Wednesday, September 30, 2009

ISO 9001:2008 FAQ

What Is The ISO 9001: 2008 Standard?
The latest edition of the ISO 9001 standard ISO 9001: 2008, Quality Management Systems – Requirements, was officially published by (ISO) the International Organization for Standardization on November 14, 2008. It is the fourth edition of the ISO 9001 standard since it was first published in 1987.
Who Is Responsible For Revising The standards?
The ISO Technical Committee no.176, Sub-committee no.2 (ISO/TC 176/SC 2) is responsible for the revision process in collaboration with consensus among quality and industry experts nominated by ISO Member bodies, and representing all interested parties.
Does ISO 9001:2008 Have Additional Requirements Beyond ISO 9001:2000 ?
This latest (4th) edition of ISO 9001 contains no new requirements compared to the (3rd) year 2000 edition, which it replaces. What it does is provide clarification to the existing requirements of ISO 9001:2000 based on eight years’ experience of worldwide implementing of the standard and introduces changes intended to improve consistency with the environmental management system standard, ISO 14001:2004.
The clarifications and changes in ISO 9001:2008 represents fine-tuning, rather than a thorough overhaul. It focuses on changes that organizations might make to better comply with the spirit of the standard without adding, deleting, or altering its requirements. The changes are minor in nature and address such issues as the need to clarify, provide greater consistency, resolve perceived ambiguities, and improve compatibility with ISO 14001. The numbering system and the structure of the standard remain unchanged. As a result, the new standard looks much like the old standard.
ISO has grouped the changes incorporated in this ISO 9001:2008 edition into the following categories:- No changes or minimum changes on user documents, including records- No changes or minimum changes to existing QMS processes- No additional training required or minimal training required- No effects on current certifications
In contrast, the 3rd edition, ISO 9001:2000 published in 2000, represented a major overhaul of the standard, including new requirements and a sharpened customer focus, reflecting developments in quality management and experience gained since the publication of the initial version.
Then Why Was It Necessary To Introduce This Revision?All ISO standards – currently more than 17 400 – are periodically reviewed. To ensure that ISO standards are maintained at the state of the art, ISO has a rule requiring them to be periodically reviewed and a decision taken to confirm, withdraw or revise the documents. The review process must be initiated within 3 years of publication of a standard. The review considers several factors such as technological evolution, new methods and materials, new quality and safety requirements, or questions of interpretation and application.
The review of ISO 9001 resulting in the 2008 edition was carried out by subcommittee SC 2 of ISO/TC 176. This subcommittee, which is responsible for the ISO 9000 family, unites expertise from 80 participating countries and 19 international or regional organizations, plus other technical committees.
This review has a number of inputs that help it:
A global user questionnaire/survey
A market Justification Study
Suggestions arising from the ISO/TC 176 interpretation process
Opportunities for increased compatibility with ISO 14001
The need for greater clarity, ease of use, and improved translation
Current trends – keeping up with recent developments in management system practices.
How Does The New ISO 9001 Edition Affect Existing ISO 9001 QMS’s?
As organizations start looking at ISO 9001:2008, they will wonder to what extent the changes might affect them. To a large extent, the new standard will not result in significant change to existing quality management systems (QMS).
ISO/TC 176 was careful in not making change for change sake. In the case of editorial changes, this was especially true. This could have lead to a false impression that there was a change in requirements, carrying greater significance than was intended. In those instances, when the committee members couldn’t come to a consensus in determining if a change added or deleted a requirement, they opted to retain the existing text. They decided it was better to err on the side of caution rather than to contribute to any misunderstanding in the marketplace.
The changes that have been incorporated into this edition of the ISO 9001 standard include changes that should lead to a better understanding across a broader range of product types, including service organizations; use of deliberate wording to minimize the potential for incorrect user interpretation; and reflect nuances of similar concepts. Lastly, some of the changes to specific clauses were made based on the 2004 International User Feedback Survey. This survey was conducted after the publication of ISO 9001:2000 and had invited respondents to identify areas they most wanted to see improved.

Update on ISO 9001:2008

Update on ISO 9001:2008
Following a recent meeting of ISO’s Technical Committee TC176 in Helsinki, Finland, from June
11 – 15t, 2007, publication of the new version of ISO 9001 has been brought forward from 2009
and is now scheduled to be published in October 2008. Experts representing over 70 ISO member
bodies, met to discuss the comments received during circulation of the Committee Draft (”CD”) of
the new standard, and concluded that in view of the very limited changes being proposed, the draft
is now sufficiently mature to progress directly to the DIS (Draft International Standard).
The main changes being introduced into the new standard are as follows:
Clause 0.2 (Process approach)
Text added to emphasize the importance of processes being capable of achieving desired outputs
Clause 1.1 (Scope)
Clarification that “product” also includes intermediate product
Explanation regarding statutory, regulatory and legal requirements
Clause 4.1 (General requirements)
Notes added to explain more about outsourcing
Types of control that may be applied to outsourced processes
Relationship to clause 7.4 (Purchasing)
Clarification that outsourced processes are still responsibility of the organization and must be
included in the quality management system
Clause 4.2.1 (Documentation)
Clarification that QMS documentation also includes records
Documents required by the standard may be combined
ISO 9001 requirements may be covered by more than one documented procedure
Clause 4.2.3 (Document control)
Clarification that only external documents relevant to the QMS need to be controlled
Clause 4.2.4 (Records control)
Editorial changes only (better alignment with ISO 14001)
Clause 5.5.2 (Management rep)
Clarifies that this must be a member of the organization’s own management
Clause 6.2.1 (Human resources)
Clarification that competence requirements are relevant for any personnel who are involved in the
operation of the quality management system
Clause 6.3 (Infrastructure)
Includes information systems as example
Clause 6.4 (Work environment)
Clarifies that this includes conditions under which work is performed and includes, for example
physical, environmental and other factors such as noise, temperature, humidity, lighting, or weather
Clause 7.2.1 (Customer related processes)
Clarifies that post-delivery activities may include:
- Actions under warranty provisions
- Contractual obligations such as maintenance services
- Supplementary services such as recycling or final disposal
Clause 7.3.1 (Design & development planning)
Clarifies that design and development review, verification and validation have distinct purposes
These may be conducted and recorded separately or in any combination as suitable for the product
and the organization
Clause 7.3.3(Design & development outputs)
Clarifies that information needed for production and service provision includes preservation of the product
Clause 7.5.4 (Customer property)
Explains that both intellectual property and personal data should be considered as customer property
Clause 7.6 (Now retitled Control of Monitoring and Measuring equipment)
Explanatory notes added regarding the use of computer software: “Confirmation of the ability of computer software to satisfy the intended application would typically include its verification and configuration management to maintain its suitability for use.”
Clause 8.2.1 (Customer satisfaction)
Note added to explain that monitoring of customer perception may include input from sources such as customer satisfaction surveys, customer data on delivered product quality, user opinion surveys, lost business analysis, compliments, and dealer reports
Clause 8.2.3 (Monitoring / Measurement of process)
Note added to clarify that when deciding on appropriate methods, the organization should consider impact on the conformity to product requirements and on the effectiveness of the quality management system.

Validity of certifications to ISO 9001:2000

One year after the publication of ISO 9001:2008 all accredited certifications issued (new certifications or re-certifications) shall be to ISO 9001:2008.Twenty four months after publication by ISO of ISO 9001:2008, any existingcertification issued to ISO 9001:2000 shall not be valid.
Organisations that are already certified to ISO 9001:2000 should contacttheir certification/registration bodies (CB/RB) to agree a programme for analysing the clarifications in ISO 9001:2008 in relation to their individual quality management systems and for upgrading their certificates.Certified organizations should bear in mind that ISO 9001:2000 certificateshave the same status as new ISO 9001:2008 certificates during the co-existence period. (i.e. Your current ISO 9001:2000 certificate will be valid up to 13th November 2010).Organizations in the process of certification to ISO 9001:2000 should change to using ISO 9001:2008 and apply for certification to it.New users should start by using ISO 9001:2008.

ISO 9001 Standards – Document Repository

ISO 9001 Standards - Document Repository
All QMS and product realization documents can be stored electronically within the computerize Document Management System like ISO 9001 Document Control Sytem. This provides a set of category and sub-category headings that enable users to drill down intothe different levels of the documentation category tree.QMS documents are created and maintained within a top level category entitled “ISO 9001 Quality Management System (QMS)“. Documents in this category follow a 4-tier approach:• Quality Manual – company scope and process interactions within the QMS• Quality Procedures – responsibilities, controls and activities within the QMS that effect customer service• Records – objective evidence to demonstrate our goal in achieving customer satisfaction• Forms & Reports to support the QMS processesProduct realization documents are stored in categories corresponding to Products, Projects and Departments. Each document is unique, but can be accessed from multiple categories.Documents created within the FablessSemi Inc CogniDox system are assigned a unique identifier using the format “PO-NNNNNN-XX”; where the “PO” prefix identifies them as FablessSemi Inc documents, the “NNNNNN” is an automatically generated and uniquely assigned numerical ID, and the “XX” suffix indicates the document type.All Fabless Semi Inc personnel are responsible for creating document part numbers and uploading documents to an appropriate category. Selected users with additional system privileges are responsible for creating and maintaining document categories.

Useful Aids to Implement ISO 9001 Standards

Useful Aids To Implement ISO 9001 Standards
Many companies implement ISO 9001 without using all the available tools. As a result, some companies may not fully optimize their implementation. This issue could be manifested as confusion over terms, misunderstanding about requirements, and perplexity concerning intention.ISO, the International Organization for Standardization, based in Geneva Switzerland issues thousands of standards, but we limit our scope to ISO 9001:2008 and its immediate “family”.This includes ISO 9000:2005 and ISO 9004:20002. ISO 9001 is a general industry standard for quality management, but ISO also issues industry specific standards. Many of these standards, such as ISO 13485 for medical devices, are based on ISO 9001 and can also utilize these available tools.
In addition to the information discussed below, ISO also issues standards related to specific activities that may arises in a quality management system. The following lists these supporting documents.
Automotive ISO/TS 16949:2002Education IWA 2:2007Energy PC 242, ISO 50001Food safety ISO 22000:2005Information security ISO/IEC 27001:2005Health care IWA 1:2005Local government IWA 4:2005Medical devices ISO 13485:2003Petroleum and gas ISO 29001:2003Ship recycling ISO/PAS 30000:2008Supply chain security ISO 28000:2007

Process Approach In ISO 9001 Standards

Process Approach In ISO 9001 Standards
The process approach was introduced into ISO 9001 with the year 2000 version of the standards.Prior versions used an element approach. The document Guidance on the concept and use of the process approach for management systems describes to process approach and offers an implementation paradigm.1. Identification of processes of the organization1.1. Define the purpose of the organization1.2. Define the policies and objectives of the organization1.3. Determine the processes in the organization1.4. Determine the sequence of the processes1.5. Define process ownership1.6. Define process documentation2. Planning of a process2.1. Define the activities within the process2.2. Define the monitoring and measurement requirements2.3. Define the resources needed
2.4. Verify the process and its activities against its planned objectives3. Implementation and measurement of the process4. Analysis of the process5. Corrective action and improvement of the process ImplementationThis document explains the process used to evaluate changes to the 2008 version. In particular, it explains the revision process and illustrates the impact vs. benefit analysis used to evaluate potential changes.In addition to the guidance documents, ISO maintains a web site with “official interpretations” of ISO 9001. Currently, these interpretations only include ISO 9001:2000, but, because the changes to the 2008 version were limited, they are valuable.Consider a common question. An organization needs a documented procedure for preventive action (8.5.3), and must keep records of the results of preventive action (8.5.3.d). One of the interpretation requests asks, “Does sub-clause 8.5.3 a) require organizations to demonstrate, with objective evidence in the form of records, that they have undertaken actions to determine the existence of ‘potential nonconformities and their causes’?” The answer is “No”.Auditing PracticesThe ISO 9001 Auditing Practices Group maintains a website9 with guidance and information on auditing ISO 9001 quality management systems. It is an informal group of quality management system (QMS) experts, auditors, and practitioners drawn from the ISO Technical Committee 176 Quality Management and Quality Assurance (ISO/TC 176) and the International Accreditation Forum (IAF).The website, primarily aimed at QMS auditors, consultants, and quality practitioners, is an online source of papers and presentations on auditing a QMS and reflect the process based approach.The website contains almost forty guidance documents with practical advice ranging from “How to audit top management processes” to “The role and value of the audit checklist”.

Why Deploy Six Sigma?

Why Deploy Six Sigma in your organization?
Here are some reasons why we should be using Six Sigma to make process improvements:
a) It is a structured approach – if we follow the process, people will not forget any important steps along the way before they implement the solution.
b) It helps quantify the benefits and thus make it easier to sell the improvements to senior managers in the company.
c) It uses facts & data and the rigor of statistical testing to arrive at the right root cause instead of fixing symptoms or putting band-aids.
d) There is a greater likelihood of the solution being sustainable if we follow the Six Sigma process.
e) Six Sigma focuses of solving the right problems using the project selection matrix.
f) It has proven itself in a large number of deployments. Frankly, there is no better tool out there to make process improvements – especially when the root cause or the solution is not known.

Quality Planning

Whenever the term “product” is used within the ISO 9001 standard, it refers to both tangible goods and intangible services. The ISO 9001 standard is meant to be generic which means that it is suitable for all kinds of organization, whether commercial or otherwise. The purpose of the quality management system model that is being propagated by the standard is the fulfillment of customer requeirements and expectations in order to induce high levels of customer satisfaction. An unsatisfied customer is essentially a customer whose requirements or needs, and expectations of the level of services being granted upon him/her have not been met. We are all customers because we buy products all the time. So we know what it means to be a dissatisfied customer. The common reaction is to never to go back to that seller and look for other alternatives. A successful organization is one which understands what it takes to meet customer requirements in order to satisfy their needs and expectations. A specific process is thus necessary to resolve any customer complaint or dispute. This process should be geared towards satisfying the customer’s needs and expectations. The parameters of this process should be referenced from the terms of the sale and purchase. This is why it is necessary to review the customer’s requirements before committing to the sales contract. It is necessary that the customer understands what he/she is paying for and it is equally necessary for the organization to understand what it is supposed to deliver. When your organization has these processes in place, then the only thing to do next is to continually measure the effectiveness and subsequently take actions to continually improve the whole process.

ISO 9001 Standards Software

ISO 9001 Standards Software
Companies that need quality management systems realize that products like ISO 9001 software are important tools to insure their product safety, consistency and profitability. Using ISO 9001 software can help guarantee that any company can monitor productivity, customer satisfaction and product quality with reports that contain solid information.
This information is now vital to management in order for maximum efficiency in any industry. This is why ISO 9001 software is vital to any sized company. Continuous improvement means continuous profitability. Here are just a few reasons why:
o Companies increase sales because of better performance, quality, and delivery. This propels you ahead of your competition.
o ISO 9001 software helps retain employees and attract more highly qualified employees because they are assured of a controlled and consistent work environment.
o The experience of a more professional workplace boosts employee morale.
o Reduced operating costs dramatically increase your company’s productivity, leading to higher profitability.
o Customer satisfaction and higher profitability expand your market share and demand for your consistently higher product quality.
o When you’re compliant or certified to the appropriate standard, the businesses that work with you know that quality objectives, continuous improvement, and customer satisfaction are your goals.
Many companies require that their suppliers are ISO 9001 compliant; therefore, once you’re certified, your opportunities increase. ISO 9001 software has be utilized and has developed experience of helping manufacturing, service, and distribution organizations to be more efficient and more profitable through continuous improvement programs. We help you to implement the time-tested methods of continuous improvement to measure performance, analyze data, and apply the appropriate process changes. This includes using ISO 9001 software.
ISO 9001 software also offers a suite of modules to enable you to manage the document management and ISO 9001 Compliance Management process. These modules enable complete transparent system measurement with targeted action items ensuring all persons are notified of tasks and carry them out in a prompt and efficient manner. ISO 9001 software provides training in there software and also bring extensive experience in implementing the ISO 9001 software in various environments.

ISO 14001 And The Environment

The ISO 14000 family of International Standards on environmental management is a relative newcomer to ISO’s portfolio – but enviroment-related standardization is far from being a new departure for ISO.
In fact, ISO has two-pronged approach to meeting the needs of business, industry, governments, non-governmental organizations and consumers in the field of the environment.
On the one hand, it offers a wideranging portfolio of standardized sampling, testing and analytical methods to deal with specific environmental challenges. It has developed more than 350 International Standards (out of a total morethan 12000) for the monitoring of such aspects as the quality of air, water and soil. These standards are means of providing business and government with scientifically valid data on the environmental effects of economic activity.
They also serve in a number of countries as the technical basis for environmental regulations.
ISO is leading a strategic approach by developing environmental management system standards that can be implemented in any type of organization in either public or private sectors (companies, administration, public utilities). To spearhead this strategic approach, ISO establish a new technical commitee, ISO /TC 207, Environmental management, in
1993. This followed ISO’s successful pioneering experience in management system standardization with the ISO 9000 series for quality management.
ISO’s direct involvement in environmental management stemmed from an intensive consultation process, carried out within the framework of a Strategic Advisory Group on Environment (SAGE),set up in 1991, in which 20 countrie, 11 international organizations and more than 100 environmental experts participated in defining the basic requirements of a new approach to environment-related standards.
This pioneering work was consolidated with ISO’s commitment to support the objective of “sustainable development” dicussed at the United Nations Conference on Environment and Development in Rio de Janeiro in 1992.
Today, delegations of business and government experts from 55 countries have participate actively within TC 207,
and another 16 countries have observer status. These delegations are chosen by the national standars institute concerned and they are required to bring to TC 207 a national consensus on issue being addressed by the commitee.
This national consensus is derived from a process of consultation with interested parties.
From its beginning, it was recognized that ISO/TC 207 should have close cooperation with ISO/TC 176, Quality management and quality assurance, in the areas of management systems, auditing and related terminology. Active efforts are under way to ensure compatibility of ISO environmental management and quality management standards, for the benefit of all organizations wishing to implement them.

ISO 9000 and ISO 14000 in plain language

Both “ISO 9000” and “ISO 14000” are actually families of standards which are referred to under these generic titles for convenience. Both families consist of standards and guidelines relating to management systems, and related supporting standards on terminology and specific tools, such as auditing (the process of checking that the management systemconforms to the standard).
ISO 9000 is primarily concerned with “quality management“. In the everyday context, like “beauty”, everyone may have his or her idea of what “quality” is. But, in the ISO 9000 context, the standardized definition of quality refers to all those features of a product (or service) which are required by the customer. “Quality management” means what the organization does to ensure that its products or services satisfy the customer’s quality requirements and comply with any regulationsapplicable to those products or services.
ISO 14000 is primarily concerned with “environmental management”. In plain language, this means what the organization does to minimize harmful effects on the environment caused by its activities.
In addition, both ISO 9000 and ISO 14000 require organizations that implement them to improve their performance continually in, respectively, quality and environmental management.
Both ISO 9000 and ISO 14000 concern the way an organization goes about its work, and not directly the result of this work. In other words, they both concern processes, and not products – at least, not directly. Nevertheless, the way in which the organization manages its processes is obviously going to affect its final product.
In the case of ISO 9000, the efficient and effective management of processes is, for example, going to affect whether or not everything has been done to ensure that the product satisfies the customer’s quality requirements. In the case of ISO 14000, the efficient and effective management of processes is going to affect whether or not everything has been done to ensure a product will have the least harmful impact on the environment, at any stage in its life cycle, either by pollution, or by depleting natural resources.
However, neither ISO 9000 nor ISO 14000 are product standards. The management system standards in these families state requirements for what the organization must do to manage processes influencing quality (ISO 9000) or the processes influencing the impact of the organization’s activities on the environment (ISO 14000). In both cases, the philosophy is that management system requirements are generic. No matter what the organization is or does, if it wants to establish a quality management system or an environmental management system, then such a system has a number of essential features which are spelled out in the relevant ISO 9000 or ISO 14000 standards.

ISO 9001 Standards In General

ISO 9001 Standards In General
The adoption of a quality management system should be a strategic decision of an organization. The design and implementation of an organization’s quality management system is influenced by— its business environment, changes in that environment, or risks associated with that environment,— its varying needs,— its particular objectives,— the products it provides,— the processes it employs,— its size and organizational structure.It is not the intent of this International Standard to imply uniformity in the structure of quality management systems or uniformity of documentation.The quality management system requirements specified in this International Standard are complementary to requirements for products. Information marked “NOTE” is for guidance in understanding or clarifying theassociated requirement.This International Standard can be used by internal and external parties, including certification bodies, to assess the organization’s ability to meet customer, statutory and regulatory requirements applicable to theproduct, and the organization’s own requirements.The quality management principles stated in ISO 9000 and ISO 9004 have been taken into consideration during the development of this International Standard.

ISO 9001 – Compatibility with other management systems

ISO 9001 – Compatibility with other management systems
ISO 9001 and ISO 9004 are quality management system standards which have been designed to complement each other, but can also be used independently.ISO 9001 specifies requirements for a quality management system that can be used for internal application by organizations, for certification, or for contractual purposes. It focuses on the effectiveness of the qualitymanagement system in meeting customer requirements.ISO 9004 gives guidance on a wider range of objectives of a quality management system than does ISO 9001, particularly for the continual improvement of an organizations overall performance and efficiency, as well as its effectiveness. ISO 9004 is recommended as a guide for organizations whose top management wishes to move beyond the requirements of ISO 9001, in pursuit of continual improvement of performance. However, it is not intended for certification or for contractual purposes.
During the development of this International Standard, due consideration was given to the provisions of ISO 14001:2004 to enhance the compatibility of the two standards for the benefit of the user community.This International Standard does not include requirements specific to other management systems, such as those particular to environmental management, occupational health and safety management, financialmanagement or risk management. However, this International Standard enables an organization to align or integrate its own quality management system with related management system requirements. It is possible foran organization to adapt its existing management system(s) in order to establish a quality management system that complies with the requirements of this International Standard.

Certification In ISO 9001 Standards

Certification In ISO 9001 Standards
Certification involves an independent assessment of your quality system to confirm that it meets the requirements of ISO 9001. You will need to design, document and implement your own quality system. The system will need to cover all the requirements of the ISO 9001 standard. Many certification bodies will not conduct a formal assessment until the system has been operating for at least three months. Your quality system cannot be audited until you have generated documentary evidence to show that you are meeting the standard. To find a certification body with relevant experience in your sector and accreditation from the United Kingdom Accreditation Service (UKAS). Certification by a non-UKAS accredited body is likely to lead to credibility problems with your customers. Arrange a visit from the certification body’s auditors. UKAS prohibits auditors from acting as consultants. They will not tell you how to meet the standard but can offer advice. They will seek objective evidence that you are complying with each of the clauses of the ISO 9001 standard. The auditors will tell you of any shortcomings in your system. If you satisfy the standard, the auditors put your name forward for certification. You will be required to correct these problems within a specified timeframe. You can also be certificated if the auditors only identify a small number of ‘minor’ problems. Once you are certificated, you can display the certification body’s logo, and if the body is UKAS-accredited, the UKAS ‘tick and crown’ symbol (consult UKAS about exceptions to this rule). If the auditors identify more serious ‘major’ problems, you will be required to correct these before certification. These surveillance visits normally take place twice a year at agreed dates. All certification bodies are required to revisit registered companies to ensure they still meet the requirements of the standard. You will be given time to deal with any minor or major problems which are identified before any action is taken to withdraw your certificate.

Costs and resources Of ISO 9001 Standards

Costs and resources Of ISO 9001 Standards
The largest cost of ISO 9001 is the involvement of company

employees. The ‘ownership’ created by involving employees in designing the quality system maximises the chances of them accepting it. Reducing this cost by minimising employee involvement is a false economy. The next largest cost will be for designing and developing the system. This needs to be led by someone with experience in this particular field. You may have someone within your own organisation who has carried out this role, perhaps with a former employer. Your Business Link may offer free or subsidised advice and training, and will be able to provide names of approved consultants. Grants for work in this area tend to be directed through Business Links. Different areas have different grants, which depend on local conditions. A typical grant may cover up to 50 per cent of the cost of an approved consultant. Certification fees are around £800 for the smallest companies. Overall costs depend upon company size and the number of locations involved. Ask certification bodies for quotes for initial audits and surveillance visits. Many will give an all-inclusive price, including surveillance visits for three years. Typically, special rates will depend on how long the assessment is likely to take and what the company’s turnover is. Ask your certification body if it offers special rates for small companies. The standard requires that companies have trained internal auditors to conduct audits on the system. An internal audit can provide an effective means of monitoring the system and identifying areas for improvement. For further details, contact the International Register of Certificated Auditors.

ISO 9000 family of standards and SMEs

ISO 9000 family of standards and SMEs
The ISO 9000 quality management system is generic in nature and applicable to all companies, regardless of the type and size of the business, including small and medium enterprises (SMEs), and they are applicable to all categories of products, whether hardware, software, processed materials or services. ISO 9001:2008 specifies what is required to be done by an organization but does not indicate how it should be done, thus giving the enterprise a lot of flexibility to run its business.
It is simple to use, clear in language and easily understandable. The new standard is also appropriate for small companies, as it does not demand the type of paper bureaucracy needed for the implementation of the 1994 version. Only six documented procedures are now required and need for other procedures/documents can be decided by the company. Companies will, however, be required to provide objective evidence that the QMS has been effectively implemented. A small company may find it appropriate to include the description of its entire QMS within a single Quality Manual, including all the documented procedures required by the standard.
The process-based approach given in the new standard will tend to ensure that systems are documented and implemented in a manner that suits a SME’s own way of doing business. This approach makes it easier for SMEs to implement, instead of just taking over an artificial structure of QMS imposed from outside. It will also be easier for SMEs managed by their owners to demonstrate “top management commitment” towards QMS. Furthermore, in a SME, it is easier to ensure effective internal communication, better utilization of resources, people clearly understanding their roles and responsibilities, etc.
The new standard has included a provision for deciding on the applicability of
certain product realization processes included in section 7 of the standard. For example, if the SME has no responsibility for the design and development of the product it provides, the SME may say so, giving the reasoning behind it, in the Quality Manual; the certification body, being satisfied that this corresponds, would then award it certification to ISO 9001:2008. Similarly, other product realization processes such as purchasing, product identification and traceability, control of measuring devices may also be excluded if these are not applicable for the type of products or services being provided by the company.
It is also possible that SMEs may not have adequate in-house expertise or there may be other constraints to perform all processes on their own. In such cases, the new standard also permits the outsourcing of any of the QMS processes, providing the company has control over such processes. The nature of this control will depend on the nature of the outsourced or subcontracted processes and the risk involved. For example, the design and development process may be subcontracted to an expert or a specialized agency, inspection/verification of goods purchased may be subcontracted to an inspection agency, internal audit of QMS can be outsourced, etc. However, overall responsibility for ensuring control on all outsourced processes as per requirements of the standard would remain with the company’s management.

Management Principles Of ISO 9001 Standards

Management Principles Of ISO 9001 Standards
ISO 9000 is based on eight management principles:
• Customer focus, resulting in meeting customer requirements and striving to exceed them;
• Leadership, aiming to create an internal environment in which people are fully involved;
• Involvement of people who are the essence of an organization;
• Process approach, resulting in improved efficiency to obtain desired results;
• System approach to management, leading to improved effectiveness and efficiency through identification, understanding and management of interrelated processes;
• Continual improvement, which becomes a permanent objective of the organization;
• Factual approach to decision-making, based on the analysis of data and information; and
• Mutually beneficial supplier relationships, based on an understanding of their interdependence.
ISO 9000 encourages the adoption of the process approach to manage an organization. There are five main areas considered for the revised process model in ISO 9000:
• Quality management system
• Management responsibility
• Resource management
• Product realization
• Measurement, analysis and improvement.

Costs Of Setting Up A Quality Management System

Costs Of Setting Up A Quality Management System
Common implementation costs that companies incur can be broken down into direct and indirect costs.
The direct costs include, inter alia, the following:
• hiring consultants or external trainers, if required;
• sending personnel for external training;
• acquiring relevant national and international standards of the ISO 9000 family and other related books and publications; and
• acquiring additional equipment, instruments and other resources as identified by the company.
The indirect costs include, inter alia, the following:
• time spent by the management and other staff in developing the system;
• reorganization of the processes, including improvements in the house-keeping, if required;
• external calibration charges for equipment to ensure national and/or international measurement traceability;
• organizing in-house training;
• time spent by internal auditors for periodic internal audits;
• corrective actions, including revision of manuals and procedures, if required; and
• expenditure on word-processing, stationery and other consumables required for the preparation of manuals and documenting procedures, etc.
Some factors can help to lower the above costs. They include:
• having people in the company already conversant with QMS requirements;
• having documented system-related activities such as work instructions, quality plans, procedures, etc. already in place;
• using consultants only for specific activities like gap analysis, training of
auditors, pre-assessment audits, etc., and having in-house staff oversee the remaining activities.
On the other hand, there are factors that can mean higher implementation costs for the company. For example, if your company carries out activities at different locations, or if your company is involved in product design and development, this may increase costs.

Benefits Of Obtaining ISO 9000 Certification

Benefits Of Obtaining ISO 9000 Certification
Implementing a quality management system brings internal benefits to most organizations, as well as opening up opportunities vis-à-vis the outside world.
Internal benefits to the company include:
• improved customer focus and process orientation within the company;
• improved management commitment and decision-making;
• better working conditions for employees;
• increased motivation of employees;
• reduced cost of internal failures (lower rates of rework, rejection, etc.) and external failures (fewer customer returns, replacements, etc.); and last but not least,
• continual improvement of the quality management system.
The following external benefits are generated:
• customers are more confident that they will receive products conforming to their requirements, which in turn results in higher customer satisfaction;
• an improved image of the company;
• more aggressive publicity, as customers can be informed of the benefits of their doing business with a company that manages the quality of its outputs;
• more confidence that the company’s products meet relevant regulatory
requirements;
• better objective evidence to defend product liability charges if such are brought by customers.
Refer http://www.iso9001-standard.us for more information.

Implementing A Quality Management System

Implementing A Quality Management System
An ISO 9000:2008 quality management system can be implemented by following the steps detailed as follows:
1. Evaluate the organization’s need/goals for implementing a QMS Need may arise from repeated customer complaints; frequent warranty returns; delayed deliveries; high inventories; frequent production hold-ups; and high level of rework or rejection of products or services.
At this stage, identify the goals which you would like to achieve through a QMS, such as customer satisfaction, increased market share, improved communications and morale in the organization, greater efficiency and profitability, etc. Another objective in implementing a QMS may be a demonstration of compliance through third party certification, which may be requested by an important client or required for enlisting as a supplier to large companies, e.g., original equipment manufacturers (OEMs).
2. Obtain information about the ISO 9000 family
The persons identified for initiating the development of an ISO 9000 QMS need tounderstand the requirements of ISO 9001:2008 as read with ISO 9000:2000 and ISO 9001:2008.
Supporting information such as quality management principles, frequently asked questions (FAQs), guidance on clause 1.2 (application) of ISO 9001:2008, guidance on documentation requirements of ISO 9001:2008 and other brochures are available free of charge on the ISO web site;
3. Appoint a consultant, if necessary
If, within the organization, you do not have adequate competence to develop a QMS, you may appoint a consultant. Before doing so, it is good to check his/her background; knowledge about the product realization processes of your organization; and experience in helping other organizations to achieve their stated goals, including certification.
Carry out a cost-benefit analysis of hiring a consultant and agree the scope of his/her work in writing. It is also possible to appoint a consultant only for the training of key staff; the latter can then carry out further training and development of the system.
4. Awareness and training
Raise awareness about QMS requirements amongst all personnel performing activities that affect quality. Plan for and provide specific training on how to develop Quality Manuals; on procedures; on QMS planning; on how to identify and implement improvement processes; and on how to audit compliance with the QMS, etc.
The Institute of Quality Assurance (IQA), the American Society for Quality (ASQ)and the International Auditor and Training Certification Association (IATCA) can provide lists of training organizations.
5. Gap analysis
Evaluate gaps between your existing quality management system and the QMS requirements of ISO 9001. Prepare how to bridge these gaps, including by planning for any additional resources required. Gap analysis may be carried out through selfassessment or by the external consultant.
6. Product realization processes
Review clause 7 of ISO 9001:2008 relating to “Product realization” to determine how the requirements apply or do not apply to your company’s QMS.
The processes covered by this clause include:
• Customer-related processes
• Design and development
• Purchasing
• Production and service provision
• Control of measuring and monitoring devices
Note that if your company is not responsible for preparing the design of your product, you can exclude the requirement for “design and development” from your QMS and explain the reasons for doing so in your Quality Manual.
7. Staffing
Decide on the responsibilities of the persons who will be involved in developing and documenting the QMS, including the appointment of a management representative who will oversee the implementation of the QMS. Establishing a project Steering Committee may also prove useful to oversee progress and provide resources wherever required.
8. Planning a time frame
Prepare a complete plan to close the gaps identified in Step 5 to develop the QMS processes. In the plan, include activities to be performed, resources required, responsibilities and an estimated completion time for each activity. Clauses 4.1 and
7.1 of ISO 9001:2008 provide information that should be used when developing the plan. The total time required for each phase (planning, documentation, implementation and evaluation) depends on the extent of the gaps in your existing QMS.
9. Draft a Quality Manual
In your Quality Manual;
• Include how the QMS applies to the products, processes, locations and departments of the organization;
• Exclude any requirement with justification for doing so as decided in step 6
above;
• Refer to or include documented procedures for QMS;
• Describe the interaction between the processes of the QMS, e.g., the interaction between product realization processes and other management, measurement and improvement processes; and
• Draft the quality policy and quality objectives for the organization.
The staff concerned in the organization should review the Quality Manual and the documented procedures so that their comments and suggestions can be taken into account before the Quality Manual and procedures are approved for issue and use.
The effective date of implementation should also be decided.
10. Carry out internal audits
During the phase of implementation of some three to six months after the documentation has been written, the trained auditors should carry out one or two internal audits covering all activities for the QMS, and concerned management should take corrective action on the audit findings without delay. Wherever required, revise the manuals, procedures and objectives. After each internal audit, the top management should review the effectiveness of the system and provide necessary resources for corrective actions and improvements.
11. Apply for certification
On satisfactory completion of Step 10, and if your company decides to obtain third party certification, you can make an application for certification to an accredited certification body. The certification audit process is explained section VII.
12. Conduct periodic evaluations
After certification, the organization should periodically conduct internal audits to review the effectiveness of the QMS and see how it can be “continually improved”. The organization should evaluate periodically if the purpose and goals (see Step 1) for which the QMS was developed are being achieved, including its continual improvement.

ISO 9001 Standards – Management Review

ISO 9001 StandardsManagement Review
Review the quality management system at planned intervals to:- Assess possible opportunities for improvementEnsure a suitable, adequate, and effective system

- Evaluate the need for any changes to the system
- Consider the need for changes to the quality policy and objectives
Maintain records of the management reviews.
Inputs for management review must include information on:
- Results of audits
- Customer feedback
- Process performance and product conformity
- Status of preventive and corrective actions
- Follow-up actions from earlier reviews
- Changes that could affect the quality system
- Recommendations for improvement
Outputs from the management review must include any decisions and actions related to:
- Improvement of the effectiveness of the quality management system and its processes
- Improvement of product related to customer requirements
- Resource needs

ISO 9001 Standards – Management Review

ISO 9001 StandardsManagement Review
Review the quality management system at planned intervals to:- Assess possible opportunities for improvementEnsure a suitable, adequate, and effective system

- Evaluate the need for any changes to the system
- Consider the need for changes to the quality policy and objectives
Maintain records of the management reviews.
Inputs for management review must include information on:
- Results of audits
- Customer feedback
- Process performance and product conformity
- Status of preventive and corrective actions
- Follow-up actions from earlier reviews
- Changes that could affect the quality system
- Recommendations for improvement
Outputs from the management review must include any decisions and actions related to:
- Improvement of the effectiveness of the quality management system and its processes
- Improvement of product related to customer requirements
- Resource needs

ISO 9001 Standards – Design and Development

ISO 9001 Standards - Design and Development
Plan and control the product design and development. This planning must determine the:Identify problems and propose any necessary actions
- Stages of design and development
- Appropriate review, verification, and validation activities for each stage
- Responsibility and authority for design and development
The interfaces between the different involved groups must be managed to ensure effective communication and the clear assignment of responsibility. Update, as appropriate, the planning output during design and development.
NOTE: Design and development review, verification, and validation have distinct purposes. They can be conducted and recorded separately or in any combination, as deemed suitable for the product and the organization.
Determine product requirement inputs and maintain records. The inputs must include:
- Functional and performance requirements
- Applicable statutory and regulatory requirements
- Applicable information derived from similar designs
- Requirements essential for design and development
Review these inputs for adequacy. Resolve any incomplete, ambiguous, or conflicting requirements.
Document the outputs of the design and development process in a form suitable for verification against the inputs to the process. The outputs must:
- Meet design and development input requirements
- Provide information for purchasing, production, and service
- Contain or reference product acceptance criteria
- Define essential characteristics for safe and proper use
- Be approved before their release
Perform systematic reviews of design and development at suitable stages in accordance with planned arrangements to:
- Evaluate the ability of the results to meet requirements
- The reviews must include representatives of the functions concerned with the stage being reviewed. Maintain the results of reviews and subsequent follow-up actions.

ISO 9001 Standards – Control of Measuring and Monitoring Equipment

ISO 9001 Standards - Control of Measuring and Monitoring Equipment
Determine the monitoring and measurements to be made, and the required equipment, to provide evidence of product conformity. Use and control the monitoring and measuring devices to ensure that measurement capability is consistent with monitoring and measurement requirements.
Where necessary to ensure valid results:
- Calibrate and/or verify the measuring equipment at specified intervals or prior to use
- Calibrate the equipment to national or international standards (or record other basis)
- Adjust or re-adjust as necessary
- Identify the measuring equipment in order to determine its calibration status
- Safeguard them from improper adjustments
- Protect them from damage and deterioration
Assess and record the validity of prior results if the device is found to not conform to requirements. Maintain records of the calibration and verification results.
Confirm the ability of software used for monitoring and measuring for the intended application before its initial use (and reconfirmed as necessary).
NOTE: Confirming the ability of software to satisfy the intended application would typically include its verification and configuration management to maintain its suitability for use.
For More Information Please Visit http://www.iso9001-standard.us

ISO 14001:2004 Standards Contents

ISO 14001:2004 Standards
ISO 14000 is a series of international standards on environmental management. It provides a framework for the development of an environmental management system and the supporting audit programme.
The main thrust for its development came as a result of the Rio Summit on the Environment held in 1992.
ISO 14000 is an Environmental Management System (EMS), which requires that an organization consider the environmental aspects of its products and services.
Iso14000 approach forces you to take a hard look at all areas of your business that has an environmental impact.
Iso14000 is the world’s first series of Internationally accepted Standards for Environmental Management Systems (EMS).
Iso14000 elevates Environmental Management to a Strategic Level that can be applied to any organization, from any industry, anywhere in the world.
ISO 14000 is a series of voluntary standards and guideline reference documents.
The part of the overall management system that includes organizational structure, planning activities, responsibilities, practices, procedures, processes and resources for developing, implementing, achieving, reviewing and maintaining the environmental policy.
Iso14000 is the world’s first series of Internationally accepted Standards for Environmental Management Systems (EMS).
Iso14000 elevates Environmental Management to a Strategic Level that can be applied to any organization, from any industry, anywhere in the world.
ISO 14000 is a series of voluntary standards and guideline reference documents.
The part of the overall management system that includes organizational structure, planning activities, responsibilities, practices, procedures, processes and resources for developing, implementing, achieving, reviewing and maintaining the environmental policy.
ISO 14000 is an Environmental Management System (EMS) who’s purpose is:
· A management commitment to pollution prevention.
· An understanding of the environmental impacts (reducing) of an organization’s activities.
A commitment (pollution prevention) to employees, neighbors and customers
ISO 14001 is the corner stone standard of the ISO 14000 series. It specifies a framework of control for an Environmental Management System against which an organization can be certified by a third party.
The environment cannot be protected by our convictions or goodwill alone. Efforts to protect the environment must be planned, coordinated and organized into a system, such as ISO 14001.
ISO14001 requires an Environmental Policy to be in existence within the organisation, fully supported by senior management, and outlining the policies of the company, not only to the staff but to the public. The policy needs to clarify compliance with Environmental Legislation that may effect the organization and stress a commitment to continuous improvement. Emphasis has been placed on policy as this provides the direction for the remainder of the Management System.
Those companies who have witnessed ISO9000 Assessments will know that the policy is frequently discussed during the assessment, many staff are asked if they understand or are aware of the policy, and any problems associated with the policy are seldom serious. The Environmental Policy is different, this provides the initial foundation and direction for the Management System and will be more stringently reviewed than a similar ISO9000 policy. The statement must be publicised in non-technical language so that it can be understood by the majority of readers. It should relate to the sites within the organisation encompassed by the Management System, it should provide an overview of the company’s activities on the site and a description of those activities. A clear picture of the company’s operations.
The preparatory review and definition of the organization’s environmental effects is not part of a ISO14001 Assessment, however examination of this data will provide an external audit with a wealth of information on the methods adopted by the company. The preparatory review itself should be comprehensive in consideration of input processes and output at the site. This review should be designed to identify all relevant environmental aspects that may arise from existence on the site. These may relate to current operations, they may relate to future, perhaps even unplanned future activities, and they will certainly relate to the activities performed on site in the past (i.e. contamination of land).
The initial or preparatory review will also include a wide-ranging consideration of the legislation which may effect the site, whether it is currently being complied with, and perhaps even whether copies of the legislation are available. Many of the environmental assessments undertaken already have highlighted that companies are often unaware of ALL of the legislation that affects them, and being unaware, are often not meeting the requirements of that legislation.
The company will declare its primary environmental objectives, those that can have most environmental impact. In order to gain most benefit these will become the primary areas of consideration within the improvement process, and the company’s environmental program. The program will be the plan to achieve specific goals or targets along the route to a specific goal and describe the means to reach those objectives such that they are real and achievable. The Environmental Management System provides further detail on the environmental program. The EMS establishes procedures, work instructions and controls to ensure that implementation of the policy and achievement of the targets can become a reality. Communication is a vital factor, enabling people in the organisation to be aware of their responsibilities, aware of the objectives of the scheme, and able to contribute to its success.
As with ISO9000 the Environmental Management System requires a planned comprehensive periodic audit of the Environmental Management System to ensure that it is effective in operation, is meeting specified goals, and the system continues to perform in accordance with relevant regulations and standards. The audits are designed to provide additional information in order to exercise effective management of the system, providing information on practices which differ to the current procedures or offer an opportunity for improvement.
In addition to audit, there is a requirement for Management Review of the system to ensure that it is suitable (for the organization and the objectives) and effective in operation. The management review is the ideal forum to make decisions on howe to improve for the future.
The newly revised ISO 14001:2004 specifies the requirements for an environmental management system (EMS), which provides a framework for an organization to control the environmental impacts of its activities, products and services, and to continually improve its environmental performance. It applies to those environmental aspects which the organization can control and over which it can be expected to have an influence. It does not itself state specific environmental performance criteria. ISO 14001:2004 is applicable to any organization that wishes to:
· implement, maintain and improve an environmental management system
· assure itself of its conformance with its stated environmental policy
· demonstrate such conformance to others
· seek certification/registration of its environmental management system by an external organization
· make a self-determination and self-declaration of conformance with this international standard.
All the requirements in this standard can be incorporated into any environmental management system. Having been revised, the improved ISO 14001 is now expected to bring the benefits of implementing an EMS to more businesses than ever. The standard is now easier to understand and use and has more detailed checklists for inputs and outputs from the management review and has increased compatibility to ISO 9001. Organizations who are currently registered to ISO 14001:1996 will have an 18-month transition period to register to ISO 14001:2004.

ISO 9001 Standards New Blogs

Some of the new blogs on ISO 9001 Standards & ISO 14001 standards was found as below:
http://iso14000standards.blogspot.com/
http://iso-9001-standards.blogspot.com/
http://iso14001environmentmanagementsystem.blogspot.com/
http://iso9001qualitymanagementsystem.blogspot.com/
http://iso9001qualitymanual.blogspot.com/
http://iso9000standards.blogspot.com/
http://iso9001-standards.blogspot.com/
http://iso14001standards.blogspot.com/

ADVANTAGES ACHIEVED BY THE IMPLEMENTATION OF Quality Management System

ADVANTAGES ACHIEVED BY THE IMPLEMENTATION OF Quality Management System (QMS)
- An Romania Perspective
The assurance of quality of the delivered products and services has always represented the main goal of any organisation which wants to be on the market. The concept of „quality” is larger than in the past, referring also to management aspects. Thus, the quality of products and services does not represent only a goal, but a consequence of the quality of the whole managerial activities, workers, and even a quality of partnerships. Modern industrial reorganisations are usually realised through the strategies of quality management, due to the fact that these are able to release the continuous and substantial improvements of the economical agents’ performances.
Within such a frame, one possibility for an organisation to maintain and to gain new positions on a market is to design, to implement and to certificate a Quality Management System (QMS), system through which all processes are controlled.
The Romanian pharmaceutical market is currently restricted as volume and value compared to other countries in the region. Joining the European Union and future improvement of living conditions will mean increase of pharmaceutical expenses per person, considering the fact that the demand for pharmaceutical products (medication) is not influenced by the evolution of prices. After 1990, foreign manufacturers have become interested in the increasing potential of Romania, a country of 22 million inhabitants with a very low intake of drugs per person, due to the low living standard. They have penetrated the market through direct import companies, through license agreements, acquisitions and privatizations.
Romanian manufacturers have tried to shift their direction towards export, but the barrier represented by the Good Manufacturing Practice (GMP – for production) and ISO 9001:2000 standards (for distribution) has stopped their penetration of new markets. Their exports mainly targeted Russia, Moldova and former socialist countries. Without norms of this kind, also known as standards, today’s international trade would be inconceivable because every product would have to be checked in keeping with individual criteria. Norms, therefore, create comparability.
Nowadays, the external market has, for several companies, the same importance as the domestic one. The conquest of external market is essential because it brings currency, improves commercial balance, creates new working places and promotes the managerial or technological know-how transfer.
ISO 9000 is a generic name given to a family of standards developed to provide a framework around which a quality management system can be effectively implemented. These standards were developed mainly to facilitate commercial relationships and to increase the confidence of consumers in the capability of a supplier to constantly satisfy the requirements of products and services quality.
The paper presents some advantages achieved by implementation of Quality Management System in pharmaceutical industry, namely S.C. X Company S.A from Tirgu-Mures, one of the most important producer and distributor of pharmaceutical products in Romania.
Using a proven management system combined with ongoing external validation, enables the X Company to continually renew its strategies, domestic and external operations and service level. To this respect, the paper presents the main steps in implementing the Quality Management System within this organisation and some benefits of the registration such as increasing domestic sales, but most off all, the penetration and increasing sales on external markets.
The ISO 9000 family of standards represents an international consensus on good quality management practices. It consists of standards and guidelines related to quality management systems and related supporting standards.
ISO 9001:2000 is the standard that provides a set of standardized requirements for a quality management system, regardless of what the user organization does, its size, or whether it is in the private, or public sector. It is the only standard in the family against which organizations can be certified – although certification is not a compulsory requirement of the standard.
The other standards in the family cover specific aspects such as fundamentals and vocabulary, performance improvements, documentation, training, and financial and economic aspects. Implementing a Quality Management System within an organisation needs to be a decision of top management. The objective of the quality system needs to be clearly defined so that the system can be effective. The design and implementation of quality management system will vary depending on the type, size and products of the organisation and should be used in conjunction with the ISO 9000:2000 standards. Implementing a Quality Management System is not that difficult as it seems, the key is planning and commitment. How complex or simple the QMS is depends entirely on the organisation and what the objectives are. It can be a simple guide to the organisation policy and procedures, or it can document every task and procedure. It really depends on how much risk is involved and how much control is required.
The documentation of QMS involves:
1. The policy to refer to quality, the objectives of quality and the book of quality (Quality Management System)
2. Management Responsibility
3. Resource Management
4. Product Realisation
5. Measurements, Analysis and Improvement
A well managed quality system will have impact on:
1. customer loyalty and repeat business
2. market share
3. operational efficiencies
4. flexibility and ability to respond to market opportunities
5. effective and efficient use of resources
6. cost reductions
7. competitive advantages

ISO 9001 Standards – Documented Procedures

ISO 9001 Standards – Documented Procedures

The standard requires the management system documentation to include documented procedures required by ISO 9001 Standards.
ISO 9000 defines a procedure as a specified way to carry out an activity or a process. This definition is ambiguous because an activity is on a different scale than a process. Process outputs are dependent upon many factors of which activities are but one. An activity is the smallest unit of work. Several activities accomplish a task and several tasks reflect the stages in a process but there is more to a process than a series of tasks. This definition also esults in a belief that procedures are documented processes but this too is inaccurate. Procedures tell us how to proceed don‘t need to produce any others. The specific procedures required are:

(a) A documented procedure for document control
(b) A documented procedure for the control of records
(c) A documented procedure for conducting audits
(d) A documented procedure for nonconformity control
(e) A documented procedure for corrective action
(f) A documented procedure for preventive action
These areas all have something in common. They are what the authors of the early drafts of ISO 9000 :2008 referred to as system procedures ? they apply to the whole system and are not product, process or customer specific although it is not uncommon for customers to specify requirements that would impact these areas. Why procedures for these aspects are required and not for other aspects of the management system is unclear but it seems that the authors of ISO 9000 felt these were not processes ? a conclusion I find difficult to justify.
They are certainly not business processes but could be work processes. However, there is another message that this requirement conveys. It is that procedures are not required for each clause of the standard. Previously, countless organizations produced a manual of 20 procedures to match the 20 elements of ISO 9001. Some limited their procedures to the 26 procedures cited by the standard and others produced as many as were necessary to respond to the requirements.
Document control is a work process or a number of work processes because the inputs pass through a number of stages each adding value to result in the achievement of defined objectives. These are the acquisition, approval, publication, distribution, storage, maintenance, improvement, and disposal stages. These are not tasks but processes that achieve defined objectives and involve both physical, financial and human resources. Within these processes are tasks, each of which may require documented procedures as they are initiated.
Control of records is also a work process similar to document control. There are the preparation, storage, access, maintenance and disposal stages. This is not one uninterrupted flow but a life cycle. There is not one task but several performed at different times for different reasons.
Auditing is certainly a process with a defined objective. Without the provision of competent personnel and a suitable environment, audits will not achieve their objectives no matter how many times the procedure is implemented.
Nonconformity control like records control is a work process for the same reasons. The sequence of tasks is not in the form of an uninterrupted sequence. The sequence of stages may be identification, documentation, segregation, review, remedial action and disposal but this is not a continuous sequence. There are breaks and different procedures may apply at each stage depending on what it is that is nonconforming.
There is little merit in having one corrective action procedure when the source of problems that require corrective action is so varied. One Corrective Action Form might be appropriate but its application will be so varied that it is questionable whether one size fits all. Presenting top management with a nonconformity report because it has been detected that the organization charts are not promptly updated following a change, will not motivate them into action. Corrective action forms part of every process rather than being a separate process. It is unreasonable to force all actions aimed at preventing the recurrence of problems through one process. Many problems are prevented from recurring not by following a procedure, but by the designer, the producer, supplier, manager remembering they had a problem last time and doing it differently the next ? i.e. they learn from their mistakes. No forms filled in, no procedures followed ? just people using their initiative ? this is why corrective action is part of every process operation.
Preventive action remains one of the most misunderstood requirements of ISO 9001 because it is mistaken for corrective action but more on this. There is even less justification for one preventive action procedure because the source of potential problems is so varied. Preventive actions are taken in design, in planning, in training and in maintenance under the name of FMEA, Reliability Prediction, Quality Planning, Production Planning, Logistic Planning, Staff Development, Equipment Maintenance ? preventive actions are built into these processes and similar to corrective action are part of every process design.

Continual improvement in the quality management system

Continual Improvement In The Quality Management System
The ISO 9001 standard requires the organization to continually improve the effectiveness of the quality management system in accordance with the requirements of ISO 9001 and to implement action necessary to achieve planned results and continual improvement of the identified processes.
ISO 9000 defines continual improvement as a recurring activity to increase the ability to fulfil requirements. As the organization’s objectives are its requirements, continually improving the effectiveness of the quality management system means continually increasing the ability of the organization to fulfil its objectives.
If the performance of a process parameter is currently meeting the standard that has been established, there are several improvement actions you can take:
Raise the standard e.g. if the norm for the sales ratio of orders won to all orders bid is 60%, an improvement programme could be developed for raising the standard to 75% or higher
Increase efficiency e.g. if the time to process an order is within limits, identify and eliminate wasted resources
Increase effectiveness e.g. if you bid against all customer requests, by only bidding for those you know you can win you improve your hit rate
You can call all these actions improvement actions because they clearly improve performance. However, we need to distinguish between being better at what we do now and doing new things. Some may argue that improving efficiency is being better at what we do now, and so it is – but if in order to improve efficiency we have to be innovative we are truly reaching new standards. Forty years ago, supervisors in industry would cut an eraser in half in the name of efficiency rather than hand out two erasers. Clearly this was a lack of trust disguised as efficiency improvement and it had quite the opposite effect. In fact they were not only increasing waste but also creating a hostile environment.
Each of the improvement actions is dealt with later in the book and the subject of continual improvement addressed again under Quality planning.
There are several steps to undertaking continual improvement:
1. Determine current performance
2 Establish the need for change
3 Obtain commitment and define the improvement objectives
4 Organize diagnostic resources
5 Carry out research and analysis to discover the cause of current performance
6 Define and test solutions that will accomplish the improvement objectives
7 Product improvement plans which specify how and by whom the changes will be implemented
8 Identify and overcome any resistance to change
9 Implement the change
10 Put in place controls to hold new levels of performance and repeat step one
For more information, please visit http://www.iso9001-standard.us

Preparing ISO 9001 Quality Manual

Preparing ISO 9001 Quality Manual
The standard requires a quality manual to be established and maintained that includes the scope of the quality management system, the documented procedures or reference to them and a description of the sequence and interaction of processes included in the quality management system.
ISO 9001 defines a quality manual as a document specifying the quality management system of an organization. It is therefore not intended that the quality manual be a response to the requirements of ISO 9001. As the top-level document describing the management system it is a system description describing how the organization is managed.
Countless quality manuals produced to satisfy ISO 9001:2008, were no more than 20 sections that paraphrased the requirements of the standard. Such documentation adds no value. They are of no use to managers, staff or auditors. Often thought to be useful to customers, organizations would gain no more confidence from customers than would be obtained from their registration certificate.
A description of the management system is necessary as a means of showing how all the processes are interconnected and how they collectively deliver the business outputs. It has several uses as :
1. a means to communicate the vision, values, mission, policies and objectives of the organization
2. a means of showing how the system has been designed
3. a means of showing linkages between processes
4. a means of showing who does what an aid to training new people
5. a tool in the analysis of potential improvements
6. a means of demonstrating compliance with external standards and regulations
When formulating the policies, objectives and identifying the processes to achieve them, the manual provides a convenient vehicle for containing such information. If left as separate pieces of information, it may be more difficult to see the linkages.
The requirement provides the framework for the quality manual. Its content may therefore include the following:
1 Introduction
(a) Purpose (of the manual)
(b) Scope (of the manual)
(c) Applicability (of the manual)
(d) Definitions (of terms used in the manual)
2 Business overview
(a) Nature of the business/organization – its scope of activity, its products and services
(b) The organization’s interested parties (customers, employees, regulators, shareholders, suppliers, owners etc.)
(c) The context diagram showing the organization relative to its external environment
(d) Vision, values
(e) Mission
3 Organization
(a) Function descriptions
(b) Organization chart
(c) Locations with scope of activity
4 Business processes
(a) The system model showing the key business processes and how they are interconnected
(b) System performance indicators and method of measurement
(c) Business planning process description
(d) Resource management process description
(e) Marketing process description
(f) Product/service generation processes description
(g) Sales process description
(h) Order fulfilment process description
5 Function matrix (Relationship of functions to processes)
6 Location matrix (Relationship of locations to processes)
7 Requirement deployment matrices
(a) ISO 9001 compliance matrix
(b) ISO 14001 compliance matrix
(c) Regulation compliance matrices (FDA, Environment, Health, Safety, CAA etc.)
8 Approvals (List of current product, process and system approvals)
The process descriptions can be contained in separate documents and should cover the topics identified previously (see Documents that ensure effective planning, operation and control of processes ).
As the quality manual contains a description of the management system a more apt title would be a Management System Manual (MSM) or maybe a title reflecting its purpose might be Management System Description (MSD).
In addition a much smaller document could be produced that does respond to the requirements of ISO 9001, ISO 14001, and the regulations of regulatory authorities. Each document would be an exposition produced purely to map your management system onto these external requirements to demonstrate how your system meets these requirements. When a new requirement comes along, you can produce a new exposition rather than attempt to change your system to suit all parties. A model of such relationships is illustrated in Figure 4.10. The process descriptions that emerge from the Management System Manual describe the core business processes and are addressed in Chapter 4 under the heading of Documents that ensure effective operation and control of processes.

Scope Of The Quality Management System

Scope Of The Quality Management System
The ISO 9001 standard requires the quality manual to include the scope of the quality management system including details of justification for any exclusion. The standard addresses activities that may not be relevant or applicable to an organization. The permissible exclusions are explained in section 1.2 of ISO 9001. Here it states that the organization may only exclude requirements that neither affect the organization’s ability, nor its responsibility to provide product that meets customer and applicable regulatory requirements. The requirements for which exclusion is permitted are limited to those in section 7 of the standard.
Under ISO 9001:2008, it was possible for organizations to exclude functions and processes of their organization that may have been difficult to control or were not part of the order fulfilment cycle. Organizations that designed their own products but not for specific customers could escape bringing these operations into the management system. Marketing was omitted because it operated before placement of order. Accounting, Administration, Maintenance, Publicity, Public Relations and After Sales Support functions were often omitted because there were no requirements in the standard that specifically dealt with such activities. As there is no function in an organization that does not directly or indirectly serve the satisfaction of interested parties, it is unlikely that any function or process will now be excluded from the quality management system.
It is sensible to describe the scope of the quality management system so as to ensure effective communication. The scope of the quality management system is one area that generates a lot of misunderstanding particularly when dealing with auditors, consultants and customers. When you claim you have a management system that meets ISO 9001 it could imply that you design, develop, install and service the products you supply, when in fact you may only be a distributor. Why you need to justify specific exclusions is uncertain because it is more practical to justify inclusions.
The scope of the quality management system is the scope of the organization. There is no longer any reason to exclude locations, activities, functions or processes for which there is no requirement in the standard. The reason is because the ISO 9000 family now serves customer satisfaction and is not limited to quality assurance as were the 1994 versions of ISO 9001, ISO 9002 and ISO 9003.
It is not appropriate to address exclusions by inserting pages in the manual corresponding to the sections of the standard and adding justification if not within the scope of the management system – such as ‘We don’t do this!’.
It is much more appropriate to use an appendix as indicated previously in the manual contents list. By describing the nature of the business, you are establishing boundary conditions. If in doing so you do not mention that you design products, it will be interpreted that design is not applicable.
For exclusions relative to detail requirements, the Compliance Matrix may suffice but for an unambiguous solution, it is preferable to produce an exposition that addresses each requirement of the standard.

ISO 9001 Quality Policy

ISO 9001 Quality Policy
The standard requires the quality policy to be appropriate to the purpose of the organization.
The purpose of an organization is quite simply the reason for its existence and as Peter Drucker so eloquently put it there is only one valid definition of business purpose: to create a customer”(Drucker, Peter F., 1977)2 . In ensuring that the quality policy is appropriate to the purpose of the organization, it must be appropriate to the customers the organization desires to create. It is therefore necessary to establish who the customers are, where the customers are, what they buy or wish to receive and what these customers regard as value. As stated above, the quality policy is the corporate policy and such policies exist to channel actions and decisions along a path that will fulfil the organization’s purpose and mission. A goal of the organization may be the attainment of ISO 9001 certification and thus a quality policy of meeting the requirements of ISO 9001 would be consistent with such a goal, but goals are not the same as purpose as indicated in the box to the right. Clearly no organization would have ISO 9001 certification as its purpose because certification is not a reason for existence – an objective maybe but not a purpose.
Policies expressed as short catchy phrases such as “to be the best” really do not channel actions and decisions. They become the focus of ridicule when the organization’s fortunes change. There has to be a clear link from mission to quality policy.
Policies are not expressed as vague statements or emphatic statements using the words may, should or shall, but clear intentions by use of the words ‘we will’
– thus expressing a commitment or by the words ‘we are, we do, we don’t, we have’ expressing shared beliefs. Very short statements tend to become slogans which people chant but rarely understand the impact on what they do. Their virtue is that they rarely become outdated. Long statements confuse people because they contain too much for them to remember. Their virtue is that they not only define what the company stands for but how it will keep its promises.
In the ISO 9001 definition of quality policy it is suggested that the eight quality management principles be used as a basis for establishing the quality policy.
One of these principles is the Customer Focus principle. By including in the quality policy the intention to identify and satisfy the needs and expectations of customers and other interested parties and the associated strategy by which this will be achieved, this requirement would be fulfilled. The inclusion of the strategy is important because the policy should guide action and decision. Omitting the strategy may not ensure uniformity of approach and direction.
The standard requires that the quality policy include a commitment to comply with requirements and continually improve the effectiveness of the quality management system.
A commitment to comply with requirements means that the organization should undertake to meet the requirements of all interested parties. This means meeting the requirements of customer, suppliers, employees, investors, owners and society. Customer requirements are those either specified or implied by customers or determined by the organization and these are dealt with in more detail under clauses 5.2 and 7.2.1. The requirements of employees are those covered by legislation such as access, space, environmental conditions, equal opportunities and maternity leave but also the legislation appropriate to minority groups such as the disabled and any agreements made with unions or other representative bodies. Investors have rights also and these will be addressed in the investment agreements. The requirements of society are those obligations resulting from laws, statutes, regulations etc.
An organization accepts such obligations when it is incorporated as a legal entity, when it accepts orders from customers, when it recruits employees, when it chooses to trade in regulated markets and when it chooses to use or process materials that impact the environment.
The effectiveness of the management system is judged by the extent to which it fulfils its purpose. Therefore improving effectiveness means improving the capability of the management system. Changes to the management system that improve its capability i.e its ability to deliver outputs that satisfy all the interested parties, are a certain types of change and not all management system changes will accomplish this. This requirement therefore requires top management to pursue changes that bring about an improvement in performance.