Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Search results
11275 results
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
ISO management systems compatibility
Can you provide in the process, Cross References between ISO 9001.2015 and Iso 27001/ISO 22 301?
Answer: Currently we have this material you can use to cross reference these standards:
- Clause-by-clause explanation of ISO 9001:2015 https://info.advisera.com/9001academy/free-download/clause-by-clause-explanation-of-iso-90012015
- Clause-by-clause explanation of ISO 27001 https://info.advisera.com/27001academy/free-download/clause-by-clause-explanation-of-iso-27001
- Clause-by-clause explanation of ISO 22301 https://info.advisera.com/27001academy/free-download/clause-by-clause-explanation-of-iso-223012008
These materials provide explanations and support material for each clause, and since these standards have the same framework, the clauses numbering are equivalent between them.
This article will p rovide you further explanation about integrating management systems:
- How to implement integrated management systems https://advisera.com/articles/how-to-implement-integrated-management-systems/ -
Misión, visión y valores
Estamos preparándonos para certificarnos ISO 9001, les pregunto:
Debo elaborar unas política de Visión, Misión y Valores diferentes a las que ya poseemos..??
Respuesta
Para la norma ISO 9001 necesitarán redactar nuevas políticas desde un enfoque diferente. La misión y visión deben de estar alineadas con la política de calidad así como con los objetivos de calidad, poniendo énfasis a los clientes en cómo quiere la organización que se realice el servicio de una forma clara y concisa.
La política de calidad incluye la mayoría de las metas, intenciones y dirección de una organización; mientras que los objetivos de calidad están diseñados para dar soporte a la política de calidad y son específicos de empleados y departamentos.
Para más información, vea el artículo "cómo escribir buenos objetivos de calidad": https://advisera.com/9001academy/pt-br/kit-de-documentacao-da-iso-9001/nowledgebase/como-escribir-buenos-objetivos-de-calidad/ -
Processes and risks
Answer:
A process is a series of actions or steps taken in order to achieve a particular outcome. You need to observe activities performed within your company and determine what are the separate entities that produce required outcomes. For example production process has an input which is working order, production plan or similar and as an outcome of the process you have a final product. Other examples of processes are sales process, design and development, purchasing, transport, etc. For more information, see: ISO 9001: The importance of the process approach https://advisera.com/9001academy/blog/2015/12/01/iso-9001-the-importance-of-the-process-approach/
Risks in the processes are in most cases related to events that can result in process failing to deliver the expected outcome. For example, what events can result with process delivering nonconforming products. These events are then assessed in therms of their probability of occurrence and severity of consequences to determine whether they need to be addressed. For more information, see: How to address risks and opportunities in ISO 9001 https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/ -
Backup control
Answer: ISO 27001 control A.12.3.1 - Information Backup requires the implementation of:
- a backup policy, for definition of backup requirements considering information, software and systems, as well as requirements for retention and protection of backup media.
- facilities with capability to ensure information and software recovery following a disaster or media failure.
- procedures for backup, recovery and testing procedures, as well as how to act in case of one of these procedures fail.
- a backup schedule, considering what to backup, the frequency, the type of backup (e.g. full or differential backup), all considering business needs.
It is important to note that all these definitions should be aligned with existent business continuity plans.
This article will provide you further explanation about Backup control:
- Backup policy – How to determine backup frequency https: / /advisera.com/27001academy/blog/2013/05/07/backup-policy-how-to-determ ine-backup-frequency/
This material will also help you regarding Backup control:
- ISO 27001 Annex A Controls in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/ -
Determinación del contexto y partes interesadas
Respuesta:
En la ISO 14001:2015 no hay procedimientos que sean obligatorios de manera explícita, sólo existen una serie de documentos como la política, planes y registros que necesitan ser documentados.
Para más información sobre este tema, vea: https://advisera.com/14001academy/es/knowledgebase/list-of-mandatory-documents-required-by-iso-140012015/
Respecto al contexto de la organización, es necesario considerar todas las consecuencias directas e indirectas, los requerimientos legales y todos los efectos en las partes interesadas que tendrá el funcionamiento del SGA.
En cuanto a las partes interesadas, la sección 4.2. explica que la razón para identificar las mismas es determinar las necesidades y expectativas relevantes de las mismas para poder deducir cuáles son de obligado cumplimiento. Ejemplos de part es interesadas son: gobierno, accionistas, clientes, vecinos, empleados.
Para más información sobre este tema, vea: https://advisera.com/14001academy/es/knowledgebase/como-determinar-las-partes-interesadas-de-acuerdo-a-la-iso-140012015/ -
Risk evaluation
Answer:
In addition to requirements of ISO 9001:2015 to address risks and opportunities, IATF 16949 requires the risk analysis to include at minimum lessons learned from product recalls, product analysis, field returns and repairs, complaints, scraps and rework. It also requires FEMA to be applied on production and design and development process. -
IATF 16949 Quality Policy
Answer:
IATF has no additional requirements regarding the Quality Policy compared to ISO 9001:2015. If you already implemented ISO 9001:2015, you can use the same policy for both standards.
If you are developing it from scratch, the policy must meet following requirements:
- it must be appropriate to the purpose and context of the organization and supports its strategic direction;
- it must provide a framework for setting quality objectives;
- it must include a commitment to satisfy applicable requirements;
- it must include a commitment to continual improvement of the quality management system.
For more information about writing the Quality Policy, see: How to Write a Good Quality Policy https://advisera.com/9001academy/blog/2014/03/25/write-good-quality-policy/ -
Online course related questions
I have a few questions:
Do I have to purchase both or can I purchase just the Internal Auditor Course?
Internal auditor course contains the foundation course and auditing techniques, so you don't need to purchase both of them.
What does the foundation course cover?
Foundation course only covers requirements of the standard.
DO you provide model answers for the exams?
Yes, every question has four offered answers and only one is correct.
When you say “Once you purchase the exam, you can take it at a later date”:
When is the cut-off date?
There are no limits on when you can take the exam.
Will there be any further costs to take the exam?
There are no further cost after you purchase the exam.
What’s the pass mark?
The pass mark is 60%.
How soon will I get my certification?
You will receive the certificate shortly after you pass the exam.
Will this be recognised by IRCA?
The courses are not recognized by IRCA because IRCA doesn't recognize Exemplar Global.
How difficult is the exam? 😊😊😊
Answers to all questions are in the course video, so if you pay attention, you won't have any problems passing it.
As always, I look forward to hearing from you. -
Context and risk assessment templates
Answer:
When it comes to determining context of the organization, we suggest organizations to use Procedure for Determining Context of the Organization and Interested Parties https://advisera.com/9001academy/documentation/procedure-for-determining-context-of-the-organization-and-interested-parties/ Also, here is one article that provides case study for determining context of the organization: ISO 9001:2015 Case study: Context of the organization as a success factor in manufacturing company https://advisera.com/9001academy/blog/2016/10/11/iso-90012015-case-study-context-of-the-organization-as-a-success-factor-in-manufacturing-company/
For addressing risks and opportunities, we offer Procedure for Addressing Risks and Opportunities https://advisera.com/9001academy/documentation/procedure-for-addressing-risks-and-opportunities/
You can download free previews of both procedures on the links I provided and see if they meet your needs. -
When employee is unfit for fork
Answer:
It will depend on the nature of the unfitness. If the employee only has a flu, he will have to take couple of days off before returning to job. However, if the employee is permanently unfit for the job, there is no much you can do other than reassigning him to other workplace with less demanding health requirements.