Back

Define the processing specifications for products and services creation requirements.


CONTROL ID
13523
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Manage the creation of products and services, as necessary., CC ID: 13497

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The purpose of the service design practice is to design products and services that are fit for purpose, fit for use, and that can be delivered by the organization and its ecosystem. This includes planning and organizing people, partners and suppliers, information, communication, technology, and prac… (5.2.13 ¶ 1, ITIL Foundation, 4 Edition)
  • determining the requirements for the products and services; (8.1 ¶ 1(a), ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • functional and performance requirements; (8.3.3 ¶ 1(a), ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • The organization shall plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6, by: (8.1 ¶ 1, ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • specify the characteristics of the products and services that are essential for their intended purpose and their safe and proper provision. (8.3.5 ¶ 1(d), ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • requirements specified by the organization; (8.2.3.1 ¶ 1(c), ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • requirements not stated by the customer, but necessary for the specified or intended use, when known; (8.2.3.1 ¶ 1(b), ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • The customer's requirements shall be confirmed by the organization before acceptance, when the customer does not provide a documented statement of their requirements. (8.2.3.1 ¶ 3, ISO 9001 Quality Management systems - Requirements, Fifth edition 2015-09-15)
  • The processing specifications that are necessary to meet product or service requirements are defined. (PI1.3 ¶ 2 Bullet 1 Defines Processing Specifications, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (with Revised Points of Focus – 2022))
  • The processing specifications that are necessary to meet product or service requirements are defined. (PI1.3 Defines Processing Specifications, Trust Services Criteria)
  • The processing specifications that are necessary to meet product or service requirements are defined. (PI1.3 ¶ 2 Bullet 1 Defines Processing Specifications, Trust Services Criteria, (includes March 2020 updates))