2. ¿Cada cuanto se debe Renovar?
3. ¿Quien Certifica en Norma ISO 14001?
Respuestas:
1. El coste de certificación va a variar dependiendo del país en que se encuentre. Le recomiendo que se ponga en contacto con varias entidades de certificación independientes que le pedirán una serie de datos para la elaboración del presupuesto.
2. La certificación normalmente se realiza cada 3 años. Aunque existen las llamadas auditorías de control que verifican el mantenimiento del sistema de gestión ambiental cada año y que incluyen únicamente partes del sistema.
3. La certificación de la Norma ISO 14001 se lleva a cabo por parte de una entidad certificadora independiente, que verifica que efectivamente la empresa, producto o servicio cumple con los requisitos de la norma. Le recomiendo que lea este artículo (en inglés) que le permite elegir a la mejor entidad certificadora - How to choose a certification body for ISO 14001: https://advisera.com/blog/2021/01/11/how-to-choose-an-iso-certification-body/
It is not relevant how your company name your documents as long as you comply with ISO 14001:2015 requirements, in this case with the requirements of clause 9.1. of the standard.
Auditing company manufacturing wood and plastic products
Answer:
In my answer, I will just focus on what is specific of that manufacturing company: wood and plastic products.
I would consider the life cycle of those materials. Does the wood come from certified forests? Does the wood include recycled wood? Does recycled wood come from operators with a permit? Does the organization buy recycled plastic? Does recycled plastic come from operators with a permit? Does the organization reuse plastic and wood?
The same exercise can be made based on the environmental assessment of aspects and impacts and risks and opportunities, and on the legislation and regulation applicable.
Answer: Each of the EU branches of your organisation should have in place a Controller to Controller Data Transfer Agreement with the US Headquarter (document 7.1 in the EU GDPR Documentation Toolkit).
2. What forms do our volunteers need to sign so we can transfer the data to them? I'm not finding something applicable in the templates we purchased. It would be a cross-border transfer to one of o ur volunteer members but we do not have a commercial agreement with our volunteers. Sometimes at events, our volunteers would be data controllers on behalf of the organization as well but I am specifically asking about data transfer from our headquarters to our volunteer leaders in the EU region, and our volunteers would contact the members directly on behalf of the organization.
Answer: The volunteers would act as your processor and should be treated as such. You would need to have a DPA in place (document 8.1 of the EU GDPR Documentation Toolkit) .
Applying ISO 14001
Answer:
Honestly, I see no difficulty for a health and environmental officer to apply ISO 14001 in his work area. Perhaps training in ISO 14001 foundations could be useful to learn the basics of the standard. After that, ISO 14001 is very project oriented and focused on improving or maintaining an organization’s interaction with the environment.
First step is for you to decide which path you want to follow among these general fields: security management, security assurance (i.e., security audit), or technical security, and this last one has many sub fields (e.g., software development, security operation, etc.). Once you has decided this path there are many certifications available for each field (e.g., CISM for security management, CISA for security assurance, and CISSP for overall technical security).
Considering specifically ISO 27001 career you can follow:
- ISO 27001 Lead Implementer – this certification recognizes people who have competency on the ISO 27001 implementation process.
- ISO 27001 Lead Auditor – this certification recognizes people who have competency on auditing an ISM S against ISO 27001 requirements and want to become certification auditors (and with this provides more confidence to an organization for being certified).
May I ask which country can accept ISO 13485 and ISO 9001?
Answer:
ISO 13485 is accepted worldwide as a benchmark for Quality Management System evaluation for medical equipment. In specific, countries in Asia and the US are also adopting the ISO 13485 standards as part of their regulatory requirements.
Controlling documents after implementation
Answer:
My interpretation of your question is: How can someone ensure that after implementation documents are not changed by users without authority to change them?
I see several approaches being used by organizations:
* Only digital versions are considered as valid. People access documentation through smartphones, tablets, terminals or computers, and documentation is protected from changes. And when someone prints a document a watermark appears saying that the organization does not control printed copies;
* Any printed version is only valid if signed by the authorized issuer;
* Frequent internal audits ensure that document control is learned and practiced
Answer:
As you have indicated, different types of documented information require different retention times, and these will come from different places. Unfortunately, these places are not the same for every industry in every country in the world. For instance, in Canada we need to keep financial records for 7 years, but this will be different in other countries, and different laws will apply to this.
However, in general the record retention times for production records will come from customer requirements, even if there is a legal requirement associated with them. For instance, for aircraft records in North America there is a legal requirement to keep records for the life of the aircraft, but this should be flowed down to suppliers through contracts stating how long records are to be kept, and what to do at the end of this time (such as forwarding the records to the customer). For non-aircraft aerospace suppliers, the cust omer requirements is also the place where customers indicate how long then need you to keep production records. If there is nothing there, then you need to determine a reasonable time-frame yourself.
For more on the requirements around document and record control, see this article: A new approach to document and record control in AS9100, https://advisera.com/9100academy/knowledgebase/new-approach-to-document-and-record-control-in-as9100/
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.