Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results
11269 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Auditor interno da ISO 9001
Resposta:
Você não precisa ter um certificado de auditoria interna para se tornar um auditor interno, apenas experiência em ISO 9001 e auditoria. Não há requisitos obrigatórios na ISO 9001 para se tornar um auditor interno, mas certas habilidades, competências e qualificações podem ajudar uma pessoa a trabalhar como auditor interno. Uma combinação de conhecimento do processo interno da ISO 9001: 2015 e atenção aos detalhes permanecem os principais atributos.
Estes materiais podem ajudá-lo a aprender mais sobre auditorias internas:
- Curso de auditor interno da ISO 9001: 20 15: https://advisera.com/training/iso-9001-internal-auditor-course/
- Livro - auditoria interna ISO - um guia simples: https://advisera.com/books/iso-internal-audit-plain-english-guide/ -
Information security behaviour evaluation
Answer: ISO 27001 is perhaps not the best framework to examine the behaviour of employees, however you can use the following clauses as a guideline:
- clause 7.3 (awareness): this clause requires the organization to ensure employees to be aware of the information security policy, their contribution to the the protection of the information a nd performance of the Information Security Management System, and the consequences of information security incidents.
- clause 9.1 requires the organization to monitor, measure, analyse and evaluate security controls and process, including controls directly related to human resources, such as A.7.2.2 (Information security awareness, education and training) and A.8.1.3 (Acceptable use of assets)
By assessing these requirements you can have an overview of the employees information security behaviour (e.g., by the results of an information security policy understanding survey, number of non conformities or security incidents related to employees, etc.).
2 - And the other question is, if this is feasible, is there a check list for this job?
Answer: For this evaluation, I suggest you to take a look at our ISO 27001 Gap Analysis Tool at this link: https://advisera.com/27001academy/free-iso-27001-gap-analysis-tool/
This checklist has questions that can help you assess if standard's requirements are being fulfilled.
These articles will provide you further explanation about ISO 27001 awareness:
- How to perform training & awareness for ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/05/19/how-to-perform-training-awareness-for-iso-27001-and-iso-22301/
- 8 Security Practices to Use in Your Employee Training and Awareness Program https://advisera.com/27001academy/blog/2015/03/02/8-security-practices-to-use-in-your-employee-training-and-awareness-program/
These materials will also help you regarding ISO 27001 awareness:
- Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
- Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/ -
Supplier development
Answer:
The primary purpose of the supplier development is to ensure that the supplier is capable to provide product or services required and in volume and quality that the organization requires. This means that the organization needs to get the proper information on the processes of the supplier and the capability of the processes and determine what is the best way to influence the suppliers and develop them and ensure that they will deliver what is required.
The main sources of information on the supplier performance are:
- supplier monitoring
- second-party audits
- third-party certification audit results
- risk analysis
Once you get the proper information on the supplier performance, you can decide whatever to organize training for the supplier, or to require changes in the processes or equipment being used in the product or service delivery. -
Green training importance
Answer:
What is the actual and potential significative environmental impacts of your organization? The more significative the environmental impacts the more irrelevant is green training. People should know what the actual and potential environmental impacts of what they do are. Related with that is the competence evaluation, the more competent in environmental matters people are, the less relevant is green training. Also consider the level of staff turnover, the higher the more important is green training. Remember training per se is not mandatory with ISO 14001. Training is one of the possible answers to a lack of competency sityation.
The following material will provide you information about green training:
- ISO 14001 – ISO 14001 Competence, Training & Awareness: Why are they important for your EMS? - https://advisera.com/14001academy/blog/2014/11/26/iso-14001-competence-training-awareness-important-ems/
- Do you have to train your whole workforce on the ISO 14001 standard? - https://advisera.com/14001academy/blog/2016/01/25/do-you-have-to-train-your-whole-workforce-on-the-iso-14001-standard/
- free online training ISO 14001:2015 Foundations Course - https://advisera.com/training/iso-14001-internal-auditor-course/
- book - THE ISO 14001:2015 COMPANION – A A Straightforward Guide to Implementing an EMS in a Small Business - https://advisera.com/books/the-iso-14001-2015-companion/ -
Rework is not mandatory
Answer:
Rework is not mandatory. Rework is just one of the possible alternatives to handle a product nonconformity? Sometimes one can rework, sometimes one can sell as a downgraded version, sometimes one can only scrap.
The following material will provide you information about the product nonconformities:
- ISO 9001 – Understanding dispositions for ISO 9001 nonconforming product - https://advisera.com/9001academy/blog/2014/11/18/understanding-dispositions-iso-9001-nonconforming-product/
- Five Steps for ISO 9001 Nonconforming Products - https://advisera.com/9001academy/blog/2014/01/13/five-steps-iso-9001-nonconforming-products/
- free online training ISO 9001:2015 Foundations Course – https://advisera.com/training/iso-9001-foundations-course/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/ -
Questionnaire
Answer:
The questionnaire is undoubtedly a useful tool to check if and how your processors comply with the various requirements of the EU GDPR. However, this is not compulsory to have provided you have the proper Data Processing Agreements/Addendums in place.
To learn more about the EU GDPR check out our “EU GDPR Foundation Course” (https://advisera.com/training/eu-gdpr-foundations-course//) -
Context of the organization and interested parties
Answer:
The easiest way to determine the context of your organization as well as the needs and expectations of your relevant interested parties is to organize a brainstorming session with the relevant employees of your organization and perform a SWOT analysis (strengths, weaknesses, opportunities, threats).
In your case internal context of the organization can include organizational structure, principles... while the external can be changes in technology, strong competition. Interested parties could be: customers, government and non-government organizations, suppliers, employees and shareholders.
These materials can help you to understand the context of the organization as well as interested parties:
- Article - How to identify the context of the organization in ISO 9001:2015: https://a dvisera.com/9001academy/knowledgebase/how-to-identify-the-context-of-the-organization-in-iso-90012015/
- Article - ISO 9001:2015 case study: Context of the organization as a success factor in manufacturing company: https://advisera.com/9001academy/blog/2016/10/11/iso-90012015-case-study-context-of-the-organization-as-a-success-factor-in-manufacturing-company/
- Article - How to determine interested parties and their requirements according to ISO 9001:2015: https://advisera.com/9001academy/blog/2015/11/10/how-to-determine-interested-parties-and-their-requirements-according-to-iso-90012015/
Also these materials can help you with the implementation of ISO 9001:2015:
- Book "Discover ISO 9001:2015 through practical examples": https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
- ISO 9001:2015 Foundations Course: https://advisera.com/training/iso-9001-foundations-course/
- Conformio - Compliance tool: https://advisera.com/conformio/ -
Documenting in ISO 9001:2015
Answer:
ISO 9001:2015 does not prescribe how an organization needs to organize its documents, the standard only requires documents and records to be identifiable so it is up to the company to do it in the most easy and useful way. So if the method that you have been following works for your company, then you can keep it. .
To learn more about document control, see this article - New approach to document and records control in ISO 9001:2015: https://advisera.com/9001academy/blog/2015/06/30/new-approach-to-document-and-record-control-in-iso-90012015/
These materials can also help you with the implementation of ISO 9001:2015:
- Book "Discover ISO 9001:2015 through practical examples": https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
- ISO 9001:2015 Foundations Course: https://advisera.com/training/iso-9001-foundations-course/
- Conformio - Compliance tool: https://advisera.com/conformio/ -
Awareness sessions
Answer:
You can definitely organize an awareness session for the management of the organization in order to present the basics of ISO 9001:2015, the benefits of the implementation of the standard to the organization, the myths of ISO 9001 as well as the important role that the management plays in the QMS functioning and maintenance.
These materials can help you with the awareness presentation:
- Article - ISO 9001 Awareness training material: how to create it and what it should contain: https://advisera.com/9001academy/blog/2015/05/19/iso-9001-awareness-training-material-how-to-create-it-what-it-should-contain/
- White paper - Why ISO 9001:2015 - Awareness presentation: https://info.advisera.com/9001academy/free-download/why-iso-9001-2015-awareness-presentation
These materials can also help you to learn more about ISO 9001:2015:
- Book "Discover ISO 9001:2015 through practical examples": https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
- ISO 9001:2015 Foundations Course: https://advisera.com/training/iso-9001-foundations-course/
- Conformio - Compliance tool: https://advisera.com/conformio/ -
Environmental objectives in shipping
Up until now it has mostly been reduction of paper and washing powder and similar. For a big shipping company with a lot of ships, I feel this is just in place to meet the requirements.
Being on a ship there is a potential for a lot more objectives and targets that can have a much better impact on the environment. But I'm just unable to come up with some that can meet the SMART model.
Answer:
In order to set good environmental objectives for your shipping company you first need to think about the environmental aspects in your company that have or can have a significant environmental impact. For instance, a spill produced when loading can be an environmental aspect, that can cause a significant impact in the water and even in the air. Therefore you can set the specific objective of reducing those loading spills in 5% at the end of 2018. Then you will comp ly with the five elements of the SMART model: specific, measurable, achievable, realistic and time bound.
To learn more about environmental objectives, see these articles:
- How to use good environmental objectives: https://advisera.com/14001academy/blog/2019/08/27/key-iso-14001-benefits-to-customers/nowledgebase/how-to-use-good-environmental-objectives/
- Ensuring that environmental objectives are aligned with the company´s strategic direction: https://advisera.com/14001academy/blog/2017/02/06/ensuring-that-environmental-objectives-are-aligned-with-the-companys-strategic-direction/
These materials can also help you understanting ISO 14001:2015:
- Book - The ISO 14001:2015 companion: https://advisera.com/books/the-iso-14001-2015-companion/
- ISO 14001:2015 Foundations Course: https://advisera.com/training/iso-14001-internal-auditor-course/