Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
It is really hard work, but I think it is doable. Since both standards are similar to ISO 9001:2008, maybe that is the starting point.
Following articles can be helpful:
Since the product design belongs to the customer; you are exempt from the preparation of the product drawing and design FMEA, as specified in article 4.4.1.2 of the IATF 16949: 2016 standard. Except for those you are exempt from; You should take the subjects '' a '' to '' m '' specified in 4.4.1.2 of IATF 16949: 2016 standard into your quality system.
For example, if I give an example of product safety and critical characteristics, Product safety characteristics affect product design and/or production process design. The issue of product safety is related to special characteristics and product safety characteristics are very important for the design and production of products. These important requirements are determined during the product and production design process.
For example, material hardness and tensile stress are very important safety characteristics for the durability of brake parts. These characteristics come from product design specifications, product drawing, and design FMEA.Since the design is the responsibility of the customer, the customer should show the technical drawing. But in addition, the hardness of the material is also affected by the heat treatment conditions in production, production parameters such as temperature and time. Thus, production parameters such as temperature and time of heat treatment are the subject of product safety and they are also special characteristics related to safety for brake parts. Another example is the tightening torque amount for seat manufacturing and seat assembly process. Screw tightening torque is also safety characteristics and can be affected by the wrong set up of production or not calibration of torque meter, both of the causes may come from the production process.
Critical characteristics of the product and production process; it is defined by legal regulations, security, and significant important critical characteristics. All these characteristics have different symbols according to customer-specific requirements as (R/S, CC, SC)
All these characteristics come from legal regulations, product drawings, product specifications, and production parameters that affect the health of production operators and the durability of products.
According to the IATF 16949 standard, Product Safety is relating to the design and manufacturing of products to ensure they do not represent harm or hazard to customers. As you know customers are regulations, end-users (driver and passenger), OEM plants, the other manufacturing plants, and production operators.
All these requirements must be transferred via product drawing, material specification, DFMEA, PFMEA, Control Plan, etc to the entire supply chain, and the entire supply chain must comply with the product and production-specific characteristics for product safety.
For more information, please read the following article:
GDPR leaves upon the data controller any decision about how to store personal data as long as security measures are taken.Microsoft Azure, as well as many big tech players, is making a great effort to provide GDPR compliant cloud solution and guidelines to its customers that you can follow here: https://azure.microsoft.com/en-in/blog/protecting-privacy-in-microsoft-azure-gdpr-azure-policy-updates/
There are also guidelines for GxP compliance here: https://azure.microsoft.com/en-us/blog/new-azure-gxp-guidelines-help-pharmaceutical-and-biotech-customers-build-gxp-solutions/
You can consider enrolling in the EU GDPR Foundation Course:EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//
I'm assuming your organization is using outsourced cloud services.
Considering that, you can exclude controls only if you do not have relevant risks that can be treated by them, and there are no legal requirements (e.g., laws, regulations, or contracts). For example, the organization needs to implement a control to fulfill GDPR, or there are relevant risks related to information backup.
When using outsourced cloud services, you can verify if the provider has implemented such controls. In case they did, define in Statement of Applicability that the required controls are implemented by the provider.
This article will provide you a further explanation about supplier management:
1. I would like to implement ISO 9001 + 27001 (+ 27002 + 27031) + 22301 (+22313) all at the same time within the same company. I know there is quite a lot of overlap between these standards, but what would you advise we use as a starting point? Should we start with 9001 and add-on all of the additional requirements from the other standards? or start with 27001 ... ? What would you recommend?
The order of implementation will depend on your needs:
These articles will provide further information:
2. Is there some sort of overview available of the overlap and differences between these standards?
These materials will provide information about overlaps:
Excellent answer i got it
If you were in my country, I would advise you to:
Potential clients must be aware of your existence. You must develop your own brand by evidencing your knowledge and experience. You evidence your knowledge when you write. You should write. Share what you know, share your experience and results, share testimonies of your clients about the outcomes of working with you. Use blogs, professional networks, trade magazines, use your LinkedIn profile, make presentations at conferences. And don’t forget to develop a network of contacts.
The following material will provide you more information:
Measurement system records are technical records so the laboratory needs to comply specifcially with the requirements of ISO 17025 clauses 8.2 and 7.5.
The laboratory needs to establish what a suitable retention time is for different types of records, based on contractual and legal requirements. The potential risk or impact to the laboratory should be evaluated if the period selected is too short, or even too long. Consideration should be given to the medium of the records as all requirements of ISO 17025 must be met during the retention period in terms of data confidentiality, security and integrity. You need to considering both paper, scanned and electronic records. This also includes being able to “read” the record either with the human eye or a computer process, throughout the retention period, i.e. format ands medium must be contemporaneous. Consider for example if there was a legal dispute over a result or report years down the line, the results would need to be traceable to legible (readable) measurement system records to verify validity of the reported results.
It is interesting to note that most laboratories do not define the concept of archiving. By definition retention period is the period of time that records (documents) should be retained in their offices of origin or in records centres before they are transferred to an archive(s) <organization> or otherwise disposed of (SOURCE: ISO 5127:2017(en) Information and documentation - Foundation and vocabulary). In other wordsm to mitigate risk, a laboratory could consider keeping a particular hand written raw data record for say 6 months, then scanning it and retaining the electronic file with quick access by the laboratory say for 3 years. Thereafter it could be archived for a suitable period, before disposal. Costs need to be considered as a factor in the risk assessment too.
For further information, have a look at the ISO 17025 document template: Document and Record Control Procedure at https://advisera.com/17025academy/documentation/document-and-record-control-procedure/
For supporting information regarding actions to address risks and opportunities, see:
Yes, authorship and approval are not exclusive. The only criteria is that a chain of authority coming from top management gives someone the authority to approve a document.
The following material will provide you more information:
La principal diferencia entre la política de calidad de la norma ISO 9001 y la política ambiental de la norma ISO 14001 es el enfoque sistemático que ofrecen. En ISO 9001 el enfoque de la política está centrado en la calidad del producto o servicio y satisfacción del cliente, mientras que en ISO 14001 la política ambiental busca medir el impacto ambiental preservar el medio ambiente.
Para más información sobre la política de calidad y de medio ambiente, vea los siguientes materiales:
- How to write a good quality policy: https://advisera.com/9001academy/blog/2014/03/25/write-good-quality-policy/
- How to write an ISO 14001 environmental policy: https://advisera.com/14001academy/blog/2019/08/27/key-iso-14001-benefits-to-customers/nowledgebase/how-to-write-an-iso-14001-environmental-policy/
- Curso gratuito en línea - Fundamentos de ISO 9001:2015 - https://advisera.com/es/formacion/curso-fundamentos-iso-9001/
- Curso gratuito en línea - Fundamentos de ISO 14001:2015 - https://advisera.com/training/es/course/curso-fundamentos-iso-14001/
- Libro - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
- Libro - The ISO 14001:2015 companion: https://advisera.com/books/the-iso-14001-2015-companion/