Search results

Home / Search

Category:
Select
Select

11294 results

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • IATF 16949 Cl. 4.4.1.2 - Product Safety

    Product safety officer 

  • Leadership requirements

    (I have already done the diagnostic phase, in the implementation part I have made macro improvements to cover the points that the institution does not meet, in a macro improvement I have the leadership part, what can I develop to fulfill the leadership aspects? Taking into account that the process is a printed lottery

    First is important to note that ISO 27001 requirements for leadership are the same regardless of the organization industry and size, so there are no additions or exclusions regarding a printed lottery process.

    Considering that, to cover leadership requirements you must:

    • develop an information security policy and define information security objectives, aligned with business strategies
    • engage personnel around information security initiatives
    • define and communicate responsibilities and authorities for relevant roles to information security

    To see how an Information Security Policy looks like, please see this link: https://advisera.com/27001academy/documentation/information-security-policy/

    These articles will provide you further explanation about leadership requirements:

  • ISO High-Level Structure for standards

    I'm assuming that by HLS you mean "High-Level Structure" adopted by ISO management standards since 2012.

    Considering that, please not that ISO does not have an official position regarding mapping of PDCA improvement model to its management system standards. Since 2012, ISO has excluded explicit reference to PDCA from its management systems, in favor of a more open approach, where organizations can adopt any improvement model that best fits their needs (e.g., DMAIC, 8S, A3/PSP, etc.).

    With this in mind, there is no "correct" answer when mapping clause 7 in the PDCA model. It mostly depends on how you viewing the clause, as a whole or element by element. For example, resources and documented information elements are more related to the "PLAN" step (focus on long term planning), while competence, awareness, and communication are more related to the "DO" step (short term plans and focus on implementation).

    We particularly adopt the approach of clause 7 as a whole and part of the "PLAN" step.

    This article will provide you further explanation about PDCA in ISO 27001:

  • Procedures for validation and verification of methods

    What are the procedures for validation and verification of methods, how to apply it,

    The ISO 17025 toolkit includes the procedure for validation and verification of methods, named Test and Calibration Method Procedure, along with two supporting douments Test Method Development, Verification and Validation Register and Test Method Development, Verification and Validation Record. The techniques for method validation are listed as well as the required records. It is the responsibility of the laboratory to choose the suitable technique, plan experiments, reference sector specific guidelines and meet specific regulatory and accreditation body requirements. The procedure is also available separately at https://advisera.com/17025academy/documentation/test-and-calibration-method-procedure/

    what's procedure for personal competence?"

    The ISO 17025 toolkit includes the necessary procedure for Competence, Training and Awareness Procedure, were the laboratory defines needs, planning and methods for training and assessment of training results in order to ensure employees are competent. There are also four appendices related to the procedure;  namely the Training Program, Training Record and Performance Monitoring, Record of Attendance and Competence Approval, and Authorization Record. The Competence, Training and Awareness Procedure is also available as a separatel document at https://advisera.com/17025academy/documentation/competence-training-and-awareness-procedure/

    You can read more about the ISO 17025 toolkit, preview all the documents, as well as purchase the toolkit at https://advisera.com/17025academy/iso-17025-documentation-toolkit/

  • Horizontal vs Vertical audit

    I cannot provide that kind of answer in this space. However, I invite you to look for book titles about auditing that include the word “process”.

    For any process you chose, look into the turtle diagram:

    https://www.screencast.com/users/ccruz5284/folders/Default/media/4c41a267-3411-4ccc-988a-f3a2b7dca179

    You can audit a process and consider one or more ISO 9001:2015 clause(s) relevant from section 8. But for any process, you can use the turtle diagram and list several other clauses that you can audit:

    https://www.screencast.com/users/ccruz5284/folders/Default/media/396c0fe3-2ee0-436e-b51c-bcb7a8962a6f

    You can find more information about auditing below:

  • Accreditation for ISO 17025

    The ISO 17025 academy provides well-defined instructions, as well as tips via email. Document templates contain an average of twenty comments each, and offer clear guidance for filling them out. For example, square brackets [ ] are used for all fields that must be filled in, as shown in the free Project Plan for ISO/IEC 17025 implementation, available at https://info.advisera.com/17025academy/free-download/project-plan-for-iso-17025-implementation.

    For each document, the Purpose, Scope and Users are defined and references provided. Using the Addressing Risks and Opportunities Procedure as an example, all the requirements of ISO 17025 8.5 and 4.1 (Impartiality) are covered within the template, where the procedure covers what must be done. You complete the procedure by stating who is responsible for the tasks, e.g. “Laboratory Manager". As there are often many ways of achieving objectives towards implementation of specific requirements; you can in this example, list the preferred tools and methods your laboratory chooses for assessing and evaluating risks and opportunities. These records can be added in the table provided, alongside the supplied template Registry of Key Risks and Opportunities.

    You can download a free ISO 17025 toolkit demo at https://advisera.com/17025academy/iso-17025-documentation-toolkit/ that could provide further understanding.

    The Addressing Risks and Opportunities Procedure Is available at https://advisera.com/17025academy/documentation/addressing-risks-and-opportunities-procedure/

  • Consent of Conference/Online and In-Person Attendees/GDPR

    Thank you! Very helpful information. So that I am clear on what you are saying, do you mean that even if we ask the data subjects for a perpetual license that they can still revoke it at any time? So would be be allowed to ask for a perpetual, irrevocable license under GDPR which to me means that they can't rescind their consent?
Page 417 of 1130 pages

Didn’t find an answer?

Start a new topic and get direct answers from the Expert Advice Community.

CREATE NEW TOPIC +