Procedure for non conformity and corrective action
Answer:
You can follow the steps below:
1) Stablish how to report the non conforming product or service and determine who will consider it
2) Determine what to do with the non conforming product or service, such as marking or storage it.
3) Set how to deal with the non conforming outputs using different methods like correction, return, reuse, etc.
4) Determine the criteria to decide if a corrective action is appropriate
5) Implement the corrective action
A procedure is the specified way to carry out activities making up a process, while an instruction describes the sequence of steps to conduct the tasks making up an activity.
Regarding the documented information, the standard differences between documented information to be maintained, commonly known as procedures, and documented information to be retained, known as records.
I relation to the structure of the documentation, although it is not mandatory you can follow this documentation hierarcy represented in a pyramid: 1) manual, 2) policy, 3) procedures, 4)work instructions, 5) records.
If we take some examples of the asset list we could easily do a risk assessment of the building or the server room and come to the same risks. f.e. threat: theft and vulnerability: inadequate procedure for protecting the “keys” or threat: interruption of power supply, vulnerability: old “UPS” with no maintenance, etc.
I can come up with many other examples such as air-conditioning, alarm etc. as the risks could be found with other related assets. How should we deal with this ? I suppose it doesn’t matter ? As long as we identify the risks ?
Answer:
The lists provided in the templates are only suggestions for you to use if you can't come up with your own elements, so you can use only your own assets, threats and risks to build you inventory and risk assessment (it seems to me that by your examples you already understood the concepts for performing risk assessment).
It is important to note that you can also group the assets if threats/vulnerabilities are similar.
Answer:
What is your first purpose, it is not clear from the question:
1. Do you need to convince top management that your organization needs to certify?
2. Do you need to convince top management that you are the right person to lead the certification project, already with a go decision?
If your situation is 1, I advise you to tell them about the advantages of certification for the organization. Use their language and motivation: profit, market share, new customers, ...
If your situation is 2, tell them about the advantages of being you the leader of the certification project: your motivation, your knowledge of the organization and its people, your experience, and if you can imagine that they will pont your weak weak points be prepared to presente them a list of actions that you will execute to minimize them.
For both situations you can try to find a sponsor, someone with influence over top management that can be your ally.
In the courses we talk about compliance obligation refered to these two sections, 6.1.3 (compliance obligation) and 9.1.2 (evaluation of compliance). Environmental obligations and legal requirements will vary depending on the country, state and even local regulations, so it is not feasible to cover this topic in the course. Usually this kind information is available and easy to obtain from your local authorities.
Answer:
Many organizations use a high-level flowchart, called map, that describe the processes that constitute the management system and their interrelationship.
For example, a process map for a manufacturing company could be:
Besides mapping processes, some organizations also use tables to clarify what happens inside each process with: main tasks, responsibilities, records, performance indicators, …
For example, consider process “2. Win order”: who’s in charge? Who does what? What are the main tasks? What is kept as records? What are the performance measures?
The use of both tools simultaneously is not incompatible. Truth be said, most companies instead of tables use procedures.
Answer:
The AS9100 Rev D standard does not use the aviation acronym PEARs (People, Environment, Activities, Resources), but instead talks about human factors and human error. This concept only appears in three clauses. First, in a note to clause 7.1.4, Environment for the operation of processes, where it highlights that a suitable environment can be a combination of human and physical factors. Secondly, in clause 8.5.1, Control of Production and service provision, where one controlled condition that should be included are actions to prevent human error. Lastly, clause 10.2.1b where it talks about including human factor considerations when determining the causes of process nonconformities while investigating corrective actions.
For more on human factors see our article, “12 most important human factors to consider according to AS9100 Rev D”, https://advisera.com/9100academy/blog/2018/05/24/12-most-important-human-factors-to-consider-according-to-as9100-rev-d/
ISO 9001 is not a requirement for ISO 14001
Answer:
No, ISO 9001 is not a prerequisite to implement ISO 14001. Of course, many requirements related with ISO 9001 can also be found in ISO 14001
The organization must demonstrate technical competence of employees who are performing FMEA analysis (both PFMEA and DFMEA).
There is no requirement for specific training, but if someone is involved in FMEA core team, the organization must demonstrate that they are competent for that.
If with „basic“ training you can demonstrate the competence of personnel than it is enough, but please do a risk assessment for this decision.
First of all, sorry for this inconvenience. Every time you find such discrepancies between the tutorials and documentation, please use the information in the templates, because they are the most updated version.
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.