ISO 9001:2015 does not require neither procedures nor records about implementation of risk-based thinking. When I work with companies implementing a quality management system according to ISO 9001:2015 I recommend having a risk register and having a small instruction or procedure to assure a consistent procedure year after year. Attention, remember that my approach is not mandatory. So, your approach is acceptable, although I would like to work with recrds of the full risk assessment.
The following material will provide you information about risk -based thinking:
Answer:
This question has a huge scope, not easy to answer in some lines. Pick a project manager, a small team and a project sponsor with influence over the top management. Study ISO 9001, develop a process map of how your organization works and develop a project plan. Then is simple project management.
The following material will provide you information about internal audits:
If it's required,kindly oblige me ways to go about it.
Answer: ISO 22301 does not require the elaboration of a manual, and we do not recommend organizations to adopt one, because:
- merging required documents in a single document makes them no easier to read;
- the longer the documents are, the smaller the chance someone will read them because not every BCMS document is intended for everyone in an organization;
- since individual BCMS documents change rather often, it would be a nightmare to update such handbook so frequently.
Answer:
I have not seen the nonconformance. Looking into clause 10.2 I can guess what the intention of the auditor was. Please, check the first part of clause 10.2 – “When a nonconformity occurs” it is about the occurrence of a nonconformity, not about corrective action. When a nonconformity occurs, your organization should update risks and opportunities determined during planning, if necessary. A nonconformity is the manifestation of a risk that actually happened. Was that risk initially determined? Was that risk correctly classified and evaluated? The nonconformity can be about something that you overlooked during the initial risk determination. Waiting for an annual revision exercise can be too late to act.
The following material will provide you information about risks and opportunities:
If some changes happen in your company, like reorganization, then you will need to redetermine the scope of your organization and you will have to analyse how this will affect your entire QMS, including the context of your organization, risks and opportunities, etc.
You don´t need to put in the ISO since it is just a PDF document published by ISO.
To learn more about changes in the scope you can see these articles:
FSMS stands for Food Safety Management System. FSSC stands for Food Safety System Certification. ISO 22000 is not recognized by GFSI (Global Food Safety Initiative), however a certification scheme that uses ISO 22000 as part of its requirements is. This certification is FSSC 22000, and it is recognized by GFSI.
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.