Who (what department) has the responsibility to state “This device is static sensitive and needs to be handled accordingly?” We are manufacturing a module that “everybody knows it is ESDS” But production is pushing back to the ESD coordinator saying " Where is the requirement, if it isn’t written down its not happening!" How should the identification/requirement flow from the component manufacturer through the company to the production area?
I think should be your product or R&D design engineering who come up the product spec. They will know component sensitivity level.
The assembly requirements should be the initial focus. The product designer creates the BOM for the assembly which based on that would create the assembly process ESD requirements. If you are a contract manufacturer, it is almost certainly something spelled out by the customer that you are expected to meet a certain ESD level. If you are an OEM, than likely within your own design requirements you will find this detail. Once you know the required level, you can determine if your manufacturing process is compliant. If you do not have an ESD program for your site, this would also be a good starting point. Determine what the site is capable of and willing to maintain for ESD control. That would at least provide a starting point. Hope this helps.
For where I work, if the module design is done by us, we have it tested to ANSI/ESD/JEDEC JS-001 for HBM and ANSI/ESD/JEDEC JS-002 to determine the withstand voltage. If it is from a supplier, we ask for the data from the module vendor.
The base assumption is that everything is sensitive to ESD until the final product is assembled.