IRIS体系审核时的评分方法Total questions:255，including 12 K.O.questions 总共255个问题，其中包括12个K.O.问题 1.Knock-out（K.O.）questions关键性问题 2.Open questions which are assessed through a four level approach for assessing the level of maturity of processes and the grade/extension of implementation（Optimized，Qualified，Defined，Poor） 开放式问题：通过在审核时评分过程的成熟程度和实施的程度，设定了四种不同级别（优秀，合格 3.Closed questions（Yes/No）without progressive maturity levels 封闭式问题：只有满足/不满足，没有递进的成熟度级别 Note：Questions indicated as ‘Non applicable’（'NA'）are not assessed and relevant justification shall be documented。
注：如果问题被指明为“不适用”（即NA），这些问题将不会被审核，但要说明“不适用”的原因，并被形成文件 knock out questions（K.O.）关键性问题（K.O.问题）： A detailed pre assessment of the Knock Out（K.O.）questions shall be carried out to ascertain the readiness to undertake the audit 对K.O.问题应逐条进行预审核，以确定能否开始正式的审核 Fulfilment is considered as a prerequisite for IRIS certification 满足K.O.问题的要求是开始IRIS认证的前提条件 K.O. questions are not scored K.O.问题不打分 When a K.O.requirement is not met，the whole audit failsThe Certification process has to start with a new request（covering the full audit process again）。
一旦K.O.问题没有满足，将不能通过审核组织需要重新递交认证申请（审核过程将重新覆盖所有要素） K.O.问题一共12个，其中2个只适用于信号系统的公司 Quality Management System - General requirements 质量管理体系-通用要求 In case of transfer or outsourcing of activity with the execution of a contract does a transfer procedure including：feasibility study，nsk analysis，planning，communication to customer and FALs to the appropriate level exist？ 当合同执行过程中有转让或者外包的情况发生，是否有转让的程序？其内容包括：可行性研究，风险分析，策划，客户沟通和首件检验，这些内容有在适当的水平上吗？ Design and development（For Signalling only）设计和开发（仅适用于信号系统） Does the organization apply the principles in developing high integrity System in line with the CENELEC standard or other agreed equivalent models？The software design process must explicitly implement the requirements of EN 50128 related to safety integrity of the intended scope of the IRIS certificate。
组织在开发高集成系统时是否应用在CENELEC标准或其它协议的等效标准？软件开发过程必须实施EN50128的要求（与IRIS证书范围的安全集成有关时） CENELEC-European committee for electro-technical standardization 欧洲电工技术标准委员会 Design and development inputs 设计和开发输入 Does the organization ensure new technologies / new products are validated before being introduced in a customer project？ 组织是否确保新技术/新产品在引入顾客项目前得到确认？ Design and development validation 设计和开发确认 Does the organization ensure that reports，calculation，test results，etc，demonstrate that the product definition meets the specification requirements for all the relevant operational conditions？ 组织是否确保报告、计算、测试结果等能够展示产品定义满足所有相关的运行条件的规范要求？ Design approval（For Signalling only）设计批准（仅仅适用于信号系统） Does the organization provide a documented procedure defining the safety case and approval in line with this standard？组织是否准备了文件化的程序，用于按照这个标准要求明确安全情况和批准？ Validation of processes for production and service provision 生产和服务提供过程的确认 Are special processed managed according to the contractual requirements？特殊过程是否按照合同要求进行管理? Project Management 项目管理 Does the organization implement a documented project management（PM）approach or System，or new product development process addressing the applicable areas of PM，describing roles and responsibilities，integrating the whole functions of the organization in a multidisciplinary team？ 组织是否实施项目管理方法或体系，或新产品开发过程，涉及项目管理的使用领域，描述职责和任务，整合组织内所有相关职能形成多功能小组？ Quality management 质量管理 Does the organization ensure that the process is in place to manage project deliverables？ 组织是否确保有过程来管理项目是可以交付的？ Change management 变更管理 Are verification，validation AND APPROVAL，activities defined，to ensure compliance with customer requirements BEFORE IMPLEMENTATION？ 在实施前，是否定义了验证、确认和批准活动，以确保符合顾客要求？ First article inspection（FAI）首件检验 Does the organizations System provide a documented procedure defining inspection，verification and documentation of a representative item from the first serial production run of a new part or following any subsequent change that invalidates the previous first article inspection result？ Note：if the product is a one-off or a software，FAI is meant as validation 组织的体系是否有文件化的程序，规定在新零件首次批量生产时（或任何随后的会导致先前的首件检验结果失效的变更引入时）代表性零件的检验、验证和文件化？ 注：如果产品仅是一个或是软件,FAI就是指得是确认。
Commissioning / Customer service 测试/客户服务 Does the organization provide a process for field services/Do field processes provide：actions to be taken where problems are identified after delivery，including investigation，reporting activities and actions or service Information 组织是否有现场服务的过程？现场服务过程是否提供，在交付后，当发现问题时，要采取相应的措施，包括调查，报告活动和服务信息的措施？ Control of nonconforming processes 不合格过程的控制 In the event of business management process variation，does the organization have a process in place to； a）Identify and record the variation，and if the business management process is non-conform to take appropriate action tot correct the nonconforming process？ b）Evaluate whether th。