Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results
11294 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
An integrated management system for a mining operation
Answer:
Those are two very general questions. Implementing ISO 9001 and 14001:2015 in a mining environment is no different from other organizations and sectors. For ISO 9001 I would start with the process approach by mapping how the mining operation works as a set of processes. For ISO 14001 I would start with the environmental assessment to identify significative environmental impacts and compliance obligations. Then, I would develop a quality and environmental policy and determine context and interested parties. Then would apply the risk-based approach and develop quality and environmental objectives and plans to meet them. Naturally, there are some iterations needed to fine tune things. Then would start with monitoring of operations/processes and objectives.
The following material will provide you information about implementing integrated management system:
- Why mining comp anies should obtain ISO 14001 certification - https://advisera.com/14001academy/blog/2018/04/17/why-mining-companies-should-obtain-iso-14001-certification/
- How to implement integrated management systems - https://advisera.com/articles/how-to-implement-integrated-management-systems/
- How to integrate ISO 14001 and ISO 9001 - https://advisera.com/14001academy/blog/2019/08/27/key-iso-14001-benefits-to-customers/nowledgebase/how-to-integrate-iso-14001-and-iso-9001/
- ISO 9001:2015 & ISO 14001:2015 Integrated Documentation Toolkit - https://advisera.com/9001academy/iso-9001-iso-14001-integrated-toolkit/
- free online training ISO 9001:2015 Foundations Course – https://advisera.com/training/iso-9001-foundations-course/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/ -
GDPR and Meetings
Answer:
The EU GDPR is applicable for “processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system” so if the personal data of the attendees is collected and processed then the answer is yes.
To learn more about the EU GDPR check out our “EU GDPR Foundation Course” (https://advisera.com/training/eu-gdpr-foundations-course//) -
Sistema de gestión integrado
Respuesta: Sí, puedes usar el mismo procedimiento, porque el requerimiento relacionado con el control de documentos es común en ISO 27001 y los otros estándares.
Este artículo te puede resultar útil “Usar la ISO 9001 para implementar la ISO 27001" https://advisera.com/27001academy/es/blog/2010/04/02/usar-la-iso-9001-para-implementar-la-iso-27001/
Y también este “How to integrate ISO 9001 and ISO 27001" https://advisera.com/9001academy/blog/2016/09/27/how-to-integrate-iso-9001-and-iso-27001/
Y también este webinar gratuito “Implementación de ISO 27001: ¿Cómo hacerla más sencilla utilizando la ISO 9001?" https://advisera.com/27001academy/es/webinar/iso-27001-implementation-how-to-make-it-easier-using-iso-9001-free-webinar-on-demand/ -
Terms and conditions/ translations
Answer:
If you are not targeting a specific country English language documents should be enough.
To learn more about the EU GDPR check out our “EU GDPR Foundation Course” https://advisera.com/training/eu-gdpr-foundations-course// -
Data Security Addendum
Answer:
The document you are looking for is usually called a Data Processing Agreement or Processor Addendum and you can find a template in our EU GDPR Documentation Toolkit in section 7 – Third Party Compliance https://advisera.com/eugdpracademy/eu-gdpr-documentation-toolkit/
To learn more about the EU GDPR check out our “EU GDPR Foundation Course” https://advisera.com/training/eu-gdpr-foundations-course// -
Transfers between EEA and Canada
Answer:
Transfers to Canada do not require any specific safeguards since Canada ha been issued an adequacy decision by the European Commission. -
Signing a consent
Answer:
If you are marketing to individuals you need their consent which needs to be freely given, specific, informed and unambiguous indication of the individual’s wishes. This means among other you need “opt in” consent.
To find out more about consent check out our webinar “ How GDPR Affects Marketing Practices” https://advisera.com/eugdpracademy/webinar/how-gdpr-affects-marketing-practices-free-webinar-on-demand/ -
Revisión ambiental inicial
Una revisión ambiental inicial (IER) es una revisión preliminar de los programas y sistemas ambientales existentes en su empresa no obligatoria. Esta revisión puede realizarse mediante entrevistas con las personas relevantes de su organización, como gerentes y otro personal que tenga conocimiento directo de la mayor cantidad posible de funciones relevantes dentro de la empresa.
En la revisión ambiental inicial se debería de incluir, al menos:
- Requisitos reglamentarios y legales ambientales
- Artículos / áreas reconocidas con impacto ambiental
- Criterios de desempeño ambiental
- Comentarios de experiencias anteriores
- Oportunidades de mejora, no sol o internas sino externas (por ejemplo, contratistas)
Al crear su lista de verificación, es posible que desee utilizar algunas fuentes de información relevantes, como organizaciones ambientales ecológicas, grupos comunitarios, proveedores y proveedores, agencias gubernamentales, bases de datos, etc. Además, en la revisión ambiental inicial puede considerar comparar sus prácticas o desempeño con otros organizaciones.
Estos materiales pueden ayudarle a saber más sobre la implementación de ISO 14001 :
- Libro - El compañero ISO 14001: 2015: https://advisera.com/books/the-iso-14001-2015-companion/
- Curso Fundamentos ISO 9001:2015: https://advisera.com/training/es/course/curso-fundamentos-iso-14001/ -
Responsabilidades en el SGSI de una pequeña empresa
Respuesta: Sí, realmente todas las responsabilidades podrían recaer en una única persona, que puede ser el responsable de seguridad (o CISO en inglés). El único rol que no debería cubrir esta persona es el del auditor interno.
Este artículo te puede resultar interesante "What is the job of Chief Information Security Officer (CISO) in ISO 27001?” : https://advisera.com/27001academy/knowledgebase/what-is-the-job-of-chief-information-security-officer-ciso-in-iso-27001/
Y también este otro “How to document roles and responsibilities according to ISO 27001” https://advisera.com/27001academy/blog/2016/06/20/how-to-document-roles-and-responsibilities-according-to-iso-27001/ -
Filling the GDPR templates
2) In the field written by and approved by, can it be the same person?
3) The field [function] can be my company or person in my company or another person of another company?
4) Law or national rules concerning the implementation of the GDPR, other locals laws and regulations and IT Security policies (What should I enter?)
Answers:
1. This is entirely up to you, there is no such mention in the EU GDPR. However, consider that some documents in the toolkit are meant to be made publicly available such as the privacy notices.
2. Not really, usually based on the segregation of duties documents should not be approved by the same person that drafted the document in the firs place. But this again is not something that you will find in the EU GDPR.
3. [function] refers to the position which is in charge within your own company.
4. This is something that you should figure out by yourself and consult with a local lawyer or legal adviser since this refers to local law and this is diffe rent from one jurisdiction to another.
To learn more about the EU GDPR check out our “EU GDPR Foundation Course” https://advisera.com/training/eu-gdpr-foundations-course//