Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
Certainly, we will guide you how to adapt the toolkit for your special circumstances - in the price of the toolkit, we include one-on-one consultations, document review, and unlimited email support - we will tell you which steps to take and what to pay attention to when implementing the standard.
The toolkit is suitable for any testing laboratory that is wanting to implement ISO 17025:2017 and seek accreditation, irrespective of whether they have external customers; or as in your case, are an in-house Quality Control laboratory, where the factory/manufacturing plant is your customer. In some ways it is simpler implementing for an inhouse laboratory, for example, meeting reporting requirements is easier.
Note that while we offer advice on using the ISO 17025 toolkit to implement your management system, as well on how to integrate the toolkit and ISO 17025 with other Management Systems you may have; the scope of the toolkit and our expertise is ISO 17025, not Food Safety (ISO 22000) or HACCP (Hazard Analysis and Critical Control Points) certification.
Here is a detailed description of the toolkit, you can also download the free demo: ISO 17025 Documentation Toolkit https://advisera.com/17025academy/iso-17025-documentation-toolkit/
Here are a couple of materials that can help you:
If you are using our ISO 27001 / ISO 22301 Documentation Toolkit, you can find the ISO 22301 documents in the folder "08 Annex A Security Controls" - "A.17 Business Continuity" - there you will find the Business Continuity Policy, and ca 20 other business continuity documents.
By the way, in the root folder of the toolkit you will find the "List of documents" which lists all the documents within the toolkit, as well as their folder location, and the related clause of the standard.
To implement ISO 22301 you will need to follow the steps explained in this article: 17 steps for implementing ISO 22301 https://advisera.com/27001academy/knowledgebase/17-steps-for-implementing-iso-22301/22301/iso-22301/
These materials will also help you:
The time for the implementation depends on the size of your company:
You can find more details here: How long does it take to implement ISO 27001 / BS 25999? https://advisera.com/27001academy/blog/2011/11/08/how-long-does-it-take-to-implement-iso-27001-bs-25999/
As you are performing internal audits on behalf of laboratories for their ISO 17025:2017 management system purposes, not on behalf of a certification body, ISO 17025 Lead auditor certification it is not mandatory. It is important, however, if your customers’ require it; or you see it as a means to further develop your skills and career. As per ISO 17025:2017 clause 6.6, Externally provided products and services; the requirement is that as an external provider, you should be competent (able apply your knowledge and skills) to perform the contracted tasks and provide a service that meets the laboratory’s need. The laboratory must communicate to you the reason they are contracting you and the qualification and competence required. This should include if they require you to have lead auditor certification or not.
If you choose to obtain ISO 17025:2017 Lead Auditor certification; select a suitable course offered by an approved Training Partners of an international certification body such as Exemplar Global (formally RABQSA) or IRCA (The International Register of Certificated Auditors).
As ISO 9001 is incorporated into the ISO 17025:2017 Management requirements and ISO 17025 Lead Auditor certification courses may not be as readily available as ISO 9001, you may consider starting by enrolling in the free ISO 9001 Lead Implementer Course. It is available at https://advisera.com/training/iso-9001-lead-implementer-course/.
There is information about certification on that page and you can also have a look at Advisera’s Certification FAQs at https://advisera.com/training/eu-gdpr-courses/
All the products you mention are templates in MS Excel - therefore, you can adapt them (or merge them) as you see fit, and you can copy and paste the data from one document to another.
On the landing page of each of those documents you can see a free preview and download a free demo of each document:
Backout procedure is your plan in case change is not implemented sucessfully. It will help you return to initial state (before change is implemented) or some other remediation actions (e.g. in cae you can't go back to initial state - like, revisiting the change and actions performed to find an error, etc.).
Here are some more details:
Service Transition in ITIL https://advisera.com/20000academy/blog/2013/06/11/service-transition-itil/
What is the remediation procedure and back-out in the ITIL/ISO 20000 Change Management process? https://advisera.com/20000academy/blog/2017/06/13/what-is-the-remediation-procedure-and-back-out-in-the-itiliso-20000-change-management-process/
The RAG rating system is a standard system typically used for rating tasks in project management as Red/Amber/Green (much like a traffic light) as to whether they are on track, in trouble or no problems.
Keeping in mind that this is not a requirements of OHSAS 18001 or ISO 45001, you could use this as part of an assessment report by rating if a task was on time, or if a requirement was not met or partially met, or the status of a risk. How you use it would be up to you as it is your choice as to how you want to assess something and not a requirement of the standard.
If you are looking for a simple gap analysis tool you can check out our Free ISO 45001 Gap Analysis Tool, https://advisera.com/45001academy/iso-45001-gap-analysis-tool/
If I understood well, you're asking why ISO 27001 was not mentioned in the LGPD (Brazilian personal data protection law).
Typically, laws and regulations do not require particular standards to be implemented because they do not want to prescribe how the implementation needs to look like.
GDPR (European personal data protection regulation) is very similar to LGPD, and it also does not refer to ISO 27001 - we have analyzed GDPR and found ISO 27001 to be very useful for its implementation, you can find the white paper here: What is EU GDPR and how can ISO 27001 help? https://info.advisera.com/27001academy/free-download/what-is-eu-gdpr-and-how-can-iso-27001-help