<
From version < 3.1 >
edited by SuperUwe Trueggelmann
on 2024/03/21 22:57
To version < 4.1 >
edited by SuperUwe Trueggelmann
on 2024/03/21 23:48
>
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -6,13 +6,13 @@
6 6  
7 7  = Q2) My card is not fully compliant with all applicable CQM requirements =
8 8  
9 -1. If your card is not fully compliant with all applicable CQM requirements, then you need to follow this procedure:
10 -You complete the qualification test to determine your new product's level of conformity with the applicable CQM requirements. You create a report containing the results, and you fill in the blue section of the applicable product worksheet of the cqmAP form, indicating where your product is compliant and where not.
11 -You contact Mastercard's CSI team to report that you have a new product that is not fully conform with the applicable CQM requirements, and that conclusively you need to obtain a CSI letter for this product. Include the cqmAP and your own qualification report.
12 -The Mastercard CSI team will tell you which information they need to progress your request and help you with the process.
13 -1. List item
14 -1. List item
9 +If your card is not fully compliant with all applicable CQM requirements, then you need to follow this procedure:
15 15  
11 +1. You complete the qualification testing as required by the applicable product worksheet in the cqmAP form to determine your new product's level of conformity with the applicable CQM requirements.
12 +1. You create a report containing the results, and you fill in the blue section of the applicable product worksheet of the cqmAP form, indicating the requirements your product is compliant with, and those where it is not.
13 +1. You contact Mastercard's CSI team to report that you have a new product that is not fully conform with the applicable CQM requirements, and that conclusively you need to obtain a CSI letter for this product. Include the cqmAP and your own qualification report.
14 +1. The Mastercard CSI team will tell you which information they need to progress your request and help you with the process.
15 +
16 16  Once you have obtained the CSI Letter, during a CQM Audit you might need to present it as evidence that you have notified the non-conformity to Mastercard's CSI team and that Mastercard has evaluated the resulting risk.
17 17  
18 18  = Q3) Is the supplier of my components, as considered within the CQM Scheme, a Component Vendor or a Subcontractor? =
... ... @@ -20,5 +20,43 @@
20 20  As considered within CQM:
21 21  A Vendor has control of the product (including Components) the Vendor supplies, and of the related development, qualification, and manufacturing processes.
22 22  A subcontractor is an entity that produces a component primarily according to the instructions received to their customer.
23 -An example for a Vendor is someone who designs an IC, an ICM to package the IC, and an IL that works with the IC, and sells the ICM together with the IL to card manufacturers.
24 -An example for a subcontractor is someone who embeds wire into a sheet of plastic according to a drawing and material specification received from their customer.
23 +An example for a Vendor is Company A who designs an IC, an ICM to package the IC, and an IL that works with the IC, and sells the ICM together with the IL to card manufacturers so they can product cards.
24 +An example for a subcontractor is Company B who embeds wire into a sheet of plastic according to a drawing and material specification received from their customer, for example as a subcontractor to Company A.
25 +
26 += Q4) Do Subcontractors have to have their own CQM Certificate? =
27 +
28 +It depends on what the Subcontractor is providing.
29 +
30 +Currently the suppliers of the following CQM Components are required to have their own CQM Certificate:
31 +
32 +* IC
33 +* ICM
34 +* iacICM
35 +* IL
36 +* CB
37 +* ICC
38 +* iacIL
39 +* IAC
40 +
41 +Note: this list is a DRAFT and not authoritative in any way!
42 +
43 +Companies conducting certain sub processes as a subcontractor, for example providing wafer backside processing services to an ICM Vendor, might not be required to maintain their own CQM Certificate. But it might be beneficial for them and for their customers if they did. See Q5) and Q6)
44 +
45 += Q5) Does a Subcontractor's production have to be CQM audited? =
46 +
47 +Within CQM every production process that is listed in the cqmAP of the related product must undergo a CQM Audit.
48 +
49 +This is independent of the production activity being conducted in a facility owned by the vendor (for example Company A, the owner and seller of an IC, an ICM, and an IL that works with the IC), or in a facility owned by a subcontractor (for example Company B, providing subcontracted wire embedding services to Company A, with the IL having been developed and qualified by Company A, and Company B producing according to antenna drawing and material specification provided by Company A).
50 +
51 +There is no significant difference in the way the IL production processes are assessed, whether they would be conducted in Company A's IL production, or in Company B's.
52 +
53 +In both cases the facility producing the IL will be listed on Company A's CQM Certificate.
54 +
55 += Q6) Does it matter if a Subcontractor is CQM certified? =
56 +
57 +While subcontracted services that are part of the production processes as outlined on the related product worksheets in the cqmAP, may be permitted to be subcontracted to a facility that is not holding their own CQM Certificate, there is a difference how the subcontracted services will be assessed as part of the Vendor's CQM Audit.
58 +
59 +Assuming that Company B provides as a subcontractor wire embedding services to Vendor A, and Vendor A has developed and qualified the IL, and provides Vendor B with an antenna drawing and material specification:
60 +
61 +1. If the subcontractor Company B maintains their own CQM Certificate covering IL production, then during the audit of Vendor A as an IL Vendor, the effort for the auditing of the subcontracted production at Company B may be reduced to an app. 4h remote audit to verify that Company B applies their CQM certified processes to the wire embedding services subcontracted by Company A.
62 +1. If the subcontractor Company B does not maintain their own CQM Certificate covering IL production, then during the audit of Vendor A as an IL Vendor, the subcontracted production at Company B shall be audited as if it were a separate IL manufacturing site of Company A, and hence must undergo a complete CQM Audit, except for the processes conducted by Company A, in our example development and qualification of the IL.
© 2024 TruCert Assessment Services Inc.
V00-01