Saturday, November 13, 2010

ISO 9000 Standards Certification and Registration


ISO 9000 Standards Certification and Registration

The International Standards Organization is responsible for two major sets of requirements that relate to an overall quality management system to be used by businesses. The ISO 9000 family of standards is the primary set of requirements for most businesses.

Quality management by definition address that the organization does certain things to “fulfill the customer’s quality requirements and applicable regulatory requirements while aiming to enhance customer satisfaction, and achieve continual improvement of its performance in pursuit of these objectives”.
ISO 14000 address the environmental management to minimize harmful effects to the environment. Again, it is a quality management system designed to “achieve continual improvement of its environmental performance.

ISO certification 9000 is the most common. So, let’s take a look at what ISO certification entails and what it means. To become certified, a quality management system must be in place that meets the requirements of the ISO standard. This begins with the business recognizes the requirements and developing a quality system to meet their needs at the same time they meet the requirements.

ISO 9000 certification and ISO 9000 registration are two different entities, though they are often used interchangeably. To achieve ISO certification 9001 , an independent registrar is hired to audit the quality system for thoroughness and compliance to all the standards. When this is accomplished, the business is offered a certificate stating that the quality system conforms to standards within the particular standard.

ISO registration means that the certification has been recorded in its client register. Because most companies have been certified and in turn registered, the terms are offed interchanged in general use. While the term “certification” is the most widely used, “registration” used in North America. Both are completely acceptable, because the business has fulfilled the requirements set forth by ISO.

Risk Management In ISO 9000 Standard


Risk Management In ISO 9000 Standard

In each human endeavour there is an element of risk; personal, project or financial, or a combination of them all. The job of the responsible individual is to identify the risk and act accordingly. We all do these ‘risky’ things, almost daily, aware that we are taking a risk. Rather than staying away from the risk we become adept at identifying it and having a strategy for dealing with it if the risk materialises. This is what risk management is about, and is an ability that is important in virtually every endeavour.

The popular misconception that risk management is difficult or complicated stems from the bureaucratic methodology of some system-oriented organisations and managers. It is neither complicated or bureaucratic, and need not be. Risk management is basically a simple proposition with a complexity dictated by the nature of the situation to which it applies – usually a project, and the parties involved. In its basic form risk management involves:

1. Identifying risk – Looking for anything that threatens the successful completion of the project against the original requirement. Risks can be environmental, organisational, technical, legal, economic or commercial.

2. Counteracting risk – Taking action to remove or reduce the probability of a risk being realised. The response depends on the nature or seriousness of the risk.

3. Acting when the risk event occurs – Invoking whatever contingency measures were devised for the risk that has materialised.

And for this to happen needs:

4. Monitoring at all stages – This typically means documenting a risk assessment in a profile that identifies the risk, the probability of its occurrence, and the impact if it does materialise. Factors that score paramount are those that require the greatest attention and monitoring. A good risk manager will devise contingency plans that reduce either the probability or the impact of these occurrences, and so remove them from the scene.

Working within a formal structured management system similar to that defined by ISO 9000 requires the application of risk assessment practices to satisfy the requirements of the Standard. Auditors of such systems may not find specific references to risk management in these areas even though the identification of potential failure (8.5.3) is wholly concerned with a topic that is nothing less than risk management.

Well managed risk taking is an essential feature of any forward thinking enterprise, since risk is an element of any progression or advancement. It is the adoption of effective risk management in conjunction with the continuing need to drive forward from a comfortable position that leads to progress and advancement. Doing what we always do purely because the risks appear to be negligible or are well known is to be ‘risk averse’, and for progressive organisations cannot be acceptable. Neither is it acceptable to pursue new ideas without an understanding of their potential benefit, proper planning, a clear idea of the threats to these benefits being achieved , and a strategy for dealing with them should they materialise. We need to manage in a manner that is neither predictable or reckless. Risk assessment is an essential tool to support this strategy.

ISO 9000 Document Management Software System


ISO 9000 Document Management Software System

Today’s manufacturing companies that seek ISO 9001 compliance-(regardless of their motivation to do so) probably don’t find it that difficult to create intelligent documentation. After all, a few days with a good consultant or a quality manager can take care of document creation. The problem lies in the gap between what employees are doing and what employees are supposed to be doing (in terms of adhering to documentation) and the gap between the manner in which processes are being implemented and the manner in which they should be implemented ( in accordance with documentation). In other words, the problem lies in the way processes are strategized and applied and in the way employees commit to standards when compared against existing documentation. How can a company overcome these issues? The answers may be simpler than you think.

Automation is the Answer for ISO Control
If your underlying processes are poorly strategized then an automated document management software system won’t be of much use. However, once the processes have been effectively planned (and applied) a document management software system can speed process-to-process management by leaps and bounds. Companies that automate not only to comply with ISO standards but to generate more revenue by performing less administrative labor save weeks and even years worth of time just by automating their processes and documentation control with a document management software system.

Making Amends
The right document management software system and ISO document control would also allow companies to find deviations and nonconformance events faster and move those events to resolution phases in a small fraction of the time they were originally routed—if they were routed at all. Some ISO 9000 document management software systems may even be combined with a CAPA QMS solution. This is especially valuable when determining the root cause of major to minor deviations.

A Document Management Software System and Employee Training
ISO standards do not require any type of automation but ISO standards lend themselves to automation in a way that’s quite remarkable. Take for instance the following document management requirements from the official ISO 9001 International Standard.

ISO 9001 Section 4.2.3
ISO standards make it clear that ISO 9001 “approved” companies must define (i.e., document) how they will approve documentation, how they will identify documentation changes, how they will update/reapprove revised documentation, how external documentation will be managed and how assurance will be provided that documentation will be available when it is required. 1 And that’s only a shadow of things to come! A document management software system designed for strict compliance can automate the approval of documentation, the identification of document changes, updates and reapproval notifications, external documentation management and high-level document security. Some solutions also integrate training and online exams as well.

How Much Could You Save?
Chances are high that automation will save you thousands, tens of thousands or even hundreds of thousands of dollars annually depending on the size of your company. Just foregoing a typical document routing process (a manual process) can save many employees fruitless trips back and forth from one office to another. Who wouldn’t want to avoid those time consuming searches through 3-ring binders and lost documentation due to employee absence or neglect?

Conclusion
Regulation and control are the future for manufacturing. Gone are the days of free experimentation and a blind eye toward material waste. Today is the day of premeditated design, quality assurance and web-based automation. If your company plans to be, or already is, compliant with ISO 9001 standards why not consider automating those ISO 9001 controls with a document management software system.

Wednesday, October 27, 2010

How To Get ISO 9001 Certified


How To Get ISO 9001 Certified

The ISO 9001 accreditation is part of the International Organization for Standardization 9000 standards. They are awarded to businesses for quality. The ISO 9001 is recognized worldwide as an award for a company’s internal quality management or actions that the company takes to ensure the product or service they provide is of the highest quality. Customer satisfaction is a major factor in whether a company will be awarded an ISO 9001 accreditation. The International Organization for Standardization in Geneva, Switzerland publishes thousands of international standards to help companies throughout the world more efficiently do business with one another. The 27 page ISO 9001 standard is focused on defining minimum business practices for the production and delivery of a company’s products and services through the implementation of a formal “quality management system”, or QMS. An ISO QMS is made up of certain processes, documentation and other formal practices that control internal company operations to ensure customer requirements are consistently met. To pass an audit, an organization must follow these guidelines: Develop a Quality Management System (QMS) manual. Develop the procedures required by the ISO 9001 Standard. Determine the additional processes and procedures that are needed by the organization to perform work and satisfy the requirements in the ISO Standard. Operate in accordance with the organization’s documented QMS. Provide evidence that the organization is operating according to the QMS. The achievement of an ISO 9001 certification is a milestone in demonstrating to your customers that you have implemented a reliable system of producing and delivering your products and services. The focus of this “system” is twofold: providing consistent products and services; and continual improvement in your processes leading to better results. The ISO 9001 certification is granted by a third-party auditing firm called a Registrar who specializes in quality system auditing. There are a wide variety of Registrars located in every ISO participating country. Some firms have offices internationally; others have a more regional focus. The selection of your Registrar is one of the more important decisions you will make to ensure the best alignment with your type of business, your location(s) and overall cost of maintaining the certification. The initial certification audit is conducted in two parts. The Stage 1 audit is a general review of your QMS documentation to ensure you have addressed all of the requirements of the ISO 9001 standard. Depending upon the size of your business, this can be conducted in a one to two day visit to your facility or virtually via phone. Any discrepancies noted during the Stage 1 audit will be documented in a formal report and must be corrected before the Stage 2 audit. The main part of the ISO audit is the Stage 2 audit which is always conducted onsite at your location(s) and will be focused on the implementation and effectiveness of your QMS. During this audit which can take 1 day (for very small companies) to several days, the auditor(s) will tour your company, speak to managers and employees, and review documentation and records (along with any Stage 1 discrepancies) to ensure that your system is fully implemented. If nonconformances are found, they will be documented in a formal report for correction. Following the Stage 2 audit, you are generally given thirty (30) days to submit corrective action plans for all audit nonconformances. Once corrective actions are received, your certification is complete and your certificate is issued. In order to maintain the certification, you will participate in an annual surveillance audit from your Registrar where they confirm that you are maintaining your QMS. Every third year, a more comprehensive re-certification audit is conducted, similar to the initial certification audit.

ISO 9001 Standard Quality Manual Template


ISO 9001 Standard Quality Manual Template

The quality manual is the necessary cornerstone for any business venturing out on the ISO 9001:2008 accreditation route as it exhibits top management’s determination to managing an useful quality management system. The quality manual is a type of most essential document which provides the right impression to clients, staff, inspectors and all the parties interested in your company, about your company’s efforts to satisfy all their clientele’s needs. People through your company will relate to it whenever they prefer to find the big picture of the system, or exactly what guidelines have been organized. You can save your valuable time and hard earned money with the quality manual template we offer you. If you really compile the quality manual, you will easily comprehend and apply ISO 9001:2008, which is one of the best methods to do so.By reading by the needs one-by-one and assigning each prerequisite a specific document, process or technique that exists within your company, you will get that over half of the demands have already been resolved. Quality manual makes the relation, between the process and the documents, an official one. Format and content Write your quality manual to ensure that it works for you, for your company and also the manner you work, it is totally your selection however generally make sure that it supports your organisation’s targets. The quality manual should not contain any confidential or proprietary information as it should be readily available to third party auditors and customers. You should also ensure that a clear distinction is made between the contents of the quality manual and the procedures. The quality manual identifies the intention of top management for the operation of the quality management system, whilst the operations explain how these kind of purposes are integrated. There are three things that must be included in the quality manual:

1. The probability of the quality management system such as details of the validation of any exclusions

2. For quality management system, the procedures should be standard or should be mentioned in them

3. A explanation of the discussion between the procedures of the quality management system Who will use your Quality Manual and why?

In general, the clients and the prospective customers need it in order to know how your company system meets their requirements. If your quality manual includes two pages, it may not motivate trust that your system is strong enough to be an useful quality management system. Customers and Clients want assurance that you know how to plan, implement, and control the processes that affect their products or service delivery. The third party inspectors will b interested to know how your company meets their standard needs and also if perhaps the quality management system is useful in accomplishing your organization’s targets. Auditors will use the quality manual as a guide to help out discover and also form the purpose facts that they have to find in exhibition of your company’s compliance with the standard. Internal inspectors can review and inspect their own company for their needs rather than referring to standard documents from external sources. Management ought to be able to determine, from the manual, how the numerous processes and also systems have interaction, and at a high level what policies and methods have been established to maintain and control the processes and systems . The quality manual is usually presented to fresh recruits to familiarize themselves with the organization’s quality management system and also the manuals are often used as an in-house training resource. Most importantly, your quality manual ought to not sit on a dirty shelf or be hidden in an obscure position on the computer network; it is an active and powerful document that requires coverage in order for it to grow and also improve. Please click on the links below to learn more about Quality Manual Templates and view some free examples.

ISO 9000 Standards Document Control System


ISO 9000 Standards Document Control System
The ISO 9000 Standards requires that a documented procedure be established to define the controls needed.

This requirement means that the methods for performing the various activities required to control different types of documents should be defined and documented.

Although the ISO 9000 standards implies that a single procedure is required, should you choose to produce several different procedures for handling the different types of documents it is doubtful that any auditor would deem this noncompliant. Where this might be questionable is in cases where there is no logical reason for such differences and where merging the procedures and settling on a best practice would improve efficiency and effectiveness.

Documents are recorded information and the purpose of the document control process is to firstly ensure the appropriate information is available where needed and secondly to prevent the inadvertent use of invalid
information. At each stage of the process are activities to be performed that may require documented procedures in order to ensure consistency and predictability. Procedures may not be necessary for each stage in the process.




ISO 9001 Standards – Quality Policy and Objectives


ISO 9001 Standards – Quality Policy and Objectives

A ISO 9001 Standards quality policy and its corresponding quality objectives are established to direct the organization towards two specific goals of a quality management system:

-Provision of products – goods and services – that meet customer and applicable legal requirements, and

- Enhancement of customer satisfaction

The quality policy and the objectives are also a means of controlling the quality management system’s processes. Simply, if you want to control a process, assign an objective to it (or more) and make sure it is aligned to the quality policy, then monitor and measure the process’ performance against the assigned objective. You need to provide adequate resources to the process to ensure that it is capable of achieving the objective. You continually improve the whole process by upgrading the objective, make corrective and preventive actions or introduce innovation to it. Corrective action addresses an undesirable situation’s cause in order to prevent its recurrence. Preventive action, by contrast, addresses the probable cause of a potentially undesirable situation. This is what the quality policy and objectives are supposed to do. They provide focus, direction and control.

The quality objectives need to be consistent with the quality policy and the commitment to continual improvement, and their achievement needs to be measurable. The achievement of quality objectives can have a positive impact on product quality, operational effectiveness and financial performance and thus on the satisfaction and confidence of interested parties. When an organization has established a quality policy and a set of operational objectives, this means the only thing left to do is to design or plan the necessary processes or tasks that can realize those objectives. Therefore, the processes determine if the objectives will be met in full, partially or not at all. This is where the ISO 9001 standard play a critical role in specifying the required processes and the operating criteria. This is what ISO 9001 is all about. It even specifies criteria for the policy and the objectives.

A quality policy needs to satisfy the following requirements:

  • It is appropriate to the purpose of the organization,
  • It includes a commitment to comply with requirements and continually improve the effectiveness of the quality management system,
  • It provides a framework for establishing and reviewing quality objectives,
  • It is communicated and understood within the organization, and
  • It is reviewed for continuing suitability

Quality objectives must be established in order to enable the organization to comply with requirements and continually improve the effectiveness of the quality management system. Quality objectives must achieve four things:

  • Enable the organization to meet customer requirements
  • Enable the organization to enhance customer satisfaction
  • Enable the organization to comply with all legal requirements applicable to the product
  • Continually contribute to the effectiveness of the quality management system

Therefore, when you are in the meeting room with your management brainstorming on the appropriate objectives, have these four points in mind.

ISO 9001:2000 requires that management periodically review changes to both the policy and objectives. An organization’s objectives must be measurable and its processes designed to meet those objectives. An organization’s overall business goals, quality objectives and quality policy are all interrelated and must work together to achieve business improvement. To do this, it’s necessary to understand which processes are key to achieving business goals and align those processes with the quality objectives. It means aligning business goals, quality objectives and process measures to create real improvement. And it means using process mapping. Process mapping involves more than just flow charting. Among other things, it can manage and improve processes by illustrating process measures as well as process flows and interactions. One process-mapping method begins by involving the people who work in the process. Another entails mapping the process as is, taking action to improve it and then preparing a final map of the improved process.

Process owners are directly responsible for the attainment of the objectives. They must be given adequate resources, including competent human resources. They need to review the objectives periodically to ensure the key performance indicators are heading towards their objectives on schedule. If not, they need to initiate corrective actions and if the risks of non-achievement are visible, take preventive actions to control them and steer the KPI’s back on course.

Examples of quality objectives:

  • Production rejects <>
  • Machine breakdown <>
  • Returned products = 0/mth
  • Purchasing >95% on-time delivery
  • Inventory damage = 0/mth

Conclusion: ISO 9001 requires that the quality management system achieves its objectives in order to realize the quality policy.

IMPLEMENTATION OF ISO 9001 STANDARD IN EDUCATION



The economy has already met with various endeavours and concepts to build an effective quality management system. From the historical point of view, the most important ones are Deming Prize (1950), followed by Malcom Baldrige National Award (1987) and
international standards pertaining to ISO 9000 (1987) family. The implementation of this last standard grows continuously, either in Europe or in the world. In the period from 2001 to 2003, there was a slight stagnation, which was the consequence of the organisations having to adapt to the requests of ISO 9001:2000 edition of the standard. Croatia also actively participates in this trend, which show that at the end of 2004, organisations were certified, of which 970 of them were from Croatia.

The economy has already met with various endeavours and concepts to build aneffective quality management system. From the historical point of view, the most importantones are Deming Prize (1950), followed by Malcom Baldrige National Award (1987) andinternational standards pertaining to ISO 9000 (1987) family. The implementation of thislast standard grows continuously, either in Europe or in the world, as shown in the picture1. In the period from 2001 to 2003, there was a slight stagnation, which was theconsequence of the organisations having to adapt to the requests of ISO 9001:2008 editionof the standard. Croatia also actively participates in this trend, as illustrated by figures fromthe table 2, which show that at the end of 2004, 670,399 organisations were certified, ofwhich 970 of them were from Croatia.

The implementation of the stated standard in educational activities took a somewhat slower pace. Trends in Croatia do not completely follow the World ones . The 2002 and 2003 stagnation, which, as already mentioned, was mainly caused by transfer from one issue of the standard to the next one, had no particular impact to Croatia, partially because the data for Croatia includes standards from both the previous and the new issue of the ISO 9001 standard.

Monday, August 30, 2010

Best Ways Of Implementing ISO 9001 Standards

Best Ways Of Implementing ISO 9001 Standards

While each implementation is dependent on the company, the industry, customers, etc., here’s a good starting point:

1.) Identify what your customer expects of your company. Consider both sales and after-sales aspects, from the customer’s point of view.

2.) Develop a philosophy (Quality Policy) that addresses (1). This means clause 5.3.

3.) Identify your processes, keeping in mind the importance of each as compared to (1) above. This means clause 4.1.

4.) Identify your management structure, being sure it supports and does not conflict with (1), (2) or (3). This means the rest of Clause 5 in the standard.

5.) Figure out resource issues. This means all of Clause 6.

7.) From there, work on clauses 7 & 8. This part is particularly hard to define as a generic plan, because how it is done is unique to each company, and the results of (1) through (6) above.

Tips:

(a) Keep documentation to the absolute minimum.

(b) Put “required procedures” and process maps in your Quality Manual, instead of subordinate documents. This makes the QM useful, instead of just a throwaway restatement of the standard. Limits documentation overall.

(c) Spend a lot of time on process identification and definition, so that you understand them and can manage them

(d) Develop an internal audit program (process!) that reflects your company needs, not a checklist method used by registrars

10 steps on the implementation of ISO 9001 Standards are as below:

1. Analyze your businesses’ core process(es) for converting customer needs into cash at a high level to show the sequence and interaction of the key processes within the core process (one page).

2. Identify (and assign a code) each of the key processes within your system (as-is) and the new ones necessary for the system to be used to add value faster and prevent loss sooner (the chosen system standard is very helpful for listing the missing processes). Expect 20 to 50 key processes.

3. Analyze each of the key processes by working with the process owner to determine each processes’ objective, team, inputs, value-adding steps (tasks, meetings, decisions), outputs; then link the procedure to the other controls and process with which it interacts (one page each).

4. Leaders explain their policy, the obligations of the system (already 85% or so implemented) and its benefits.

5. Train process teams in any new processes so they are working effectively from day one.

6. Describe the system and how it works, the policy and objectives in a less than 10 page manual.

7. Launch the system and invite lots of suggested improvements.

8. Gather and analyze data to become information for use by decision makers to improve products, processes and the system.

9. Audit the performance of the system independently of any other process control to provide impartial information on how well the system is helping employees to do their jobs.

10. Use and improve the system, its processes and your products so your organization adds value faster and prevent loss sooner.

How To Prepare ISO 9001 Standards Audit Check List

How To Prepare ISO 9001 Standards Audit Check List

There are a few steps to prepare ISO 9001 Standards Check List, namely:

1. Apply the concept of Plan Do Check Act (PDCA). This PDCA concept is applied at the Quality Management System and the process levels.

2. Convert the question to requirement raised by QMR or the QMS Committee which derived from theISO 9001 standards. In this case, several questions can lead to one single requirement.

3. To edit those questions to suit the process that is to be audited. For example, you are going to audit the Purchasing/Procurement Department and you’re sitting down with the Audit Team trying to come up with relevant questions.

The main objective in auditing any process is to extract adequate information and evidence in order to verify that the process is conformant to the ISO 9001 requirements and that, it is effective in achieving its objectives. As an auditor, you need to be able to investigate, assess and verify the conformity and effectiveness of a given process, in terms of its planning, implementation, monitoring & measurement and improvement. As a Lead Auditor, preparing your Audit Team for the actual audit is crucial in ensuring success of the audit excercise. There is no better way to do that than by developing the audit questions with them.

Audit Of Electronic Documents In ISO 9001 Standards

Audit Of Electronic Documents In ISO 9001 Standards

Electronic documents that establish management system policies and procedures can be in a variety of file formats depending on the software applications that are utilized by the organization to generate the documents. Electronic file formats include, Text, HTML, PDF, etc. Spreadsheets and databases formats are also considered to be electronic “documents” subject to the control elements of the management system to being audited.

Given the relative ease with which users can now create electronic spreadsheets and other electronic documents, auditors (either internal or external) should ensure that policies governing the controls that apply to management system documentation in-general are also employed for electronic documents through appropriate procedures.

Organizations need to employ suitable and effective methods within the electronic environment for ensuring the adequate review, approval, publication and distribution of its management system documentation. These should be consistent with the methods for the development and modification of electronic documents.

In many cases document control measures may also be standard features of software applications used for their creation. Therefore auditors should understand these application-specific controls to the degree that these are utilized as a basis for conformance to the applicable management system standard.

Given the increased capacity to modify, update, reformat and otherwise improve documents within an electronic-based management system, auditors should pay particular attention to control elements such as document identification and document revision level.

As electronic media facilitates an increased rate of document modifications, auditors should verify that the controls being employed for the management of obsolete documents are considered within the organizations’ document control policies and procedures.

Auditors should verify that electronic-based documentation exists to provide orientation to users with regard to the functional and control aspects associated with electronic documents. Additionally, “Point-of-use” requirements associated with the applicable management system standards will typically be addressed in part by the organization’s document access policies. Auditors should understand the organization’s policies and procedures regarding user privileges as these become important factors for properly realizing the organization’s processes.

External electronic communication with suppliers, customers and other interested parties may involve the exchange of documents. Given that these external documents may contain key parameters that specify the functioning of the organization’s processes, auditors should verify the degree to which these documents are formally introduced and controlled within the electronic-based management system.

ISO 9001 Standards & ISO 14001 Standards

In order to assist organizations to have a full understanding of the new ISO 9001:2008, it may be useful to have an insight on the revision process, how this revision reflects the inputs received from users of the standard, and the consideration given to benefits and impacts during its development.

Prior to the commencement of a revision (or amendment) to a management system standard, ISO/Guide 72:2001 Guidelines for the justification and development of management system standards recommends that a “Justification Study” is prepared to present a case for the proposed project and that it outlines details of the data and inputs used to support its arguments. In relation to the development ofISO 9001:2008 user needs were identified from the following:

-the results of a formal “Systematic Review” on ISO 9001:2000 that was performed by the members of ISO/TC 176/SC2 during 2003-2004
-feedback from the ISO/TC 176/Working Group on “Interpretations”
-the results of an extensive worldwide “User Feedback Survey on ISO 9001 and
The Justification Study identified the need for an amendment, provided that the impact on users would be limited and that changes would only be introduced when there were clear benefits to users.

The key focuses of the ISO 9001:2008 amendment were to enhance the clarity of ISO 9001:2000 and to enhance its compatibility with ISO 14001:2004.

A tool for assessing the impacts versus benefits for proposed changes was created to assist the drafters of the amendment in deciding which changes should be included, and to assist in the verification of drafts against the identified user needs. The following decision making principles were applied:

1) No changes with high impact would be incorporated into the standard;

2) Changes with medium impact would only be incorporated when they provided a correspondingly medium or high benefit to users of the standard;

3) Even where a change was low impact, it had to be justified by the benefits it delivered to users, before being incorporated.

The changes incorporated in this ISO 9001:2008 edition were classified in terms of impact into the following categories:

-No changes or minimum changes on user documents, including records

-No changes or minimum changes to existing processes of the organization

-No additional training required or minimal training required

-No effects on current certifications

The benefits identified for the ISO 9001:2008 edition fall into the following categories:

-Provides clarity

-Increases compatibility with ISO 14001.

-Maintains consistency with ISO 9000 family of standards.

-Improves translatability.

Friday, June 18, 2010

FAQs On ISO 9001 Standards

This list of Frequently Asked Questions (FAQs) has been prepared by ISO/TC 176/SC 2 to support the publication of ISO 9001:2008 and the revision of ISO 9004. Input has been obtained from experts and users of the ISO 9000 standards, expressed during seminars and presentations around the world.
The list will be reviewed and updated on a regular basis to maintain its accuracy, and to include new questions where appropriate. It is intended that this list will also provide a good source of information for new users of the standards.


ISO 9001 Standards Certification

When an organization chooses not to pursue ISO 9001 certification or not to retain the ISO 9001 certificate, it should make no difference to the way the organization is managed. Its similar to the man who chooses not to take the course examination. He still has the knowledge he has acquired whether or not he takes the exam and gets a certificate. What he cannot do is demonstrate to others that he has reached a certain level of education without having to prove it every time. People who know him dont care that he didnt take the exam. It is only those who dont know him that he will have difficulty convincing.

Many organizations were driven to seek ISO 9001 certification by pressure from customers rather than as an incentive to improve business performance and therefore sought the quickest route to certification. The critics called this coercion and like most command and control strategies, believed it resulted in managers cheating just to get the badge. What was out of character was that suppliers that were well known to customers were made to jump through this hoop in order to get a tick in a box in a list of approved suppliers. It became a necessary evil to do business. Certainly when perceived as a means to get a badge, the standard was no more than a marketing tool. It could have been used as a framework for improvement but the way it was imposed on organizations generated fear brought about by ignorant customers who mistakenly believed that imposing ISO 9001 would improve quality. To achieve anything in our society we inevitably have to impose rules and regulations what the critics regard as command and control but unfortunately, any progress we make masks the disadvantages of this strategy and because we only do what we are required to do, few people learn. When people make errors more rules are imposed until we are put in a straightjacket and productivity plummets. There is a need for regulations to keep sharks out of the bathing area, but if the regulations prevent bathing we defeat the objective, as did many of the customers that imposed ISO 9001.


Thursday, April 8, 2010

What’s the difference between ISO 9001 and CMM?

Understanding the difference between ISO 9001 Standards and CMM means recognising a cultural understanding of quality. -Microsoft and many other software companies govern quality with the 80-20 rule,” said David Smith, vice president of Technology Futures, a technology forecasting company in Austin, TX. -The rationale is, ‘it’s a real product if 80 percent of the problem can be addressed and the remaining 20 percent is part of the business model.’ But the reality is the software industry’s business model is not a business model of total quality. And that is part of the challenge when you compare a CMM model against an ISO 9001 Standards model.”

The problem, as Smith sees it, is a conflict between the approaches to quality of ISO 9000 Standards and CMM programs, on the one hand, and the business model that corporations use on the other. -When you’re developing a product, the hardest problems to fix are the last 20 percent,” noted Smith.

Smith highlights three critical elements for understanding ISO 9001 and CMM:

  • Understanding and documenting the true requirements is a key element in both standards.
  • Document how you write the software code so other people can understand its value.
  • Understand the requirements outlined in the program management and business models. It means understanding the maximum payback from the ISO and CMM levels. This is difficult to achieve because it requires both management and supervisory hats.

Software in the original description of ISO 9001 is different from software that runs on a computer, explains Mark Paulk, a senior member of the technical staff at Carnegie Mellon’s SEI.

Paulk’s advice: Understand the essence of ISO 9001 so you can compare it to CMM. ISO 9001’s definition of software is more general and includes music, entertainment, or anything involving the creation of an intangible product.

-But the original bias of the standard was strongly toward the manufacturing environment, where all the historical work had been done,” said Paulk. -And that is one of the criticisms of the early releases of the standards. One of the objectives of the ISO 9000 revisions was it failed to make the standard more comfortable to users in other environments.”