Changes & temporary process controls (IATF only)
Plain-language summary
Production changes get a documented process with risk-based validation before implementation and customer approval where required; temporary deviations from the control plan (the backup method when the poka-yoke breaks) come from an approved, customer-aware list with restoration discipline.
What the clause is really asking
8.5.6.1: documented change control covering changes by you OR your suppliers, impact assessment, verification/validation before implementation, evidence retained, customer approval/notification per CSRs. 8.5.6.1.1: identify and document a list of approved alternative process controls; when primary controls (error-proofing devices etc.) fail, follow the approved backup, manage the risk (e.g. 100% inspection), restore the primary within defined timing, and keep traceability of product made under the alternative — with customer notification where required.
What auditors look for
Auditors love the broken-sensor scenario: 'Your poka-yoke failed last month — show me what happened.' They want the approved alternative-controls list (pre-approved, not improvised), the restoration record, product traceability for the deviation window, and supplier-originated changes flowing through the same control.
Typical evidence
Change control records with validation before implementation; supplier change notifications; approved alternative process control list; deviation logs with restoration timing; customer notifications.
How to comply — recommendations
Build the bypass list BEFORE failures: for each error-proofing device, the approved alternative, added controls, and a maximum bypass duration with escalation. Log every bypass like a stop-ship event. That one document turns your worst audit moment into your best.
Common nonconformities
Bypassed poka-yoke discovered with no approved alternative, no log, no restoration date; supplier changes arriving unannounced and uncontrolled; deviation product untraceable.
Related clauses
Builds on ISO 9001 8.5.6; links IATF 10.2.4
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of ISO 9001 / IATF 16949 for the authoritative text.