Search results

Home / Search

Category:
Select
Select

11294 results

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Select

Assign topic to the user

  • Procedure for Document and Record Control

    If documents created by an employee and sent directly to the client without the approval of another person of the organization is an acceptable risk to your organization, then you can include an "exception" in this section like:

    "Except for client project work documents, all other documents regardless of whether they are new documents or new versions of existing documents must be approved by [job title ]. Client project work documents are considered approved by the employee who has created/reviewed it."

    Please note that as a good practice for projects, the project manager should review/approve the documents, since they will be sent to the client. 

  • Cyber-attack contingency plan template

    Unfortunately, we do not have a specific cyber-attack contingency plan. Our templates are provided as a general basis for the development of specific contingency plan scenarios, so you can use them to define the activities, resources, and responsibilities required to be a contingency for a cyber-attack.

    Please take a look at these free demos to see how contingency plan looks like:

    This article will provide you further explanation about developing a BCP and a DRP:

  • ISO 27017 certification process

    My first question is about the formal process for a company to get certified ISO 27017 if it is already certified ISO 27001.
    It is just about asking the audit provider to verify the additional questions and deliver the “statement of compliance.”? Or there is a certification that the company should conduct a proper and distinct audit to have it?

    First, it is important to note that ISO 27017 is not a certifiable standard. What some certification bodies do is to "certify" against ISO 27017 during an ISO 27001 certification process, because ISO 27001 is the only certifiable standard in the ISO 27000 series.

    Considering that, to be "certified" against ISO 27017 all you need to do is to include the applicable controls related to ISO 27017 in your Statement of Applicability (of course, as a result of performing the risk assessment and risk treatment process), update your risk treatment plan, implement required controls and notify your certification body about the changes (so it can adjust the certification/surveillance audits accordingly).

    For further information, see:

    My second question is : Can a company say that it is certified for the information security management for the cloud computing services just with the ISO 27001/27002?

    ISO 27001 has enough security controls to allow an organization to be certified considering cloud computing services in its ISMS scope. You only would need to include controls from ISO 27017 if your organization has specific requirements demanding the implementation of ISO 27017 controls (e.g., laws, regulations or contracts).

    This article will provide you further explanation about ISMS scope:

  • Regulatory requirements

    If the company implements ISO 13485/10328, with our ISO 13485:2016 Documentation Toolkit the following requirements from the FDA will be met: quality management system described in 21 CFR 820, and reports of correction and removals described in 21 CFR 806. The following requirements need to be fulfilled in addition to our toolkit: registration described in 21 CFR 807, Unique Device identification described in 21 CFR 830 or electronic records and signatures described in 21 CFR 11.

    For more information, please read the following article: 

    How to use ISO 13485 to fulfill FDA regulatory classes for medical devices https://advisera.com/13485academy/blog/2017/09/14/how-to-use-iso-13485-to-fulfill-fda-regulatory-classes-for-medical-devices/

  • Correction vs corrective action

    When you have a nonconformity, you need to eliminate it. A correction attacks the nonconformity, a correction focuses the defect, focus on what is wrong and tries to solve the situation. For example, through rework, through scrapping, through downgrading, through a discount with the customer to try to see if he or she agrees in receiving the wrong product.

    After eliminating what is wrong, with the correction, one should evaluate the risk. How important is the nonconformity with its actual or potential consequences? What is the probability of recurrence, can it happen again?

    If the risk is relevant a corrective action is needed. Corrective action is done after the correction and has another purpose, trying to eliminate the cause behind the non-conformity. When we do an effective corrective action, we eliminate or reduce the non-conformity frequency of recurrence. For example, changing a raw-material supplier in order to minimize production problems due to a raw material.

    The following material will provide you information about corrections and corrective actions:

  • EU MDR

    Thank you

  • Accreditation bodies for Lab

     "Do you have any suggestion for accreditation bodies for Lab to accredited ISO 17025?

    I am unable to make suggestions on such a matter. Certain countries have a single accreditation body, and laboratories do not have a choice. If you do have a choice, you may choose to speak with laboratories that have been through the process; and form your own opinion as who to choose.

    What is the difference between accreditation bodies and certification bodies?

    Certification bodies assess and certify organizations or people, whereas accreditation bodies assess and accredit laboratories. Accreditation is not compulsory for certification bodies, however, all accreditation bodies themselves accredited, mandated by national legislation. Depending on the scope of work, the standard to which accreditation and certification bodies are accredited differ. ISO 17011 is the Standard for Accreditation Bodies, whereas ISO 17024 is the standard for Conformity assessment - General requirements for bodies operating certification of persons.

    The following article may be of interest, providing a good explanation and further information

  • Accredited ISO certification versus non-accredited: What it means and why it matters https://advisera.com/blog/2019/09/16/accredited-iso-certification-versus-non-accredited-what-it-means-and-why-it-matters/

  • Clause 4.1 and 4.2

    If we think in iterative terms, it doesn't matter where to start. I usually start by determining the relevant internal and external issues. Then, we determine the stakeholders and their needs and expectations. In determining these needs and expectations, we often see the need to complete the list of issues previously developed.

    Then, as shown in this free webinar on demand – ISO 9001:2015 clause 4 – Context of the organization, interested parties, and scope – https://advisera.com/9001academy/webinar/iso-90012015-clause-4-context-of-the-organization-interested-parties-and-scope-free-webinar-on-demand/ we determine risks and opportunities

    The following material will provide you more information about the context and interested parties:

    - Case study for ISO 9001:2015 transition in a construction company - https://info.advisera.com/hubfs/9001Academy/9001Academy_FreeDownloads/Case_study_for_ISO_9001_2015_transition_in_construction_company_EN.pdf
    - How to identify the context of the organization in ISO 9001:2015 - https://advisera.com/9001academy/knowledgebase/how-to-identify-the-context-of-the-organization-in-iso-90012015/
    - How to determine interested parties and their requirements according to ISO 9001:2015 - https://advisera.com/9001academy/blog/2015/11/10/how-to-determine-interested-parties-and-their-requirements-according-to-iso-90012015/
    - Free webinar - ISO 9001:2015 clause 4 - Context of the organization, interested parties, and scope - https://advisera.com/9001academy/webinar/iso-90012015-clause-4-context-of-the-organization-interested-parties-and-scope-free-webinar-on-demand/
    - Enroll for free course - ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/
    - book – Discover ISO 9001:2015 Through Practical Examples – https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/

  • ISO 9001 mandatory documents

    ISO 9001:2015 does not require as mandatory a document called quality plan. However, planning quality is of paramount importance.

    • Second paragraph of clause 8.4.1 of ISO 9001:2015 states “The organization shall determine the controls to be applied”
    • Clause 8.5.1 c) of ISO 9001:2015 states “the implementation of monitoring and measurement activities at appropriate stages to verify that criteria for control of processes or outputs, and acceptance criteria for products and services, have been met”
    • First paragraph of clause 8.6 of ISO 9001:2015

    Slide 11 of this free webinar on demand - Measurement, analysis, and improvement according to ISO 9001:2015 - https://advisera.com/9001academy/webinar/measurement-analysis-and-improvement-according-to-iso-9001-2015-free-webinar/ - includes an example of what can be used as a template for a quality plan. Remember, these days many organizations do not use paper even digitally, the rules from quality planning can be distributed through internet applications, machine software and many other ways.

  • Video Tutorials not aligned to downloaded document

    I'm sorry about this problem - this particular video was made for earlier revision of the standard, and the templates were updated to include improvements.

    If you find any other differences between any video tutorial and the templates, please consider the templates, because they are up to date to the current version of the standard.

    If you still feel you need more information about this topic, you can schedule a meeting with one of our experts. To schedule a meeting, please access this link: https://advisera.com/27001academy/consultation/
Page 434 of 1130 pages

Didn’t find an answer?

Start a new topic and get direct answers from the Expert Advice Community.

CREATE NEW TOPIC +