Answer:
If you have ISO 20000 certification for your company - that's maximum you can get. There is no ITIL certification for companies, only individuals can be ITIL certified.
2.- Estrategias para expandir el alcance de los servicios certificados de un grupo de servicios al total de los servicios orientados a los clientes externos.
3.- Cómo migrar de un sistema basado en ISO 9001 con implementación de prácticas ITIL a un sistema ISO 20000-1
Respuestas:
1.- Mi recomendación es que deberías seleccionar los servicios principales del negocio, o los servicios que quieres dar más publicidad a tus clientes de que tienes implementado el estándar ISO 20000. Para más información sobre cómo definir el alcance de la ISO 20000 este artículo puede ser interesante para ti “How to define the scope of the SMS in ISO 20000” : https://advisera.com/20000academy/blog/2015/06/02/how-to-define-the-scope-of-the-sms-in-iso-20000/
2.- Disculpa, pero no estoy seguro si he entendido bien tu pregunta, aunque si quieres proporcionar servicios de TI a clientes que están solicitando una certificación a sus proveedores, puede ser int eresante la implementación y certificación de la ISO 20000. Y esto puede ser la estrategia, es decir, dependiendo de los requerimientos y necesidades de tus clientes, puedes incluir en el alcance de la certificación ISO 20000, los servicios que estén relacionados con los clientes que lo requieran/necesiten.
3.- Si tienes una ISO 9001 con ITIL, la implementación de la ISO 20000 puede ser muy sencilla, por lo que básicamente necesitarás conocer los requerimientos específicos de la ISO 20000, y cuáles de estos requisitos están cubiertos por la ISO 90001 + ITIL. Esta matriz gratuita puede ser útil para ti “ISO/IEC 20000-1: 2011 vs. ISO 9001:2015 matrix” : https://info.advisera.com/20000academy/free-download/iso-iec-20000-1-2011-vs-iso-9001-2015-matrix
ISO 20000 Design and transition of new or changed services
Answer:
Design and transition of new or changed services is responsible (in scope of the SMS - Service Management System) to manage any changes on existing, or introduction of new services. In your case, I rather see that you'll have changes on existing services. In scope of your change management (e.g. in your policy) you should define which changes are introduced using design and transition process.
If you have Design and transition process in place, evidences that you can show to the auditor could include:
- specification
- service requirements
- test plan
- transition plan
- risk assessment
- service acceptance criteria, etc.
1.If those external warehouses belong to your organization and they are relevant to your scope they must be included. 2.Probably, during the certification audit a sample of some of those warehouses will be audited.
The following materials will provide you details about the scope of a management system:
For AS9100 Rev D the date to transition from an AS9100 Rev C certified QMS to the new standard has always been aligned with the ISO 9001:2015 transition dates. In September 2017 the ISO & IAF group put out a news release stating that this date for transition would be September 15, 2018. After this date no certification for ISO 9001:2008 would be valid, and likewise certifications for AS9100 Rev C would not be in effect any longer.
Of course, there is no last date to certify a new QMS to AS9100 Rev D. This will be the aerospace standard going forward.
For more information on AS9100 Rev D transition see this whitepaper https://info.advisera.com/9100academy/free-download/as9100-twelve-step-transition-process-from-rev-c-to-rev-d
Opposition to implementation
Answer: The main arguments against ISMS implementation generally are:
- the investment to be done
- lack of clear view of the benefits
- historical data supports the thinking "this will never happen to us"
- the thinking "no one is interested in our information"
Suppliers approved by customers and procedure requirement
Answer:
By “been approved by our customers” I imply that they have been selected by your customers. I would recommend keeping a procedure for Purchasing and Evaluation of Suppliers.
Although they have been selected by your customers your organization still needs to order them to deliver the right amount, of the right reference, with the right quality and with the agreed price in a particular date. Also, your organization must verify fulfillment of requirements upon reception of each delivery. Finally, although suppliers are selected by your customers it is wise to keep a record of suppliers’ performance. For example, it can be useful during negotiations with customers, particularly because your organization could be “importing problems” from those suppliers that affect your organization internal performance and even your performance at the eyes of the customers.
The following material will provide you information about the purchasing:
Its list of questions will help you to verify the degree of implementation of the standard you client has achieved and guide you on the definition of the project scope.