Based on the scenario provided, there is evidence of nonconformity with the requirements defined in:
C: Clause 7.5.1 Documented information - General: The scenario indicates that there is no formal process for informing users about updates to the SWIFT database, which suggests a lack of control over documented information. This could lead to users being unaware of important changes and not using the latest version of the software, which is required by the quality management system1.
E: Clause 7.5.3 Control of documented information: The Operations Director's approach to updating the SWIFT database and the lack of communication to users about these updates indicate that the documented information is not adequately controlled. Allowing users to revert to earlier versions of the software at their discretion further suggests that the organization does not have a proper mechanism in place to ensure the integrity and suitability of documented information2.
These clauses are part of the ISO 9001:2015 standard, which requires organizations to have a systematic approach to controlling and managing documented information as part of their quality management system.
The scenario described shows a casual approach to managing critical software updates, which could affect the organization's ability to consistently meet customer and regulatory requirements.