Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
The AS in AS9100 is simply short for “Aerospace standard”. This is written on the front page of the standard next to the logo for SAE international, who maintains the standard. It sounds like it should be more complicated, but it is not.
If you need to learn more about the requirements of AS9100 Rev D, see our free whitepaper: Clause-by-clause explanation of AS9100 Rev D, https://info.advisera.com/9100academy/free-download/clause-by-clause-explanation-of-as9100-rev-d
1. Is there a significance in selecting the right body for certification. For eg. should i select Exemplerar/PECB/BSI compared to IGC (As IGC is perhaps not that well known) and does it have an impact on the CV.
For the selection of the accredited provider that will endorse your certification, you will need to consider the market or industry you are going to work into, to see which provider is most recognized on it (this will provide a greater differential in your CV). Considering ISO 27001 personal certification, the most recognized accreditation bodies for training providers are IRCA, PECB, and Exemplar Global (formerly RABQSA).
2. Can you please point me to the right exam provider that does not need me to complete the exam compulsorily and advice what is perhaps the best one (both from a cost and recognition standpoint)
I think you are referring to complete the training.
Considering that, please note that attending the training is mandatory for taking the exam. This happens because some aspects of attitude and behavior required from an auditor are evaluated during the course, not in the exam. So, in fact, part of the exam is performed during the course.
What happens with our course is that you can enroll in it for free, but you cannot take the exam. In case you pay the fee to take the exam, and already have attended the course, you do not need to attend it again.
Let us consider two situations: 1. Implementing an environmental management system (EMS) and then; 2. Certifying that EMS.
These disadvantages are not universal, some organizations will suffer more or less from them. They are like an investment, what you pay in order to get a return, the benefits.
Implementing an EMS
Certifying an EMS
You can find more information about ISO 14001 below:
You still need to carry out a contract review. Your acceptance of the order is an evidence of that.
The customer may be ordering:
Contract review is always done.
You can find more information about ISO 9001 below:
As you know the blue book is AIAG FMEA Rev 4 Manual.
When converting your PFMEA format to AIAG FMEA Rev 4 format please take consideration below explanations and these are the main important issues for the FMEA approach.
1) You should add the process responsibility, key date, original date, core team, part name/number and the prepared by items in the headline on the top of FMEA.
2) You should add the requirement column before the potential failure mode column.
3) After the severity column, you should add a classification column for critical product/process characteristics.
4) You should divide the existing controls column into 2 parts as preventive controls and detection controls.
In this way, your FMEA format would be the same as the blue-covered book.
You can find our FMEA formats here:
For more information, please visit our IATF 16949:2016 Documentation Toolkit https://advisera.com/16949academy/iatf-16949-2016-documentation-toolkit/
Is information in the appendix of a controlled document still considered controlled?
Answer:
Yes, an appendix is part of the whole document. If it is there someone with authority considered that information useful. It is better that it is updated.
I have a controlled document which has some examples in the appendix of the document. I would like to print these out and laminate them for use by my plant operators at point of use.
Answer:
You can print them out and use them at the point of use. Control the version and control the distribution. If the original document or any of the appendixes are updated with the distribution control you can update them. That way you will ensure that the right version is always at the point of use.
You can find more information about document control below:
Please note that ISO 27001 does not prescribe any specific documentation for clause 10.2
Examples of how you can demonstrate continual improvement are:
These articles will provide you further explanation about continual improvement:
The documents' content are basically the same, the difference being in references to ISO 27001 in the template "17.4 Business continuity plan" (section 2).
Please note that there are two templates because they are used in different toolkits.
The template "07 Business continuity" is part of the ISO 22301 Documentation Toolkit, while template "17.4 Business continuity plan" was developed for the ISO 27001 & ISO 22301 Premium Documentation Toolkit.
Well defined BYOD and Telework policies, considering controls A.6.2.1 and A.6.2.2, allow organizations to minimize risks related to WFH.
For further information, see:
1. Is there any document showing how to link policies? That is which policies are dependent on which policies?
First is important to note that ISO 27001 does not require such a document, and since the standard does not prescribe which policies should be developed, it is unfeasible to develop such a list in a general way.
Now, considering the documents of our toolkits, we develop them with a "Reference documents" section, to point which documents are related to each template, so you can use the information in this reference to build such a list.
For further information, see:
2. How to show risks of inadequate leadership in a nice way
If the risks are related to missing documents required by the standard, like the information security policy, you can simply mention that the document is missing and the action of leadership is to ensure they are developed.
In case the risks are related to leadership behavior required by the standard, like promoting continual improvement, a good way to present such risks is to state that related requirements of the standard are not being "properly" followed. This way you can imply that leadership is doing something, that is better than state that they are doing nothing, but that what is being done is not enough to comply with the standard.
For further information, see: