ISO 9001 Systems

ISO 9001 Standard - ISO 9001:2008 Standards

2011-12-24T16:04:00.001-08:00

Management Review IN ISO 9001 Standard

2010-06-27T03:17:00.000-07:00

One of the most important factors in determining the success of an ISO 9001 implementation is management commitment and management understanding of what makes a good quality systems. Our turnkey Quality Management System (QMS) gives you everything you need to educate your entire company from top to bottom.

Management review is one of the key elements to building a sustainable quality system. To do this, management must be committed. This means that the management must do more than just say they are committed, they must allocate the resources to make sure that the company can continuously improve quality. Most quality systems fail from the top down! That is why external auditor almost always review the management review documentation every audit. External ISO 9001 auditors look for this commitment by evaluating the management review records. Management reviews should focus on both the quality of the products and the quality of the QMS. In general, it is very simple to maintain compliance of the management review portion of the standard. It can be done with a simple notebook that is maintained as a quality record. The Management review procedure includes a list of documentation that should be included in management review meeting. Management reviews should be done a least once per year and auditors like to see them quarterly.

Under ISO 9001, executive management has defined responsibilities. Although most of the work required to implement and maintain ISO certification is done below the executive level, ISO requires involve of personnel at the top of the organization.

It is the leader of an organization that set the goals and objectives for the quality of the company. It is also the leader that assigns resources (responsibility and authority) throughout the organization. Because of this, the leaders must be kept aware of the status of the quality system and product/service quality so they make good decision.
Much of how the company accomplishes these tasks is covered in the quality manual. Here are the 8 areas that should be address in the quality system to assure compliance to the ISO standard.

Top Management must:

Show A Commitment To The Customer

This requirement includes maintain records showing their commitment to the a customer focus, the quality system and the continuous improvement system. The use of a customer survey program is an excellent way to meet the ISO requirements for a customer focus. It is also an excellent way to keep in touch with your customers.

Make Quality Important

This includes communicating to the organization the importance of meeting the customer regulatory, legal needs as well as their produce or service needs (customer focus). Training and posting quality information around the building can do this.

Establish A Quality Policy

This should include a concise quality statement in conjunction with quality goals and a quality manual. The policy verbiage should include a commitment to continuous improvement. This information must be communicated to and understood by the entire organization.

Establish, Monitor And Update Quality objectives

These objectives should be measurable and should be relevant to all levels of the company. I recommend that they be publicly posted where everyone can see them and their status may also be posted.

Assign Resources

Ensure that resources are available to achieve the quality goals. This is the area where many companies do not meet the requirements but it is very hard to audit this general statement. Resources should be identified and planned. Planning includes manuals, procedure, work instructions and quality plans.

Assign Responsibility And Authority

Ensure that responsibilities and authorities are assigned and communicated to individuals. Responsibilities can be assigned as part of the personnel records ( see training summary sheet). Having authority means that the individual must be empowered to make changes.

Designate A Management Representative

This person will report the QMS status at periodic management reviews and promote awareness of the importance of meeting the customers needs. This is usually the quality, engineering or production manager.

Conduct Periodic Management Reviews

Management review meetings should include inputs from audits, customer feedback, process performance analysis, preventive and corrective actions system, follow-up from previous management meetings and areas for improvement. The output from the management reviews should include resource assignments, action targeting improvement of the products, processes and QMS.

The records for the management review are frequently audited so I recommend keeping a organized notebook with tabs for each management review. The creation of a check sheet (listing all the reports to be shown to top management) will make this periodic task simple to maintain. The check sheet can also be used to keep track of attendance and log feedback that is generated during the meeting.

FAQs On ISO 9001 Standards

2010-05-05T05:55:00.000-07:00

FAQs On ISO 9001 Standards

What is ISO?

The International Organization for Standardization (ISO) was established in 1947 and is (currently) an association

of approximately 157 members, which each represent their own country. ISO employs a system of Technical

Committees, Sub-committees and Working Groups to develop International Standards. Besides the National

Standards Bodies, ISO permits other international organizations that develop standards to participate in its work,

by accepting them as Liaison members. ISO works in accordance with an agreed set of rules of procedure, the

ISO/IEC Directives, which also include requirements on the presentation of standards.

The International Organization for Standardization (ISO) was established in 1947 and is (currently) an association

of approximately 157 members, which each represent their own country. ISO employs a system of Technical

Committees, Sub-committees and Working Groups to develop International Standards. Besides the National

Standards Bodies, ISO permits other international organizations that develop standards to participate in its work,

by accepting them as Liaison members. ISO works in accordance with an agreed set of rules of procedure, the

ISO/IEC Directives, which also include requirements on the presentation of standards.

What are the ISO 9000 standards ?

The ISO 9000 standards are a collection of formal International Standards, Technical Specifications, Technical

Reports, Handbooks and web based documents on Quality Management. There are approximately 25 documents

in the collection altogether, with new or revised documents being developed on an ongoing basis.

(It should be noted that many of the International Standards in the ISO 9000 family are numbered in the ISO

10000 range.)

Who is responsible for developing the ISO 9000 standards?

ISO Technical Committee (TC) number 176 (ISO/TC 176), and its Sub-committees, are responsible for the

development of the standards. The work is conducted on the basis of “consensus” among quality and industry

experts nominated by the National Standards Bodies, representing a wide range of interested parties.

Where can copies of the standards be obtained?

Copies of the standards may be purchased from your National Standards Body or ISO 9000 store like http://www.iso9001store.com

Where can copies of the supporting ISO 9000 guidance notes or other documents be found ?

Copies of the ISO 9000 Introduction and Support Package modules:

- Guidance on ISO 9001:2008 Sub-clause 1.2 ‘Application’

- Guidance on the Documentation Requirements of ISO 9001:2008

- Guidance on the Terminology used in ISO 9001 and ISO 9004

- Guidance on the Concept and Use of the Process Approach for management systems

- Guidance on ‘Outsourced Processes’

as well as details of the Quality Management Principles can be found at: www.iso.org/tc176/sc2

Copies of the ISO 9001 Auditing Practices Group guidance notes.

Where can information be obtained on the ISO 9001 standards?

There are a number of sources of information on the ISO 9000 quality management system standards, including

ISO’s web site (www.iso.org), which carry information on the standards. Your National Standards Body should be

able to provide copies of the standards, and registrars/certification bodies will be able to provide guidance on

registration arrangements.

Why are the standards being revised?

ISO’s formal review process:

- Requires continual review to keep standards up to date. Must be initiated within 3 years of publication of a standard.

User inputs from:

- A global user questionnaire/survey

- A market Justification Study

- Suggestions arising from the interpretation process

- Opportunities for increased compatibility with ISO 14001

- The need for greater clarity, ease of use, and improved translation

Current trends:

- Keeping up with recent developments in management system practices.

Who is responsible for revising the standards?

The revision process is the responsibility of ISO Technical Committee no.176, Sub-committee no.2 (ISO/TC 176/SC 2) and is conducted on the basis of consensus among quality and industry experts nominated by ISO Member bodies, and representing all interested parties.

When will the revised standards be available?

The revised quality management system standards (ISO 9000, 9001 and 9004) are scheduled as follows:

- ISO 9000:2005 already published – no major changes expected for 2009

- Current plan is for small changes to ISO 9001 (an “amendment”) to be published in November 2008.

- More significant changes are planned for ISO 9004 (a “revision”) to be published in mid 2009.

How much is the implementation of the new standard going to cost?

One of the goals of ISO/TC 176/SC 2 is to produce standards that will minimize any potential costs during a smooth implementation. Any additional costs may be considered as a value-adding investment. A key factor in the development of ISO 9001:2008 was to limit the impact of changes on users.

Will my organization have to re-write all its documentation?

No. ISO 9001:2008 doesn’t introduce major changes to the requirements, when compared to ISO 9001:2000. However, to benefit from the changes, we suggest you get acquainted with the new version of the standard and the clarifications introduced. If, during your analysis of the clarifications you find there are differences from your current interpretation of ISO 9001:2000, then you should analyse the impact on your current documentation and make the necessary arrangements to update it. It is intended that the amendment of ISO 9001 will have minimal or no impacts on documentation.

Will the revised standards address financial issues?

Financial issues are not addressed in ISO 9001:2008, which is a requirements standard. The ISO 10014:2006 and ISO 9004:2000, Guidelines for performance improvements standards will emphasize the financial resources needed for the implementation and improvement of a quality management system.

What are the benefits of the revised standards?

For ISO 9001:2008 the major benefits are:

- Simple to use

- Clear in language

- Readily translatable and easily understandable

- Compatibility with other management systems such as ISO 14001.

For ISO 9004:

- Facilitates improvement in users’ quality management systems.

- Provides guidance to an organization for the creation of a quality management system that:

- creates value for its customers, via the products it provides

- creates value for all other interested parties

- balances all interested-party viewpoints.

- Provides guidance for managers on leading their organization towards sustained success.

- Forward compatibility to allow organizations to build on existing quality management systems.

What are the main changes in ISO 9001:2008?

ISO 9001:2008 has been developed in order to introduce clarifications to the existing requirements of ISO 9001:2000 and changes that are intended to improve compatibility with ISO 14001:2004. ISO 9001:2008 does not introduce additional requirements nor does it change the intent of the ISO 9001:2000 standard.

Certification to ISO 9001:2008 is not an “upgrade”, and organizations that are certified to ISO 9001:2000 should be afforded the same status as those who have already received a new certificate to ISO 9001:2008

What are the main benefits to be derived from implementing an ISO 9000 quality management system?

The ISO 9000 standards give organizations an opportunity to increase value to their activities and to improve their performance continually, by focusing on their major processes. The standards place great emphasis on making quality management systems closer to the processes of organizations and on continual improvement. As a result, they direct users to the achievement of business results, including the satisfaction of customers and other interested parties.

The management of an organization should be able to view the adoption of the quality management system standards as a profitable business investment, not just as a required certification issue.

Among the perceived benefits of using the standards are:

- The connection of quality management systems to organizational processes

- The encouragement of a natural progression towards improved organizational performance, via:

- the use of the Quality Management Principles

- the adoption of a “process approach”

- emphasis of the role of top management

- requirements for the establishment of measurable objectives at relevant functions and levels

- being orientated toward “continual improvement” and “customer satisfaction”, including the monitoring of information on “customer satisfaction” as a measure of system performance.

- measurement of the quality management system, processes, and product

- consideration of statutory and regulatory requirements.

- attention to resource availability

How will the implementation of the amended standard help my organization to improve its efficiency?

ISO 9001:2008 aims at guaranteeing the effectiveness (but not necessarily the efficiency) of the organization. For improved organizational efficiency, however, the best results can be obtained by using ISO 9004 in addition to ISO 9001:2008. The guiding quality management principles are intended to assist an organization in continual improvement, which should lead to efficiencies throughout the organization.

What benefits are there to an organization implementing ISO 9004 ?

If a quality management system is appropriately implemented, utilizing the eight Quality Management Principles, and in accordance with ISO 9004, all of an organization’s interested parties should benefit. For example:

Customers and users will benefit by receiving the products (see ISO 9000:2005, Fundamentals and vocabulary) that are:

- Conforming to the requirements

- Dependable and reliable

- Available when needed

- Maintainable

People in the organization will benefit by:

- Better working conditions

- Increased job satisfaction

- Improved health and safety

- Improved morale

- Improved stability of employment

Owners and investors will benefit by:

- Increased return on investment

- Improved operational results

- Increased market share

- Increased profits

Suppliers and partners will benefit by:

- Stability

- Growth

- Partnership and mutual understanding

Society will benefit by:

- Fulfilment of legal and regulatory requirements

- Improved health and safety

- Reduced environmental impact

- Increased security

Are the standards compatible with national quality award criteria?

The standards are based on 8 Quality Management Principles, which are aligned with the philosophy and objectives of most quality award programs. These principles are:

- Customer focus,

- Leadership,

- Involvement of people,

- Process approach,

- System approach to management,

- Continual improvement,

- Factual approach to decision making, and

- Mutually beneficial supplier relationships.

ISO 9004 recommends that organizations perform self-assessments as part of their management of systems and processes, and includes an annex giving guidance on this approach. This is similar to many quality awards programmes.

Why is the requirement for monitoring “customer satisfaction” included in ISO 9001?

“Customer satisfaction” is recognized as one of the driving criteria for any organization. In order to evaluate if a product meets customer needs and expectations, it is necessary to monitor the extent of customer satisfaction.

Improvements can be made by taking action to address any identified issues and concerns.

Can the standards improve “customer satisfaction”?

The quality management system details that are described in the standards are based on Quality Management Principles that include the “process approach” and “customer focus”. The adoption of these principles should provide customers with a higher level of confidence that products will meet their needs and increase their satisfaction.

What is meant by “continual improvement”?

Continual improvement is the process focused on continually increasing the effectiveness and/or efficiency of the organization to fulfil its policies and objectives. Continual improvement (where “continual” highlights that an improvement process requires progressive consolidation steps) responds to the growing needs and expectations of the customers and ensures a dynamic evolution of the quality management system.

What is a process?

Any activity or operation, which receives inputs and converts them to outputs, can be considered as a process. Almost all activities and operations involved in generating a product or providing a service are processes. For organizations to function, they have to define and manage numerous inter-linked processes. Often the output from one process will directly form the input into the next process. The systematic identification and management of the various processes employed within an organization, and particularly the interactions between such processes, may be referred to as the ‘process approach’ to management.

What is the “process approach”?

The “process approach” is a way of obtaining a desired result, by managing activities and related resources as a process. The “process approach” is a key element of the ISO 9000 standards. For further guidance, please refer to the ISO 9000 Introduction and Support Package module: Guidance on the Concept and Use of the Process Approach for management systems.

Can the “process approach” be applied to other management systems?

Yes. The “process approach” is a generic management principle, which can enhance an organization’s effectiveness and efficiency in achieving defined objectives.

How can the PDCA cycle be used in the “process approach”?

The PDCA cycle is an established, logical, method that can be used to improve a process.

This requires:

(P) planning (what to do and how to do it),

(D) executing the plan (do what was planned),

(A) act to improve the process (how to improve next time).

The PDCA cycle can be applied within an individual process, or across a group of processes.

Can any organization apply the “process approach”?

Yes. Many organizations already apply a “process approach” without recognizing it. They could achieve additional benefits by understanding and controlling it.

Why should an organization apply the “process approach”?

By applying the “process approach” an organization should be able to obtain the following types of benefits:

- The integration and alignment of its processes to enable the achievement of its planned results.

- An ability to focus effort on process effectiveness and efficiency.

- An increase in the confidence of customers and other interested parties as to the consistent performance of the

organization.

- Transparency of operations within the organization.

- Lower costs and shorter cycle times through effective and efficient use of resources.

- Improved, consistent and predictable results.

- The identification of opportunities for focused and prioritized improvement initiatives.

- The encouragement and involvement of people, and the clarification of their responsibilities.

- The elimination of barriers between different functional units and the unification of their focus to the objectives

of the organization.

- Improved management of process interfaces.

What is meant by the “sequence” of processes and their “interactions”?

The “sequence” of processes shows how the processes follow, or link, to each other to result in a final output.

For example, the output from one process may become the input of the next process or processes.

The “interactions” show how each process affects or influences one or more of the other processes. For example,

the monitoring or controlling of a process may be established in a separate process.

How can the processes in an organization be determined?

Identify the organization’s intended outputs, and the processes needed for achieving them. These will need to

include processes for Management, Resources, Realization and Measurement and Improvement.

- Identify all process inputs and outputs, along with the suppliers and customers, who may be internal or

external.

- Identify the sequence and interactions of the processes.

Should an organization define and document all its processes?

The main purpose of documentation is to enable the consistent and stable operation of an organization’s

processes.

Although statutory, standards’ or customer requirements may require certain documentation, there is no defined

“catalogue”, or list of processes that has to be documented in ISO 9001, apart from the 6 indicated ones.

The organization should determine which processes are to be documented on the basis of:

- The size of the organization and type of its activities,

- The complexity of its processes and their interactions,

- The criticality of the processes and

- Availability of competent personnel.

A number of different methods can be used to document processes, such as graphical representations, written

instructions, checklists, flow charts, visual media, or electronic methods.

How much detail is required in process documentation?

The extent of detail is likely to depend upon factors such as:

- the size of an organisation and its types of activities,

- the complexity of its processes and their interactions, and

- the competence (level of education, training, skills and experience) of its personnel.

What is the difference between a “process” and a “procedure”?

A “process” may be explained as a set of interacting or interrelated activities, which are employed to add value. A

“procedure” is a method of describing the way or How in which all or part of that process activities shall/should be

performed.

ISO 9000:2005 defines a procedure as a “specified way to carry out an activity or a process”, which does not

necessarily have to be documented.

An organization has a well-established set of procedures. Can these procedures be used to help

describe its processes?

Yes, if the procedures describe inputs and outputs, appropriate responsibilities, controls and resources needed to satisfy customer requirements.

What documentation is required by ISO 9001?

ISO 9001:2008 refers specifically to only 6 documented procedures; however, other documentation (including more documented procedures not specifically mentioned in ISO 9001:2008) may be required by an organization, in order to manage the processes that are necessary for the effective operation of the quality management system. This will vary depending on the size of the organization, the kind of activities in which it is involved and their complexity. For further guidance, please also refer to the ISO 9000 Introduction and Support Package module “Guidance on the Documentation Requirements of ISO 9001:2008″

What does an organization need to do to comply with ISO 9001?

When initially starting to use ISO 9001, an organization should familiarize its personnel with the Quality Management Principles, analyze the standards (especially ISO 9000 and ISO 9004), and consider how their guidance and requirements may affect your activities and related processes. If it then wishes to proceed to registration/certification, it should perform a gap analysis against the requirements of ISO 9001 to determine where its current quality management system does not address the applicable ISO 9001:2008 requirements, before developing and implementing additional processes to ensure that compliance will be achieved.

What will happen to the 2000 version of ISO 9001?

ISO 9001:2008 will supersede ISO 9001:2000 However, noting the IAF/ISO-CASCO/ISO TC176 agreement that accredited certification to the 2000 edition should remain possible for up to 2 years after the publication of ISO 9001:2008, copies of the 2000 edition will still be available on request from ISO and the national standards bodies during that period, and possibly for even longer.

Can organizations remain certified/registered to the 2000 version?

Yes. Certification to ISO 9001:2008 is not an “upgrade”, and organizations that are certified to ISO 9001:2000 should be afforded the same status as those who have already received a new certificate to ISO 9001:2008. However, certificates to ISO 9001:2000 will only remain valid until 2 years after the publication of ISO 9001:2008. Contact your certification/registration body to get details on the certificates transition process.

What will happen to the other standards and documents in the current (2000) ISO 9000 family?

The four primary standards of the current ISO 9000 family are the following:

- ISO 9000:2005 already published – no major changes expected for 2009

- ISO 9001:2000 to be superseded by ISO 9001:2008

- More significant changes are planned for ISO 9004 with a planned publication date of late 2009.

- ISO 19011:2002 is currently beginning the revision process, with a new version expected in 2011.

The other standards and documents will be reviewed and updated as necessary

Preparing ISO 9000 Standards Quality Manual

2010-04-05T06:08:00.001-07:00

Preparing ISO 9000 Standards Quality Manual

ISO 9001 Quality Management System Requirements

2010-04-05T06:05:00.000-07:00

ISO 9001 Quality Management System Requirements

Quality Management System Requirements
The ISO 9001:2008 standard is meant to be generic and applicable to all kinds of organizations. Therefore, organizations from both the public and private sectors, including non-governmental organizations can benefit from the ISO 9001 quality management system model, regardless of whether they are small, medium or large organizations. The immediate benefit that can be realized from the implementation of ISO 9001 is the collective alignment of the activities of internal processes that are focused towards the enhancement of customer satisfaction which will result in many other benefits, whether internal or external. The magnitude of these benefits are determined by how effective the processes are in achieving its objectives.

Document Review In ISO 9000 Standards

2010-04-05T06:03:00.000-07:00

Document Review In ISO 9000 Standards
The ISO 9000 Standard requires that documents be reviewed.
Previously the implication was that the review was a check by potential users that the document was fit for purpose before it was offered for approval. It could be construed that for a document to receive approval it must be checked and therefore review and approval in this context are one and the same and the requirement is in this instance enhanced rather than relaxed.
A review is another look at something. Therefore document review is a task that is carried out at any time following the issue of a document.
This requirement responds to the Continual Improvement principle.
Reviews may be necessary when:
- Taking remedial action (i.e. Correcting an error)
- Taking corrective action (i.e. Preventing an error recurring)
- Taking preventive action (i.e. Preventing the occurrence of an error)
- Taking maintenance action (i.e. Keeping information current)
- Validating a document for use (i.e. When selecting documents for use in connection with a project, product, contract or other application)
- Taking improvement action (i.e. Making beneficial change to the information)

Reviews may be random or periodic. Random reviews are reactive and arise from an error or a change that is either planned or unplanned. Periodic reviews are proactive and could be scheduled once each year to review the policies, processes, products, procedures, specification etc. for continued suitability. In this way obsolete documents are culled from the system. However, if the system is being properly maintained there should be no outdated information
available in the user domain. Whenever a new process or a modified process in installed the redundant elements including documentation and equipment should be disposed of.

Origin Of ISO 9001 Standards

2010-01-16T23:53:00.000-08:00

Origin Of ISO 9001 Standards

The story of ISO 9001 Standards is a story of standards, methods and regulation. The brief
history that follows is in no way comprehensive but is intended to illustrate
four things:
1. that ISO 9001 standards are an ancient concept that survived several millennia;
that a means of verifying compliance often follows the setting of
standards;
2. that the formalizing of working practices is centuries old and seen as a
means to consistently meet standards;
3. that market regulation (relative to the standard of goods and services) has
been around for centuries for the protection of both craftsmen and
traders.
4. ISO 9001 is a symptom of practices that were around centuries before anyone
coined the term quality management. It is in some respects a natural
progression that will continue to evolve. The story is told from a British
viewpoint.

ISO 9001 grew out of BS 5750, a standard published by the British Standards Institution (BSI) in 1979. Initially, it was used only in manufacturing industries. ISO 9000 is now employed across a variety of other types of businesses. It is a set of international standards of quality management systems. ISO 9000 has been accepted by more than 100 countries as their national quality assurance standard by the end of 1997.
The history of ISO 9000 Standards dates back to Mil-Q-9858a, the first quality standard for military procurement established in 1959 by the US. By 1962, NASA (National Aeronautics and Space Administration) developed its quality system requirements for suppliers. In 1965, NATO (North Atlantic Treaty Organization) accepted the AQAP (allied quality assurance procedures) specifications for the procurement of equipments.
During the 1970s, BSI published BS 9000 (the first UK standard for quality assurance) and BS 5179 (guidelines for quality assurance) norms. In 1979, it created BS 5750, a series of standards for use by manufacturing companies. They were enforced through assessments and audits. In 1988, ISO (International Standards Organization) adopted the BS 5750 standard without changes and published it globally under the name ISO 9000. The ISO adopted this standard with a view to create an international definition of the necessary characteristics of a quality system for all businesses, regardless of industry. In 1994, the ISO revised the ISO 9000 standard and published it globally.
In the beginning, ISO 9000 was implemented exclusively by large companies. But by mid-1990s, small and mid-sized companies began to increasingly implement these standards. In the United States, the total number of registrations increased from a little more than 2,200 in 1993 to more than 17,000 in 1998. Of these 17,000 registrations, almost 60 percent were held by businesses with annual sales of $100 million or less.

What is ISO 9001 Standards?

2010-01-16T23:49:00.000-08:00

What is ISO 9001 Standards?
ISO 9001 is a set of interrelated ideas, principles and rules and could therefore be considered a system in the same way that we refer to the metric system or the imperial system of measurement. ISO 9001 is both an international standard and until year 2008, was a family of some 20 international standards. As a standard, ISO 9001 was divided into 4 parts with part 1 providing guidelines on the selection and use of the other standards in the family. The family of standards included requirements for quality assurance and guidelines on quality management. Some might argue that none of these are in fact standards in the sense of being quantifiable. The critics argue that the standards are too open to interpretation to be standards anything that produces such a wide variation is surely an incapable process with one of its primary causes being a series of objectives that are not measurable. However, if we take a broader view of standards, any set of rules, rituals, requirements, quantities, targets or behaviours that have been agreed by a group of people could be deemed to be a standard. Therefore by this
definition, ISO 9001 is a standard.

Outsourced Processes In ISO 9001 Standards

2009-10-16T00:57:00.003-07:00

Outsourced Processes In ISO 9001 Standards
One of the changes in ISO 9001:2008 is clarification of the role of outsourced processes in a quality management system. Guidance on ‘Outsourced processes’ helps clarify the intent and shows the linkage between Clause 4.2, where outsourced processes appear, and the purchasing controls in clause 7.4.An outsourced process is a process that the organization needs for its quality management system and is performed by an external party. This party could be another company, a corporate service, another division, etc.The organization needs to ensure the outsourced process is conducted in accordance with ISO 9001:2008 and other requirements of the quality management system. This brings in the purchasing controls of 7.4. The service may not be purchased in the traditional sense of a monetary transaction. The guidance document explains that the controls in clause 4.2 and 7.4 apply. For example, a “no charge” service from a corporate head office requires documentation of supplier selection and, most importantly, control.The guidance document addresses two important cases and gives guidance on the appropriate level of control. The cases are:• The organization has the competence and ability to carry out a process, but chooses to outsource it (for commercial or other reasons).• The organization does not have the competence to carry out the process itself, and chooses to outsource it.

Outsourced Processes In ISO 9001 Standards

2009-10-16T00:57:00.001-07:00

Demonstrating conformity with ISO 9001:2008

2009-10-16T00:56:00.000-07:00

Demonstrating conformity with ISO 9001:2008
For organizations wishing to demonstrate conformity with the requirements of ISO 9001:2008, for the purposes of certification/registration, contractual, or other reasons, it is important to remember the need to provide evidence of the effective implementation of the QMS.Organizations may be able to demonstrate conformity without the need for extensive documentation.To claim conformity with ISO 9001:2008, the organization has to be able to provide objective evidence of the effectiveness of its processes and its quality management system. Clause 3.8.1 of ISO 9000:2005 defines “objective evidence” as “data supporting the existence or variety of something” and notes that “objective evidence may be obtained through observation, measurement, test, or other means.”Objective evidence does not necessarily depend on the existence of documented procedures, records or other documents, except where specifically mentioned in ISO 9001:2008. In some cases, (for example, in clause 7.1(d)Planning of product realization, and clause 8.2.4
Monitoring and measurement of product), it is up to the organization to determine what records are necessary in order to provide this objective evidence.Where the organization has no specific internal procedure for a particular activity, and this is not required by the standard, (for example, clause 5.6 Management Review), it is acceptable for this activity to be conducted using as a basis the relevant clause of ISO 9001:2008. In these situations, both internal and external audits may use the text of ISO 9001:2008 for conformity assessment purposes.

Records required by ISO 9001:2008

2009-10-16T00:52:00.000-07:00

Records required by ISO 9001:2008
Clause Record required5.6.1 Management reviews6.2.2 e) Education, training, skills and experience7.1 d) Evidence that the realization processes and resulting product fulfil requirements7.2.2 Results of the review of requirements related to the product and actions arising from the review7.3.2 Design and development inputs relating to product requirements7.3.4 Results of design and development reviews and any necessary actions7.3.5 Results of design and development verification and any necessary actions7.3.6 Results of design and development validation and any necessary actions7.3.7 Results of the review of design and development changes and any necessary actions7.4.1 Results of supplier evaluations and any necessary actions arising from the evaluations7.5.2 d) As required by the organization to demonstrate the validation of processes where the resulting output cannot be verified by subsequent monitoring or measurement7.5.3 The unique identification of the product, where traceability is a requirement7.5.4 Customer property that is lost, damaged or otherwise found to be unsuitable for use7.6 a) Basis used for calibration or verification of measuring equipment where no international or national measurement standards exist7.6 Validity of the previous measuring results when the measuring equipment is found not to conform to requirements7.6 Results of calibration and verification of measuring equipment8.2.2 Internal audit results and follow-up actions8.2.4 Indication of the person(s) authorizing release of product.8.3 Nature of the product nonconformities and any subsequent actions taken, including concessions obtained8.5.2 e) Results of corrective action8.5.3 d) Results of preventive action

ISO 14001 ENVIRONMENTAL ASPECTS AND IMPACTS

2009-10-12T06:34:00.004-07:00

ISO 14001 Environmental Aspects And Impacts
The fundamental purpose of the EMS is to control and reduce the environmental impacts of your facility’s processes and products. For this reason, a critical element of the EMS involves identifying and prioritizing the environmental aspects and impacts associated with your facility. An environmental aspect is an element of an organizations activities, products, or services that can interact with the environment. For example, chrome plating is a metal finishing activity and an associated aspect is chrome air emissions.This aspect may have an impact on the environment in several ways, for example, ambient air quality degradation.The environmental aspects and impacts of your metal finishing operations can be identified, prioritized, and documented in several ways. This Template includes two approaches, either of which can be used during EMS implementation. Use the approach that works best for your circumstances. This process is important because high-priority environmental aspects and impacts will be considered when environmental objectives and targets are established.
Aspects and Impacts Form A — The first approach uses the experience and judgment ofemployees familiar with facility processes to identify the top five environmental issuescurrently facing the facility. These issues and their specific aspects and impacts shouldbe summarized using Aspects and Impacts Form A.
Aspects and Impacts Form B — The second approach uses detailed, structured matricesto list and prioritize environmental aspects and impacts according to the followingcategories:• Environmental Aspects and Impacts: Wastewater• Environmental Aspects and Impacts: Air Emissions• Environmental Aspects and Impacts: Hazardous and Solid Waste• Environmental Aspects and Impacts: Raw Materials• Environmental Aspects and Impacts: Water and Energy
The matrices that comprise Form B will help facility staff identify and document environmental aspects and impacts. The matrices also provide criteria for prioritizing environmental aspects and impacts; this process is important because high-priority environmental aspects and impacts will be considered when environmental objectives and targets are established. One possible way to prioritize environmental aspects and impacts using Form B is described as follows:Step 1:For each aspect and impact, score each prioritization criterion on a scale from 1 to 5, where 1 indicates the criterion is very important or relevant to that aspect (for example, the aspect is strictly regulated, is the subject of compliance violations, or is a waste generated in large uantities), and 5 indicates the criterion is relatively unimportant or irrelevant to that aspect (for example, the aspect is an unregulated waste, is generated infrequently, and is inexpensive to manage).Step 2:Add the scores of all criteria for each aspect and write the total in the right-most column of the form.This number indicates the relative priority of the aspect compared to other aspects and impacts in the same category. The lower the total score, the higher the priority.Purpose Of This procedure is used to identify, document, and update the environmental aspects and impacts of facility processes and operations.
Step 1 The environmental manager and other facility personnel selected by the environmental manager are responsible for identifying and prioritizing the environmental aspects and impacts of facility operations during EMS planning and development.Environmental aspects are characteristics of facility processes and products that interact with the environment. Only environmental aspects the company can control or influence will be considered. Environmental impacts are the effects of an organization’s activitie , products or services on the environment.
Step 2 Environmental aspects and impacts will be documented and prioritized.Environmental aspects and impacts will be associated with the following categories:• Wastewater• Air emissions• Hazardous and solid waste• Raw materials• Water and energyHigh-priority environmental aspects and impacts will be considered when environmentalobjectives and targets are set.
Step 3 The environmental manager and other facility personnel will review and updatethe environmental aspects and impacts documentation annually.
Step 4 Environmental aspects and impacts documentation will be retained at the facilityfor at least 2 years.
Responsible Person: _____________________________________Signature and Date: ______________________________________

Elements of the Six Sigma Framework

2009-10-12T06:34:00.003-07:00

Elements Of The Six Sigma Framework
Management strategies, such as TQC, TQM, and Six Sigma, are distinguished from each other by their underlying rationale and framework. As far as the corporate framework of Six Sigma is concerned, it embodies the five elements of top-level management commitment, training schemes, project team activities, measurement system and stakeholder involvement.
Stakeholders include employees, owners, suppliers and customers. At the core of the framework is a formalized improvement strategy with the following five steps: define, measure, analyse, improve and control (DMAIC) which will be explained in detail in Section 2.3. The improvement strategy is based on training schemes, project team activities and measurement system. Top-level management commitment and stakeholder involvement are all inclusive in the framework.
Without these two, the improvement strategy functions poorly. All five elements support the improvement strategy and improvement project teams. Most big companies operate in three parts: R&D, manufacturing, and non-manufacturing service. Six Sigma can be introduced into each of these three parts separately. In fact, the color of Six Sigma could be different for each part. Six Sigma in the R&D part is often called “Design for Six Sigma (DFSS),” “Manufacturing Six Sigma” in manufacturing, and “Transactional Six Sigma (TSS)” in the non-manufacturing service sector. All five elements are necessary for each of the three different Six Sigma functions. However, the improvement methodology, DMAIC, could be modified in DFSS and TSS. These points will be explained in detail in Sections 2.6 and 2.7.2.2 Top-level Management Commitment and Stakeholder Involvement
(1) Top-level management commitment
Launching Six Sigma in a company is a strategic management decision that needs to be initiated by top-level management. All the elements of the framework, as well as the formalized improvement strategy, need top-level management commitment for successful execution. Especially, without a strong commitment on the part of top-level management, the training program and project team activities are seldom successful. Although not directly active in the day-to-day improvement projects, the role of top-level management as leaders, project sponsors and advocates is crucial. Pragmatic management is required, not just lip service, as the top-level management commits itself and the company to drive the initiative for several years and into every corner of the company.
There are numerous pragmatic ways for the CEO (chief executive officer) to manifest his commitment. First, in setting the vision and long-term or short-term goal for Six Sigma, the CEO should play a direct role. Second, the CEO should allocate appropriate resources in order to implement such Six Sigma programs as training schemes, project team activities and measurement system. Third, the CEO should regularly check the progress of the Six Sigma program to determine whether there are any problems which might hinder its success. He should listen to Six Sigma reports and make comments on the progress of Six Sigma. Fourth, he should hold a Six Sigma presentation seminar regularly, say twice a year, in which the results of the project team are presented and good results rewarded financially. Finally, he should hold a Champion Day regularly, say once in every other month, in which Champions (upper managers) are educated by specially invited speakers and he should discuss the progress of Six Sigma with the Champions.
It is also the responsibility of top-level management to set “stretch goals” for the Six Sigma initiative. Stretch goals are tough and demanding, but are usually achievable. Some companies set the stretch goal for process performance at 6 sigma or 3.4 DPMO for all critical-to-customer characteristics.
However, the goals can also be set incrementally, by stating instead the annual improvement rate in process performance.
The industry standard is to reduce DPMO by 50% annually.
(2) Stakeholder involvement
Stakeholder involvement means that the hearts and minds of employees, suppliers, customers, owners and even society should be involved in the improvement methodology of Six Sigma for a company. In order to meet the goal set for improvements in process performance and to complete the improvement projects of a Six Sigma initiative, top-level management commitment is simply not enough. The company needs active support and direct involvement from stakeholders.
Employees in a company constitute the most important group of stakeholders. They carry out the majority of improvement projects and must be actively involved. The Six Sigma management is built to ensure this involvement through various practices, such as training courses, project team activities and evaluation of process performance. Suppliers also need to be involved in a Six Sigma initiative.
A Six Sigma company usually encourages its key suppliers to have their own Six Sigma programs. To support suppliers, it is common for Six Sigma companies to have suppliers sharing their performance data for the products purchased and to offer them participation at in-house training courses in Six Sigma. It is also common for Six Sigma companies to help small suppliers financially in pursuing Six Sigma programs by inviting them to share their experiences together in report sessions of project team activities. The reason for this type of involvement is to have the variation in the suppliers’ products transferred to the company’s processes so that most of the process improvement projects carried out on suppliers’ processes would result in improvement of the performance.
Customers play key roles in a Six Sigma initiative. Customer satisfaction is one of the major objectives for a Six Sigma company. Customers should be involved in specific activities such as identifying the critical-to-customer (CTC) characteristics of the products and processes. CTC is a subset of CTQ from the viewpoint of the customers. Having identified the CTC requirements, the customers are also asked to specify the desired value of the characteristic, i.e., the target value and the definition of a defect for the characteristic, or the specification limits. This vital information is utilized in Six Sigma as a basis for measuring the performance of processes. In particular, the R&D part of a company should know the CTC requirements and should listen to the voice of customers (VOC) in order to reflect the VOC in developing new products.

Environment Policy In ISO 14001:2004

2009-10-12T06:34:00.001-07:00

Environment Policy In ISO 14001:2004
To develop a successful and effective EMS, five key tasks that must be undertaken by management:a. Select an EMS CoordinatorThe selection of an EMS Coordinator is crucial to the success of your EMS. This person will be responsible for developing and implementing the environmental policy and the EMS. Great care must be taken to ensure that the person chosen is well qualified to handle the responsibilities associated with the EMS.b. Perform a gap analysisA gap analysis determines the differences, or gaps, between one system and another. Not only will this analysis identify the gaps, but it also should etermine the size of the gaps. These findings will lead to recommendations, project plans, and the identification of necessary resources for filling the gaps.
c. Prepare a budget, and obtain the appropriate resourcesAfter conducting a gap analysis, the EMS Coordinator will develop a budget that covers the necessary resources to complete an EMS that conforms with ISO 14001. For some organizations, this may mean establishing a budget for the entire process; other organizations may only need to update certain portions of their existing management system.
ISO 14001 Section 4.4.1 requires top management to provide the essential resources to implement, control, and manage the EMS.
d. Select an EMS TeamTop management and the EMS Coordinator may consider creating an EMS Team to assist in developing and implementing the system. This decision should be based on the size of the organization or facility that will be implementing the EMS.
This team should consist of key individuals from various divisions, departments, and operating work areas within the organization who are familiar with the facility, the various processes, and its environmental requirements. Diversity among team members will bring together a pool of expertise and ideas from which to develop and implement the EMS.
e. Develop an environmental policyThe environmental policy is an essential part of an organization’s EMS. The environmental policy must establish the overall direction of the organization in terms of its commitment to environmental responsibility. A policy should also set the foundation and framework for meeting the environmental objectives and targets for the organization.
The ISO 14001 standard establishes certain requirements that an organization’s environmental policy must meet. If your organization already has an environmental policy, review this section to ensure it meets the ISO 14001 requirements.
The first requirement is that top management must establish and define the environmental policy. Note that ISO 14001 does not specifically state that top management must write the policy, only that it be committed to the policy and ensure its implementation.
These actions are essential in constructing a firm foundation for an effective EMS.

ISO 9001 Standards Requirement – Product Realization

2009-10-09T05:01:00.000-07:00

Posted by everise | iso 9001 standard | Friday 9 October 2009 1:06 am

ISO 9001 Standards Requirement – Product Realization

Planning of Product Realization
Plan and develop the processes needed for product realization. Keep the planning consistent with other requirements of the quality management system and document it in a suitable form for the organization. Determine through the planning, as appropriate, the:
Quality objectives and product requirements
Need for processes, documents, and resources
Verification, validation, monitoring, measurement, inspection, and test activities
Criteria for product acceptance
Records as evidence the processes and resulting product meet requirements

Customer-Related Processes

Determination of Requirements Related to the Product
Determine customer requirements:
Specified for the product (including delivery and post-delivery activities)
Not specified for the product (but needed for specified or intended use, where known)
Determine:
Statutory and regulatory requirements applicable to the product
Any additional requirements considered necessary by the organization

Review of Requirements Related to the Product
Review the product requirements before committing to supply the product to the customer in order to:
Ensure product requirements are defined
Resolve any requirements differing from those previously expressed
Ensure its ability to meet the requirements
Maintain the results of the review, and any subsequent follow-up actions. When the requirements are not documented, they must be confirmed before acceptance.
If product requirements are changed, ensure relevant documents are amended and relevant personnel are made aware of the changed requirements.
NOTE: In some situations, such as internet sales, a formal review is impractical for each order. Instead, the review can cover relevant product information such as catalogs or advertising material.

Customer Communication
Determine and implement effective arrangements for communicating with customers on:
Product information
Inquiries, contracts, or order handling (including amendments)
Customer feedback (including customer complaints)

ISO 9001 Standards Requirements – Design and Development

2009-10-09T05:00:00.002-07:00

ISO 9001 Standards Requirements – Design and Development

Design and Development Planning
Plan and control the product design and development. This planning must determine the:
Stages of design and development
Appropriate review, verification, and validation activities for each stage
Responsibility and authority for design and development
The interfaces between the different involved groups must be managed to ensure effective communication and the clear assignment of responsibility. Update, as appropriate, the planning output during design and development.
NOTE: Design and development review, verification, and validation have distinct purposes. They can be conducted and recorded separately or in any combination, as deemed suitable for the product and the organization.

Design and Development Inputs
Determine product requirement inputs and maintain records. The inputs must include:
Functional and performance requirements
Applicable statutory and regulatory requirements
Applicable information derived from similar designs
Requirements essential for design and development
Review these inputs for adequacy. Resolve any incomplete, ambiguous, or conflicting requirements.

Design and Development Outputs
Document the outputs of the design and development process in a form suitable for verification against the inputs to the process. The outputs must:
Meet design and development input requirements
Provide information for purchasing, production, and service
Contain or reference product acceptance criteria
Define essential characteristics for safe and proper use
Be approved before their release

Design and Development Review
Perform systematic reviews of design and development at suitable stages in accordance with planned arrangements to:
Evaluate the ability of the results to meet requirements
Identify problems and propose any necessary actions
The reviews must include representatives of the functions concerned with the stage being reviewed. Maintain the results of reviews and subsequent follow-up actions.

Design and Development Verification
Perform design and development verification in accordance with planned arrangements to ensure the output meets the design and development input requirements. Maintain the results of the verification and subsequent follow-up actions.

Design and Development Validation
Perform validation in accordance with planned arrangements to confirm the resulting product is capable of meeting the requirements for its specified application or intended use, where known. When practical, complete the validation before delivery or implementation of the product. Maintain the results of the validation and subsequent follow-up actions.

Control of Design and Development Changes
Identify design and development changes and maintain records. Review, verify, and validate (as appropriate) the changes and approve them before implementation. Evaluate the changes in terms of their effect on constituent parts and products already delivered. Maintain the results of the change review and subsequent follow-up actions.

What is a “document” In ISO 9001 Standard?

2009-10-09T05:00:00.001-07:00

What is a “document” In ISO 9001 Standard?

The following are some of the main objectives of an organization’s documentation, independent of whether or not it has
implemented a formal QMS;
a) Communication of Information
as a tool for information transmission and communication. The type and extent of the documentation will depend on
the nature of the organization’s products and processes, the degree of formality of communication systems and the
level of communication skills within the organization, and the organizational culture.
b) Evidence of conformity
provision of evidence that what was planned, has actually been done.
c) Knowledge sharing
to disseminate and preserve the organization’s experiences. A typical example would be a technical specification,
which can be used as a base for design and development of a new product.
A list of commonly used terms relating to documentation is presented in Annex A (taken from ISO 9000:2005). It must
be stressed that, according to ISO 9001:2008 clause 4.2 Documentation requirements documents may be in any form
or type of medium, and the definition of “document” in ISO 9000:2005 clause 3.7.2 gives the following examples:
paper
magnetic
electronic or optical computer disc
photograph
master sample

Organizations preparing to implement a QMS For ISO 9001

2009-10-09T04:59:00.002-07:00

For organizations that are in the process of implementing a QMS, and wish to meet the requirements of ISO 9001:2008,
the following comments may be useful.
For organizations that are in the process of implementing or have yet to implement a QMS, ISO 9001:2008 emphasizes a
process approach. This includes:
- Identifying the processes necessary for the effective implementation of the quality management system
- understanding the interactions between these processes.
- documenting the processes to the extent necessary to assure their effective operation and control. (It may be
appropriate to document the processes using process maps. It is emphasized, however, that documented process maps
are not a requirement of ISO 9001:2008.)
These processes include the management, resource, product realization and measurement processes that are relevant
to the effective operation of the QMS.
Analysis of the processes should be the driving force for defining the amount of documentation needed for the quality
management system, taking into account the requirements of ISO 9001:2008. It should not be the documentation that
drives the processes.

Outsourced Processes In ISO 9001 Standards

2009-10-09T04:59:00.001-07:00

Outsourced Processes In ISO 9001 Standards

One of the changes in ISO 9001:2008 is clarification of the role of outsourced processes in a quality management system. Guidance on ‘Outsourced processes’ helps clarify the intent and shows the linkage between Clause 4.2, where outsourced processes appear, and the purchasing controls in clause 7.4.
An outsourced process is a process that the organization needs for its quality management system and is performed by an external party. This party could be another company, a corporate service, another division, etc.
The organization needs to ensure the outsourced process is conducted in accordance with ISO 9001:2008 and other requirements of the quality management system. This brings in the purchasing controls of 7.4. The service may not be purchased in the traditional sense of a monetary transaction. The guidance document explains that the controls in clause 4.2 and 7.4 apply. For example, a “no charge” service from a corporate head office requires documentation of supplier selection and, most importantly, control.
The guidance document addresses two important cases and gives guidance on the appropriate level of control. The cases are:
• The organization has the competence and ability to carry out a process, but chooses to outsource it (for commercial or other reasons).
• The organization does not have the competence to carry out the process itself, and chooses to outsource it.

Demonstrating conformity with ISO 9001:2008

2009-10-09T04:58:00.000-07:00

Demonstrating conformity with ISO 9001:2008

For organizations wishing to demonstrate conformity with the requirements of ISO 9001:2008, for the purposes of certification/registration, contractual, or other reasons, it is important to remember the need to provide evidence of the effective implementation of the QMS.
Organizations may be able to demonstrate conformity without the need for extensive documentation.
To claim conformity with ISO 9001:2008, the organization has to be able to provide objective evidence of the effectiveness of its processes and its quality management system. Clause 3.8.1 of ISO 9000:2005 defines “objective evidence” as “data supporting the existence or variety of something” and notes that “objective evidence may be obtained through observation, measurement, test, or other means.”
Objective evidence does not necessarily depend on the existence of documented procedures, records or other documents, except where specifically mentioned in ISO 9001:2008. In some cases, (for example, in clause 7.1(d)
Planning of product realization, and clause 8.2.4

Monitoring and measurement of product), it is up to the organization to determine what records are necessary in order to provide this objective evidence.
Where the organization has no specific internal procedure for a particular activity, and this is not required by the standard, (for example, clause 5.6 Management Review), it is acceptable for this activity to be conducted using as a basis the relevant clause of ISO 9001:2008. In these situations, both internal and external audits may use the text of ISO 9001:2008 for conformity assessment purposes.

Demonstrating conformity with ISO 9001:2008

2009-10-09T04:57:00.000-07:00

Demonstrating conformity with ISO 9001:2008

For organizations wishing to demonstrate conformity with the requirements of ISO 9001:2008, for the purposes of certification/registration, contractual, or other reasons, it is important to remember the need to provide evidence of the effective implementation of the QMS.
Organizations may be able to demonstrate conformity without the need for extensive documentation.
To claim conformity with ISO 9001:2008, the organization has to be able to provide objective evidence of the effectiveness of its processes and its quality management system. Clause 3.8.1 of ISO 9000:2005 defines “objective evidence” as “data supporting the existence or variety of something” and notes that “objective evidence may be obtained through observation, measurement, test, or other means.”
Objective evidence does not necessarily depend on the existence of documented procedures, records or other documents, except where specifically mentioned in ISO 9001:2008. In some cases, (for example, in clause 7.1(d)
Planning of product realization, and clause 8.2.4 Monitoring and measurement of product), it is up to the organization to determine what records are necessary in order to provide this objective evidence.
Where the organization has no specific internal procedure for a particular activity, and this is not required by the standard, (for example, clause 5.6 Management Review), it is acceptable for this activity to be conducted using as a basis the relevant clause of ISO 9001:2008. In these situations, both internal and external audits may use the text of ISO 9001:2008 for conformity assessment purposes.

Records required by ISO 9001:2008

2009-10-09T04:56:00.000-07:00

Records required by ISO 9001:2008

Clause Record required
5.6.1 Management reviews
6.2.2 e) Education, training, skills and experience
7.1 d) Evidence that the realization processes and resulting product fulfil requirements
7.2.2 Results of the review of requirements related to the product and actions arising from the review
7.3.2 Design and development inputs relating to product requirements
7.3.4 Results of design and development reviews and any necessary actions
7.3.5 Results of design and development verification and any necessary actions
7.3.6 Results of design and development validation and any necessary actions
7.3.7 Results of the review of design and development changes and any necessary actions
7.4.1 Results of supplier evaluations and any necessary actions arising from the evaluations
7.5.2 d) As required by the organization to demonstrate the validation of processes where the resulting output cannot be verified by subsequent monitoring or measurement
7.5.3 The unique identification of the product, where traceability is a requirement
7.5.4 Customer property that is lost, damaged or otherwise found to be unsuitable for use
7.6 a) Basis used for calibration or verification of measuring equipment where no international or national measurement standards exist
7.6 Validity of the previous measuring results when the measuring equipment is found not to conform to requirements
7.6 Results of calibration and verification of measuring equipment
8.2.2 Internal audit results and follow-up actions
8.2.4 Indication of the person(s) authorizing release of product.
8.3 Nature of the product nonconformities and any subsequent actions taken, including concessions obtained
8.5.2 e) Results of corrective action
8.5.3 d) Results of preventive action

ESTABLISHING THE INITIAL STATE OF THE QMS For SME

2009-10-03T08:00:00.000-07:00

Establishing The Initial State of The ISO 9001 QMS For SME
The implementation of an ISO 9001 conformant system must recognize that it is but a step in a long-term development of a continually improving QMS. Unfortunately, it is often the case that ISO 9001 is taken as a means to an end, where the implementation of a QMS is not the primary objective, rather certification is. As a result, SMEs may end up with stacks of documentation waiting to be processed that adds no value, but cost.
According to the requirements of ISO 9001, an organization must develop only six documented procedures: (1) control of documents, (2) control of quality records, (3) internal audits, (4) control of non-conformities, (5) corrective action, and (6) preventative action. A quality manual and several records are also required. The development of other procedures, work instructions, and
other documents is largely at the discretion of the organization. From the very beginning of the process, it is therefore essential that SMEs establish a balanced view between a short-term focus (marketing/sales) and a long-term focus (achieving company-wide quality awareness through TQM). ISO documentation should be considered as an enabler along that way and SMEs must guard against the creation of unnecessary documentation.
However, even when such a view is adopted, many SMEs struggle to move from their initial state to a fully functional ISO 9001 QMS. Over the last several years, we have been involved in ISO 9001 implementation projects in seven different SMEs. The SMEs have ranged in size from approximately 20 employees to 500 employees. The SMEs have been drawn from a variety of sectors in Virginia, including manufacturing, distribution, and services. Based on our experience, we developed a schematic of initial states of an organization in terms of the existence and functionality of the ISO 9001 QMS . Throughout this paper, existence is equated with the documentation required by the standard while functionality is equated with an effectively operated QMS that leads to increased customer satisfaction and continuous improvement of business results.
A successful QMS must be fully functional and appropriately documented. With that in mind, there are four main states in which SMEs can be located in the beginning of the implementation process:
1. Complete Death: No documentation, no functioning.
This is the state in which there is no indication of the existence and functionality of the QMS. No documentation exists and no processes are in place to help ensure the quality of the product.
Relatively few companies will find themselves in this situation.
2. Informally Alive: No documentation, some level of functioning.
Many SMEs exhibit an organic structure characterized by an absence of standardization and the prevalence of loose and informal working relationships. SMEs operating in this state are more likely to rely on people rather than a system. In such situations, key personnel may resist documentation for two key reasons “(1) documentation is considered a waste of time and (2) documentation of processes and procedures makes the individual less dependable” [2]. SMEs in this state perform some or all of the processes required by ISO 9001 and the QMS may function fairly well. However, they are not willing and ready to document those processes unless there is a cultural change lead by top management.
3. Formally Death: Some level of documentation, no functioning.
SMEs categorized in this state have documented processes and procedures at some degree, however, the documents are generally not followed and do not necessarily reflect the actual manner in which the organization undertakes its operations and management. This situation highlights the fact that the mere existence of documentation does not necessarily lead to a functional QMS. Moreover, such a situation may help perpetuate the view that ISO 9001 is a way for SMEs to market their products and services but that implementation of the standard requires stacks of documents that offer no value.
4. Formally Alive: Some level of documentation, some level of functioning.
Each SME considered in this state, achieves a unique combination of the existence and functionality of processes and procedures that may or may not be required by ISO 9001. This situation is closest to the desired state of full functionality (100%) of the ISO 9001 QMS and full documentation (100%) of this functionality.

The Benefits To Integrate ISO 14001:2004 and ISO 9001:2008

2009-10-03T07:59:00.000-07:00

The Benefits To Integrate ISO 14001:2004 and ISO 9001:2008
Reduce the time and cost of implementing the new specification by acquiring a concise, yet thorough understanding the scope of ISO 14001:2004 and key terms.
Avoid spinning your wheels by learning precisely which modifications and additions to ISO 14001:2004 require your attention for compliance with ISO 9001:2008.
Get a quick handle, through hands-on activities, on the environmental aspects of ISO 14001:2004, including how to:- Develop an environmental policy statement appropriate for your company- Integrate processes for identifying environmental aspects and impacts- Identify environmental objectives, set related targets, and establish programs for achieving results- Integrate environmental responsibilities and authorities into a management system- Outline an environmental awareness and training program- Establish environmental metrics and indicators for monitoring performance- Integrate requirements on non-conformance and corrective and preventive actions into your existing system- Understand the purpose and scope of the environmental management review- Integrate document control requirements of ISO 14001:2004 into your current system- Identify those operations that need to be controlled under EMS and identify emergency operations and contingencies that must be considered as part of EMS
Get off to a running start by learning to use a versatile prioritization matrix to identify and prioritize significant environmental aspects and impacts.
Optimize understanding and retention with the Plexus Learning Model- Multiple learning channels through lecture, coaching, group activities, innovative learning exercises and case studies.- Hands-on insights. Lecturing is minimized so learning is maximized.- Learn by doing. Connect the lessons learned to your real world by using your current circumstances as examples for activities.

KEY CONSIDERATIONS IN IMPLEMENTING ISO 9001 IN SMEs

2009-10-03T07:41:00.000-07:00

KEY CONSIDERATIONS IN IMPLEMENTING ISO 9001 IN SMEs
There are many issues that must be addressed in moving the QMS from the initial state to the desired state. For example, all organizations implementing ISO 9001 will need to consider the unique culture within the organization, its size, and the resources available. Beyond those widely discussed points, three issues that merit particular attention are (1) consideration of the QMS as a parallel function, (2) training, and (3) auditing. Key points associated with these issues are discussed below.
Consideration of QMS as Parallel Function
In the case of all of the transitions depicted, real benefits from the QMS are more likely to be experienced if the QMS is implemented directly into the core structure of the organization. SMEs must be cautious against establishing a QMS that is run separately in parallel to its other systems. In SMEs, the parallel subsystem most commonly exhibits itself as a separate Quality Assurance, or in some cases, ISO 9001 department. Possible reasons for this may include the existence of rigid departmental boundaries in some SMEs or overemphasis on core activities. As Yauch and Steudel [10] note, SMEs tend to focus their attention on “…necessary routine activities (such as sales, production, shipping, etc.) rather than activities aimed at improving processes or systems.” If a SME insists on establishing a separate quality department, its level of effectiveness can be increased by embedding the QMS in widely-used organizational systems where practical. The integration is largely a function of how well the QMS manages to share information with other subsystems and its ability to align with the policies, norms, goals, and values in place throughout the organization.
Training
In SMEs, training and staff development is more likely to be ad hoc and small scale because of modest human and financial resources and the absence of a specific training budget. To prevent the problems arising from lack of education and training, two things must be done:
1. Education of Top Management: The centralization of decision-making processes within many SMEs means that the management can either be the main stumbling block to change or the main catalyst for change. Therefore, any approach to ISO 9001 implementation must involve considerable education for the top management of the organization to create awareness and understanding of the implementation process as a change initiative. Implementing a fully functional and documented QMS requires motivation by top management to appreciate, achieve, and implement the necessary measures to meet the standards’ criteria.
2. Education and Training of Employees: SMEs are often under pressure to quickly gain ISO 9001 registration. Meeting the requirements of the standard in a short period of time can prove a formidable obstacle for a small company. Since most SMEs do not possess the needed expertise internally, they may be inclined to hire external experts to provide the necessary technical expertise and manpower. However, having a functioning and documented QMS requires more than that. It requires ensuring that all employees in the organization clearly know what is expected of them and how they can contribute to the attainment of their organizations’ goals. This will likely require the preparation and implementation of a training plan tailored specifically to the unique characteristics and maturity level of the SME.
Auditing
As emphasized throughout the paper, a QMS is not going to produce the expected results unless it is fully functional. While auditing must therefore verify the existence of the necessary documentation, it must also focus on the functionality of the QMS. The measurement of the functionality and the qualitative and financial impacts of a QMS have been the subject of several studies, including Kaynak [11]. Among the categories used to measure functionality and performance improvement, two are particularly noteworthy for our purposes: management commitment and employee involvement. A QMS cannot be functional in the absence of those two characteristics. Therefore, as a minimum, internal and external auditors should continually verify top management’s commitment to increased company-wide quality awareness and improvement in addition to employee involvement in the design, implementation, operation, and improvement of quality related processes and procedures.

IMPLEMENTATION GUIDANCE FOR ISO 9001:2008

2009-10-03T07:40:00.000-07:00

IMPLEMENTATION GUIDANCE FOR ISO 9001:2008
This Implementation Guidance has been developed to assist users in understanding the issues that need to be considered during the co-existence period between ISO 9001:2000 and ISO 9001:2008.
While the changes between ISO 9001:2000 and ISO 9001:2008 are expected to have a limited impact on users, some arrangements regarding implementation are needed.
Note: To reflect the limited scope of the changes the term “implementation” is now being used to make a clear distinction with the former “transition” from ISO 9001:1994 to ISO 9001:2000, when there were significant changes throughout the standard.
A wide diffusion of this implementation guidance is recommended, in particular the comparison table between ISO 9001:2008 and ISO 9001:2000, given in Annex B to ISO 9001:2008.
ISO 9001:2008 has been developed in order to introduce clarifications to the existing requirements of ISO 9001:2000 and to improve compatibility with ISO 14001:2004. ISO 9001:2008 does not introduce additional requirements nor does it change the intent of the ISO 9001:2000 standard.
Certification to ISO 9001:2008 is not an “upgrade”, and organizations that are certified to ISO 9001:2000 should be afforded the same status as those who have already received a new certificate to ISO 9001:2008 No new requirements were introduced in this edition but, in order to benefit from the clarifications of ISO 9001:2008, users of the former version will need to take into consideration whether the clarifications introduced have an impact on their current interpretation of ISO 9001:2000, as changes may be necessary to their QMS In order to assist organizations to have a full understanding of the new ISO 9001:2008, it may be useful to have an insight on the revision process, how this revision reflects the inputs received from users of the standard, and the consideration given to benefits and impacts during its development.
Prior to the commencement of a revision (or amendment) to a management system standard, ISO/Guide 72:2001 Guidelines for the justification and development of management system standards recommends that a “Justification Study” is prepared to present a case for the proposed project and that it outlines details of the data and inputs used to support its arguments. In relation to the development of ISO 9001:2008 user needs were identified from the following:
- the results of a formal “Systematic Review” on ISO 9001:2000 that was performed by the members of ISO/TC 176/SC2 during 2003-2004
- feedback from the ISO/TC 176/Working Group on “Interpretations”
- the results of an extensive worldwide “User Feedback Survey on ISO 9001 and ISO 9004″ by ISO/TC 176/SC 2/WG 18 and similar national surveys.
The Justification Study identified the need for an amendment, provided that the impact on users would be limited and that changes would only be introduced when there were clear benefits to users.
The key focuses of the ISO 9001:2008 amendment were to enhance the clarity of ISO 9001:2000 and to enhance its compatibility with ISO14001:2004.
A tool for assessing the impacts versus benefits for proposed changes was created to assist the drafters of the amendment in deciding which changes should be included, and to assist in the verification of drafts against the identified user needs. The following decision making principles were applied:
1) No changes with high impact would be incorporated into the standard;
2) Changes with medium impact would only be incorporated when they provided a correspondingly medium or high benefit to users of the standard;
3) Even where a change was low impact, it had to be justified by the benefits it delivered to users, before being incorporated.
The changes incorporated in this ISO 9001:2008 edition were classified in terms of impact into the following categories:
- No changes or minimum changes on user documents, including records
- No changes or minimum changes to existing processes of the organization
- No additional training required or minimal training required
- No effects on current certifications
The benefits identified for the ISO 9001:2008 edition fall into the following categories:
- Provides clarity
- Increases compatibility with ISO 14001.
- Maintains consistency with ISO 9000 family of standards.
- Improves translatability.

The Benefits To Integrate ISO 14001:2004 and ISO 9001:2008

2009-09-30T02:41:00.001-07:00

The Benefits To Integrate ISO 14001:2004 and ISO 9001:2008

Reduce the time and cost of implementing the new specification by acquiring a concise, yet thorough understanding the scope of ISO 14001:2004 and key terms.

Avoid spinning your wheels by learning precisely which modifications and additions to ISO 14001:2004 require your attention for compliance with ISO 9001:2008.

Get a quick handle, through hands-on activities, on the environmental aspects of ISO 14001:2004, including how to:
- Develop an environmental policy statement appropriate for your company
- Integrate processes for identifying environmental aspects and impacts
- Identify environmental objectives, set related targets, and establish programs for achieving results
- Integrate environmental responsibilities and authorities into a management system
- Outline an environmental awareness and training program
- Establish environmental metrics and indicators for monitoring performance
- Integrate requirements on non-conformance and corrective and preventive actions into your existing system
- Understand the purpose and scope of the environmental management review
- Integrate document control requirements of ISO 14001:2004 into your current system
- Identify those operations that need to be controlled under EMS and identify emergency operations and contingencies that must be considered as part of EMS

Get off to a running start by learning to use a versatile prioritization matrix to identify and prioritize significant environmental aspects and impacts.

Optimize understanding and retention with the Plexus Learning Model
- Multiple learning channels through lecture, coaching, group activities, innovative learning exercises and case studies.
- Hands-on insights. Lecturing is minimized so learning is maximized.
- Learn by doing. Connect the lessons learned to your real world by using your current circumstances as examples for activities.

Demonstrating conformity with ISO 9001:2008

2009-09-30T02:40:00.001-07:00

Demonstrating conformity with ISO 9001:2008

Organizations may be able to demonstrate conformity without the need for extensive documentation.

To claim conformity with ISO 9001:2008, the organization has to be able to provide objective evidence of the effectiveness of its processes and its quality management system. Clause 3.8.1 of ISO 9000:2005 defines “objective

evidence” as “data supporting the existence or variety of something” and notes that “objective evidence may be obtained through observation, measurement, test, or other means.”

Objective evidence does not necessarily depend on the existence of documented procedures, records or other documents, except where specifically mentioned in ISO 9001:2008. In some cases, (for example, in clause 7.1(d)

Planning of product realization, and clause 8.2.4 Monitoring and measurement of product), it is up to the organization to determine what records are necessary in order to provide this objective evidence.

Where the organization has no specific internal procedure for a particular activity, and this is not required by the standard, (for example, clause 5.6 Management Review), it is acceptable for this activity to be conducted using as a basis the relevant clause of ISO 9001:2008. In these situations, both internal and external audits may use the text of ISO 9001:2008 for conformity assessment purposes.

Guidance on Clause 4.2 of ISO 9001:2008

2009-09-30T02:39:00.001-07:00

Guidance on Clause 4.2 of ISO 9001:2008

The following comments are intended to assist users of ISO 9001:2008 in understanding the intent of the general documentation requirements of the International Standard.

a) Documented statements of a quality policy and objectives:

Requirements for the quality policy are defined in clause 5.3 of ISO 9001:2008. The documented quality policy has to be controlled according to the requirements of clause 4.2.3.

Note: Organizations that are revising their quality policy for the first time, or in order to meet the amended requirements in ISO 9001:2008, should pay particular attention to clause 4.2.3 (c), (d) and (g).

Requirements for quality objectives are defined in clause 5.4.1 of ISO 9001:2008. These documented quality objectives are also subject to the document control requirements of clause 4.2.3.

b) Quality Manual:

Clause 4.2.2 of ISO 9001:2008 specifies the minimum content for a quality manual. The format and structure of the manual is a decision for each organization, and will depend on the organization’s size, culture and complexity. Some organizations may choose to use the quality manual for other purposes besides that of simply documenting the QMS

A small organization may find it appropriate to include the description of its entire QMS within a single manual, including all the documented procedures required by the standard.

Large, multi-national organizations may need several manuals at the global, national or regional level, and a more complex hierarchy of documentation.

The quality manual is a document that has to be controlled in accordance with the requirements of clause 4.2.3.

c) Documented procedures:

ISO 9001:2008 specifically requires the organization to have “documented procedures” for the following six activities:

4.2.3 Control of documents

4.2.4 Control of records

8.2.2 Internal audit

8.3 Control of nonconforming product

8.5.2 Corrective action

8.5.3 Preventive action

These documented procedures have to be controlled in accordance with the requirements of clause 4.2.3 Some organizations may find it convenient to combine the procedure for several activities into a single documented procedure (for example, corrective action and preventive action). Others may choose to document a given activity by using more than one documented procedure (for example, internal audits). Both are acceptable.

Some organizations (particularly larger organizations, or those with more complex processes) may require additional documented procedures (particularly those relating to product realization processes) to implement an effective QMS.

Other organizations may require additional procedures, but the size and/or culture of the organization could enable these to be effectively implemented without necessarily being documented. However, in order to demonstrate compliance with ISO 9001:2008, the organization has to be able to provide objective evidence (not necessarily documented) that its QMS has been effectively implemented.

d) Documents needed by the organization to ensure the effective planning, operation and control of its processes:

In order for an organization to demonstrate the effective implementation of its QMS, it may be necessary to develop documents other than documented procedures. However, the only documents specifically mentioned in ISO 9001:2008 are:

- Quality policy (clause 4.2.1.a)

- Quality objectives (clause 4.2.1.a)

- Quality manual (clause 4.2.1.b)

There are several requirements of ISO 9001:2008 where an organization could add value to its QMS and demonstrate conformity by the preparation of other documents, even though the standard does not specifically require them. Examples

may include:

- Process maps, process flow charts and/or process descriptions

- Organization charts

- Specifications

- Work and/or test instructions

- Documents containing internal communications

- Production schedules

- Approved supplier lists

- Test and inspection plans

- Quality plans

All such documents have to be controlled in accordance with the requirements of clause 4.2.3 and/or 4.2.4, as applicable

e) Records:

Examples of records specifically required by ISO 9001:2008 are presented in Annex B.

Organizations are free to develop other records that may be needed to demonstrate conformity of their processes, products and quality management system.

Requirements for the control of records are different from those for other documents, and all records have to be controlled according to those of clause 4.2.4 of ISO 9001:2008.

ISO 9000 — a way of managing for conformance

2009-09-18T16:44:00.001-07:00

Quality assurance, according to the Standard, is a way of managing that prevents non-conformance and thus “assures quality”. This is what makes ISO 9000 different from other standards: it is a management standard, not a product standard. It goes beyond product standardisation: it is standardising not what is made but how it is made. To use standards to dictate and control how organisations work was to extend the role of standards to new territory. To take such a step we might have firstly established that any such requirements worked — that they resulted in ways of working which improved performance.
Yet the plausibility of this Standard, and the fact that those who had an interest in maintaining it were (and still are) leading opinion, prevented such enquiries. In simple terms the Standard asks managers to say what they do, do what they say and prove it to a third party.
ISO 9000 (1994) paragraph 1: “The requirements specified are aimed primarily at achieving customer satisfaction by preventing non-conformity at all stages from design through servicing.”
To put it another way, the Standard asserts that preventing non-conformance achieves customer satisfaction. But does it? Of course it matters to customers that a product works. But there is no guarantee that the Standard will ensure even that. Furthermore, customers take a total view of an organisation — how easy it is to do business with — in respect of all things of importance to each and every customer.
ISO 9000 requires managers to “establish and maintain a documented quality system as a means of ensuring that product conforms to specified requirements”. Loosely translated this is “say what you do”. Management is supposed to “define and document its policy for quality . . . including its commitment to quality”.
What management would not declare its commitment to quality? But would they know what it means? Would they argue (as they should) that quality management is a different and better way to do business, or would they believe that ISO 9000 will take care of quality? The Standard encourages managers to think of “quality” and “business as usual” as separate and distinct. It helps managers avoid the revelation that quality means a wholly different view of management. Instead, the organisation “shall appoint a management representative who, irrespective of other responsibilities, shall have defined authority and responsibility” [for ISO 9000]. At a practical level this means only one executive might decide he or she had better learn a thing or two about quality. However, would being responsible for ISO 9000 lead to learning about quality or simply enforcing the ISO 9000 regime in an organisation?
Key to the regime is auditing. The Standard requires organisations to conduct internal quality audits to “verify whether quality activities comply with planned arrangements”. This can be loosely translated as “do you do as you say?” and the purpose of the audit is to see that you do. It was not until the 1994 review that the words were changed to “quality activities and related results”. It was a Standard which was rooted in the philosophy of inspection: fifteen years after its initial promulgation the promoters sought to extend the focus to results. But results or improvements assessed by what means? Inspection. By the time the Standard was adopted world-wide, quality thinking had moved a long way from the philosophy of inspection. It is now understood, at least by a few, that quality is achieved through managing the organisation as a system and using measures which enable managers to improve flow and reduce variation (which we explore in chapters 5 and 7). The defenders argue that there is nothing stopping a company having ISO 9000 and implementing methods for managing flow and reducing variation, but where are such companies? Few of the companies we researched, formally and informally, knew anything about this thinking. The Standard does not talk about it; moreover, the Standard effectively discourages managers from learning about it by representing quality in a different way.
According to ISO 8402 (quality vocabulary), quality is:
“The totality of features and characteristics of a product or service that bear on its ability to satisfy stated or implied needs.”
Everything we have learned about ISO 9000 suggests that the people who created this definition were thinking about the things which need to be controlled, those things which “bear on its ability . . .”. The builders of the Standard assumed that customer needs would be listed in contractual agreements between the supplier and customer. ISO 9000 has a “make” logic — procedures for “how you do what you do” — and a “control” logic — check to see that it is done. It is a relic of the era when contractual agreements were perceived to be an important device for regulating the behaviour of suppliers. In these ways, ISO 9000 encouraged “planning for quality”.
Planning for quality sounds plausible, but it assumes many things: that the plan is the right plan, that it is feasible, that people will “do it”, that performance will improve. It is an approach which, paradoxically, leads to poor decisions. Planners of quality systems, guided by ISO 9000, start with a view of how the world should be as framed by the Standard. Understanding how an organisation is working, rather than how someone thinks it should, is a far better place from which to start change of any kind.