8.3 audit follows one design from input to output to change: start with a customer functional specification (an input), locate the review, verification, and validation records with named participants and dated sign-off, confirm the output package - drawings, specifications, acceptance criteria - is genuinely what production uses on the floor, and then pull one engineering change to see whether it was reviewed for downstream impact before implementation, rather than only being documented after a nonconformity had already surfaced in the field.
A design engineer confirms that a new bracket meets the dimensional tolerances specified on the input drawing. Which design and development control does this activity represent?
An organization manufactures components entirely to a customer's fully defined drawings and specifications, with no independent design activity of its own. Under the standard, what is the correct auditor conclusion?