Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
Unfortunately, I have no experience of working with ISO 21001. Why is your organization deciding to implement a management system? If it is as a marketing tool I recommend ISO 9001 just because is the most well known in the general public. However, even working to get ISO 9001 certification, I recommend using ISO 21001 as a guideline.
ISO published in 2003, IWA 2:2003 - Quality management systems - Guidelines for the application of ISO 9001:2000 in education, a document updated in 2007 by IWA 2:2007 - Quality management systems -- Guidelines for the application of ISO 9001:2000 in education. However, as far as I know this 2007 guideline has been widrawn.
ISO published in 2018, ISO 21001:2018 - Educational organizations -- Management systems for educational organizations -- Requirements with guidance for use. ISO 21001:2018 is a management system standard that is partially aligned with ISO 9001:2015 for quality managent systems.
Setup a project sponsor, a project manager and a project team. Determine the scope of the QMS, your organization may decide to include only certain lines of business. Ensure top management support, get training. Designing and implementing a quality management system (QMS) implies being knowledgeable about ISO 9001:2015.
As a first step perform a Gap analysis, to determine the amount of work to be done - comparing what your organization already has in place versus ISO 9001:2015 requirements. From that GAP Analysis you can develop your Project Plan, listing what needs to be done, by whom, until when.
Then, an important step is to design a model of how your organization work as a set of interrelated processes. For example:
Decide how to describe and monitor those processes.
From there it is implementation in order to close the gaps found. Then, perform an internal audit and the management review. There you can decide if your organization is ready for a certification audit.
This is a very short description of the journey but below you can find more detailed information:
You can find more information below:
La implantación de un Sistema de Gestión de Calidad sobre todo tiene beneficios en la empresa. Algunos de los más importantes son los siguientes:
- Una mejora de la credibilidad y de la imagen de la organización
- Un incremento de la satisfacción del cliente
- Una mejor integración de los procesos
- Una mejora del compromiso de los empleados
- Una mejora en la evidencia de la toma de decisiones
- La creación de una cultura de mejora continua
Es importante tener en cuenta que para obtener estos beneficios la implementación de ISO 9001:2015 debe contar con los recursos necesarios, tanto económicos como de personal. Por lo que estos costes deben de ser tenidos en cuenta antes de decirdirse por implementar un SGC en una organización.
Estos materiales pueden ayudarle a entender el impacto de un SGC en una empresa:
- Benefits of ISO 9001 implementation for small businesses: https://advisera.com/9001academy/blog/2018/09/17/benefits-of-iso-9001-implementation-for-small-businesses/
- Seis beneficios clave de la implementación de ISO 9001: https://advisera.com/9001academy/pt-br/kit-de-documentacao-da-iso-9001/nowledgebase/seis-beneficios-clave-de-la-implementacion-de-iso-9001/
- Curso gratuito en línea - Fundamentos de la norma ISo 9001:2015: https://advisera.com/es/formacion/curso-fundamentos-iso-9001/
- Libro - ISO 9001:2015 through practical examples: https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
Technical documentation necessary for the medical device file is described in the Medical device regulation EU MDR 2017/745 in Annex 2 – Technical documentation and EU MDR Annex 3 – Technical documentation for post-market surveillance.
We in our ISO 13485 & MDR Documentation toolkit prepared the obligatory procedures and reports. Other test reports depend on the type of medical device and it was not possible to standardize it.
On the following link you can see the preview of those documents:
Technical documentation procedure and related documents https://advisera.com/13485academy/documentation/technical-file-procedure/
For more information, see:
El contexto de la organización es un requisito de ISO 9001 en el que se requiere que una organización considere las cuestiones internas y externas que pueden impactar a sus objetivos estratégicos y a la planificación del SGC. Para cumplir con este requisito, debe de centrarse sólo en las cuestiones que pueden afectar a la satisfacción del cliente y a la entrega de la calidad del producto o servicio.
El contexto interno tiene que ver con la cultura, las creencias, los valores, o principios dentro de la organización, así como la complejidad de los procesos y la estructura organizativa.
Por otra parte,el contexto externo está relacionado con cuestiones derivadas del entorno social, tecnológico, ambiental, ético, político, legal, y entorno económico de la organización.
Para llevar acabo un análisis de este contexto puede realizar un análisis DOFA de debilidades, oportunidades, fortalezas y amenazas o/y un análisis “PEST” (Política, Económico, Social, Tecnológico).
Respecto a las partes interesadas sólo es necesario identificar aquellas qye tendrán un impacto en la capacidad de la organización para proporcionar productos y servicios para satisfacer constantemente las necesidades del cliente y los requisitos legales. Esto incluye: proveedores, consumidores, uniones de trabajadores, docios, empleados, gobiernos y ONGs, etc.
Estos materiales pueden ayudarle a entender el contexto de la organización y las partes interesadas:
- Cómo identificar el contexto de la organización en ISO 9001:2015: https://advisera.com/9001academy/pt-br/kit-de-documentacao-da-iso-9001/nowledgebase/como-identificar-el-contexto-de-la-organizacion-en-iso-90012015/
- How to determine interested parties and their requirements accoding to ISO 9001:2015: https://advisera.com/9001academy/blog/2015/11/10/how-to-determine-interested-parties-and-their-requirements-according-to-iso-90012015/
- Curso gratuito en línea - Fundamentos de la norma ISo 9001:2015: https://advisera.com/es/formacion/curso-fundamentos-iso-9001/
- Libro - ISO 9001:2015 through practical examples: https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
There is no difference in the implementation process between ISO 9001 and ISO 13485. Those two standards can run together. However, since ISO 13485:2016 does not have a high level structure as ISO 9001:2015 does, you just need to take into consideration the numbering of the requirements. At the end of the ISO 13485:2016, in Annex B you can find Correspondence between ISO 13485:2016 and ISO 9001:2015.
On the following links you can find some useful articles:
The number of procedures depends on the type of your medical device. Requirements in the standard are prepared for all types of medical devices, so not all requirements are applicable for each medical device.
On the following link, you can find the list of mandatory documents from ISO 13485 https://advisera.com/13485academy/blog/2017/01/18/list-of-mandatory-documents-required-by-iso-134852016/
Of course, if you do not have certain processes (for example sterilization, or your product is not software), then there is no need to prepare and have those documents in your quality management system.
Furthermore, I would like to point out that these are mandatory documents and definitely some additional documents can be necessary (for example: some policies, organizational charts, some plans and so on).
1. Can I generate quality documentation and have at least two other people in the R&D group review and approve them?
Yes, you can generate quality documentation on your situation. Design and development for medical devices have to deal with relevant regulations, product safety, and risk controls on product defects in addition to the usual application requirements, specification requirements, and end-customer needs.
Here is the list of mandatory documents from ISO 13485 https://advisera.com/13485academy/blog/2017/01/18/list-of-mandatory-documents-required-by-iso-134852016/
Of course, if you do not have certain processes (for example sterilization, or your product is not software), then there is no need to prepare and have those documents in your quality management system.
The following articles can be helpful:
2. Can Quality Manual be revised as often as needed to reflect our developing stages?
Yes, the Quality manual can be revised as often as you need. The quality manual must be the reflection of your current state.
For more information, please see the following links:
1. Is dental software considered as a medical device?
According to the Medical device regulation MDR 2017/745, a medical device is any instrument, apparatus, appliance, software, implant, reagent, material, or other article intended by the manufacturer to be used, alone or in combination, for human beings for one or more of the following specific medical purposes:
So if you can define your software within this explanation, then it is a medical device. Each medical device must have the proper classification, and classification is determined by rules The rule that is applicable for software is Rule 11 which states the following:
Rule 11
Software intended to provide information which is used to make decisions with diagnosis or therapeutic purposes is classified as class IIa, except if such decisions have an impact that may cause:
All other software is classified as class I.
For more information, please see the following:
2. If yes do we need to approach Health Canada for Licensing as a medical device?
Yes, each medical device, regardless of classification, must be registered in the local authority for medical devices, in your case Health Canada.