Overview
ISO 10007:2017 - "Quality management - Guidelines for configuration management" - is an ISO guidance standard for applying configuration management across the lifecycle of products and services, from concept to disposal. It provides non-prescriptive guidance to help organizations document, control and trace the physical and functional characteristics of products and services and to coordinate configuration activities with quality management systems.
Key topics and requirements
ISO 10007:2017 outlines a configuration management process and related responsibilities. Major technical topics include:
-
Responsibilities and authorities
- Identify and assign accountability for configuration management activities.
- Define a dispositioning authority to verify necessity, documentation and implementation plans for changes.
-
Configuration management process
- Establish, implement and maintain a coordinated process focused on product/service and regulatory requirements.
- Document the process in a configuration management plan (Annex A gives a proposed structure).
-
Configuration identification
- Define the product/service structure and select configuration items using selection criteria such as life‑cycle stage, safety/criticality, interfaces, procurement and support.
- Establish naming and numbering conventions and ensure traceable, relevant configuration information (requirements, drawings, parts lists, test specs, handbooks, decommissioning/disposal info).
-
Configuration baselines
- Create approved baselines that represent the defined configuration at a point in time and serve as references for further activities.
-
Change control
- Control all changes after initial release. The change control process should include:
- Description, justification and documentation of the change
- Categorization by complexity, resources and schedule
- Evaluation of consequences
- Disposition decision
- Implementation and verification
-
Configuration status accounting and audit
- Maintain formal records and reports of configuration information, change status and implementation.
- Perform configuration audits to verify conformity with baselines and requirements.
Applications and who uses it
ISO 10007:2017 is practical for organizations that need to manage complex products, systems or services, including:
- Quality managers and configuration managers
- Project managers, systems and design engineers
- Procurement, manufacturing and service/support teams
- Suppliers and integrators working across product life cycles
It is scalable - applicable to small or large organizations and to different lifecycle phases - and supports traceability and identification requirements in ISO 9001:2015 (e.g., clause 8.5.2).
Related standards
- ISO 9000:2015 - Quality management systems - Fundamentals and vocabulary (referenced for terms)
- ISO 9001:2015 - Quality management systems (configuration management can help meet identification and traceability requirements)
Keywords: ISO 10007:2017, configuration management, quality management, configuration baseline, change control, configuration management plan, configuration status accounting, ISO 9001:2015.