Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
ISO 14001:2015 in itself has no mandatory requirement about soil testing. Soil testing is mandatory if national legislation requires it, or if internal procedures require it.
You can find more information below:
Clause 0.5 is to avoid the situation where you start with a quality audit and finish with a nonconformity about taxes, or you start with an environmental audit and finish with labor relations or social accoutability nonconformity
Any auditor, internal or external, should stick to the scope and criteria provided before preparing the audit.
Without knowing in detail your documentation I can think that more focus and attention from auditors and audit program manager about objective, scope and criteria can be enough.
This basically depends on the type of the medical device that you have and regulations that you need/want to be in compliance with.
In general, in ISO 9001:2015 validation is defined as "confirmation, through the provision of objective evidence, that the requirements for a specific intended use or application have been fulfilled". As for medical devices, validation involves an "assessment by objective means of whether the specified users are enabled to achieve the specified goals (intended purpose) within the specified context of use".
Computer System Validation (CSV) is a documented process of assuring that a computerized system does exactly what it is designed to do. Requirements for validation of computer systems can be found in:
For more information on validation, please see following articles:
You can start by determining environmental aspects, determining how an organization interacts with the environment. For example:
Determining risks and opportunities of an organization, according to ISO 14001:2015, is based on its environmental aspects, compliance obligations, and context and interested parties.
For example, concerning environmental aspects we can have:
Since organizations have to consider the lifecycle of its products and services, do not forget to consider risks and opportunities around your products and services during use or final disposal.
For example, consumers may not follow your instructions about disposal.
Please check risk definition (3.2.10) on ISO 14001:2015 (effect of uncertainty). With environmental aspects and impacts we are considering normal, expected situations, like startup and closing down operations, but also abnormal and emergency situations. Whenever there is uncertainty there is risk or opportunities, there is a potential deviation from the expected.
About determining risks based on environmental aspects and compliance obligations I see that different organizations follow different approaches:
1. There are organizations that determine their environmental aspects and use a risk and opportunities assessment to determine its significant environmental aspects. (Please see the end of the second paragraph of Annex A.6.1.1 of ISO 14001:2015)
2. There are organizations that determine their environmental aspects evaluate them and determine the significant ones and use a risk and opportunities assessment to determine which ones need an action plan, and which ones need only to be monitored.
3. There are organizations that only apply the risk-based approach to the context part. In a certain way they are following the same approach as 1 without explicitly mentioning it.
Please check this information below with more detailed answers:
1. will this help me make my websites (cookie bar, privacy policy, terms of service, shop, contact form and newsletter) form fully compliant?
Yes, our toolkit can help to reach compliance with GDPR requirements because it guides the user in the process.
You can find more information about our EU GDPR Documentation Toolkit here: https://advisera.com/eugdpracademy/eu-gdpr-documentation-toolkit/
2. Do I have full support in all the above steps or there is any limitation in terms of the times I can ask?
Our basic toolkit includes free consultation via Skype, email support (up to 10 questions per month), video tutorial, and document review to help you through the process. We also offer other packages of support that have included more options. You can see the options and what they contain at this link: https://advisera.com/eugdpracademy/eu-gdpr-documentation-toolkit/
3. And since my websites are visited and used by people from all over the world, do I have to comply with other non-EU countries regulation too? Or is GDPR implementation enough to these countries?I am asking this, because maybe there is need of another package to buy."
Our toolkit helps to comply with GDPR requirements which are considered as a standard through privacy laws all around the world. However, you need to be aware that some requirements may differ from legislation to legislation and while the compliance with GDPR can cover most requirements, you may need some adjustments.
Here you can find more information:
If you want to know more about GDPR compliance you can consider enrolling in this EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//
Continual improvement of a QMS can include actions to reduce variability of processes, products and services. So, a good starting point is about considering the results from analysis and evaluation (ISO 9001:2015 clause 9.1.3) and from management review (ISO 9001:2015 clause 9.3) in order to determine if continual improvement actions are needed.
The cycle of the left is the control cycle or the daily cycle. When you perform 9.1.3 or 9.3 you are checking performance (C) and deciding what to do (A).
If the decision is: we like this performance level we can keep the process without changes, you keep your internal standard (S) (procedures, rules, instructions).
If the decision is: we must improve performance, you must jump into the improvement cycle, and perform the PDCA. You have to determine the root cause(s) and design a solution to remove them. That solution will be part of an action plan that must be implemented to change one or more processes of your QMS. Any relevant result of a QMS (desirable or undesirable) will always be the outcome of one or more processes. Removing the root cause(s) means changing, improving one or more processes. Like in this example:
The following material will provide you with information about root cause analysis and improvement:
I think that this free webinar on demand about that topic can be useful for you right now - How to perform an internal audit remotely - https://advisera.com/9001academy/webinar/remote-internal-audit-free-webinar-on-demand/ a detailed explanation about how to remotely audit operations using a tablet, a smartphone, a CCTV or a drone.
You can find more information below:
You asked
“what are the basic requirements to meet standards of 17025.from documentation till testing."
ISO 17025 provides general guidelines for the competence of testing and calibration laboratories. A laboratory working in accordance with, and seeking accreditation to ISO 17025 must implement policies, establish processes, set objectives and structure the management system to meet the requirements and adhere to the quality principles of ISO 17025. For example applying risk based thinking. There are certain mandatory requirements to establish processes, for documentation and records. Both Management and Technical competency must be demonstrated before accreditation. Your accredition body should make the criteria and checklists they will use, available to you; ahead of the audit so you can assess the gaps that may exist.
The ISO/IEC 17025:2017 Documentation Toolkit provides template to document how the requirements are met. Previews are available at https://advisera.com/17025academy/iso-17025-documentation-toolkit/
The following will provide further information: