Chapter 21: Incoming Inspection: Designing Controls That Match Risk, Not Just ISO Boxes

Many Canadian manufacturers inherited incoming inspection practices from the 1980s: inspect 100% of everything, document the count, file the paperwork. By 2026, that's a cost drag without proportional benefit. ISO 9001 Clause 8.6 asks you to control externally provided product—but it doesn't mandate how much or what type of control.

Risk-based incoming inspection is the modern approach. You sample according to supplier history and product criticality. If a critical supplier has shipped 10,000 units over two years with zero defects, and the product is a non-critical fastener, you might inspect only first-article and statistical samples. If a new supplier is sending a complex assembly, you might inspect 100% of the first lot, then reduce based on results.

Setting Up Sampling Plans

A practical sampling plan includes:

1. AQL (Acceptable Quality Level) based on product criticality

   - Critical safety components: AQL 0.65 or ANSI/ASQ Z1.4 Level S (tightened) - Major components: AQL 1.0 or Level N (normal) - Standard/commodity: AQL 2.5 or Level I (inspected) - Low-risk materials: AQL 4.0 or skip inspection

2. Supplier history modifier

   - Supplier with <0.1% historical defect rate: reduce sample size by 50% - Supplier with 1–2% historical defect rate: use normal sample size - New supplier or recent failures: increase to 100% or tightened AQL

3. Lot size and acceptance criteria

- Sample size is determined by lot size and AQL using ANSI/ASQ Z1.4 tables (or equivalent ISO 2859 standard) - For example: Lot of 150 units, normal inspection, AQL 1.0 = sample 20 units, accept if ≤0 defects, reject if ≥2 defects

When to Skip Incoming Inspection Entirely

Yes, you can skip it—but you must document why:

• Supplier holds current IATF 16949 or AS9100 certification (sector-specific standards that demand tighter process control), and you've verified they were audited within 12 months
• Product is supplied with a third-party test report (e.g., mill certs for steel, polymer lab certs) and you've confirmed the testing meets your requirements
• Supplier's process capability study shows Cpk ≥1.67 for all critical dimensions, and you have an agreement to monitor ongoing SPC
• Historical performance over minimum 500 units shows zero defects detected by you or your customer
• Risk assessment confirms the cost and effort of inspection outweighs the benefit (e.g., low-cost fasteners with high redundancy in the product design)

The key is that you document the decision. A typical record looks like this:

That's defensible. "We trust them" is not.

Organizing Your Incoming Function

If you run an incoming inspection area, set it up like this:

1. Receiving checklist: Count, visual condition, documentation (PO match, certs, labels)
2. Quarantine zone: Separate area for items pending inspection
3. Inspection station: With tools (calipers, gauges, test equipment) matched to product types
4. Hold area: For borderline items pending lab or supplier confirmation
5. Acceptance/rejection decision point: Clear authority and escalation path
6. Records: Inspection reports, test data, lot traceability

Train your receiving staff on the sampling plans and acceptance criteria. Ambiguity leads to inconsistency, which auditors notice.