All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of the requester.
ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the different types of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.
For an explanation on the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see the following URL: www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 176, Quality management and quality assurance, Subcommittee SC 2, Quality systems.
This third edition cancels and replaces the second edition (ISO 10007:2003), which has been technically revised. This edition aligns ISO 10007 with ISO 9000:2015 and ISO 9001:2015.
Introduction
The purpose of this document is to enhance common understanding of the subject, to promote the use of configuration management and to assist organizations applying configuration management to improve their performance.
This document outlines the responsibilities and authorities before describing the configuration management process that includes configuration management planning, configuration identification, change control, configuration status accounting and configuration audit.
Configuration management is a management activity that applies technical and administrative direction over the life cycle of a product and service, its configuration identification and status, and related product and service configuration information.
Configuration management documents the product or service configuration. It provides identification and traceability, the status of achievement of its physical and functional requirements, and access to accurate information in all phases of the life cycle.
Configuration management can be implemented based on the size of the organization and the complexity and nature of the product or service and reflects the needs of specific lifecycle phases.
Configuration management can be used to meet the product and service identification and traceability requirements specified in ISO 9001:2015, 8.5.2.
INTERNATIONAL STANDARDISO 10007:2017 (E)
Quality management — Guidelines for configuration management
1Scope
This document provides guidance on the use of configuration management within an organization. It is applicable to the support of products and services from concept to disposal.
2Normative references
The following documents are referred to in the text in such a way that some or all of their content constitutes requirements of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.
ISO 9000:2015, Quality management systems — Fundamentals and vocabulary
3Terms and definitions
For the purposes of this document, the terms and definitions given in ISO 9000 and the following apply.
ISO and IEC maintain terminological databases for use in standardization at the following addresses:
interrelated functional and physical characteristics of a product or service defined in configuration information (3.5)
3.2
configuration baseline
approved configuration information (3.5) that establishes the characteristics of a product or service at a point in time that serves as reference for activities throughout the life cycle of the product or service
3.3
configuration item
entity within a configuration (3.1) that satisfies an end use function
3.4
configuration status accounting
formalized recording and reporting of configuration information (3.5), the status of proposed changes and the status of the implementation of approved changes
3.5
configuration information
requirements for product or service design, realization, verification, operation and support
Bibliography
[1] ISO 9001:2015, Quality management systems — Requirements
[2] ISO 9004, Managing for the sustained success of an organization — A quality management approach
[3] ISO 10006, Quality management systems — Guidelines for quality management in projects