Search results

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Identifying and measuring Key Performance Indicators

    You can start by identifying your relevant interested parties. For example:

    https://www.screencast.com/users/ccruz5284/folders/Default/media/7f78307c-4c14-43a7-b613-84934fb9d56c

    Then, considering the purpose of your organization, put yourself in the shoes of your relevant interested parties and list what they expect from your organization. One can think about: safe food and correctly labeled and packaged food. What happens if food is not safe or not correctly labeled and packaged?

    As key performance indicators, your organization can have effectiveness indicators:

    • # unsafe food events
    • # of complaints about incorrectly labeled and packaged food

    As key performance indicators, your organization can also have indicators about government and general public perception/opinion about the results of the public health unit work.

    Then, your organization can have indicators about the amount of work done real versus planned. For example:

    • # of inspections done / # of inspections planned
    • Rate of approved restaurants
    • Rate of approved foods
    • Real cost of operation / planned cost of operation

    As a rule of thumb consider indicators concerning:

    • Effectiveness;
    • Efficiency;
    • Quantity of inspections

    You can find more information about indicators below

  • Scope, Criteria and Objectives

    The QMS scope sets the borders where the QMS is implemented according to the criteria. An example of a QMS could be:

    • All activities and shifts at XYZ Company’s Townsville factory of plastic products

    Other examples could be:

    • Inspection of ships, Classification and Certification, Construction and Project Supervision of Ships
    • Development, production and analysis of fine chemicals and active pharmaceutical ingredients

    The QMS Criteria sets the rules to be followed. Normally they are divided in three groups:

    • Normative reference (s): ISO 9001: 2015
    • Processes and documentation defined in the organization's system
    • Regulatory, statutory, legal and contractual requirements applicable to activities

    QMS Objectives can be (for example):

    • Improve customer satisfaction by X% until date Y
    • Reduce rate of complaints by Z% until date T
    • Reduce defects by A% until date B
    • Reduce cycle time by C% until date D 

    You can find more information about these topics in the following links:

  • Requirement of ISO 13485 for manufacturing of semi-finished product

    Yes, you need to prove that your prosthetic liner is biocompatible with the human body. To prove it, you need to perform certain tests according to the ISO 10993-1:2018 Biological evaluation of medical devices — Part 1: Evaluation and testing within a risk management process. Guidance on which tests you need to perform you can find in Annex A of this standard. The number and scope of tests will depend on the length of contact of the medical device with the skin, the type of contact, and the like. 

    Considering the test for durability, you need to prove how long your product is stable when using in compliance with instructions of use. This includes, for example: how long the prosthesis is worn during the day, whether it is properly maintained, whether it is left somewhere in the strong sun or not.

    As for testing, I don’t know what part of the world you’re in. If you are in Europe, there is a whole chain of Eurofins labs that do different tests, so you can ask them.

  • ISO 13485 requirements for outsourced processes under MDR

    Hi, my question concerns companies that provide sales, service, repair, and installation services to customers. Obviously, they don't have control over the outsourced process, as it can only be justified by legal manufacturer, not distributors. Do you have any advice for managing the outsourced process in such cases? Also, I would appreciate it if you could point out any specific regulation under UKMDR that would be applicable to this matter.

  • Integration suggestion on QMS (AS9100) & ISMS (27001)

    Inclusions and exclusions in the scope of ISMS will depend on the information, your organization wants to protect.
    You need to identify in which part of your company is your most valuable information - see the details here: How to define the ISMS scope https://advisera.com/27001academy/knowledgebase/how-to-define-the-isms-scope/

    For example, if the most important information is about new products, then the Research & Development process/department must be in the scope. If the most important information is about customers, then the Customer support process/department must be in the scope. You can also define all the organization's information as part of the ISMS scope.

    This article can provide you further answer about integrating management systems (the general concept applies to your case):

    These materials will also help you regarding scope definition:

  • Certified company not taking the audit comments

    Thank you for sharing about 4 effective risk mitigation strategies, these will be really helpful for me. I love reading this blog; it talks so much about planning a great idea about it. Keep sharing such informative articles in future, will be appreciated. See @ https://parapet.com/Solution****************************

  • How to report to senior management

    ISO 9001:2015 does not prescribe a specific method. Clause 7.4 mentions the use of:

    • what to communicate;
    • when to communicate
    • with whom to communicate;
    • how to communicate;
    • who communicates.

    So, about communicating to senior management we need to decide first what do they want or need to receive. Perhaps:

    • performance information about processes and the whole management system;
    • sales performance information;
    • complaints information;
    • costs information;
    • defects information;
    • customer satisfaction information

    Then, decide frequency, the when: Weekly? Monthly? Quarterly?

    And the how – Meeting report? Special report? Digital dashboard?

    The following material will provide you information about communication:

  • Incorporation of conformity assessment in QMS

    Conformity assessment is a process that is used to demonstrate that a product meets specified requirements. In the case of medical devices, it means that conformity assessment is a process of demonstrating whether the requirements of MDD (93/42/EEC) or MDR (2017/745) relating to the device have been fulfilled. So, all documentation, tests, and reports according to the applicable regulations need to be done. It means that you need to define your processes in the way to collect all of it. 

    Here you have a direct link to Annex 9 of the MDR

    • Conformity assessment based on a quality management system and assessment of the technical documentation: https://advisera.com/13485academy/mdr/conformity-assessment-based-on-a-quality-management-system-and-assessment-of-the-technical-documentation/

    • Defining Scope

      1. How to define Scope

      You need to identify in which part of your company is your most valuable information. You can start this by identifying which information is important for your organization to achieve its objectives and be compliant with applicable legal requirements (e.g., laws, regulations, and contracts)

      Generally speaking, for a company of up to 100 employees, the best option is to include the whole company in the scope.

      These articles will help you:

      2. Can we say that a company is certified if it is just a part that meets the standards?

      You need to check the specific procedures on how to communicate the certification status to external parties with the certification body, but generally speaking, wherever you display information about the certification status you also need to provide information for people to verify the certification scope (e.g., the certification number, a link to a copy of the certification, etc.).

      3. A company that builds an IT solution. Can we make a difference between its business infrastructure and the product infrastructure?

      You can define the ISMS scope considering only specific parts of your organization, but in general, this is worthy only for bigger organizations.

    • ISO 27001 + TISAX

      We are not experts on TISAX, but what we can tell you, based on ISO scenario, is that you have to consider:

      • legal requirements (e.g., laws, regulations, and contracts), to understand if TISAX is mandatory for your industry
      • business objectives, to understand if the TISAX certification and maintenance effort is worth the expected benefits

      This article will provide you a further explanation about TISAX and ISO 27001:

Page 382-vs-13485 of 1128 pages

Didn’t find an answer?

Start a new topic and get direct answers from the Expert Advice Community.

CREATE NEW TOPIC +