An approval/release must be issued for all out sourced products and services before they are used in serial production.
In the case of modules (unless otherwise agreed) the supplier has full responsibility monitoring the quality of all the individual components.
Evidence must therefore be provided of comprehensive change management, from the customer to the subsupplier.
"
.