Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results
11275 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Addressing risks and opportunities
Answer:
In order to properly assess the risk and opportunities, you need first to determine the scope of your assessment. The standard requires organization to address risks and opportunities emerging from the context of the organization regarding quality management system and ability of the organization to achieve its objectives, so you only need to identify risks and opportunities regarding context of the organization, QMS and the objectives of the organization.
Once you determine the scope of your assessment and identify risks and opportunities, you need to evaluate them to define what risks and opportunities are the most important and require actions to be addressed.
Next step is to plan actions to address the risks and opportunities, this includes defining responsibilities, resources and deadlines for addressing risks and opportunities. Once the actions are planed and executed, the results of the actions need to be reviewed to determine whether the risks and opportunitie s are address and to see if there is a need for additional actions. This is usually done during the management review.
For more information, see:
- The Role of Risk Assessment in the QMS https://advisera.com/9001academy/blog/2014/01/07/role-risk-assessment-qms/ -
ISO 9001 and ISO 19011
Answer:
ISO 19011 - - Guidelines for auditing management systems is not a standard as ISO 9001 in therms that the organization can't be certified against it. The ISO 19011 standard includes the requirements for auditing a management system, and is used to train the people who certify that companies have met the requirements of standards such as ISO 9001, ISO 14001 and the like. ‚
The standard offers four resources to organizations to "save time, effort and money":
- A clear explanation of the principles of management systems auditing.
- Guidance on the management of audit programmes.
- Guidance on the conduct of internal or external audits.
- Advice on the competence and evaluation of auditors.
The only relation between ISO 9001 and ISO 19011 is that the ISO 19011 can be used for auditing ISO 9001, but it is not mandatory especially for internal audits. On the other hand certification auditors must be familiar with ISO 19 011 in order to perform proper certification audit.
For more information, see:
- 13 Steps for ISO 9001 Internal Auditing using ISO 19011 https://advisera.com/9001academy/knowledgebase/13-steps-for-iso-9001-internal-auditing-using-iso-19011/ -
GAP Analysis in ISO 9001:2015 Documentation Toolkit
Answer:
Our ISO 9001:2015 Documentation Toolkit does not include the GAP Analysis checklist, but it is available for free on this link https://advisera.com/9001academy/iso-9001-gap-analysis-tool/
The toolkit includes Internal Audit Checklist that contains all requirements of the standard in form of a question, you can find the free preview of the document here https://advisera.com/9001academy/documentation/internal-audit-checklist/ -
Getting the company on board for ISO 9001
Answer:
The best way to get the company on board for ISO 9001 implementation is to present to the top management the benefits of the implementation. As you already stated, the major clients often require companies to be ISO 9001 certified in order to ensure quality product or service, but there are also a lot of other benefits from getting ISO 9001 certificate.
Here are some m aterials that might be interesting for you:
- Six Key Benefits of ISO 9001 Implementation https://advisera.com/9001academy/knowledgebase/six-key-benefits-of-iso-9001-implementation/
- Gaining employee buy-in for your ISO 9001:2015 implementation https://advisera.com/9001academy/blog/2015/12/15/gaining-employee-buy-in-for-your-iso-90012015-implementation/
- How to get Management Buy-in for ISO 9001 https://advisera.com/9001academy/blog/2014/09/02/get-management-buy-iso-9001/ -
Updating ISO 9001
Answer:
First thing that needs to be done in the transition process is to perform the GAP analysis to determine to what level is your company already compliant with ISO 9001:2015, than you need to determine what activities need to be done in order to achieve full compliance with the standard.
Although it is not a requirement, it is best to conduct the transition process as a project because in this way you will ensure the systematic approach and avoid missing something out, also it is recommendable to determine resources, responsibilities and deadlines for each activity and this will really facilitate the transition process and also will enable you to spread responsibility for the transition across your company and get the job done with less effort.
Here you can find our free GAP analysis tool https://advisera.com/9001academy/iso-9001-gap-analysis-tool/
For more information, see H ow to make the transition from ISO 9001:2008 revision to the 2015 revision https://advisera.com/9001academy/blog/2015/10/06/how-to-make-the-transition-from-iso-90012008-revision-to-the-2015-revision/ -
Other requirements
Answer:
Beside legal requirements, the OHSAS 18001 mentions "other requirements" and that can be contractual requirements, requirements of some associations to which the company belongs to, requirements of some interested parties, such as nongovernmental organizations, etc.
Other requirements are basically all requirements that the organization has agreed to for some reason. For more information, see:
- How to identify and comply with legal requirements in OHSAS 18001 https://advisera.com/18001academy/blog/2015/06/24/how-to-identify-and-comply-with-legal-requirements-in-ohsas-18001/
- OHSAS 18001: Advice to ensure you meet regulatory requirements https://advisera.com/18001academy/blog/2015/07/29/ohsas-18001-advice-to-ensure-you-meet-regulatory-requirements/ -
The timing for ISO 45001
Answer:
The new standard, ISO 45001 that will replace the OHSAS 18001:2007 will be published by the end of this year, probably somewhere in October. From the moment of publishing, there will be probably two or three year transition period when the companies will have to make transition to the new standard or they will lose their certificates.
For more information, see:
- First glance at ISO/DIS 45001 – How different is it from OHSAS 18001? https://advisera.com/18001academy/blog/2016/01/20/first-glance-at-isodis-45001-how-different-is-it-from-ohsas-18001/ -
Product life-cycle and nonconformity
Answer:
The best way to address this nonconformity is to conduct analysis of your product life-cycle in therms of environmental aspects in order to identify environmental aspects related to each phase of the product life-cycle, evaluate them, determine significant ones and apply operational controls to decrease the adverse impact on the environment.
For more information, see this article:
- 4 steps in identification and evaluation of environmental aspects https://advisera.com/14001academy/knowledgebase/4-steps-in-identification-and-evaluation-of-environmental-aspects/ -
The risk assessment and ISO 27001
Answer:
ISO 27001 defines that you need a methodology for the risk assessment (is a requirement), but does not defines what methodology you need to use, so you can use the methodology that you want. Generally most of the methodologies are based on assets, and it is our recommendation. If you want, you can develop your own methodology, and for this you can read this article “How to write ISO 27001 risk assessment methodology” : https://advisera.com/27001academy/knowledgebase/write-iso-27001-risk-assessment-methodology/
By the way, our methodology is also based on assets, so maybe can be interesting for you to see a free version here clicking on “Free demo” tab “Risk Assessment and Risk Treatment Methodology” : https://advisera.com/27001academy/documentation/Risk-Assessment-and-Risk-Treatment-Methodology/
Finally, we also have an online course that can help you to understand the risk assessment “ISO 27001:2013 Foundations Course” : https://advisera.com/training/iso-27001-foundations-course/ -
Implementing ISO 9001:2015 in schools
Answer:
The process of implementation is the same for every company regardless of the type of business and processes.
First, you need to have the top management on board for this project, because without their support it would be impossible to implement the standard. Next step is to perform a GAP analysis in order to determine to which level your company is already compliant with the standard and what needs to be done to achieve the full compliance.
Then, it is the best to set up the implementation as a project, to clearly define all the tasks and responsibilities for the tasks as well as the deadlines. Once you create all necessary documents and implement the changes in your processes, you can conduct the internal audit and management review and then your company will be ready for certification audit.
For more information, see: Checklist of ISO 9001 implementation & certification steps https://advisera.com/9001academy/knowledgebase/checklist-of-iso-9001-implementation-certification-steps/