Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
The current pandemic illness that is affecting people world wide is certainly a hazard that needs to be taken into account in the hazard assessment for the processes in a company. As such it can be considered an OH&S hazard, and should be included in updated process controls for working processes.
You can learn more about the hierarchy of controls in the article: 5 levels of hazard controls in ISO 45001 and how they should be applied, https://advisera.com/45001academy/blog/2015/09/02/5-levels-of-hazard-controls-in-iso-45001-and-how-they-should-be-applied/
Since ISO 45001 aligns with all the other ISO management system documents you will find the same requirements for controlling documented information in clause 7.5. The requirements here give requirements for controlling procedures and records as well as archiving, and are the same as other standards such as ISO 9001 and ISO 14001. As such you can have one process for documentation control for all management system standards.
You can read more about the documentation requirements changes in the article: New approach to ISO 145001 documentation, https://advisera.com/45001academy/blog/2018/03/13/new-approach-to-iso-45001-documentation/
Please note that ISO 27001 specifies that the CIA is related to risks (6.1.2 c 1), and to consequences (6.1.2 d 1), not to assets. Considering that, when using asset-based Risk Assessment, you need to consider the CIA on the asset-threat-vulnerability set, and to consequences related to it.
When you talk about a risk-based Risk Assessment approach, I'm assuming you are referring to the description of a risk scenario (scenario-based). In this case, the CIA must refer to the described scenario and related consequences, while that in a process-based Risk Assessment approach the CIA must refer to the defined process and related consequences.
For example:
For further information, see:
Some examples of data being converted to information can be:
Product quality control results after comparing them with specifications become conforming or non-conforming products.
Design and development verification results after comparing with specifications become conforming or non-conforming designs.
So, data is about facts related with something. Facts are neutral. Then, after comparing facts with some rules, they acquire meaning. They become data.
You can find more information below:
Normally, organizations do not make changes in policies and processes due to COVID-19. What I see is organizations making changes in procedures because they change the way they do some activities.
You can see more information below:
Como implementaría la lista de verificación de códigos de documentos en una empresa?
Cleanrooms are classified according to the cleanliness level of the air inside them. The cleanroom class is the level of cleanliness the room complies with, according to the quantity and size of particles per volume of air.
All necessary information regarding cleanroom technology you can find in the following standards:
Quality objectives must be aligned with the quality policy and must be built upon the SMART framework.
Examples of quality objectives can be:
The following material will provide you more information:
First, process and procedure are two different things. A process is a set of activities that convert inputs into outputs. A process is represented by a verb because process is transformation, process is action. A procedure is a description of what to do or how to do it.
You do not need a procedure to describe every process or every job your organization does.
ISO 9001:2015 has no mandatory procedures. Please check this article - List of mandatory documents required by ISO 9001:2015 - https://advisera.com/9001academy/knowledgebase/list-of-mandatory-documents-required-by-iso-90012015/
Please also take a look at clause 4.4.2 – It is up to each organization to decide which procedures are useful and should be developed. More complex organizations, or organizations with less training, or organizations with more staff turnover, normally decide to develop more procedures.
You can find more information below:
Mettre en place un sponsor de projet, un chef de projet et une équipe de projet. Assurez le soutien de la direction, obtenez une formation et, dans un premier temps, effectuez une analyse des lacunes pour déterminer la quantité de travail à effectuer - en comparant ce que votre organisation a déjà en place avec les exigences ISO 9001: 2015. À partir de cette analyse des lacunes, vous pouvez développer votre plan de projet, répertoriant ce qui doit être fait, par qui, jusqu'à quand.
Ensuite, une étape importante consiste à concevoir un modèle de fonctionnement de votre organisation en tant qu'ensemble de processus interdépendants. Décidez comment décrire et surveiller ces processus.
À partir de là, c'est la mise en œuvre afin de combler les lacunes constatées. Ensuite, effectuez un audit interne et une revue du system par la direction. Là, vous pouvez décider si votre organisation est prête pour un audit de certification.
Ceci est une très courte description du voyage mais ci-dessous vous pouvez trouver des informations plus détaillées: