Surveillance audits exist to check if your management system is working as designed. So, pay special attention to records. Are all the incidents being recorded? Measurements, complaints, corrective actions, non-conformities, internal audits, and management review, etc. Remember, if your organization had any minor non-conformity or observations during the certification audit, be sure that auditors will look into those issues with special care.
Answer:
Congratulations for your successful certification project. It is nice to know that Advisera could help you and your organization. Yes, you can integrate ISO 45001 and ISO 14001 without ISO 9001.
I would not make any of the standards the leading one. I rather would draw a process map of how your organization works and is it doing that work so that health and safety and environmental issues should be considered. So, instead of “while doing things relevant for the environment I must also consider this health and safety topics” I would follow the approach “while doing our work to fulfill the organization’s purpose of existence we have to consider both environmental and health and safety iss ues”.
Even if your supplier is ISO 27001 certified you have to perform a risk assessment to identify the risks this supplier can bring to you organization, so you can include proper information security clauses in your contract or service agreement with it.
The fact the supplier is ISO 27001 certified brings more confidence that it can handle customer's information properly, but you as a customer still have to perform your own risk assessment regarding the supplier.
Answer
Yes, the auditor will accept the memo format as long as your organization can demonstrate document control over that memo. One designation, changes controlled, distribution controlled, approval controlled.
Answer
ISO 9001 certification is not mandatory. Your company should first evaluate what can be the benefits from ISO 9001 certification and then decide. For example, does ISO 9001 certification bring marketing/image benefits?
It is not mandatory for these documents to have document ID, version number and review date. In ISO 13485:2016, in point 4.2.4 it is stated that Organization must ensure that documents are identified according to the current revision status, must prevent the unintended use of obsolete documents and must apply suitable identification to them. Therefore, how you will identify them and how you differentiate them is absolutely up to you, but you must ensure that the above requirements are secured.
According to the ISO 13485:2016, for Quality Policy it is not mandatory to have document ID and version number. However, in requirement 5.3 Quality policy, in subsection e) it is stated that Top management must ensure that it is re viewed for continuing suitability. Therefore, you have to have a date on it to know when it was last reviewed.
Answer
First, ISO 9001:2015 no longer mandates the existence of a quality manual. So, organizations have a lot of freedom to decide what do they want to include if they decide to write a quality manual.
The corporation has a purpose, has a mission, each business unit work on its own way to contribute to that purpose. One of the big advantages of corporations is the synergy among different business units, like the case you mention: sharing common processes.
Start with a description of the corporation, then describe the business units and their processes and underline the existing synergies.
Answer:
First, a clarification: ISO 14001:2015 does not ask for an internal compliance audit. ISO 14001:2015 asks for a complete verification and several actions if needed (clause 9.1.2).
In my country auditors want to check the actual Environmental Compliance Register. Certification auditors are bounded by confidentiality. Some organizations prepare a kind of legal document for the auditor(s) to reinforce that confidentiality. If an organization has any non-compliance that will appear, for example, in the management review record, a basic document for any certification audit.
Answer:
ISO 14001:2015 has no specific requirements for shipboard waste oil incinerator. You have to check which national or international legislation your organization has to comply. Different countries have different air emission limits for each chemical.