Saturday, August 29, 2009

ISO 9001 And ISO 14001 Template

ISO 9001 TemplateISO 9001 Template were created to help you to prepare the ISO 9001 Quality Manual, ISO 9001 Operating Procedure & ISO 9001 Forms. This ISO 9001 Template contains prewritten ISO 9001 Quality Manual, ISO 9001 Operating Procedure along with sample forms and checklists included as Microsoft Word & Excel format. It provides sample practical documentation in the proper ISO format required by the latest ISO 9001 : 2008 changes.
Special Features : • Specifically designed to be very easy to customize so that the entire documentation that is required by ISO 9001 : 2008 can be quickly and easily developed. • Professional design and layout. • It is designed to fulfill the ISO 9001 : 2008 requirements. • Easy to read, easy to understand, and easy to implement. • Easy to audit as it follows the structure of ISO 9001 : 2008. • Includes the required Process Flowchart.
The ISO 9001 Template series itself is generic, and is designed to be applicable to any manufacturing or service process. The ISO 9001 Template are consist of : a. ISO 9001 Quality Manual Templateb. ISO 9001 Operating Procedurec. ISO 9001 Forms
------------------------------------------------------------------------------------------
ISO 14001 TemplatesThe ISO 14001 Template were created to help you to prepare the ISO 14001 Quality Manual, ISO 14001 Operating Procedure & ISO 14001 Forms. This ISO 14001 Template contains prewritten Quality Manual, Operating Procedure along with sample forms and checklists included as Microsoft Word & Excel format. It provides sample practical documentation in the proper ISO format required by the latest ISO 14001 : 2004. Special Features : Specifically designed to be very easy to customize so that the entire documentation that is required by ISO 14001 : 2004 can be quickly and easily developed. Professional design and layout. It is designed to fulfill the ISO 14001 : 2004 requirements. Easy to read, easy to understand, and easy to implement. Easy to audit as it follows the structure of ISO 14001: 2004. Includes the required Process Flowchart. The ISO 14001 Template series itself is generic, and is designed to be applicable to any manufacturing or service process.
The ISO 14001 Environmental Management System (EMS) Template are consist of:
a. ISO 14001 EMS Manual Template
b. ISO 14001 Operating Procedure
c. ISO 14001 Forms
http://www.iso9000-software.com/
http://www.iso9001store.com/

Revising the ISO 9000 Quality Manual

Revising the ISO 9000 quality procedures and the ISO 9000 quality manual should be a normal part of the ever-improving ISO 9000 quality system. These revisions can reach from small corrections to a total makeover of the entire ISO 9000 quality system. If you find your company’s ISO 9000 system to be bureaucratic and cumbersome, if you find your employees completely negative about ISO 9000, and if you end up extensively preparing for each audit, then your ISO 9000 system has plenty of opportunities for improvement and you should consider a complete makeover.
Problems related to ISO 9000It is not uncommon to find employees with negative opinions on ISO 9001. Most of them complain about excessive bureaucracy, much paperwork and extra work before audits. At the same time, they feel that there are no benefits to ISO 9001.
These problems are not the fault of ISO 9001 – these problems result from the way the ISO 9001 quality management system was implemented!

Tuesday, August 25, 2009

Environmental Aspects (ISO 14001:2004, ?4.3.1)

The requirement of ?4.3.1 of ISO 14001 is to establish and maintain procedures 1) for identifying the environmental aspects of the organization’s activities, products, and services that it can control and those that it can influence and 2) for determining which of those aspects have or can have a significant impact on the environment. Understanding the requirement of this element of ISO 14001 is central to understanding the concept of an environmental management system.
1 .A single manufacturing facility has potentially hundreds of environmental aspects. How far must it go in identifying its environmental aspects to satisfy the terms of the requirement? ISO 14001 specifies that the organization is to identify those aspects that it can control and those that it can influence and that it must also take into account planned or new developments and new or modified activities, products, and services. These stipulations in the requirements, without actually drawing boundaries on how far the organization must go in identifying environmental aspects, at least establish some categories of aspect that must be considered. Beyond this principle, each organization must identify its aspects comprehensively enough so as to not fail to identify a significant aspect or a legal requirement. An objection to comprehensive identification of aspects is that the organization may become so immersed in aspects identification that it loses sight of the end objective of the procedure, which is to determine significance.
2. Significant impact is not a stand-alone term in ?4.3.1.
It is accompanied by the phrase impact on the environment_ and environment_ is a defined term (see definition of environment, ?3.5). Significant aspects, then, are those environmental aspects that have or can have significant impacts on air, water, land, natural resources, flora, fauna, and humans. The organization determines, using its own criteria, what magnitude of impact on these seven environmental receptors constitutes a significant impact. Whether an aspect is regulated is not intended to be a factor in determining significance.
3. Proper execution of the environmental aspects procedure is important, in part, because it lifts environmental management out of the regulatory compliance mode and into the mode of systematically identifying environmental aspects and impacts and considering their consequences for the environment, irrespective of regulation. The organization that rigorously applies the environmental aspects procedure discovers many opportunities to improve environmental performance that regulation does not address, including:
• Use of energy
• Consumption of materials
• Environmental impacts of employee activities
•Environmental impacts of products and by-products post-manufacture, including distribution, use, reuse, and disposal
• Environmental impacts of services
• Unregulated waste streams such as carbon dioxide
Aspects vs. Impacts – Environmental aspects and environmental impacts differ by definition from one another in that an aspect is an element of an organization’s activities, products or services that can interact (emphasis added) with the environment_ while an impact is any change (emphasis added) to the environment_ resulting from an organization’s environmental aspects._ An aspect, then, is a precursor to an impact and an impact occurs when the aspect interacts with and changes the environment.
When identifying its aspects and impacts, the organization may find that there are more than one potential impacts associated with any given aspect. For example, an environmental aspect of a coal-fired power generation facility is stack emissions containing sulfur dioxide, nitrogen oxides, mercury, and carbon. These emissions change the environment and become impacts by contaminating plants, soil, and surface waters; contributing to the formation of ground-level ozone; causing or exacerbating heart and lung disease in humans; entering the aquatic food chain and impairing reproductive, immune, and endocrine systems; and contributing to the increase in atmospheric carbon dioxide leading to global warming. One aspect, stack emissions, then can generate at least five impacts.
Other organizations, applying benefit/cost analyses to their corrective actions, may discover that creation of a beneficial impact provides a greater environmental benefit than elimination of an adverse impact.
The introduction of the beneficial environmental impact concept into the ISO 14001 Terms and Definitions suggests that it was considered by some of the ISO 14001:1996 drafters as a placeholder for the future possibility of offsetting adverse impacts with beneficial and, on balance, achieving an environmentally neutral organization.
Control and Influence – The environmental aspects procedure requires the organization to identify those environmental aspects that it can control and those that it can influence._ Circumstances where control and influence are considered separately can occur where the environmental aspects of products or services are concerned. Some examples illustrate the case:
1. No control, no influence – When an organization manufactures a product, such as lumber, and sells it to a customer that can use the product in any way that it wishes, the organization has no control over the environmental aspects of the product’s use. The customer could use the product benignly as in the manufacture of a table or to damage the environment by burning the lumber and releasing its carbon into the atmosphere. In this case, the organization would not be expected to have either control or influence over the environmental aspects of the product.
2. Control, no influence – When an organization’s environmental aspect is the use of electric power generated from coal, it may be able to control its use of electric power by using less, by buying from a different, less environmentally damaging source, or by generating its own power. Rarely, however, does the organization have influence over the power generator to an extent that it could influence it to reduce the environmental impacts of power production.
3. Influence, no control – When an organization manufactures a product, such as an automobile, which is sold to the customer without restrictions on its use, the organization may be said to have no control over the environmental aspects of the product’s use. The organization may, however, be able to assert influence with the inclusion of owner’s manuals containing instructions for low impact use of the product.
4. Control and influence – When an organization buys a product built to its specifications, it has control over the products’ environmental aspects in the sense that it can determine the environmental aspects of the product. In this case, control also includes influence.
Significant Impacts – ISO 14001 does not provide guidance as to what constitutes a significant impact on the environment_, leaving that determination to the organization.
Many organizations ignore the qualifying phrase, impact on the environment_, and add additional criteria to what they determine to be significant impacts. For example, many organizations decide that aspects that are the subject of regulation, irrespective of impact to the environment, or that can cause damage to business reputation, are significant. Legal requirements, however, are identified in ?4.3.2 and legal requirements and business requirements are specifically considered when the organization establishes its objectives and targets (?4.3.3). Adding criteria that are not relevant to impact on the environment in the determination of significance distorts the outcome of procedures for environmental aspects and objectives and targets by giving these criteria undue weight in the determination of significance. For example, an environmental aspect that is significant only because its disclosure might affect the organization’s reputation is best dealt with in the Public Relations Department rather than as an environmental aspect.
Determination of significance is a yes or no question, not a determination of relative value. It is possible, therefore, that the execution of the environmental aspects procedure will result in the determination that the organization has no significant aspects. While the organization may elect to rank its aspects from most significant to least significant, that does not necessarily mean that any rise to the level of significant impact on the environment.
Where the impact occurs can be material to determination of significance. For example, a coal-fired power plant’s air emissions can interact with the environment; these emissions are clearly environmental aspects. Whether they significantly impact the environment may depend upon where the interaction with the environment occurs.
Part of the importance of establishing significance lies in the fact that the potentially significant environmental impacts become a focus of Objectives and Targets (?4.3.3), Competence (?4.4.2), Operational Controls (?4.4.6), and Monitoring and Measurement (?4.5.1) requirements.
An organization that determines that aspects are significant because of regulation or business reputation increases the amount of work it must do in these areas.
ISO 14001 does not require the organization to establish objectives and targets for each significant environmental aspect. On the one hand, the absence of a requirement to set objectives and targets for all significant aspects gives organizations latitude to conform to the requirements of ISO 14001 while not presently dealing, for example, with the significant environmental aspects of products. On the other, a requirement to establish objectives and targets for all identified significant aspects could easily overwhelm an organization having many significant aspects. Without this latitude, organizations might choose to ignore the existence of significant aspects that they believe are insurmountable or even decide not to implement ISO 14001. As it is, many organizations choose to deny the existence of significant aspects about which they feel they can do nothing.

Key Elements of ISO 14001

The Resources, Roles, Responsibility, and Authority; Legal and Other Requirements; Evaluation of Compliance; and Nonconformity, Corrective Action and Preventive Action elements of ISO 14001 are all essential to the ongoing effectiveness of the EMS. This section describes how they function within the overall scheme.
1. Resources, Roles, Responsibility, and Authority (ISO 14001:2004, ?4.4.1)
?4.4.1 of ISO 14001 establishes three important requirements:
1. That management ensure the availability of resources to establish, implement, maintain, and improve the EMS;
2. That roles, responsibilities, and authorities be defined, documented, and communicated in order to facilitate effective environmental management; and
3. That top management appoint a management representative(s) who, irrespective of other responsibilities, will have responsibility and authority for implementing and maintaining the EMS and for reporting to top management on the performance of the EMS.
Ensuring Availability of Resources – Provision of resources for the EMS is almost always an issue within organizations. Although top management usually understands and accepts, at least in principle, the requirement to provide resources, the level of management that makes decisions on capital deployment and operating budgets often does not subscribe to the same requirement. Making the case for resources typically requires the implementation team or management representative to quantify intangibles such as the avoided cost of regulatory fines or the value to the environment of reducing environmental impacts.
When considering the requirement to provide resources, especially financial resources, it may be important to recognize that ISO 14001 requires the provision of resources for the establishment, implementation, maintenance, and improvement of the EMS, not necessarily resources to correct or prevent environmental impacts or to register to ISO 14001. When contemplating the cost of implementing ISO 14001, organizations, again, should think in terms of three separate cost categories:
1) Internal labor and external consultant costs to establish, implement, maintain, and improve the policy and procedural elements of ISO 14001;
2) Capital costs for correction or prevention of environmental impacts; and
3) Costs of registration to ISO 14001, if the organization elects to register.
Roles, Responsibilities, and Authorities – In the past, some organizations have employed a practice of not delegating responsibility and authority for environmental affairs to specific management representatives, reasoning that if the responsibility was diffused throughout the organization, no one person could become personally accountable for non-compliance with regulations or for environmental liabilities. §4.4.1 of ISO 14001 limits such ‘willful ignorance’ by requiring top management of the organization to appoint “specific management representative(s)” to ensure that the EMS is implemented and that top management be apprised of EMS performance. It also requires that the delegation of responsibility and authority be documented and communicated, thus eliminating circumstances where responsibility and authority for the EMS are diffuse or uncertain.
When §4.4.1 is read together with the requirement of the Environmental Policy for a commitment to comply with applicable legal requirements, §4.3.2, Legal and Other
Requirements, requiring a procedure for identifying legal requirements (following), and §4.5.2, Evaluation of Compliance, requiring a procedure for evaluating regulatory compliance, it is evident that the management representative is also responsible for ensuring that the organization is in compliance with applicable regulations. While this responsibility and authority can be delegated, the chain of delegation begins with top management and is passed to the management representative, effectively eliminating any uncertainty as to who is responsible and authorized to ensure regulatory compliance.
EMS Organizational Structure – There is an almost universal norm for the management structure of the EMS organization under ISO 14001. It begins with the top management position, proceeds to the top manager’s leadership team, and then to an EMS implementation team that is generally chaired by the management representative. The departments making up the relevant functions and levels of the organization and environmental, safety, and health professionals comprise the typical implementation team.
Defining Roles, Responsibilities, and Authorities for the EMS – In defining, documenting, and communicating EMS roles, responsibilities, and authorities, it makes sense to begin with top management and proceed through all of the positions having EMS responsibilities. Following is a generic example of how roles, responsibilities, and authorities might be documented and communicated in an EMS Procedures Manual:
Plant Manager
Authority: The Plant Manager has the authority, responsibility, and accountability for managing all aspects of ABC Company’s activities, products, and services at the Anytown facility.Source: Senior Vice President, Manufacturing, ABC Company, Inc.
EMS Responsibilities: Under the requirements of ISO 14001, the Plant Manager shall be specifically responsible for:
1) Defining the Environmental Policy;
2) Delegating authority and responsibility for the establishment, implementation, maintenance, and improvement of the EMS;
3) Providing human, technological, infrastructure, and financial resources and specialized skills; and
4) Periodically reviewing the EMS for suitability, adequacy, and effectiveness and directing changes as necessary to achieve the goals for an EMS and the commitment to continual improvement.
Leadership Team
EMS Responsibilities: The Leadership Team shall advise the Plant Manager on the exercise by
the Plant Manager of his/her responsibilities for the EMS.

Environmental Management Programmes

ISO 14001 Section 4.3.4, Environmental Management Program(s), requires that organizations establish and maintain one or more environmental management programs for achieving their objectives. The environmental management program is a key element to the success of an EMS. Properly designed and implemented, environmental management programs should achieve the objectives and, consequently, improve your organization’s environmental performance.
According to ISO 14001 Section 4.3.4 the environmental management program must:
1. address each environmental objective and target
2. designate the personnel responsible for achieving targets at each relevant function and level of the
organization
3. provide an “action plan” describing how each environmental target will be achieved
4. establish a time-frame or a schedule for achieving each target.
An environmental management program is an action plan or a series of action plans to achieve an environmental objective.

Monday, August 24, 2009

ISO 9000 vs Quality

ISO 9000 was conceived to bring about an improvement in product quality. It
was believed that if organizations were able to demonstrate they were
operating a quality system that met international standards, customers would
gain greater confidence in the quality of products they purchased. It was also
believed that by operating in accordance with documented procedures, errors
would be reduced and consistency of output ensured. If you find the best way
of achieving a result, put in place measures to prevent variation, document it
and train others to apply it, it follows that the results produced should be
consistently good.

The requirements of the standard were perceived to be a list of things to do
to achieve quality. The ISO co-ordinator would often draw up a plan based on
the following logic:
1. We have to identify resource requirements so I will write a procedure on
identifying resource requirements
2. We have to produce quality plans so I will write a procedure on producing
quality plans
3. We have to record contract review so I will write a procedure on recording
contract reviews
4. We have to identify design changes so I will write a procedure on identifying
design changes

The requirements in the standard were often not expressed as results to be
achieved. Requirements for a documented procedure to be established resulted
in just that. Invariably the objectives of the procedure were to define something
rather than to achieve something. This led to documentation without any clear
purpose that related to the achievement of quality. Those producing the
documentation were focusing on meeting the standard not on achieving quality.
Those producing the product were focusing on meeting the customer
requirement but the two were often out of sync. As quality assurance became
synonymous with procedures, so people perceived that they could achieve
quality by following procedures. The dominance of procedures to the exclusion
of performance is a misunderstanding of the implementers. The standard
required a documented system that ensured product met specified requirements – a
clear purpose. Once again the implementers lost sight of the objective. Or was it
that they knew the objective but in order to meet it, the culture would have to
change and if they could get the badge without doing so, why should they?

Issuing a procedure was considered to equate to task completed. Unfortu-
nately, for those on the receiving end, the procedures were filed and forgotten.
When the auditor came around, the individual was found to be totally
unaware of the ‘procedure’ and consequently found noncompliant with it.
However, the auditor would discover that the individual was doing the right
things so the corrective action was inevitably to change the procedure. The
process of issuing procedures was not questioned, the individual concerned
was blamed for not knowing the procedure and the whole episode failed to
make any positive contribution to the achievement of quality. But it left the
impression on the individual that quality was all about following procedures.
It also left the impression that quality was about consistency and providing
you did what you said you would do regardless of it being in the interests of
satisfying customers, it was OK. One is left wondering whether anyone
consulted the dictionary in which quality is defined as a degree of excellence?

Another problem was that those who were to implement requirements were
often excluded from the process. Instead of enquiring as to the best way of
meeting a requirement, those in charge of ISO 9000 implementation assumed
that issuing procedures would in fact cause compliance with requirements. It
requires a study of the way work gets done to appreciate how best to meet a
requirement. Procedures were required to be documented and the range and
detail was intended to be appropriate to the complexity of the work, the
methods used and the skills and training needed. The standard also only
required work instructions where their absence would adversely affect quality.
It is as though the people concerned did not read the requirement properly or
had no curiosity to find out for themselves what ISO had to say about
procedures – they were all too ready to be told what to do without questioning
why they should be doing it.

More often than not, the topics covered by the standard were only a sample
of all the things that need to be done to achieve the organization’s objectives.
The way the standard classified the topics was also often not appropriate to the
way work was performed. As a consequence, procedures failed to be
implemented because they mirrored the standard and not the work. ISO 9000
may have required documented procedures but it did not insist that they be
produced in separate documents, with titles or an identification convention
that was traceable to the requirements.

Critics argue (Seddon, John, 2000)3 that ISO 9000 did not enable organiza-
tions to reduce variation as a result of following the procedures. It is true that
ISO 9000 did not explain the theory of variation – it could have done, but
perhaps it was felt that this was better handled by the wealth of literature
available at the time. However, ISO 9000 did require organizations to identify
where the use of statistical techniques was necessary for establishing,
controlling and verifying process capability but this was often misunderstood.
Clause 4.14 of ISO 9001 required corrective action procedures – procedures to
identify variation and eliminate the cause so this should have resulted in a
reduction in variation. The procedures did not always focus on results – they
tended to focus on transactions – sending information or product from A to B.
The concept of corrective action was often misunderstood. It was believed to be
about fixing the problem and preventive action was believed to be about
preventing recurrence. Had users read ISO 8402 they should have been
enlightened. Had they read Deming they would have been enlightened but in
many cases the language of ISO 9000 was a deterrent to learning. Had the
auditors understood variation, they too could have assisted in clarifying these
issues but they too seemed ignorant – willing to regard clause 4.20 as not
applicable in many cases.

Clause 4.6 of the undervalued and forgotten standard ISO 9000 –1 starts with
‘The International Standards in the ISO 9000 family are founded upon the
understanding that all work is accomplished by a process.’ In clause 4.7 it starts
with ‘Every organization exists to accomplish value-adding work. The work is
accomplished through a network of processes’ In clause 4.8 it starts with ‘It is
conventional to speak of quality systems as consisting of a number of elements.
The quality system is carried out by means of processes which exist both within
and across functions’ Alas, few people read ISO 9000–1 and as a result the
baggage that had amassed was difficult to shed especially because there were
few if any certification bodies suggesting that the guidance contained in ISO
9000 –1 should be applied. Unfortunately, this message from ISO 9000 –1 was not
conveyed through the requirements of ISO 9001. ISO 9001 was not intended as
a design tool. It was produced for contractual and assessment purposes but was
used as a design tool instead of ISO 9000 –1 and ISO 9004 –1.

ISO 9001:2008 Documentation Requirements

ISO 9001:2008 Documentation Requirements
ISO 9001:2008 clause 4.1 General requirements requires an organization to “establish, document, implement, and maintain a quality management system and continually improve its effectiveness in accordance with the requirements of this International Standard”
ISO 9001:2008 Clause 4.2.1 General explains that the quality management system documentation shall include:
documented statements of a quality policy and quality objectives;
a quality manual
documented procedures required by this International Standard
documents needed by the organization to ensure the effective planning, operation and control of its processes, and
records required by this International Standard;
The notes after Clause 4.2 make it clear that where the standard specifically requires a “documented procedure”, the procedure has to be established, documented, implemented and maintained. It also emphasizes that the extent of the QMS documentation may differ from one organization to another due to:
the size of organization and type of activities;
the complexity of processes and their interactions, and
the competence of personnel.
All the documents that form part of the QMS have to be controlled in accordance with clause 4.2.3 of ISO 9001:2008, or, for the particular case of records, according to clause 4.2.4.
Guidance on Clause 4.2 of ISO 9001:2008
The following comments are intended to assist users of ISO 9001:2008 in understanding the intent of the general documentation requirements of the International Standard.
a) Documented statements of a quality policy and objectives:
Requirements for the quality policy are defined in clause 5.3 of ISO 9001:2008. The documented quality policy has to be controlled according to the requirements of clause 4.2.3.Note: Organizations that are revising their quality policy for the first time, or in order to meet the amended requirements in ISO 9001:2008, should pay particular attention to clause 4.2.3 (c), (d) and (g).
Requirements for quality objectives are defined in clause 5.4.1 of ISO 9001:2008. These documented quality objectives are also subject to the document control requirements of clause 4.2.3.
b) Quality Manual:
Clause 4.2.2 of ISO 9001:2008 specifies the minimum content for a quality manual. The format and structure of the manual is a decision for each organization, and will depend on the organization’s size, culture and complexity. Some organizations may choose to use the quality manual for other purposes besides that of simply documenting the QMS
A small organization may find it appropriate to include the description of its entire QMS within a single manual, including all the documented procedures required by the standard.
Large, multi-national organizations may need several manuals at the global, national or regional level, and a more complex hierarchy of documentation.
The quality manual is a document that has to be controlled in accordance with the requirements of clause 4.2.3.
c) Documented procedures:
ISO 9001:2008 specifically requires the organization to have “documented procedures” for the following six activities:4.2.3 Control of documents4.2.4 Control of records8.2.2 Internal audit8.3 Control of nonconforming product8.5.2 Corrective action8.5.3 Preventive action
These documented procedures have to be controlled in accordance with the requirements of clause 4.2.3
Some organizations may find it convenient to combine the procedure for several activities into a single documented procedure (for example, corrective action and preventive action). Others may choose to document a given activity by using more than one documented procedure (for example, internal audits). Both are acceptable.
Some organizations (particularly larger organizations, or those with more complex processes) may require additional documented procedures (particularly those relating to product realization processes) to implement an effective QMS.
Other organizations may require additional procedures, but the size and/or culture of the organization could enable these to be effectively implemented without necessarily being documented. However, in order to demonstrate compliance with ISO 9001:2008, the organization has to be able to provide objective evidence (not necessarily documented) that its QMS has been effectively implemented.
d) Documents needed by the organization to ensure the effective planning, operation and control of its processes:
In order for an organization to demonstrate the effective implementation of its QMS, it may be necessary to develop documents other than documented procedures. However, the only documents specifically mentioned in ISO 9001:2008 are:- Quality policy (clause 4.2.1.a)- Quality objectives (clause 4.2.1.a)- Quality manual (clause 4.2.1.b)
There are several requirements of ISO 9001:2008 where an organization could add value to its QMS and demonstrate conformity by the preparation of other documents, even though the standard does not specifically require them. Examples may include:- Process maps, process flow charts and/or process descriptions- Organization charts- Specifications- Work and/or test instructions- Documents containing internal communications- Production schedules- Approved supplier lists- Test and inspection plans- Quality plans
All such documents have to be controlled in accordance with the requirements of clause 4.2.3 and/or 4.2.4, as applicable
e) Records:
Examples of records specifically required by ISO 9001:2008 are presented in Annex B.
Organizations are free to develop other records that may be needed to demonstrate conformity of their processes, products and quality management system.
Requirements for the control of records are different from those for other documents, and all records have to be controlled according to those of clause 4.2.4 of ISO 9001:2008.

Implementing ISO 9000 Quality Management System

Implementation of ISO 9000 affects the entire organization right from the start. If pursued with total dedication, it results in ‘cultural transition’ to an atmosphere of continuous improvement.The process of implementing ISO 9000 depends on:???? The sophistication of your existing quality program,???? The size of your organization, and???? The complexity of your process.The 14 essential steps, briefly described below, are to be followed through in order to implement ISO 9000 quality management system successfully.Step 1: Top management commitmentStep 2: Establish implementation teamStep 3. Start ISO 9000 awareness programsStep 4: Provide TrainingStep 5. Conduct initial status surveyStep 6: Create a documented implementation planStep 7. Develop quality management system documentationStep 8: Document controlStep 9. ImplementationStep 10. Internal quality auditStep 11. Management reviewStep 12. Pre-assessment auditStep 13. Certification and registrationStep 14: Continual ImprovementStep 1: Top Management CommitmentThe top management (managing director or chief executive) should demonstrate a commitment and a determination to implement an ISO 9000 quality management system in the organization. Without top management commitment, no quality initiative can succeed. Top management must be convinced that registration and certification will enable the organization to demonstrate to its customers a visible commitment to quality. It should realize that a quality management system would improve overallbusiness efficiency by elimination of wasteful duplication in management system.The top management should provide evidence of its commitment to the development and implementation of the quality management system and continually improve its effectiveness by:a. Communicating to the organization the importance of meeting customer as well as statutory and regulatory requirements,b. Defining the organization’s quality policy and make this known to every employee,c. Ensuring that quality objectives are established at all levels and functions,d. Ensuring the availability of resources required for the development andimplementation of the quality management system,e. Appointing a management representative to coordinate quality management system activities, and Conducting management review.The top management should also consider actions such as:1. Leading the organization by example,2. Participating in improvement projects,3. Creating an environment that encourages the involvement of people.This type of top management commitment may be driven by:1. Direct marketplace pressure: requirements of crucial customers or parentconglomerates.2. Indirect marketplace pressure: increased quality levels and visibility among competitors.3. Growth ambitions: desire to exploit market opportunities.4. Personal belief in the value of quality as a goal and quality management systems as a means of reaching that goal.The top management should identify the goals to be achieved through the quality management system. Typical goals may be:• Be more efficient and profitable• Produce products and services that consistently meet customers’ needs andexpectations• Achieve customers satisfaction• Increase market share• Improve communications and morale in the organization• Reduce costs and liabilities• Increase confidence in the production systemStep 2. Establish Implementation TeamISO 9000 is implemented by people. The first phase of implementation calls for the commitment of top management – the CEO and perhaps a handful of other key people.The next step is to establish implementation team and appoint a ManagementRepresentative (MR) as its coordinator to plan and oversee implementation. Its members should include representatives of all functions of the organization -Marketing, Design and development, Planning, Production, Quality control, etc.In the context of the standard, the MR is the person within the Organization who acts as interface between organization management and the ISO 9000 registrar. His role is, in fact, much broader than that. The MR should also act as the organization’s “quality management system champion,” and must be a person with:
1. Total backing from the CEO,2. Genuine and passionate commitment to quality in general and the ISO 9000 qualitymanagement system in particular,3. The dignity – resulting from rank, seniority, or both – to influence managers and others of all levels and functions,4. Detailed knowledge of quality methods in general and ISO 9000 in particular.The members of the implementation team should also be trained on ISO 9000 quality management systems by a professional training organization.
Step 3. Start ISO 9000 Awareness ProgramsISO 9000 awareness programs should be conducted to communicate to theemployees the aim of the ISO 9000 quality management system; the advantage it offers to employees, customers and the organization; how it will work; and their roles and responsibilities within the system. Suppliers of materials and components should also participate in these programs.The awareness program should emphasize the benefits that the organization expects to realize through its ISO 9000 quality management system. The program should also stress the higher levels of participation and self-direction that the quality management system renders to employees. Such a focus will go far to enlist employee support and commitment.The programs could be run either by the implementation team or by experts hired to talk to different levels of employees.Step 4. Provide TrainingSince the ISO 9000 quality management system affects all the areas and all personnel in the organization, training programs should be structured for different categories of employees – senior managers, middle-level managers, supervisors and workers. The ISO 9000 implementation plan should make provision for this training. The training should cover the basic concepts of quality management systems and the standard and their overall impact on the strategic goals of the organization, the changed processes, and the likely work culture implications of the system. In addition, initial training mayalso be necessary on writing quality manuals, procedures and work instruction; auditing principles; techniques of laboratory management; calibration; testing procedures, etc.When in-house capacity to carry out such training is not available, it may be necessary to participate in external training courses run by professional training organizations.Alternatively, an external training institution could be invited to conduct in-house training courses.
Step 5. Conduct Initial Status SurveyISO 9000 does not require duplication of effort or redundant system. The goal of ISO 9000 is to create a quality management system that conforms to the standard. This does not preclude incorporating, adapting, and adding onto quality programs already in place. So the next step in the implementation process is to compare the organization’s existing quality management system, if there is one — with the requirements of thestandard (ISO 9001:2008).For this purpose, an organization flow chart showing how information actually flows (not what should be done) from order placement by the customer to delivery to this customer should be drawn up. From this over-all flow chart, a flow chart of activities in each department should be prepared.With the aid of the flow charts, a record of existing quality management system should be established. A significant number of written procedures may already be in place.Unless they are very much out of date, these documents should not be discarded.Rather, they should be incorporated into the new quality management system.Documents requiring modification or elaboration should be identified and listed. Thisexercise is some times referred to as ” gap analysis”. During these review processes,wide consultation with executives and representatives of various unions andassociations within the organization is required to enlist their active cooperation.In the review process, documents should be collected, studied and registered for further use, possibly after they have been revised. Before developing new quality management system documentation, you need to consider with which quality requirements or department you should start. The best is to select an area where processes are fairly well organized, running effectively and functioning satisfactorily.The basic approach is to determine and record how a process is currently carried out.We can do this by identifying the people involved and obtaining information from them during individual interviews. Unfortunately, it often happens that different people will give different, contradicting versions of a process. Each one may refer to oral instructions that are not accurate or clear. This is why the facts are often not described correctly the first time around, and have to be revised several times.Once it has been agreed how to describe the current process, this process has to be adapted, supplemented and implemented according to the requirements of the quality standard (ISO 9001:2008). This requires organizational arrangements, the drawing up of additional documents and possible removal of existing documentation (e.g. procedures, inspection/test plans, inspection/test instructions) and records (e.g.inspection/test reports, inspection/test certificates).In introducing a quality management system, the emphasis is on the improvement of the existing processes or the re-organization of processes.In general, the steps to follow are the following:Ascertain and establish the following:What is the present operation/process? What already exists?
Analyze the relevant sections of the quality standard – ISO 9001:2000:What is actually required? If necessary, supplement and change operational arrangements in accordance with the standard, develop documents and records, and describe operations/processes:What is the desired operation/process?Figure 1: Steps in introducing a quality management systemThe above gap analysis can be done internally, if the knowledge level is there. Or aformal pre-assessment can be obtained from any one of a large number of ISO 9000consulting, implementing, and registration firms.Step 6. Create a Documented Implementation PlanOnce the organization has obtained a clear picture of how its quality management system compares with the ISO 9001:2008 standard, all non-conformances must be addressed with a documented implementation plan. Usually, the plan calls for identifying and describing processes to make the organization’s quality management system fully in compliance with the standard.The implementation plan should be thorough and specific, detailing:???? Quality documentation to be developed???? Objective of the system???? Pertinent ISO 9001:2008 section???? Person or team responsible???? Approval required???? Training required???? Resources required???? Estimated completion dateThese elements should be organized into a detailed chart, to be reviewed andapproved. The plan should define the responsibilities of different departments and personnel and set target dates for the completion of activities. Once approved, the Management Representative should control, review and update the plan as the implementation process proceeds.Typical implementation action plan is shown in Figure 2. Use ISO 10005:1995 for guidance in quality planning
Step 7. Develop Quality Management System DocumentationDocumentation is the most common area of non-conformance among organizations wishing to implement ISO 9000 quality management systems. As one company pointed out: “When we started our implementation, we found that documentation was inadequate. Even absent, in some areas. Take calibration. Obviously it’s necessary, and obviously we do it, but it wasn’t being documented. Another area was inspection and testing. We inspect and test practically every item that leaves here, but our documentation was inadequate”.Documentation of the quality management system should include:???? Documented statements of a quality policy and quality objectives,???? A quality manual,???? Documented procedures and records required by the standard ISO 9001:2008, and???? Documents needed by the organization to ensure the effective planning, operation and control of its processes.Quality documentation is generally prepared in the three levels indicated in the box that follows. Use ISO 10013:1995 for guidance in quality documentation.
In small companies, the above levels of documentation could be presented in one manual; otherwise, separate manuals should be prepared.A list of the documents to be prepared should be drawn up and the responsibility for writing the documents should be assigned to the persons concerned in various functional departments. They should be advised to prepare the drafts within a specific time frame.Step 8: Document ControlOnce the necessary quality management system documentation has been generated, a documented system must be created to control it. Control is simply a means of managing the creation, approval, distribution, revision, storage, and disposal of the various types of documentation. Document control systems should be as simple and as easy to operate as possible — sufficient to meet ISO 9001:2008 requirements and that is all.Document control should include:???? Approval for adequacy by authorized person (s) before issue,???? Review, updating and re-approval of documents by authorized person (s),???? Identification of changes and of the revision status of documents,???? Availability of relevant versions of documents at points of use,???? Identification and control of documents of external origin,???? Assurance of legibility and identifability of documents, and???? Prevention of unintended use of obsolete documents.The principle of ISO 9000 document control is that employees should have access to the documentation and records needed to fulfil their responsibilities.Step 9. ImplementationIt is good practice to implement the quality management system being documented as the documentation is developed, although this may be more effective in larger firms. In smaller companies, the quality management system is often implemented all at once throughout the organization. Where phased implementation takes place, the effectiveness of the system in selected areas can be evaluated.It would be a good idea initially to evaluate areas where the chances of a positive evaluation are high, to maintain the confidence of both management and staff in the merits of implementing the quality management system.The implementation progress should be monitored to ensure that the qualitymanagement system is effective and conforms to the standard. These activities include internal quality audit, formal corrective action and management review.Step 10. Internal Quality AuditAs the system is being installed, its effectiveness should be checked by regular internal quality audits. Internal quality audits are conducted to verify that the installed quality management system:
???? Conform to the planned arrangements, to the requirements of the standard (ISO 9001:2008) and to the quality management system requirements established by your organization, and???? Is effectively implemented and maintained.Even after the system stabilizes and starts functioning, internal audits should be planned and performed as part of an ongoing strategy.A few staff members should be trained to carry out internal auditing. Use ISO 19011 for guidance in auditing, auditor qualification and programmes.Step 11. Management ReviewWhen the installed quality management system has been operating for three to six months, an internal audit and management review should be conducted and corrective actions implemented. The management reviews are conducted to ensure the continuing suitability, adequacy and effectiveness of the quality management system.????The review should include assessing opportunities for improvement and the need for changes to the quality management system, including the quality policy and quality objectives.The input to management review should include information on:???? Results of audits,???? Customer feed back,???? Process performance and product conformity,???? Status of preventive and corrective actions,???? Follow-up actions from previous management reviews,???? Changes that could affect the quality management system, and???? Recommendations for improvements.Management reviews should also address the pitfalls to effective implementation, including lack of CEO commitment, failure to involve everyone in the process, and failure to monitor progress and enforce deadlines.Step 12. Pre-assessment AuditWhen system deficiencies are no longer visible, it is normally time to apply for certification. However, before doing so, a pre-assessment audit should be arranged with an independent and qualified auditor. Sometimes certification bodies provide this service for a nominal charge. The pre-assessment audit would provide a degree of confidence for formally going ahead with an application for certification.Step 13. Certification and RegistrationOnce the quality management system has been in operation for a few months and has stabilized, a formal application for certification could be made to a selected certification agency. The certification agency first carries out an audit of the documents (referred to as an “adequacy audit”). If the documents conform to the requirements of the quality standard, then on-site audit is carried out. If the certification body finds the system to be working satisfactorily, it awards the organization a certificate, generallyfor a period of three years. During this three-year period, it will carry out periodic surveillance audits to ensure that the system is continuing to operate satisfactorily.Step 14: Continual ImprovementCertification to ISO 9000 should not be an end. You should continually seek to improve the effectiveness and suitability of the quality management system through the use of:???? Quality policy???? Quality objectives???? Audit results???? Analysis of data???? Corrective and preventive actions???? Management reviewISO 9004:2008 provides a methodology for continual improvement.

Saturday, August 22, 2009

Disposition of ISO 9001 records

Disposition of ISO 9001 Records

Disposition in this context means the disposal of records once their useful life
has ended. The requirement should not be confused with that on the retention
of records. Retention times are one thing and disposal procedures quite
another.
The ISO 9001 standard does not specifically require records to be authenticated, certified
or validated other than product verification records in clause 8.2.4. A set of
results without being endorsed with the signature of the person who captured
them or other authentication lacks credibility. Facts that have been obtained by
whatever means should be certified for three reasons:

They provide a means of tracing the result to the originator in the event of
problems.
They indicate that the provider believes them to be correct.
They enable you to verify whether the originator was appropriately
qualified.
They give the results credibility.

If the records are generated by computer and retained in computerized form,
a means needs to be provided for the results to be authenticated. This can be
accomplished through appropriate process controls by installing provisions for
automated data recording or preventing unauthorized access.

Tuesday, August 18, 2009

How long does it take to implement ISO 9001?

It depends on you and your company. The very fastest is 2-3 months because most ISO 9001 registrars require at least 2 months ISO 9001 track record before the certification audit.
More realistically: if you have a relatively small company (say, less than 20 employees), if your employees are motivated and if they don’t oppose change, if you have the backing of all senior executives, if you and other managers are ready to put some significant time and efforts into this endeavor, and if you use a really good ISO 9001 quality manual template (a sample ISO 9000 quality manual that you can modify to make it your own ISO 9000 quality manual), then you may be able to get certified in as short as 3-4 months; templates for ISO 9000 forms are an additional time-saver. Some companies are significantly slower, with 6-12 months not being unusual.
However, companies that write their ISO 9001 quality manual and their ISO 9001 quality procedures from scratch, rather than base them on a proven sample ISO 9001 quality manual, often take up to 2 years or longer.

ISO 9000 in brief

ISO 9000 is the International Organization for Standardization. It is made up of national standards institutes from countries large and small, industrialized and developing, in all regions of the world.
ISO 9000 develops voluntary technical standards which add value to all types of business operations. They contribute to making the development, manufacturing and supply of products and services more efficient, safer and cleaner. They make trade between countries easier and fairer. ISO standards also serve to safeguard consumers and users in general of products and services – and to make their lives simpler.
ISO 9000 develops only those standards which are required by the market. This work is carried out by experts on loan from the industrial, technical and business sectors which have asked for the standards, and which subsequently put them to use.
These experts may be joined by others with relevant knowledge, such as representatives of government agencies and testing laboratories. Published under the designation of International Standards, ISO standards represent an international consensus on the “state of the art” in the technology concerned.http://www.iso9001store.comhttp://www.iso-consults.com

How to implement ISO 9000

How to implement ISO 9000 Thru ISO 9000 Template & SoftwareThere are few ways of implementing the ISO 9000 in a particular organization. One of the easy way is hiring a ISO 9000 consultant in a turn key project basis. This definitely will incur cost. However, some of the organization will appoiint an employee to start up the ISO 9000, by learning thru seminar, preparing the ISO 9000 Quality Manual, Procedure & Form by using some of the ISO 9000 Template sell at internet. Some of the provider such as http://www.iso-consults.com & http://www.quality-template.com are providing such services.
Normally, the template provide will provides the ISO 9000 Quality Manual Template, Standand Procedure & also sample form for the ISO 9000 implementation. One of the provider like http://www.e-wia.com give a very complete set of the ISO 9000 Templates, which will help an organization to implement the ISO 9000 easily.
There are also some ISO 9000 Softwares which helps the organization in the ISO 9000 implementation. Some of the ISO 9000 Software are listed below:
a. Document Control Software - Software which Helps the organization to keep track & control of the ISO 9000 Documents.
b. Audit Control Software - Software which helps the organization to keep track of internal & external audit events.
c. Training Record Management Software – Software which helps the organization to keep track of Training records in a system.
d. Calibration Software – Software to maintain the calibration records for tool & machinery.