Saturday, June 12, 2010

ISO 9001 Standards In General


ISO 9001 Standards In General

The adoption of a quality management system should be a strategic decision of an organization. The design and implementation of an organization’s quality management systemis influenced by
— its business environment, changes in that environment, or risks associated with that environment,
— its varying needs,
— its particular objectives,
— the products it provides,
— the processes it employs,
— its size and organizational structure.
It is not the intent of this International Standard to imply uniformity in the structure of quality management systems or uniformity of documentation.
The quality management system requirements specified in this International Standard are complementary to requirements for products. Information marked “NOTE” is for guidance in understanding or clarifying the
associated requirement.
This International Standard can be used by internal and external parties, including certification bodies, to assess the organization’s ability to meet customer, statutory and regulatory requirements applicable to the
product, and the organization’s own requirements.
The quality management principles stated in ISO 9000 and ISO 9004 have been taken into consideration during the development of this International Standard.


ISO 9001 Standards – Control of Measuring and Monitoring Equipment


ISO 9001 Standards - Control of Measuring and Monitoring Equipment

Determine the monitoring and measurements to be made, and the required equipment, to provide evidence of product conformity. Use and control the monitoring and measuring devices to ensure that measurement capability is consistent with monitoring and measurement requirements.
Where necessary to ensure valid results:
- Calibrate and/or verify the measuring equipment at specified intervals or prior to use
- Calibrate the equipment to national or international standards (or record other basis)
- Adjust or re-adjust as necessary

- Identify the measuring equipment in order to determine its calibration status

- Safeguard them from improper adjustments

- Protect them from damage and deterioration

Assess and record the validity of prior results if the device is found to not conform to requirements. Maintain records of the calibration and verification results.

Confirm the ability of software used for monitoring and measuring for the intended application before its initial use (and reconfirmed as necessary).

NOTE: Confirming the ability of software to satisfy the intended application would typically include its verification and configuration management to maintain its suitability for use.

For More Information Please Visit http://www.iso9001-standard.us


Guidance on Clause 4.2 of ISO 9001:2008

Guidance on Clause 4.2 of ISO 9001:2008

The following comments are intended to assist users of ISO 9001:2008 in understanding the intent of the general documentation requirements of the International Standard.

a) Documented statements of a quality policy and objectives:

Requirements for the quality policy are defined in clause 5.3 of ISO 9001:2008. The documented quality policy has to be controlled according to the requirements of clause 4.2.3.

Note: Organizations that are revising their quality policy for the first time, or in order to meet the amended requirements in ISO 9001:2008, should pay particular attention to clause 4.2.3 (c), (d) and (g).

Requirements for quality objectives are defined in clause 5.4.1 of ISO 9001:2008. These documented quality objectives are also subject to the document control requirements of clause 4.2.3.

b) Quality Manual:

Clause 4.2.2 of ISO 9001:2008 specifies the minimum content for a quality manual. The format and structure of the manual is a decision for each organization, and will depend on the organization’s size, culture and complexity. Some organizations may choose to use the quality manual for other purposes besides that of simply documenting the QMS

A small organization may find it appropriate to include the description of its entire QMS within a single manual, including all the documented procedures required by the standard.

Large, multi-national organizations may need several manuals at the global, national or regional level, and a more complex hierarchy of documentation.

The quality manual is a document that has to be controlled in accordance with the requirements of clause 4.2.3.

c) Documented procedures:

ISO 9001:2008 specifically requires the organization to have “documented procedures” for the following six activities:

4.2.3 Control of documents

4.2.4 Control of records

8.2.2 Internal audit

8.3 Control of nonconforming product

8.5.2 Corrective action

8.5.3 Preventive action

These documented procedures have to be controlled in accordance with the requirements of clause 4.2.3 Some organizations may find it convenient to combine the procedure for several activities into a single documented procedure (for example, corrective action and preventive action). Others may choose to document a given activity by using more than one documented procedure (for example, internal audits). Both are acceptable.

Some organizations (particularly larger organizations, or those with more complex processes) may require additional documented procedures (particularly those relating to product realization processes) to implement an effective QMS.

Other organizations may require additional procedures, but the size and/or culture of the organization could enable these to be effectively implemented without necessarily being documented. However, in order to demonstrate compliance with ISO 9001:2008, the organization has to be able to provide objective evidence (not necessarily documented) that its QMS has been effectively implemented.

d) Documents needed by the organization to ensure the effective planning, operation and control of its processes:

In order for an organization to demonstrate the effective implementation of its QMS, it may be necessary to develop documents other than documented procedures. However, the only documents specifically mentioned in ISO 9001:2008 are:

- Quality policy (clause 4.2.1.a)

- Quality objectives (clause 4.2.1.a)

- Quality manual (clause 4.2.1.b)

There are several requirements of ISO 9001:2008 where an organization could add value to its QMS and demonstrate conformity by the preparation of other documents, even though the standard does not specifically require them. Examples

may include:

- Process maps, process flow charts and/or process descriptions

- Organization charts

- Specifications

- Work and/or test instructions

- Documents containing internal communications

- Production schedules

- Approved supplier lists

- Test and inspection plans

- Quality plans

All such documents have to be controlled in accordance with the requirements of clause 4.2.3 and/or 4.2.4, as applicable

e) Records:

Examples of records specifically required by ISO 9001:2008 are presented in Annex B.

Organizations are free to develop other records that may be needed to demonstrate conformity of their processes, products and quality management system.

Requirements for the control of records are different from those for other documents, and all records have to be controlled according to those of clause 4.2.4 of ISO 9001:2008.


Reasons a Company Becomes Certified in ISO 9001 Standards


ISO 9000 certification or registration can be an expensive process. A company must consider the reasons and promised benefits for going through this process. If a company decides to seek certification, they should consider making sure their suppliers are certified or at least compliant to the ISO 9000 standards.

Major reasons
In the early 1990s, companies seemed to be jumping on the certification bandwagon without seriously considering the rationale for doing so. Often they did so because competitors or “everybody else” is getting registered. Today companies seriously look at the reasons and benefits for becoming registered.

The major reasons that company leadership or management decides to seek ISO 9000 certification are to gain continued or increased business and to maintain effective operations.

Improved business
A company can maintain a relationship with customers, as well as get increased business through complying to the ISO 900 standards or becoming certified. This comes from satisfying customer demands, the desire for European business, and to advertise.

Finally, some companies want to become certified, so they can advertise that fact and give the impression of being better than their competitors.

You have seen ads with a logo stating the company is certified at some ISO 9000 level. It apparently gives those companies a leg up on competitors not registered.

Again, this seemed more important in the 1990s, but you don’t see that many companies using ISO 9000 certification as an advertising tool.

ISO 9000 is supposed to make sure your business is run in an orderly manner that will assure continued success.

One would think that a goal such as being run effectively and able to deliver goods consistently and reliably would also be desirable for a company’s own operation. Surprisingly, many companies do not consider that as a goal.


Demonstrating conformity with ISO 9001:2008


Demonstrating conformity with ISO 9001:2008

For organizations wishing to demonstrate conformity with the requirements of ISO 9001:2008, for the purposes of certification/registration, contractual, or other reasons, it is important to remember the need to provide evidence of the effective implementation of the QMS.
Organizations may be able to demonstrate conformity without the need for extensive documentation.
To claim conformity with ISO 9001:2008, the organization has to be able to provide objective evidence of the effectiveness of its processes and its quality management system. Clause 3.8.1 of ISO 9000:2005 defines “objective evidence” as “data supporting the existence or variety of something” and notes that “objective evidence may be obtained through observation, measurement, test, or other means.”
Objective evidence does not necessarily depend on the existence of documented procedures, records or other documents, except where specifically mentioned in ISO 9001:2008. In some cases, (for example, in clause 7.1(d)
Planning of product realization, and clause 8.2.4

Monitoring and measurement of product), it is up to the organization to determine what records are necessary in order to provide this objective evidence.
Where the organization has no specific internal procedure for a particular activity, and this is not required by the standard, (for example, clause 5.6 Management Review), it is acceptable for this activity to be conducted using as a basis the relevant clause of ISO 9001:2008. In these situations, both internal and external audits may use the text of ISO 9001:2008 for conformity assessment purposes.


What is ISO 9000 Standards?

What is ISO 9000 Standards?


ISO 9000 Standards – Quality Management Principles


ISO 9000 Standards – Quality Management Principles
A quality management principle is defined by ISO/TC 176 as a comprehensive and fundamental rule or belief, for leading and operating an organization, aimed at continually improving performance over the long term by focusing on customers while addressing the needs of all other interested parties. Eight principles have emerged as fundamental to the management of quality.

All the requirements of ISO 9001:2008 are related to one or more of these principles. These principles provide the reasons for the requirements and are thus very important. The quality management principles can be listed as below:

1. Customer focus
Organizations depend on their customers and therefore should understand current and future customer needs, meet customer requirements and strive to exceed customer expectations.
The customer focus principle is reflected in ISO 9000 Standards through the requirements addressing:
a. Communication with the customer
b. Care for customer property
c. The determination of customer needs and expectations
d. Appointment of a management representative
e. Management commitment

2. Leadership
Leaders establish unity of purpose and direction for the organization. They should create and maintain the internal environment in which people can become fully involved in achieving the organization’s objectives.
The leadership principle is reflected in ISO 9000 Standards through the requirements addressing:
a. The setting of objectives and policies
b. Planning
c. Internal communication
d. Creating an effective work environment

3. Involvement of people
People at all levels are the essence of an organization and their full involvement enables their abilities to be used for the organization’s benefit.
The involvement of people principle is reflected in ISO 9000 Standards through the requirements addressing:
a. Participation in design reviews
b. Defining objectives, responsibilities and authority
c. Creating an environment in which people are motivated
d. Internal communication
e. Identifying competence needs

4. Process approach
A desired result is achieved more efficiently when related resources and activities are managed as a process.
The process approach principle is reflected in ISO 9000 Standards through the requirements addressing:
a. The identity of processes
b. Defining process inputs and outputs
c. Providing the infrastructure, information and resources for processes to
function

5. System approach to management
This principle is expressed as follows:
Identifying, understanding and managing interrelated processes as a system contributes to the organization’s effectiveness and efficiency in achieving its objectives.
The system approach principle is reflected in ISO 9001 through the requirements addressing:
a. Establishing, implementing and maintaining the management system
b. Interconnection, interrelation and sequence of processes
c. The links between processes
d. Establishing measurement processes

6. Continual improvement
This principle is expressed as follows:
Continual improvement of the organization’s overall performance should be a permanent objective of the organization.
The continual improvement principle is reflected in ISO 9000 Standards through the requirements addressing:
a. Improvement processes
b. Identifying improvements
c. Reviewing documents and processes for opportunities for improvement

7. Factual approach to decision making
This principle is expressed as follows:
Effective decisions are based on the analysis of data and information.
The factual approach principle is reflected in ISO 9000 Standards through the requirements addressing:
a. Reviews, measurements and monitoring to obtain facts
b. Control of measuring devices
c. Analysis to obtain facts from information
d. Records for documenting the facts
e. Approvals based on facts

8. Mutually beneficial supplier relationships
This principle is expressed as follows:
An organization and its suppliers are interdependent and a mutually beneficial relationship enhances the ability of both to create value.
The mutually beneficial supplier relationships principle is reflected in ISO 9000 Standardsthrough the requirements addressing:
a. Control of suppliers
b. Evaluation of suppliers
c. Analysis and review of supplier data

Preparing The ISO 9000 Standards Quality Manual

Preparing The ISO 9000 Standards Quality Manual

The standard requires a quality manual to be established and maintained that includes the

scope of the quality management system, the documented procedures or reference to them

and a description of the sequence and interaction of processes included in the quality

management system.

ISO 9000 defines a quality manual as a document specifying the quality management

system of an organization.

It is therefore not intended that the manual be a response to the requirements of ISO 9001.

As the top-level document describing the management system it is a system description

describing how the organization is managed.

Countless quality manuals produced to satisfy ISO 9000 :2008, were no more than 20

sections that paraphrased the requirements of the standard.

Such documentation adds no value. They are of no use to managers, staff or auditors.

Often thought to be useful to customers, organizations would gain no more confidence

from customers than would be obtained from their registration certificate.

This requirement responds to the System Approach Principle.

A description of the management system is necessary as a means of showing how all

the processes are interconnected and how they collectively deliver the business outputs.

It has several uses as :

a means to communicate the vision, values, mission, policies and objectives of the

organization

a means of showing how the system has been designed

a means of showing linkages between processes

a means of showing who does what

an aid to training new people

a tool in the analysis of potential improvements

a means of demonstrating compliance with external standards and regulations

When formulating the policies, objectives and identifying the processes to achieve

them, the manual provides a convenient vehicle for containing such information.

If left as separate pieces of information, it may be more difficult to see the linkages.

The requirement provides the framework for the manual. Its content may

therefore include the following:

1 Introduction

(a) Purpose (of the manual)

(b) Scope (of the manual)

(c) Applicability (of the manual)

(d) Definitions (of terms used in the manual)

2 Business overview

(a) Nature of the business/organization – its scope of activity, its products

and services

(b) The organization’s interested parties (customers, employees, regulators,

shareholders, suppliers, owners etc.)

(c) The context diagram showing the organization relative to its external

environment

(d) Vision, values

(e) Mission

3 Organization

(a) Function descriptions

(b) Organization chart

(c) Locations with scope of activity

4 Business processes

(a) The system model showing the key business processes and how they are interconnected

(b) System performance indicators and method of measurement

(c) Business planning process description

(d) Resource management process description

(e) Marketing process description

(f) Product/service generation processes description

(g) Sales process description

(h) Order fulfilment process description

5 Function matrix (Relationship of functions to processes)

6 Location matrix (Relationship of locations to processes)

7 Requirement deployment matrices

(a) ISO 9001 compliance matrix

(b) ISO 14001 compliance matrix

(c) Regulation compliance matrices (FDA, Environment, Health, Safety, CAA etc.)

8 Approvals (List of current product, process and system approvals)


Revision Of Documents In ISO 9000 Standards

The ISO 9000 Standard requires that documents be updated as
necessary and re-approved following their review.
Following a document review, action may or may not be necessary. If the
document is found satisfactory, it will remain in use until the next review. If the
document is found unsatisfactory there are two outcomes.
The document is no longer necessary and should be withdrawn from use –
this is addressed by the requirement dealing with obsolescence.
The document is necessary but requires a change – this is addressed by this
requirement.
The standard implies that updating should follow a review. The term update
also implies that documents are reviewed only to establish whether they are
current when in fact document reviews may be performed for many different
reasons. A more appropriate term to update would be revise. Previously the
standard addressed only the review and approval of changes and did not
explicitly require a revision process. However, a revision process is executed
before a document is subject to re-approval.
This requirement responds to the Continual Improvement principle.
It is inevitable that during use a need will arise for changing documents and
therefore provision needs to be made to control not only the original
generation of documents but also their revisions.
The document change process consists of a number of key stages some of
which are not addressed in ISO 9000 Standards.
a. Identification of need (addressed by document review)
b. Request for change (not addressed in the standard)
c. Permission to change (not addressed in the standard)
d. Revision of document (addressed by document updates)
e. Recording the change (addressed by identifying the change)
f. Review of the change (addressed under quality planning)
g. Approval of the change (addressed by document re-approval)
h. Issue of change instructions (not addressed in the standard)
i. Issue of revised document (addressed by document availability)
As stated previously, to control documents it is necessary to control their
development, approval, issue, change, distribution, maintenance, use, storage,
security, obsolescence or disposal and we will now address those aspects not
specifically covered by the standard.
In controlling changes it is necessary to define what constitutes a change to a
document. Should you allow any markings on documents, you should specify
those that have to be supported by change notes and those that do not.
Markings that add comment or correct typographical errors are not changes
but annotations. Alterations that modify instructions are changes and need
prior approval. The approval may be in the form of a change note that details
changes that have been approved.
Anyone can review a document but approved documents should only be
changed/revised/amended under controlled conditions. The document
review will conclude that either a change is necessary or unnecessary. If a
change is necessary, a request for change should be made to the issuing
authorities. Even when the person proposing the change is the same as would
approve the change, other parties may be affected and should therefore be
permitted to comment. The most common method is to employ Document
Change Requests. By using a formal change request it allows anyone to request
a change to the appropriate authorities.
Change requests need to specify:
a. The document title, issue and date
b. The originator of the change request (who is proposing the change, his or her
location or department)
c. The reason for change (why the change is necessary)
d. What needs to be changed (which paragraph, section, etc. is affected and
what text should be deleted)
e. The changes in text required where known (the text which is to be inserted
or deleted)
By maintaining a register of such requests you can keep track of who has
proposed what, when and what progress is being made on its approval. You
may of course use a memo or phone call to request a change but this form of
request becomes more difficult to track and prove you have control. You will
need to inform staff where to send their requests.
On receipt of the request you need to provide for its review by the change
authority. The change request may be explicit in what should be changed or
simply report a problem that a change to the document would resolve.
Someone needs to be nominated to draft the new material and present it for
review but before that, the approval authorities need to determine whether
they wish the document to be changed at all. There is merit in reviewing
requests for change before processing in order to avoid abortive effort. You
may also receive several requests for change that conflict and before processing
you will need to decide which change should proceed. While a proposed
change may be valid, the effort involved may warrant postponement of the
change until several proposals have been received – it rather depends on the
urgency
Ensuring the availability of controlled documents
The ISO 9000 standards requires that relevant versions of applica-
ble documents are available at points of use.
The relevant version of a document is the version
that should be used for a task. It may not be the latest
version because you may have reason to use a
different version of a document such as when
building or repairing different versions of the same
product. Applicable documents are those that are
needed to carry out work. Availability at points of use
means the users have access to the documents they
need at the location where the work is to be
performed. It does not mean that users should possess copies of the documents
they need, in fact this is undesirable because the copies may become outdated
and not withdrawn from use.
This requirement exists to ensure that access to documents is afforded when
required. Information essential for the performance of work needs to be
accessible to those performing it otherwise they may resort to other means
of obtaining what they need that may result in errors, inefficiencies and
hazards.
In order to make sure that documents are available you should not keep them
under lock and key (or password protected) except for those where restricted
access is necessary for security purposes. You need to establish who wants
which documents and when they need them. The work instructions should
specify the documents that are required for the task so that those documents
not specified are not essential. It should not be left to the individual to
determine which documents are essential and which are not. If there is a need
for access out of normal working hours, access has to be provided. The more
copies there are the greater the chance of documents not being maintained so
minimize the number of copies. A common practice is to issue documents to
managers only and not the users. This is particularly true of management
system documents. One finds that only the managers hold copies of the
Quality Manual. In some firms all the managers reside in the same building,
even along the same corridor and it is in such circumstances that one invariably
finds that these copies have not been maintained. It is therefore impractical to
have all the copies of the Quality Manual in one place. Distribute the
documents by location, not by named individuals. Distribute to libraries, or
document control centres so that access is provided to everyone and so that
someone has responsibility for keeping them up to date. If using an intranet,
the problems of distribution are less difficult but there will always be some
groups of people who need access to hard copy.
The document availability requirement applies to both internal and external
documents alike. Customer documents such as contracts, drawings, specifica-
tions and standards need to be available to those who need them to execute
their responsibilities. Often these documents are only held in paper form and
therefore distribution lists will be needed to control their location. If documents
in the public domain are required, they only need be available when required
for use and need not be available from the moment they are specified in a
specification or procedure. You should only have to produce such documents
when they are needed for the work being undertaken at the time of the audit.
However, you would need to demonstrate that you could obtain timely access
when needed. If you provide a lending service to users of copyrighted
documents, you would need a register indicating to whom they were loaned so
that you can retrieve them when needed by others.
A document that is not ready for use or is not used often may be archived.
But it needs to be accessible otherwise when it is called for it won’t be there. It
is therefore necessary to ensure that storage areas, or storage mediums provide
secure storage from which documents can be retrieved when needed. Storing
documents off-site under the management of another organization may give
rise to problems if they cannot be contacted when you need the documents.
Archiving documents on magnetic tape can also present problems when the
tape cannot be found or read by the new technology that has been installed!
Electronic storage presents very different problems to conventional storage and
gives rise to the retention of ‘insurance copies’ in paper should the retrieval
mechanism fail.
Ensuring documents are legible and identifiable
The standard requires documents to remain legible and
readily identifiable.
Legibility refers to the ease with which the informa-
tion in a document can be read or viewed. A
document is readily identifiable if it carries some
indication that will quickly distinguish it from
similar documents. Any document that requires a reader to browse through it
looking for clues is clearly not readily identifiable.
The means of transmission and use of documents may cause degradation
such that they fail to convey the information originally intended. Confusion
with document identity could result in a document being misplaced, destroyed
or otherwise being unobtainable. It can also result in incorrect documents
being located and used.
This requirement is so obvious it hardly needs to be specified. As a general
rule, any document that is printed or photocopied should be checked for
legibility before distribution. Legibility is not often a problem with electron-
ically controlled documents. However, there are cases where diagrams cannot
be magnified on screen so it would be prudent to verify the capability of the
technology before releasing documents. Not every user will have perfect
eyesight! Documents transmitted by fax present legibility problems due to the
quality of transmission and the medium on which the information is printed.
Heat sensitive paper is being replaced with plain paper but many organiza-
tions still use the old technology. You simply have to decide your approach.
For any communication required for reference, it would be prudent to use
photocopy or scan the fax electronically and dispose of the original.
Documents used in a workshop environment may require protection from oil
and grease. Signatures are not always legible so it is prudent to have a policy
of printing the name under the signature. Documents subject to frequent
photocopying can degrade and result in illegible areas.
Although a new requirement, it is unusual to find documents in use that carry
no identification at all. Three primary means are used for document
identification – classification, titles and identification numbers. Classification
divides documents into groups based on their purpose – policies, procedures,
records, plans, etc are classes of documents. Titles are acceptable providing
there are no two documents with the same title in the same class. If you have
hundreds of documents it may prove difficult to sustain uniqueness.
Identification can be made unique in one organization but outside it may not
be unique. However, the title as well as the number is usually sufficient.
Electronically controlled documents do not require a visible identity other than
the title in its classification. Classifying documents with codes enables their
sorting by class.

Document Review In ISO 9000 Standards

Document Review In ISO 9000 Standards

The ISO 9000 Standard requires that documents be reviewed.
Previously the implication was that the review was a check by potential users that the document was fit
for purpose before it was offered for approval. It could be construed that for a document to receive
approval it must be checked and therefore review and approval in this context are one and the same
and the requirement is in this instance enhanced rather than relaxed.
A review is another look at something. Therefore document review is a task that is carried out at any
time following the issue of a document.
This requirement responds to the Continual Improvement principle.
Reviews may be necessary when:
- Taking remedial action (i.e. Correcting an error)
- Taking corrective action (i.e. Preventing an error recurring)
- Taking preventive action (i.e. Preventing the occurrence of an error)
- Taking maintenance action (i.e. Keeping information current)
- Validating a document for use (i.e. When selecting documents for use in connection with a project, product, contract or other application)
- Taking improvement action (i.e. Making beneficial change to the information)
Reviews may be random or periodic. Random reviews are reactive and arise from an error or a change that is either planned or unplanned. Periodic reviews are proactive and could be scheduled once each year to review the policies,
processes, products, procedures, specification etc. for continued suitability. In this way obsolete documents are culled from the system. However, if the system is being properly maintained there should be no outdated information
available in the user domain. Whenever a new process or a modified process in installed the redundant elements including documentation and equipment should be disposed of.


Quality Assurance

Quality assurance, according to the Standard, is a way of managing that prevents non-conformance and thus “assures quality”. This is what makes ISO 9000 different from other standards: it is a management standard, not a product standard. It goes beyond product standardisation: it is standardising not what is made but how it is made. To use standards to dictate and control how organisations work was to extend the role of standards to new territory. To take such a step we might have firstly established that any such requirements worked — that they resulted in ways of working which improved performance. Yet the plausibility of this Standard, and the fact that those who had an interest in maintaining it were (and still are) leading opinion, prevented such enquiries. In simple terms the Standard asks managers to say what they do, do what they say and prove it to a third party. ISO 9000(1994) paragraph 1: “The requirements specified are aimed primarily at achieving customer satisfaction by preventing non-conformity at all stages from design through servicing.” To put it another way, the Standard asserts that preventing non-conformance achieves customer satisfaction. But does it? Of course it matters to customers that a product works. But there is no guarantee that the Standard will ensure even that. Furthermore, customers take a total view of an organisation — how easy it is to do business with — in respect of all things of importance to each and every customer. ISO 9000 requires managers to “establish and maintain a documented quality system as a means of ensuring that product conforms to specified requirements”. Loosely translated this is “say what you do”. Management is supposed to “define and document its policy for quality . . . including its commitment to quality”. What management would not declare its commitment to quality? But would they know what it means? Would they argue (as they should) that quality management is a different and better way to do business, or would they believe that ISO 9000 will take care of quality? The Standard encourages managers to think of “quality” and “business as usual” as separate and distinct. It helps managers avoid the revelation that quality means a wholly different view of management. Instead, the organisation “shall appoint a management representative who, irrespective of other responsibilities, shall have defined authority and responsibility” [for ISO 9000]. At a practical level this means only one executive might decide he or she had better learn a thing or two about quality. However, would being responsible for ISO 9000 lead to learning about quality or simply enforcing the ISO 9000 regime in an organisation? Key to the regime is auditing. The Standard requires organisations to conduct internal quality audits to “verify whether quality activities comply with planned arrangements”. This can be loosely translated as “do you do as you say?” and the purpose of the audit is to see that you do. It was not until the 1994 review that the words were changed to “quality activities and related results”. It was a Standard which was rooted in the philosophy of inspection: fifteen years after its initial promulgation the promoters sought to extend the focus to results. But results or improvements assessed by what means? Inspection. By the time the Standard was adopted world-wide, quality thinking had moved a long way from the philosophy of inspection. It is now understood, at least by a few, that quality is achieved through managing the organisation as a system and using measures which enable managers to improve flow and reduce variation (which we explore in chapters 5 and 7). The defenders argue that there is nothing stopping a company having ISO 9000 and implementing methods for managing flow and reducing variation, but where are such companies? Few of the companies we researched, formally and informally, knew anything about this thinking. The Standard does not talk about it; moreover, the Standard effectively discourages managers from learning about it by representing quality in a different way. According to ISO 8402 (quality vocabulary), quality is: “The totality of features and characteristics of a product or service that bear on its ability to satisfy stated or implied needs.” Everything we have learned about ISO 9000 suggests that the people who created this definition were thinking about the things which need to be controlled, those things which “bear on its ability . . .”. The builders of the Standard assumed that customer needs would be listed in contractual agreements between the supplier and customer. ISO 9000 has a “make” logic — procedures for “how you do what you do” — and a “control” logic — check to see that it is done. It is a relic of the era when contractual agreements were perceived to be an important device for regulating the behaviour of suppliers. In these ways, ISO 9000 encouraged “planning for quality”. Planning for quality sounds plausible, but it assumes many things: that the plan is the right plan, that it is feasible, that people will “do it”, that performance will improve. It is an approach which, paradoxically, leads to poor decisions. Planners of quality systems, guided by ISO 9000, start with a view of how the world should be as framed by the Standard. Understanding how an organisation is working, rather than how someone thinks it should, is a far better place from which to start change of any kind.


ISO 9001:2008 Draft Changes


ISO 9001:2008 Draft Changes

0.1 Changes here are a statement about whom and where the standard is including any statutory requirements and have the same scale as any customer or regulatory requirements. It’s also clarified that these requirements are restricted to those applicable to the product.

0.4 There is a comment that state that the new standard is made due consideration to ISO 14001:2004.

1.1 &1.2 Statutory requirements had been referred in connection with purchased products and product realization. Second note explains that a statutory requirement can be a legal requirement.

After so many years of auditions the long last debate had been settled. Statutory legal requirements and statutory requirements are obliged to the purchasing processes. It was always an open area that no one had the correct answer: is your supplier must follow the law or not? Apparently yes.

2Normative reference – the ISO 9000 is now replaced by ISO 9000:2005.

3The explanations about what is a customer and what is an organization and what is a supplier had been removed.

4.1 Clause a – The word “determine” is replacing the “identify”

A note had been added stating that a purchased processes are regarded as purchasing products and another note that demand that these processes would be controlled as far as products.

4.2.1 Slight change of words but when you examine the change you realize the meaning is the same.

Note 2 was changed – a single document may include requirements for more than one procedure and requirements of one procedure may appear in more than one document.

It’s about time. A lot of headaches are vowed to be save. If your audit was one of the old school and demanded everything by the book – now you may combine two quality procedures to one document: Job description and training for example or you can split one document into two. How ever it is suitable for you as long as you provide the requirements.

4.2.3 A clarification that external documentation is considered while it is part of the quality management system.

5.1 Clause a – the word “statutory” had been added.

5.5.2 An addition for a requirement that the management representative would be a member of the organization’s management.

That addition puts all external consultants at risk – you can no longer be the

management representative. That sets a whole new line of form and documentations for you to develop in order that the external consultants would be considered as a management representative.

6.2.2Clause b –”provide training or take other actions to satisfy these needs” changed to “where applicable training needs to be provided to achieve the necessary competence”

Clause c – you must ensure that the training is with competence rather than if it was an effective training.

It all goes back to defining .You defined what is necessary now you must provide it nothing is new.

On one hand it is an improvement. The training must be reviewed before. But I think it’s not such an improvement. Instead of testing your employees if they got anything of the training you must now check the training itself before.

6.3 Clause c – information systems are included.

6.4 A new note: noise, humidity, temperatures are part of a working environment.

7.1 Clause c – measurement had been added to the activities.

7.2.1

Clause a – change of words – not of the meaning.

Clause c – the word ‘applicable’ replaces ‘related’.

Clause d – change of words – not of meaning.

A note has been added to explain what is the meaning of “post delivery activities”.

7.3.1 A note had been added clarifying that design review, verification and

validation are separated processes but they might be conducted together.

7.3.3

A change of words.

A note had been added clarifying what is included in “preservation of product”.

7.5.3 A requirement added specifying that product traceability must be included throughout the product realization.

That actually means that the product must be identified not only on the shelves after or between, but also throughout the realization process. Is pacticable? Only time will tell…

7.5.4

A change of words in the requirement to inform the customer of any problem

regarding his property.

The note had been amended that also personal data is included as customer’s

property.

7.5.5

A change of words:

from “conformity of” to “in order to maintain conformity to requirements”.

7.6

A change of words: from “devices” to “equipment”.

The reference to paragraph 7.2.1 had been removed.

Clause c – from “be identified to enable the”

to ” identification to enable their”.

Changes in the notes:

Note 1 – the reference to ISO 100012-2 had been removed.

Note 3 – explanation about when configuration of computer must be applied when the computer is used for monitor and measurements processes.

That means that from now on a computers that provides any kind of measurements services is considered a monitoring and measuring device. How can one calibrate a computer? Ask the supplier or your system administrator. They will know better than anyone. But you would have to prove it has been done.

8.2.1

A note had been added to suggest some means of conducting customer satisfaction evaluation.

8.2.2

Requirements for the audit evidence and results had been added and also that the management is responsible for ensuring preventive and corrective action to be taken.

The reference to the ISO 10011 is changed to ISO 19011.

8.2.3

A change of words:

“to ensure conformity of the product” had been removed.

A note had been added to clarify that the organization should determine the type of the monitoring and measuring according to the processes and how will this affect the quality management system.

8.2.4

A change of word:

“maintain evidence of conformity with acceptance criteria” had been removed but it is still a requirement.

8.3

An addition Clause d – specify how to deal with a nonconforming product that was discovered after delivery – but actually there nothing new only that they moved it to a new clause.


Step by Step: Leading your company to Successful ISO 9001:2008 Registration

Step by Step: Leading your company to Successful ISO 9001:2008 Registration

1. ISO 9000 Introduction, a Process approach.

2. Gap Analysis: Schedule the Gap Analysis, Conduction and ISO 9001 Gap Analysis.

3. Prepare a Project Plan: The Team approach, Steering Team, Task Teams.

4. Train employees on ISO 9001: Mamagement Overview, Employee awareness, Keeping them informed.

5. Document your system: How much Documentation do you need, Importance of Documentation control

6. Implement the QMS in your Organization:Training on new procedures, Training of internal auditors.

7. Audit your QMS: Train internal Auditors, Conduct Internal Audits.

8. ISO 9001:2008 Registration Audit: Selecting a Registrar and then go ahead with registration.


ISO 9001 Standard For Quality

The International Organization for Standardization, ISO, is a non-governmental agency that publishes and develops standards for the public and private sectors. From mechanical engineering and technology to agriculture, the ISO 9000 Standards establishes benchmarks and guidelines for quality products and services. ISO 9001 quality standards are a highly regarded and internationally recognized set of standards that are used in businesses, nonprofit groups and government organizations.

Since 1947, the ISO has published more than 17,500 standards. Many of these standards are specific for a product or process. In 1979, the ISO established the quality management and quality assurance committee. This committee established international quality management guidelines. The first guidelines published in 1986 were referred to as ISO 8402. These standards were updated and replaced with the ISO 9000 family of quality management systems standards. The latest round of quality standards fall under the ISO 9001:2008 title.

ISO quality standards include technical requirements, customer service levels, continual improvement requirements and documentation of key systems and processes. Quality is assured through strict process monitoring, checking for defects and routine internal and external reviews. Conformance with the rules and regulations of the ISO standards results in a company being publicly labeled as ISO 9001 certified or ISO 9001 registered.

Companies and organizations that adopt ISO quality standards increase their visibility as a quality-focused company. The public recognition as an ISO 9001 certified company could lead to increased access to contracts, especially for the government and to higher prestige in an industry. For some businesses, ISO 9001 certification is seen as a competitive advantage, while in other industries compliance is a requirement for continued operation.

The ISO claims that implementation of ISO standards increases a company’s return on investment, increases market share and profits and improves operational results. Societal benefits are improved health and safety, corporate compliance with legal requirements and reduced environmental impact.

The ISO quality standards and audits confirm compliance with the processes and business framework for a company to produce quality goods and services. Audits and reviews do not certify the actual products or services provided by a company, only the business methodology and quality systems that are designed to ensure quality. It is also a misconception that the ISO standards for quality only apply to manufacturing and physical goods. The ISO standardsare also applicable to the service industry.


What Is Quality In ISO 9001 Standards?

What Is Quality In ISO 9001 Standards?


IMPLEMENTATION GUIDANCE FOR ISO 9001:2008

IMPLEMENTATION GUIDANCE FOR ISO 9001:2008

The Justification Study identified the need for an amendment, provided that the impact on users would be limited and that changes would only be introduced when there were clear benefits to users.

The key focuses of the ISO 9001:2008 amendment were to enhance the clarity of ISO 9001:2000 and to enhance its compatibility with ISO 14001:2004.

A tool for assessing the impacts versus benefits for proposed changes was created to assist the drafters of the amendment in deciding which changes should be included, and to assist in the verification of drafts against the identified user needs. The following decision making principles were applied:

1) No changes with high impact would be incorporated into the standard;

2) Changes with medium impact would only be incorporated when they provided a correspondingly medium or high benefit to users of the standard;

3) Even where a change was low impact, it had to be justified by the benefits it delivered to users, before being incorporated.

The changes incorporated in this ISO 9001:2008 edition were classified in terms of impact into the following categories:

1. No Changes or minimum changes on user documents, including records.

2. No changes or minimum changes to existing processes of the organization.

3. No additional training required or minimal training required.

4. No effectes on current certifications.


What Should Be Documented In Quality Management System?

What Should Be Documented In Quality Management System?

Clause 4.2.1 in ISO 9000 Standards requires quality management system documentation to include 5 types
of document:
(a) Quality policy and objectives
(b) Quality manual
(c) Documented procedures
(d) Documents needed to ensure the effective planning, operation and control of processes
(e) Records
Other than the requirements in clause 4 for documentation, there are 14 other references requiring documentation. These are as follows:
(a) The output of the planning
(b) The quality manual
(c) A documented procedure for document control
(d) A documented procedure for the identification, storage, retrieval, protection, retention time and disposition of records.
(e) Planning of the realization processes
(f) Inputs relating to product requirements
(g) The outputs of the design and development process
(h) Design and development changes
(i) The results of the review of changes and subsequent follow up actions
(j) A documented procedure for conducting audits that includes the responsibilities and requirements
(k) Evidence of conformity with the acceptance criteria characteristics of the product
(l) A documented procedure for nonconformity control activities
(m)A documented procedure for corrective action
(n) A documented procedure for preventive action
This list is somewhat inadequate for documentation purposes because it does not tell us what types of things we should document or provide criteria to enable us to decide what we need to document.
ISO 9000 clause 2.7.2 includes a more useful list of document types that are classified as follows:
(a) Quality manuals
(b) Quality plans
(c) Specifications
(d) Guidelines
(e) Procedures, work instructions and drawings
(f) Records