Search results

Home / Search

Category:
Select
Select

11277 results

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • FCS security governance critical success factor

    Considering ISO 27014, the ISO standard for Governance of Information Security, the governance of information security is a system for control and direction of information security activities.

    Considering that, examples of measurements to identify failure to control and direct information security activities are:

    • low number of business strategies supported by information security initiatives
    • low number of controls achieving proposed objectives
    • high number of information security incidents
    • no achievement of proposed objectives for the ISMS

    The measurements you proposed are mainly focused on management activities, and these cannot ensure the expected results for information security are achieved (e.g., all meetings can address security issues, but no one of them is effectively resolved over time).

  • DPIA For Cloud Services

    When and how to carry out a DPIA (data protection impact assessment) with respect to cloud services for my organisation.

  • ISO 9001 surveillance audit requirements

    If I have a certified person in a company who conducts ISO internal audit annually, do I need to pay certification body anyway to come and conduct a surveillance audit every year? Is it must?

    Answer:

    If you want to be certified by a certification body, you must have the surveillance audits every year. If your organization does not need to be certified you can avoid that cost.

    You can find more information below:

  • ISO 9001 manual

    ISO 9001:2015 has no mandatory requirement for the existence of manual or procedures. It is up to each organization to decide if a manual is useful and what should be its content.

    I recommend organizations to have a quality manual, but it is just a recommendation. Please check this article about mandatory documentation - List of mandatory documents required by ISO 9001:2015 - https://advisera.com/9001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-90012015/

    The following material will provide you information about the quality manual:

  • Roles and responsibilities of the QMS working committee

    ISO 9001: 2015 does not provide, does not prescribe the existence of a QMS working committee, but it also does not prohibit it. Each organization must consider which organizational arrangement is best suited to its internal culture.

    So, I advise you to start with the end in mind. What is needed to happen at a higher level to ensure continued compliance to certification?

    For example:

    • Ensure that internal audits are done and closed
    • Ensure that management review takes place and is effective
    • Meet to analyze trends around performance indicators results
    • Keep updated the context and interested party’s determination
    • Ensure continual improvement
      …
       

    You can find more information below:

  • Preparing documents per each clause

    First of all, it is necessary to understand the IATF 16949: 2016 standard very well, if necessary, it may be good to participate in a 2-day training and perform a gap analysis during the training. Every "shall" written in the standard is a requirement and must be done. An action plan should be made for all "shall" requirements and relevant requirements should be taken and adopted into the quality management system (QMS).

    To get an idea of which kind of records you can use for your management system, see this toolkit:

Page 261-vs-13485 of 1128 pages

Didn’t find an answer?

Start a new topic and get direct answers from the Expert Advice Community.

CREATE NEW TOPIC +