Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results
11275 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Competence requirements for auditors and management representative
For ex: In our organization, I am the quality manager/primary person for QMS. I have been trained for internal auditor along with 3 other colleagues?
Is it expected from the the rest 3 auditors to have the same extent of knowledge that I have?
Answer:
Management representative (MR) is no longer a mandatory role in the QMS (Quality Management System) so the standard does not have any requirements regarding the management representative. But considering the roles and responsibilities the MR, he or she should have knowledge of the standard requirements and also knowledge of the organization's operations and processes.
Auditors should be familiar with requirements of the standard and the auditing techniques but the same type of training is sufficient for the MR as well. There are no differences in competence requirements but there are differences in responsibilities and authorities between these two role s.
For more information, see: What is the job of the quality management representative? https://advisera.com/9001academy/knowledgebase/what-is-the-job-of-the-quality-management-representative/ -
Integrating ISO 9001, ISO 14001 and ISO 45001
Answer:
ISO 45001 hasn't been published yet, so it is difficult at this point to talk about integration of this standard with other management system standards but the approach will be the same.
First step is to identify all common requirements of the standards you want to integrate. For example, ISO 9001 and ISO 14001 have requirement for determining the context, defining the policy and objectives, internal audit, competence and awareness, etc. For more information see: ISO 14001:2015 integration with ISO 9001:2015 – What has changed? https://advisera.com/14001academy/blog/2016/02/15/iso-140012015-integration-with-iso-90012015-what-has-changed/
Once you determine the similarities, you should start implementing them first and than add specifics of the each standard. Since ISO 9001 is better foundation for the system ,it is better to start implementing ISO 9001 requi rements and process and than add requirements for ISO 14001. For example, you first need to implement requirements for production, design and development, purchasing and so on and then to conduct assessment of environmental aspects for each process. For more information, take a look at this free webinar – How to integrate ISO 9001:2015 and ISO 14001:2015 https://advisera.com/9001academy/es/webinar/how-to-integrate-iso-90012015-and-iso-140012015-free-webinar//
When you implement ISO 9001 and ISO 14001 it will be easy to add requirements of ISO 45001 once it is published. It will probably have the same structure as ISO 9001 and ISO 14001 so the integration wont be too challenging. If you want to take a look at the Integrated Management System documentation, here you can download a free preview https://advisera.com/9001academy/iso-9001-iso-14001-integrated-toolkit/ -
BS 25999 and ISO 22301
(Is the 25999 standard the same as the 22301?)
Answer: No. 25999 standard is an old British Standard officially recognized in the United Kingdom (its current status is superseded), while 22301 is an ISO standard accepted worldwide (current status published, version 2012). In terms of content, we can consider ISO 22301 an "upgrade" of BS 25999, with the ISO standard presenting significant changes and additions.
This article will provide you further explanation about BS 25999 and ISO 22301:
- ISO 22301 vs. BS 25999-2 – An Infographic https://advisera.com/27001academy/blog/2012/05/22/iso-22301-vs-bs-25999-2-an-infographic/
These materials will also help you regarding BS 25999 and ISO 22301:
- Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/
- What’s new in ISO 22301 : How to make the transition from BS 25999-2 [free webinar] https://advisera.com/27001academy/webinar/whats-new-in-iso-22301-how-to-make-the-transition-from-bs-25999-2-free-webinar/ -
Information classification
Thank you -
Patching
Answer:
Patch management can be seen from two point of views:
1. Routine patching - Approach it as IT Operations (find out here more about it "IT Operations Management Function in ITIL" https://advisera.com/20000academy/knowledgebase/operations-management-function-itil/ or "ITIL Service Operations – From development to maintenance without headaches" https://advisera.com/20000academy/blog/2015/10/27/itil-service-operations-from-development-to-maintenance-without-headaches/) activity. This is usually the case when you have mandatory patches and you set a process, and - that's all.
2. Critical or more (from resource, risk, technology... point of view) demanding patches - use change i.e. release and deployment management process to handle them.
Important is to know "what's in front of you" and manage the implementation. -
Scope and Quality Objectives
Answer:
They should be part of your scope and consider the HQ as an external interested party. If your scope is only local facility, then they need to follow your objectives but you can make an exception and add HQ objectives as well. -
Management Systems Integration
Answer: All ISO management standards released after 2012 now have the same structure, which makes easier to integrate them between each other, since most of requirements are the same (e.g., sections 4, 5, 7, 9 and 10 are practically the same). Regarding integration of ISO standards with other systems of quality, for integration you should first built a map of requirements so you can identify which requirements are the same and for which you have to make adjustments or elaborate new documents. After that you can define a plan to make the adjustments and new implementations, as well as to train your staff, evaluate results and implement corrections and improvements, just like in a normal implementation.
This article will provide you further explanation about management systems integration:
- How to implement integrated management systems ht tps://advisera.com/27001academy/blog/2015/10/05/how-to-implement-integrated-management-systems/
- Using ISO 9001 for implementing ISO 27001 https://advisera.com/27001academy/blog/2010/03/08/using-iso-9001-for-implementing-iso-27001/
This material will also help you regarding management systems integration:
- ISO 27001 implementation: How to make it easier using ISO 9001 [free webinar] https://advisera.com/27001academy/webinar/iso-27001-implementation-make-easier-using-iso-9001-free-webinar-demand/ -
Could you please give me an example of a Gantt Chart for ISO 14001
It is really hard to provide you with precise estimation, since the duration of the implementation process will differ depending on various factors, i.e. size of the company, complexity of the processes, products and services, type of operational control you choose to apply, etc.
Most of the time, you will spend on identification and evaluation of environmental aspects and implementation of operational controls, approximately 40% of the time, the rest of the time you will spend on creating documents, implementing other requirements and performing internal audit and management review.
For more information, see: How long does it take to implement ISO 14001:2015? https://advisera.com/14001academy/blog/2016/04/04/how-long-does-it-take-to-implement-iso-140012015/ -
Risks and opportunities and SWOT
Answer:
The organization needs to determine risks related to the context of the organization which means clauses 4.1 and 4.2. SWOT analysis as a methodology was developed long time ago and it doesn't fit 100% into the terminology or needs of the standard. The approach you took is in line with the requirements of the standard and this is a good way to distinguish internal and external issues.
For more information, see: ISO 9001:2015 Case study: Context of the organization as a success factor in manufacturing company https://advisera.com/9001academy/blog/2016/10/11/iso-90012015-case-study-context-of-the-organization-as-a-success-factor-in-manufacturing-company/ -
Role of quality department and management representative
Answer:
The standard does not prescribes roles and common processes for Quality Assurance department, but it is usual that this department manages the QMS, reports to the top management about performances of the QMS, conducts internal audits, helps with corrective actions, etc.
Management Representative is no longer a mandatory role in the QMS, so the standard does not have any specific requirements regarding the responsibilities and authorities of the MR (Management Representative). Usual responsibilities of the MR are:
- ensuring the QMS conforms to the standard;
- report on the performance of the QMS;
- coordinates regular activities related to the QMS.
For more information, see: What is the job of the quality management representative? https://advisera.com/9001academy/knowledgebase/what-is-the-job-of-the-quality-management-representative/