Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
Timeframe is one thing, monitoring frequency is another:
If the monitoring frequency is made equal to the timeframe there will not exist any monitoring during the journey to the desired future. You will have only one verification at the end, and if you fail to meet the objective it is too late to act. For example, in the picture above, before the end of the time frame there are three interim moments of monitoring allowing action if needed.
What is the best timeframe for an objective? It will depend on the dimension of the change needed and on the availability of resources.
The following material will provide you more information:
Following article explains how to create an ISO 9001 process flowchart, and provides an example of a process flowchart that can be used as a guideline for creating a flowchart for your own company. You will also learn:
For more information, please see:
Also, this webinar may provide additional information:
ABC Company is the controller of his own staff's personal data. In the job contract or in the staff privacy notice, the staff gave consent to ABC company to process personal data to carry the task of the job, which means also transfer data to processors or the third parties if related to the job.
The application, therefore, will be a processor that processes ABC’s staff personal data on the behalf of the organization for the scope to fulfill the software license agreement (use the application). Therefore, there will be a data processing agreement between ABC Company and Application Company which regulates how ABC’s data will be processed accordingly Article 28 GDPR requirements.
GDPR applies to the whole organization and all its data processing activities whether they are computer-based or not.
Here you can find more information:
If you want to know more about GDPR compliance you can consider enrolling in this EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//
Internal auditors receive a kind of order for their audits. That order specifies three critical topics:
You can look for more information below:
Imagine a wooden furniture manufacturing company. Life cycle analysis can begin with a concern for the origin of the wood, the guarantee that the wood came from a legitimate origin with proper exploitation practices. Then, the wood is worked in a way to be used well. And it can reach the point where the company proposes to customers to collect the furniture at the end of its useful life.
Another example may be that of a toy manufacturer that includes information for customers to properly dispose of toy batteries at the end of their useful life.
Please check this information below with more detailed answers:
ISO 14001 is about an environmental management system (EMS). So, risk assessment in ISO 14001 is related with desired or undesired results about the EMS.
In a laboratory you can start by determining environmental aspects and impacts generated by laboratory operation. Then, you can determine if there are any risks and opportunities around those environmental aspects and impacts. For example, I worked in a laboratory that generated hazardous wastes. Risks could be about giving the right treatment for those wastes, working with the authorized waste operators, using practices to minimize waste generation, minimizing wastes mixture.
You can find more information below:
ISO 14001 gives a great framework for doing that. Determine environmental aspects and impacts, evaluate them, and develop a set of objectives and action plans in order to improve performance around the most critical, the most significant impacts.
Please check this information below with more detailed answers:
No, it is not mandatory to use the process approach with ISO 14001, but you can follow the process approach in the way you manage environmental aspects and impacts. For example, I like to draw the process of managing wastes from generation until leaving the organization, or the process of managing water from sourcing to disposal.
If you develop a register of environmental aspects and impacts it may be useful to have a column to identify the source of the aspect, and the source may be a product, a service or within the scope of a quality system process. This way it is easier to see where to act, to improve environmental performance.
You can find more information below:
What is the purpose of iso 14001? ISO 14001 sets out the requirements for an environmental management system (EMS). It helps organizations improve their environmental performance.
After updating your environmental assessment, you have a list of the most significant environmental impacts of your organization. So, it seems logical that a great EMS is a system that improves performance according to those significant environmental impacts. For example, if your organization is an intensive user of energy, or generates a lot of hazardous wastes, good KPI’s are the ones that measure performance on those two areas.
Please check below more information:
First is important to note that change management exists in ISO 27001 as one control from its Annex A (control A.12.1.2 Change management), but it can be excluded under certain conditions.
Provided that your organization does not have relevant risks or legal requirements (e.g., laws, regulations, or contracts) that require the implementation of change management, it is possible to be certified against ISO 27001 without implementing this control.
To see how a change management document compliant with ISO 27001 looks like, please see the demo on this link: https://advisera.com/27001academy/documentation/change-management-policy/
These articles will provide you a further explanation about the definition of controls and change management: