Have a procedure that is put into effect whenever any part of the laboratory's activities or results fails to conform to its own procedures or to the requirements agreed with the customer (for instance, equipment or environmental conditions outside set limits, or monitoring results that miss the criteria). The procedure shall make sure that: responsibility and authority for managing nonconforming work are set; actions, such as stopping or repeating work and holding back reports, follow the risk levels the laboratory has set; the significance of the nonconforming work is judged, including analysing its impact on earlier results; a decision is reached on whether it is acceptable; where needed, the customer is told and work is recalled; and it is defined who may authorize work to restart. Keep records of nonconforming work and of what was done. Where the evaluation shows the nonconformity could happen again, or raises doubt about whether operations conform to the management system, take corrective action.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.