Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
I think it will be easier when you start mapping processes and drawing flowcharts about what happens in your organization around patients.
Some weeks ago, I went to the doctor to see my eyes. I as a patient followed a process like this:
Your organization draws a flowchart representing a process and can ask: What can go wrong? What needs to be improved? With this, you apply the risk-based approach and can determine week points that need to be handled. Please check slide “Risks and processes” in the free webinar on-demand - The Process Approach - What it is, why it is important, and how to do it - https://advisera.com/9001academy/webinar/iso-9001-process-approach-free-webinar-on-demand/ way your organization determine the need for process or service control, determine the need for work instructions, determine the need for changes.
Now, let us see section 8:
8.1 – is a general clause
8.2 – is about understanding what the needs and requirements of patients are and reaching an agreement on conditions to perform the service
8.3 – is about developing a new service
8.4 – is about purchasing products, services or processes – it may be cleaning services, administrative services, analysis services, other doctors specialized in particular conditions. It may be buying chemicals or consumables for equipment or tests
8.5.1 – is about having procedures, having specifications for the process, having qualifications for the job, having specifications for the service
8.5.2 – is about identification of the patient, doctor, and lots of consumables used
8.5.3 – is about patient property that may be lost or damaged while he/she is at the facilities
8.5.4 – is about preservation of chemicals or consumables while stored
8.5.5 – is about any guarantees or scheduled calls from organization to follow-up patient condition
8.5.6 – is about changes that need to be done when an equipment is malfunctioning, or a consumable is missing, and the usual procedure cannot be performed
8.6 – is about quality control to ensure that what can go wrong is not wrong
8.7 – is about dealing with nonconformities – when what can go wrong go wrong – giving the wrong prescription, for example
Section 10 is about developing corrective actions (clause 10.2) when a nonconformity occurs or when a relevant process indicator has a bad performance. For example, patients are waiting too much to be seen by a doctor. Clause 10.3 is about deciding to improve even when there are no no-conformities.
You can find more information below:
Sem mais informações sobre as não conformidades identificadas (ex.: cláusula(s) impactadas e o que foi observado), o que podemos informar é que os templates disponíveis no kit de documentos da ISO 27001 estão em conformidade com os requisitos da ISO 27001, tendo sido aceitos por auditores de certificação em todo o mundo.
Para ver uma demonstração deste kit, por favor acesse este link: https://advisera.com/27001academy/pt-br/kit-de-ferramentas-da-documentacao-da-iso-27001/
Este material pode prover mais informações sobre o uso do kit de documentos:
Please check this free webinar on demand - ISO 9001:2015 clause 4 - Context of the organization, interested parties, and scope - - where I present examples of internal and external issues and how to determine them, and examples of interested parties and their requirements and expectations. Further, I show how both can be used to determine risks and opportunities.
You can find more information below
Focus your attention on the CAPD cycle:
Check your current situation and determine priorities for improvement.
Select a set of projects for action based on your available resources and priorities.
Plan each project in order to enhance performance.
Do, implement each project.
I like to see a management system as a portfolio of projects. Please check ISO 9000:2015 definition for management system. Something like:
System to establish a policy, an orientation, a set of priorities. Then, translate these priorities into objectives, into concrete challenges. Then work, transform the organization to meet those objectives.
You can find more information below:
No, the countries considered as providing adequate protection are listed by the EU Commission and currently are Andorra, Argentina, Canada (commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, and Uruguay.Adequacy talks are ongoing with South Korea.
You can verify the list at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
Of course, data transfers to or from Jordan can be based on Standard Contractual Clauses (SCC). You will need a data protection agreement between the controller and the processor with the SCC included.
Here you can find a free template of Standard Contractual Clauses as required from the EU Commission:
Here you can find more information:
To have a deeper idea of the list of requirements of GDPR you can consider enrolling in our free online training EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//
If your question relates to laboratories that are currently accredited to ISO 17025:2005, currently the certificates of accreditation to the 2005 version are valid; however accredited laboratories must transition before their certificate expires or by the latest, 1 June 2021. Accreditation bodies will arrange assessments against ISO17025:2017 before the deadline. That means that they need to be in the process of meeting ISO 17025:2017 requirements; thus making the old version of the Standard obsolete.
If you are busy implementing ISO 17025 and have not yet applied for accreditation, then no, ISO 17025:2005 is not applicable. The laboratory must implement to meet ISO 17025:2017 requirements.
For further information see
If you are referring to the Complaints procedure being separate from the Nonconformance and corrective action procedure, yes of course it can be separate. Laboratories generally combine documented procedures where possible to reduce the number of documents, however it is your choice; as long as it is effective and efficient to do it that way.
ISO 17025 has a requirement that you have a description of the complaint handling process that can be given to a complainant or other interested party. This could be a basic process flow diagram or a simple, clear step by step explanation. Because there is a need for this, you could as an option include any other information; which you want to keep for inhouse knowledge only; either in the quality manual section on complaints, or in a combined Complaints, Noncorformance and corrective action procedure.
The following may be of interest:
It would not be correct to carry out the classical Gauge R&R study for measurement systems where human influences and errors do not occur due to the measurer.
Instead, it may be more accurate to perform bias, linearity, and/or stability studies with master samples.
Here on this link are notify bodies that are so far accredited for MDR: https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=directive.notifiedbody&dir_id=34
This means that they also have accreditation for ISO 13485. On this list, you have 6 notify bodies from Germany.
For more information on choosing a certification body, please see following:
Yes, you are right, in the MDR there is no request that the quality management system must be certified. But, as I told yesterday on the webinar, the quality management system will be audited together with the MDR audit. So, once you will receive the MDR certificate it will mean that you have implemented and maintained the quality management system. For more information, see: