Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results for "iso17025 vs gmp"
1224 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Risk assessment
... sk owners vs. asset owners in ISO 27001:2013 https://advisera.com/27001academy/knowledgebase/risk-owners-vs-asset-owners-in-iso-270012013/
- ISO 27001 risk assessment: How to match assets, threats and vulnerabilities https://advisera.com/27001academy/knowledgebase/iso-27001-risk-assessment-how-to-match-assets-threats-and-vulnerabilities/
2. Assessing consequence and likelihood of risk is responsible by risk owner?
Answer:
Risk owner is a person designated to solve a risk, and to do so he must be responsible for performing consequence and likelihood assessment, either by himself or with support of other personnel.
This article will provide you further explanation about assessing likelihood and consequence:
- How to assess consequences and likelihood in ISO 27001 risk analysis https://advisera.com/27001academy/iso-27001-risk-assessment-treatment-management/#assessment
3. So for the one who is responsible for Risk assessment just pick up from them and then do the risk assessment?
Answer:
Risk assessment is the combination of risk identification, risk analysis and risk evaluation, so it is not a simple question of picking up risks, but identify them, define values for them, so they can be prioritized, and evaluate them against your criteria, so you can decide which ones have to be treated.
These materials will also help you regarding risk assessment:
- The basics of risk assessment and treatment according to ISO 27001 [free webinar] https://advisera.com/27001academy/webinar/basics-risk-assessment-treatment-according-iso-27001-free-webinar-demand/
- Book ISO 27001 Risk Management in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/ -
ISO 20000 and ISO 9001
Answer:
I assume - you will implement ISO 9001 and then ISO 20000. Yes, implemented QMS can help you. There are some common elements and there are some that are extended in ISO 20000 (after you implement ISO 9001).
This material can help you further:
"ISO/IEC 20000-1:2011 vs. ISO 9001:2015 matrix" https://info.advisera.com/20000academy/free-download/iso-iec-20000-1-2011-vs-iso-9001-2015-matrix -
Gap analysis
... analysis vs. risk assessment https://advisera.com/27001academy/knowledgebase/iso-27001-gap-analysis-vs-risk-assessment/
- ISO 27001 implementation checklist https://advisera.com/27001academy/knowledgebase/iso-27001-implementation-checklist/
These materials will also help you regarding ISO 27001 implementation:
- Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
- Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/ -
Off-site audit
"My company acquired (2) Major findings. Our auditor has requested to perform this as an 'Off-site' audit vs. having to come on-site. My question is what does this "Off-site" review mean to me?” -
ISO 27001, ITIL and ISO 20000
... ISO 27001 vs. ITIL: Similarities and differences https://advisera.com/27001academy/blog/2016/03/07/iso-27001-vs-itil-similarities-and-differences/
- Using ITIL to implement ISO 27001 incident management https://advisera.com/27001academy/blog/2015/11/10/using-itil-to-implement-iso-27001-incident-management/ t/
- How to implement ISO 27001 and ISO 20000 together https://advisera.com/27001academy/blog/2015/03/16/how-to-implement-iso-27001-and-iso-20000-together/
- How to integrate ISO 27001 and ISO 20000 [free webinar on demand] https://advisera.com/27001academy/webinar/how-to-integrate-iso-27001-and-iso-20000-free-webinar-on-demand/ -
Flowcharts, tables and processes
Answer:
Many organizations use a high-level flowchart, called map, that describe the processes that constitute the management system and their interrelationship.
For example, a process map for a manufacturing company could be:
Besides mapping processes, some organizations also use tables to clarify what happens inside each process with: main tasks, responsibilities, records, performance indicators, …
For example, consider process “2. Win order”: who’s in charge? Who does what? What are the main tasks? What is kept as records? What are the performance measures?
The use of both tools simultaneously is not incompatible. Truth be said, most companies instead of tables use procedures.
The following material will provide you information about process determination:
- ISO 9001 – ISO 9001:2015 proces s vs. procedure – Some practical exemples - https://advisera.com/9001academy/blog/2016/01/19/iso-90012015-process-vs-procedure-some-practical-examples/
- free online training ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/ -
Personnel certifications
... ification-vs-course-certifications-what-are-the-differences-free-webinar-on-demand/" class="content-link Link" target="_blank" >https://advisera.com/9001academy/webinar/personnel-certification-vs-course-certifications-what-are-the-differences-free-webinar-on-demand/
On our Advisera eTraining website you c an gain personal certification for ISO 9001 that is basic for IATF 16949:
https://advisera.com/training/ -
ISO and COBIT
... alitative vs. quantitative risk assessments in information security: Differences and similarities https://advisera.com/27001academy/blog/2017/03/06/qualitative-vs-quantitative-risk-assessments-in-information-security/
This material will also help you regarding risk assessment:
- Book ISO 27001 Risk Management in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/ -
AS9100 Root Cause & CA
... reviously unidentified problem in the calculation system you may need to take action to put in place the temporary check procedures and systems corrections and updates necessary to address this risk which could entail a very lengthy implementation plan.
For a better understanding of how the corrective action proce ss differs from improvement see this article, âÂÂCorrective actions vs. continual improvement in AS9100âÂÂ, https://advisera.com/9100academy/knowledgebase/corrective-actions-vs-continual-improvement-in-as9100/ -
Legal basis for processing personal data
Which of the GDPR clauses should be applied in the processes of job applications, interviews (handling information in CVs and asking for reference- holding reference calling records) and after employment documenting employee information who will work in stores in the EU and outside of it? Is it also necessary to carry out ISO 27001 processes?