Si la corrección ha sido eficiente y eficaz, y sólo se trata de un problema menor o aislado no es necesario aplicar una acción correctiva. Es decir, aunque es importante aplicar correcciones para cada una de las no conformidades encontradas, no es necesario aplicar acciones correctivas a todas las no conformidades. Sólo se deben aplicar acciones correctivas en el caso de que la no conformidad se trate de un problema sistémico y no cuando sea algo de poca importancia o un problema aislado.
Answer:
And you are right. For example, it can be acceptable to state that there are no complaints, but it is not acceptable to state that there is nothing to say about internal audits, or process performance or decisions from the last management review.
The following material will provide you information about management review:
Responsibility of the CEO for management review minutes
Answer:
Section 4.4 of the Information Security Policy speaks about the responsibility of the CEO (or other member of the top management) to prepare minutes of the management review meeting.
You can find the template of Management review minutes in the folder 11 of your ISO 27001 Toolkit; by the way, these minutes are a mandatory document.
Management representative in ISO 9001:2015
Answer:
You are correct, the management representative is not mandatory anymore in the new version of the standard ISO 9001:2015. However, if your organization considers this position valuable and worthwhile you can still keep it.
These are usually the responsibilities of a management representative:
- Process maintenance of the QMS
- Reporting on the performance of the QMS
- Customer requirements promotion
- Liaison with external parties
The management representative should be the person within your company that best suits all the above job responsibilities ensuring that the implementation and maintenance of the quality management system becomes a success.
This materials can help you to better understand the role of the management representative:
1. As company IMS is integrated management system and also ISO (9001-2015, 14001-2015, 45001-2018) has same clauses now so, Is it ok if company IMS and ISO clause numbers doesn't match?
2. Can the clauses in IMS be more than ISO standards in subject i.e 10 clauses.
3. They have created HSE manual and IMS manual separate, Can it be like that? and HSE manual has totally different clauses than ISO 45001-2018.
4. I am having problem in judging CTO log OR COTO log. Can you please guide me on this ? because they made it totally wrong for Construction Industry. And also guide the frequency of updating this log.
Answer:
Regarding questions 1 and 2 - It is fine as long as you comply with the standards requirements. ISO doesn´t prescribe anything in relation with the organization of the standards implementation.
Same thing occurs for the manuals. As you already may know, manuals are not mandatory anymore in the new versions of the ISOs so you can decide to have different manuals for different ISOs. This is completely up to the organization. However,if you have an IMS Manual which integrates the 3 ISOs and another manual just for HSE, I don´t think it makes much sense since you would be covering the same requirements in 2 different manuals.
Regarding the question 4, I guess this is referred to the Context of the Organization Log. I recommend you to organize a meeting with the relevant people of your organization, and conduct a SWOT analysis in order to determine the context of your organization.
With respect to the frequency, it is up to the organization. You can consider to review the context, for example, every year unless there are major changes for instance, a new product will be launched in your organization or your organization opens a branch in a totally different new location.
Answer:
AS9110 is the Quality Management System Requirements for Aviation Maintenance Organizations, and as such has requirements based on ISO 9001:2015 for aircraft maintenance and overhaul companies only. So, unless the company you are talking to does exclusively aircraft component maintenance and overhaul (such as aircraft motors), then the AS9110 standard would not apply to their business. Even AS9120, Quality Management System Requirements for Aviation, Space and Defense Distributors only has a limited use for companies that only buy parts and then resell them while performing no added value activities. Whereas, AS9100 is designed for any organization in the Aviation, Space and Defense industry which would include companies that, although not OEMs, take other parts and perform value added activities on them for their customers.
For more on what is contained in AS9100 see our clause-by-clause explanation of AS9100 Rev D whitepaper: https://info.advisera.com/9100academy/free-download/clause-by-clause-explanation-of-as9100-rev-d
Auditing the context of an organization
Answer:
You can ask questions based in ISO 9001:2015 and questions based on the procedure content. For example, based on the standard you can ask things like: What can you tell me about the context of our company? Did the company determined internal and external issues? What did the company with those determined internal and external issues? How are internal and external issues monitored? And when relevant changes occur how are they communicated to top management?
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.