Search results

Home / Search

Category:
Select
Select

11288 results

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • IATF16949 VE ISO 9001

    1. IATF16949 dokumanlarını biliyorum ancak ISO9001:2015 ten farkını çıkaramadım. ISO 9001 de olmayıp IATF16949 olan neler var nereden ulaşabilirim bu bilgiye.

    ISO 9001’de olup IATF 16949 standardında olmayanlar diye hazırlanmış bir döküman olduğunu sanmıyorum ama örnek olarak şunu söyleyebilirim;’’Kalite El Kitabı’’ ISO 9001’de zorunlu değil iken IATF 16949 standardında zorunludur.

    IATF 16949:2016 standardı içinde bakınız ISO 9001 diye referans gösterdiği herşey ISO 9001 standardında mevcuttur. Yani  öncelikle ISO 9001 standart gereklilikleri ve paralelinde IATF 16949 standart gereklilikleri uygulanmalıdır. En iyi yöntem; 2 standardı beraber gözden geçirmek olabilir.

    2. Ve ISO 9001:2015 de tasarım iatf16949 gibi hariç tutulabiliyor mu acaba şimdiden teşekkürler ?

    Eğer organizasyon ürün tasarımı  yapmıyor ise; IATF 16949:2016 standardında ürün tasarım maddeleri hariç bırakılabilinir.  Proses tasarımı IATF 16949:2016 için herzaman geçerlidir ve kapsam dışı bırakılamaz.

    Eğer ISO 9001 ve IATF 16949 firma için beraber yönetiliyor ise ve ürün tasarımı IATF de var ama ISO 9001’de yok ise; o zaman IATF gerekliliği olarak otomotiv ürünleri için kapsamda ürün tasarımı alınabilinir ve ISO 9001’de ise tasarım kapsam dışı olduğu için, komple ISO 9001 kapsamından tasarım çıkartılabilinir. 

     

  • Charitable organisations, non for profits, refugees.

    "Thank you for your reply.I have read it.2 more questions1 if organisation is not in EU but gathering data with consent from EU residents (not citizens). Do this organisation should comply with EU GDPR.?

    Yes, if the organization offers services or goods or processes data of EU individuals it must comply with GDPR.

    2 what kind of status (refugee, person who has working visa, tourist visa, visitor visa) are to be considered as EU resident that data from him can be collected or stored.

    It is considered with a broad meaning. Recital 14 states: “The protection afforded by this Regulation should apply to natural persons, whatever their nationality or place of residence, in relation to the processing of their personal data.” Therefore, if the GDPR applies because it offers services (even without a price) to EU residents, you should intend the residence broadly.

  • Corrective action plan for audit observation for clause 8.1 of ISO 22301

    It is not clear to which processes this nonconformity refers to - if this refers to e.g. business impact analysis, then you need to have a methodology document for performing business impact analysis; if this is about risk assessment, then you need to have a risk assessment methodology, etc. 

    Here you can see the templates for the mentioned documents: 

    You can get all the required documents for ISO 22301 implementation in this ISO 22301 Documentation Toolkit: https://advisera.com/27001academy/iso22301-documentation-toolkit/ 

  • Maintaining two risk registers for ISO 9001 and ISO 27001

    No, it is not mandatory to maintain two risk registers for ISO 9001 and ISO 27001 respectively. Please check this article - List of mandatory documents required by ISO 9001:2015 - https://advisera.com/9001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-90012015/ - there is no mandatory requirement in ISO 9001:2015 to keep a risk register. So, it is up to you to design the approach that best suits your organization, one common or two separate risk register.

    You can find more information below:

  • Real examples of "process approach", "risk management" and "PDCA" concepts mentioned in ISO9001:2015

    Please check our webinars free on-demand, perhaps they have examples that can help you build your communication to the staff of your company.

    Please check also my book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/ - where I develop a case based on the process approach and the risk-based approach.

  • ISO 9001 mandatory clauses and scope for implementation

    what clauses are compulsory to our organization? 

    Answer:
    Basically, all clauses are mandatory. An organization can only exclude those clauses that are not applicable. Without knowing in detail your business, it is very difficult to give a clear answer. For example, does your organization design consulting services? If not, ISO 9001:2015 clause 8.3 is not applicable. 

    What should be the scope? 

    Answer:
    About the scope, as you can see in this free webinar on-demand - ISO 9001:2015 clause 4 - Context of the organization, interested parties, and scope - https://advisera.com/9001academy/webinar/iso-90012015-clause-4-context-of-the-organization-interested-parties-and-scope-free-webinar-on-demand/ - it is a management decision, not a technical decision. The webinar explains some of the nuances behind different scopes. Your organization can have 10 different consulting services and decide to design a quality management system applicable only to three of those services.

    The following material will provide you more information about exclusions:

     

  • GDPR Documentation and PII

    Please advise regarding the below:

    1. What is data processor obligations in details regarding data subject rights

    • The right to be informed.
    • The right of access.
    • The right to rectification.
    • The right to erasure.
    • The right to restrict processing.
    • The right to data portability.
    • The right to object.
    • Rights in relation to automated decision making and profiling.

    Is there any procedure to be taken as example

    2. When providing outsourcing call center services , what is the legal basis to process the data noting that consent is taken by the data controller (is it legitimate interest : be able to fulfill our contractual obligation with the controller ?)

    3. What is the list of documentations required by the data processor

  • Filling templates

    "Thank you for your detailed responses! Our company is in the US but we have a representative in Austria (Prighter). I assume I use this address for the supervisory authority address? Can you confirm if this is correct?"

    Yes, you should refer to the Austrian Supervisory Authority.

  • Documenting mandatory documents for ISMS

    When writing mandatory documents you need to take into account all the elements that are prescribed in the standard - e.g. in Statement of Applicability you need to include all 114 controls from Annex A, and for each one if it is applicable, the justification, and the status of the implementation. 

    This white paper will give you an overview of mandatory documents, and how to structure them: Checklist of Mandatory Documentation Required by ISO 27001 https://info.advisera.com/27001academy/free-download/checklist-of-mandatory-documentation-required-by-iso-27001 

    This free online training will teach you the basics of the ISMS and what are the steps in the implementation: ISO 27001 Foundations Course: https://advisera.com/training/iso-27001-foundations-course/ 

  • What to exclude from Procedures and/or Quality Manual?

    If you will not design any new products, it means that you are manufacturing already known products, that you can exclude requirement 7.3 Design and development. In our documentation toolkit, you do not need to use folder 09_Procedure_for_Design_and_Development.

    If your medical device is not sterile, it means that requirement 7.5.5 Particular requirement for sterile medical devices and 7.5.7 Particular requirements for validation of processes for sterilization and sterile barrier systems. In our documentation toolkit, you do not need to use 12_Procedures_for_Sterile_Medical_Devices. 

    Each exclusion must be stated and explained in the Quality manual. For example, requirements 7.5.5 and 7.5.7 are not applicable because our medical devices are not sterile.

    On the following link you can find tips on how to write a short quality manual for ISO 13485:

Page 237-vs-13485 of 1129 pages

Didn’t find an answer?

Start a new topic and get direct answers from the Expert Advice Community.

CREATE NEW TOPIC +