ISO 9001 Standards – Quality Policy and Objectives

ISO 9001 Standards – Quality Policy and Objectives

A ISO 9001 Standards quality policy and its corresponding quality objectives are established to direct the organization towards two specific goals of a quality management system:

-Provision of products – goods and services – that meet customer and applicable legal requirements, and

- Enhancement of customer satisfaction

The quality policy and the objectives are also a means of controlling the quality management system’s processes. Simply, if you want to control a process, assign an objective to it (or more) and make sure it is aligned to the quality policy, then monitor and measure the process’ performance against the assigned objective. You need to provide adequate resources to the process to ensure that it is capable of achieving the objective. You continually improve the whole process by upgrading the objective, make corrective and preventive actions or introduce innovation to it. Corrective action addresses an undesirable situation’s cause in order to prevent its recurrence. Preventive action, by contrast, addresses the probable cause of a potentially undesirable situation. This is what the quality policy and objectives are supposed to do. They provide focus, direction and control.

The quality objectives need to be consistent with the quality policy and the commitment to continual improvement, and their achievement needs to be measurable. The achievement of quality objectives can have a positive impact on product quality, operational effectiveness and financial performance and thus on the satisfaction and confidence of interested parties. When an organization has established a quality policy and a set of operational objectives, this means the only thing left to do is to design or plan the necessary processes or tasks that can realize those objectives. Therefore, the processes determine if the objectives will be met in full, partially or not at all. This is where the ISO 9001 standard play a critical role in specifying the required processes and the operating criteria. This is what ISO 9001 is all about. It even specifies criteria for the policy and the objectives.

A quality policy needs to satisfy the following requirements:

• It is appropriate to the purpose of the organization,
• It includes a commitment to comply with requirements and continually improve the effectiveness of the quality management system,
• It provides a framework for establishing and reviewing quality objectives,
• It is communicated and understood within the organization, and
• It is reviewed for continuing suitability

Quality objectives must be established in order to enable the organization to comply with requirements and continually improve the effectiveness of the quality management system. Quality objectives must achieve four things:

• Enable the organization to meet customer requirements
• Enable the organization to enhance customer satisfaction
• Enable the organization to comply with all legal requirements applicable to the product
• Continually contribute to the effectiveness of the quality management system

Therefore, when you are in the meeting room with your management brainstorming on the appropriate objectives, have these four points in mind.

ISO 9001:2000 requires that management periodically review changes to both the policy and objectives. An organization’s objectives must be measurable and its processes designed to meet those objectives. An organization’s overall business goals, quality objectives and quality policy are all interrelated and must work together to achieve business improvement. To do this, it’s necessary to understand which processes are key to achieving business goals and align those processes with the quality objectives. It means aligning business goals, quality objectives and process measures to create real improvement. And it means using process mapping. Process mapping involves more than just flow charting. Among other things, it can manage and improve processes by illustrating process measures as well as process flows and interactions. One process-mapping method begins by involving the people who work in the process. Another entails mapping the process as is, taking action to improve it and then preparing a final map of the improved process.

Process owners are directly responsible for the attainment of the objectives. They must be given adequate resources, including competent human resources. They need to review the objectives periodically to ensure the key performance indicators are heading towards their objectives on schedule. If not, they need to initiate corrective actions and if the risks of non-achievement are visible, take preventive actions to control them and steer the KPI’s back on course.

Examples of quality objectives:

• Production rejects <>
• Machine breakdown <>
• Returned products = 0/mth
• Purchasing >95% on-time delivery
• Inventory damage = 0/mth

Conclusion: ISO 9001 requires that the quality management system achieves its objectives in order to realize the quality policy.

ISO 9001 Standards – Quality Policy and Objectives

ISO 9001 Standards – Quality Policy and Objectives

A ISO 9001 Standards quality policy and its corresponding quality objectives are established to direct the organization towards two specific goals of a quality management system:

-Provision of products – goods and services – that meet customer and applicable legal requirements, and

- Enhancement of customer satisfaction

The quality policy and the objectives are also a means of controlling the quality management system’s processes. Simply, if you want to control a process, assign an objective to it (or more) and make sure it is aligned to the quality policy, then monitor and measure the process’ performance against the assigned objective. You need to provide adequate resources to the process to ensure that it is capable of achieving the objective. You continually improve the whole process by upgrading the objective, make corrective and preventive actions or introduce innovation to it. Corrective action addresses an undesirable situation’s cause in order to prevent its recurrence. Preventive action, by contrast, addresses the probable cause of a potentially undesirable situation. This is what the quality policy and objectives are supposed to do. They provide focus, direction and control.

The quality objectives need to be consistent with the quality policy and the commitment to continual improvement, and their achievement needs to be measurable. The achievement of quality objectives can have a positive impact on product quality, operational effectiveness and financial performance and thus on the satisfaction and confidence of interested parties. When an organization has established a quality policy and a set of operational objectives, this means the only thing left to do is to design or plan the necessary processes or tasks that can realize those objectives. Therefore, the processes determine if the objectives will be met in full, partially or not at all. This is where the ISO 9001 standard play a critical role in specifying the required processes and the operating criteria. This is what ISO 9001 is all about. It even specifies criteria for the policy and the objectives.

A quality policy needs to satisfy the following requirements:

• It is appropriate to the purpose of the organization,
• It includes a commitment to comply with requirements and continually improve the effectiveness of the quality management system,
• It provides a framework for establishing and reviewing quality objectives,
• It is communicated and understood within the organization, and
• It is reviewed for continuing suitability

Quality objectives must be established in order to enable the organization to comply with requirements and continually improve the effectiveness of the quality management system. Quality objectives must achieve four things:

• Enable the organization to meet customer requirements
• Enable the organization to enhance customer satisfaction
• Enable the organization to comply with all legal requirements applicable to the product
• Continually contribute to the effectiveness of the quality management system

Therefore, when you are in the meeting room with your management brainstorming on the appropriate objectives, have these four points in mind.

ISO 9001:2000 requires that management periodically review changes to both the policy and objectives. An organization’s objectives must be measurable and its processes designed to meet those objectives. An organization’s overall business goals, quality objectives and quality policy are all interrelated and must work together to achieve business improvement. To do this, it’s necessary to understand which processes are key to achieving business goals and align those processes with the quality objectives. It means aligning business goals, quality objectives and process measures to create real improvement. And it means using process mapping. Process mapping involves more than just flow charting. Among other things, it can manage and improve processes by illustrating process measures as well as process flows and interactions. One process-mapping method begins by involving the people who work in the process. Another entails mapping the process as is, taking action to improve it and then preparing a final map of the improved process.

Process owners are directly responsible for the attainment of the objectives. They must be given adequate resources, including competent human resources. They need to review the objectives periodically to ensure the key performance indicators are heading towards their objectives on schedule. If not, they need to initiate corrective actions and if the risks of non-achievement are visible, take preventive actions to control them and steer the KPI’s back on course.

Examples of quality objectives:

• Production rejects <>
• Machine breakdown <>
• Returned products = 0/mth
• Purchasing >95% on-time delivery
• Inventory damage = 0/mth

Conclusion: ISO 9001 requires that the quality management system achieves its objectives in order to realize the quality policy.

What Is ISO 9000 Registration?

What Is ISO 9000 Registration?

Registration is documented and objective evidence that an organization’s quality system meets the requirements of ISO 9000. Certification is a term often used interchangeably with registration. In the context of ISO 9000, they mean the same thing. Registration is the technically correct term for verification of compliance to standards of quality systems. Certification usually applies to verification of the quality of products (as opposed to quality systems).

Registration is carried out by independent companies called registrars. These companies are:

_ Wholly independent.

_ Accredited by a recognized international accreditation body.

_ Selected, and paid, by you.

Registration can cover:

_ The sole location of a single-location organization.

_ Multiple locations of a multilocation organization.

_ Only certain parts of a multilocation organization (under certain conditions).

_ Separate locations under separate certificates. (This is a more costly approach.)

The registration body audits your quality system against the requirements of ISO 9000. It reports its findings in writing. These findings may (and usually do) include noncompliances. Major noncompliances must be closed out prior to official registration.

When this has been done, the registration body:

Lists the organization’s name in its book of registered companies— in effect, registers the organization in its book.

Issues a certificate to the registered organization. This registration includes:

— Identity of the organization.

— Location(s) covered by the registration.

— A list of products/services supplied by the registered locations.

— Revision date of the Standard.

— Registration effective dates.

— Name and location of registrar.

Most registrars limit registrations to three years. After that, you must renew your registration by undergoing another complete systems audit. Some registrars do not use the renewal approach. They simply keep checking the system via surveillance audits. Whichever the scheme, the organization, to keep registration, must undergo a surveillance assessment every so often. Six months is the typical interval. Some registrars offer annual surveillance schemes (not recommended except for firms with exceptionally well-implemented quality management systems). Surveillance assessments are scheduled events (there is no such thing as a “surprise” surveillance audit). Only part of the quality system is checked at each surveillance. Usually, the registrar does not disclose what part will be assessed until the day of the assessment, although some registrars will tell you everything up front.

The entire quality system is usually checked via surveillance audits over the course of three years. There is no way to “fail” a surveillance assessment, just as there is no way to “fail” a registration audit except by refusing to implement corrective action required by the registrar. Normally, registrars allow adequate time, but corrective actions must be done in a timely and agreed upon manner to keep registration.

One final note: As mentioned, each registrar publishes a list of the firms it has registered to ISO 9000. A comprehensive list of ISO 9000 registered firms is available from Irwin Professional Publishing (703-591-9008).

How To Keep ISO 9001 System?

How To Keep ISO 9001 System?

The dreaded “program-of-the-month” syndrome: Here today, with much sound and fury—and, after a slow, embarrassing fade-away—gone tomorrow.

Your ISO 9001 system won’t fade away as long as top management remains committed to it. Top management will remain committed to it as long as they see that it is returning some sort of benefit. That benefit may take one of two general forms:

1. Current business stays as a result of the ISO 9001 system.

2. New business comes as a result of the ISO 9001 system.

Net result: Organization achieves incremental cost savings as a result of the ISO 9001 system. Since most companies get into ISO 9001 due to customer pressure, the first benefit is the most operative one. The second benefit is speculative. The net result, surprisingly, is genuine—ISO 9001 registrants, with virtually no exception, realize proven cost savings—but, like mating elephants, it is accompanied by much roaring and screaming, and takes two years to see the results.

Top management will stay committed to the system if only to maintain existing business and, hopefully, obtain new business. This requires that the organization remain registered. For the organization to remain registered, it must undergo and pass surveillance assessments, usually every six months. This is probably the most potent of the four reinforcement mechanisms of ISO 9001—the attributes that keep the system from fading away as another program of the month.

The second reinforcement mechanism is the Management Review process required by the Standard. Management reviews require that senior management review the ISO 9001 system from top to bottom—its implementation, its suitability, its effectiveness, its results. Management must do this on a scheduled basis. Records must be kept to prove that it is done. The reviews have the effect of forcing management to pay attention to the system. The reviews are also an educational process for management. Over time, they see how useful the ISO 9001 system can be as a management and communications tool.

The third reinforcement mechanism is the internal audit process required by the Standard. Trained, independent employees audit the entire quality system on a scheduled basis and record the results. Corrective actions must be carried out and verified against deficiencies found during these audits. Internal auditing is not only an outstanding implementation tool. It also keeps the entire organization tuned in to the system and improving it on an ongoing basis.

The fourth reinforcement mechanism—and arguably the most important one—is the measurement and analysis processes required by the Standard. If you do a good job of establishing meaningful process and quality measures—and then gather, analyze, and react to the data on a disciplined basis—you will see how well the system is working for you. Word to the wise: Establish the measures early in the implementation, so you have a set of baseline measures to compare with subsequent results.

What Does ISO 9001 Offer?

What Does ISO 9001 Offer?

For one thing, it offers you continued business with customers who may be requiring you to register. That is a pretty strong benefit right there. These customers may never question your quality, but these customers depend heavily on their main suppliers. They know they can improve their quality and through-put, if you improve yours. ISO 9001 mandates a continuous improvement system. You can wriggle and fudge, but if you implement that system and work it conscientiously, you cannot help but improve. Continuous improvement is not just a buzz term. It is an imperative.

Has your industry changed? Has your organization changed? A well-implemented ISO 9001 helps your organization adapt to change. It brings independence of individuals and consistency of practices—two features that tend to resist declines in performance.

What else does ISO 9001 bring you? When well implemented, an ISO 9001 quality system improves organization performance. That is, after all, the whole point. In cases where it does not, the fault tends not to be in the ISO 9001 process (its inherent deficiencies notwithstanding). When an ISO 9001 system does not provide substantial benefits and improvement in performance, it is usually because management has consciously chosen to cut corners, blow smoke, stay uninvolved, and starve the system of all but the most essential resources. “We’ll do this stupid thing, but we’re sure not going to change the way we operate.”

ISO 9001 registration brings you one more thing that your organization may not have today: International credibility. ISO 9001 is deployed and practiced in nearly 100 countries around the world. In today’s ever-growing international economic climate, this is not a bad emblem to have, however narrow the scope of your market today.

ISO 9000 Softwares

ISO 9000 Softwares

1. ISO 9000 Software – ISO 9000 Document Control Software

The concept of document control is integral to ISO 9000. Specifically ISO 9001: 2000, requires the establishment of a document control system that stores and manages documents relating to implementing, maintaining, and continually improving a quality management system. Within the context of ISO 9000, a quality system must be documented and quality records must be maintained. Document control helps ensure effective operation and facilitates better decision-making, by providing a vehicle for employees, customers, and partners to access controlled documentation from any location at anytime.

For high-tech companies that adhere to ISO 14000 environmental management standards, document control procedures are equally necessary to help them continuously improve their environmental management system.

The ISO 9000 Document Control Software is developed & designed to control the ISO 9000 Quality Manual, Operating Procedure, Forms & Documents digitally. System will track the all ISO 9000 Documents by ISO Document No. through out the system.

The ISO 9000 Document Control Software Provides:-

Tracking of Documents- Provides secure tracking of all your ISO 9000 Quality Manual, Operating Procedure & Forms & Documents in any format either in Microsoft Word, Excel, PDF or etc.
Efficiency Document Control- It’s uniquely qualified to be the focal point of a quality management system because it can handle all types of documents regardless of the software used to create them. It provides a secure and centralized document control repository that makes search and retrieval easy during inspections and audits.
Revision Control- Tracking of Document revisions, approval & Release Date. Manually Tracking down any revision on the ISO 9000 document activity is difficult . The ISO 9000 Document Control Software will help to keep track the numbers of revision have been carried out, and also maintain the various revision copies of the documents.
Multiple File Location – System will be able to keep track the directories & folder where the original location is saved.
Centralize Of Document Control – Do not worry about the various department is getting the correct edition of the documents, because all documents have been managed by a centralize software. Document reviews are conveniently scheduled and documented.
Security:System provide User Right Control module which enable System Administrator to define the access right to authorized users and activity allowed.
2. ISO 9000 Software – ISO 9000 Audit Control Software

The ISO 9000 Audit Control Softwarewere designed to handle all aspects of an internal or external audit programme, from planning audits to the follow-up of corrective actions against deficiencies found.

The Control Software increases the accountability and efficiency of your internal/external audits by developing core processes with clearly defined audit plans, step-by-step procedures, and standardized auditor roles and responsibilities. It will help to put you to the right path toward developing a well-organized ISO9001:2000 internal /external audit system.

The ISO 9000 Audit Control Software Provides:-

Audit Schedule – maintains the audit schedule, checklist preparation and all audit info.
Track Non-Conformance – System will help to track all non-conformances found during the audit, including actions & verification.
Corrective Action Report (CAR) – Update of the corrective action.
Security: System provide User Right Control module which enable System Administrator to define the access right to authorized users and activity allowed.

ISO 9000 Standards – Design and development

ISO 9000 Standards – Design and development

Planning the design and development of a product means determining the design objectives and the design strategy, the design stages, timescales, costs, resources and responsibilities needed to accomplish
them. Sometimes the activity of design itself is considered to be a planning activity but what is being planned is not the design but the product.

The purpose of planning is to determine the provisions needed to achieve an objective. In most cases, these objectives include not only a requirement for a new or modified product but also requirements governing the costs and product introduction timescales (Quality, Cost and Delivery or QCD). Remove these constraints and planning becomes less important but there are few situations when cost and time is not a constraint. It is therefore necessary to work out in advance whether the objective can be achieved within the budget and timescale. One problem with design is that it is often a journey into the unknown and the cost and time it will take cannot always be predicted. It may
in fact result in disaster and either a complete reassessment of the design objective or the technology of the design solution. This has been proven time and again with major international projects such as Concorde, the Channel Tunnel and the International Space Station. Without a best guess these projects would not get off (or under!) the ground and so planning is vital firstly to get the funding and secondly to define the known and unknown so that risks can be assessed and quantified.

Design and development plans need to identify the activities to be performed, by whom they will be perform and when they should commence and be complete. One good technique is to use a network chart (often called a PERT chart), which links all the activities together. Alternatively a bar chart may be adequate. There does need to be some narrative in addition as charts in isolation rarely conveys everything required.

Design and development is not complete until the design has been proven as meeting the design requirements, so in drawing up a design and development plan you will need to cover the planning of design verification and validation activities. The plans should identify as a minimum:
- The design requirements
- The design and development programme showing activities against time
- The work packages and names of those who will execute them (Work
packages are the parcels of work that are to be handed out either internally or to suppliers)
- The work breakdown structure showing the relationship between all the parcels of work
- The reviews to be held for authorizing work to proceed from stage to
stage
- The resources in terms of finance, manpower and facilities
- The risks to success and the plans to minimize them
- The controls that will be exercised to keep the design on course
Planning for all phases at once can be difficult as information for subsequent phases will not be available until earlier phases have been completed. So, your design and development plans may consist of separate documents, one for each phase and each containing some detail of the plans you have made for subsequent phases.
Your design and development plans may also need to be subdivided into
plans for special aspects of the design such as reliability plans, safety plans, electromagnetic compatibility plans, configuration management plans. With simple designs there may be only one person carrying out the design activities. As the design and development plan needs to identify all design and development activities, even in this situation you will need to identify who carries out the design, who will review the design and who will verify the design. The same person may perform both the design and the design verification activities, however, it is good practice to allocate design verification to another person or organization because it will reveal problems overlooked by the designer. On larger design projects you may need to employ staff of various disciplines such as mechanical engineers, electronic engineers, reliability engineers etc. The responsibilities of all these people or groups need to be identified and a useful way of parcelling up the work is to use work packages that list all the activities to be performed by a particular group. If you subcontract any of the design activities, the supplier’s plans need to be integrated with your plans and your plan should identify which activities are the supplier’s responsibility. While purchasing is dealt with in clause 7.4 of the standard, the requirements also apply to design activities.

ISO 14001 Standards Audit

ISO 14001:2004 emphasizes the continuous improvement of an environmental management system (EMS). The standard specifies requirements for an environmental management system to enable an organization to develop and implement a policy and objectives which take into account legal requirements and information about significant environmental aspects. The certification process ensures the conformance of your EMS against the international standard, as well as any organizational specific requirements that have been identified.

The ISO 14001 Standards audit consist of 2 stage registration audit process followed by surveillanceaudits, and ultimately a recertification audit. ISO 14001 Audits include on-site assessments of documents, data, records, activity and personnel. Process audit trails are followed by interviews of personnel responsible for the tasks and reviewing associated activity and records of occurrence. The audit trail will follow interactions between processes as well as the details of the process itself. Following are the stages of the audit process.

Pre-assessmentRegistration Audit – Stage 2Audit Findings• A review of action taken on nonconformities identified during the previous audit• A review of the continued effectiveness of the management system in its entiretyThe continued applicability to the scope of registration

The pre-assessment audit is an optional activity, outside of the registration process, it is highly encourages that any organization to undertake to evaluate the readiness to undergo the two stage registration process. That would optimally occur prior to the stage 1 and 2 audits.

Unlike the Stage 1 and Stage 2 activities you have full discretion as to which areas the preassessment should focus on and for the length of the pre-assessment. This activity allows your organization to become familiar with the audit process and helps prepare your employees for the registration assessment.

The auditor conducting the pre-assessment will typically return to the organization for the assessment. Similar to a ‘true’ audit, the end result of the pre-assessment will be a documented report identifying findings observed during the audit and a closing meeting to discuss the issues.

The pre-assessment activity allows you to correct any issues prior to beginning the registration process.

Assessment

New requirements for certification bodies have changed the registration process. Registration is now conducted in two distinct visits- Stage One and Stage Two- each of which has defined requirements that are outlined below.

Registration Audit – Stage 1

The stage 1 audit, conducted at your facility, is primarily performed for planning and determining the readiness of an organization to undergo a stage 2 registration audit. It also facilitates communicating any needs and expectations to the organization. Activities performed at a stage 1 audit include:

• Conducting a documentation review – This review determines if the organization’s EMS documentation adequately covers all the requirements of the ISO standard

• A review of the aspects and impacts and their significance and an evaluation of the facility(s) site specific conditions

• A review of your organizations non-conformance, preventive and corrective action system • An overview of applicable regulations

• Interviewing your organization’s personnel to assess their general readiness to undertake a stage 2 audit

• Confirming the applicability of the scope of the organization’s EMS

• Obtaining evidence that internal audits and management reviews are being planned and performed

• Providing focus for the planning of the stage 2 audit

If during the stage 1 audit any nonconformities are identified, the auditor will request a corrective action response (see Corrective Action Response).

The objective of the Stage 2 on-site audit is to assess your organizations’ adherence to your own policies, objectives, and procedures and to ascertain conformance to the requirements of the ISO 14001 standard. To accomplish this, the audit will address the implementation of all the elements of the standard. Review of documentation and records to support the implementation is an expected part of the assessment process. If non-conformances or opportunities for improvement are identified they will be documented in a report which will be presented to the organization during the closing meeting. The report will include the auditor’s recommendation regarding registration.

Any deviation from procedures or requirements of the standard will be identified as an audit finding, which will be documented in the audit report. The auditor will draw your attention to non-conformities as they arise so there will be no “surprises” at the closing meeting. Findings are categorized into three categories defined as follows:

• A major non-conformity relates to the absence or total breakdown of a required process or a number of minor non-conformities listed against similar areas. A major non-conformity at the Registration Audit – Stage 2 would defer recommendation for registration until that major has been closed.

• A minor non-conformity is an observed lapse in your systems ability to meet the requirements of the standard or your internal systems, while the overall process remains in tact.

• An observation or opportunity for improvement relates to a matter about which the Auditor is concerned but which cannot be clearly stated as a non-conformity. Observations also indicate trends which may result in a future non-conformity.

Corrective Action Response

ISO 14001 Standards requires corrective action responses from all Registration Audits. Once certification is achieved, dependant upon the extent and nature of the findings, your organization may be required to submit a corrective action plan, detailing your intent to correct the non conformity.

The auditor may also recommend that your organization submit objective evidence to support the to verify closure may be required.

It is recommended that all non-conformities are addressed within your internal corrective action system. Typically, opportunities for improvement would be addressed as preventive actions by your organization.

closure of the finding. In certain circumstances such as a major non conformity an on site activity

Surveillance Audits

Company shall conduct Surveillance Audits on an annual or semi-annual basis. The purpose of the Surveillance Audit is to ensure that the EMS continues to conform to both the organizations’ and the ISO 14001 requirements. Certain processes will be reviewed at each surveillance including:

• Internal audits and management review

• Customer and interested parties communications

• Effectiveness of the management system in achieving defined objectives

• The progress of planned continual improvement activities

• Continuing operational control

• A review of any changes made by the organization which may have impact on the registration

• Use of accreditation and certification body logos provided to the organization upon registration

• objectives, targets and programs

• evaluation of compliance

Re-assessment Audits

The accreditation body requires that a recertification audit be carried out every three years. The purpose of the recertification audit is to confirm the continued conformity and effectiveness of the management system as a whole, and its continued relevance and applicability for the scope of activity.

Recertification audits review the performance of the EMS over the registration period, and include a review of previous surveillance audit records. The recertification audit includes the following:

• The continued relevancy of the organization’s policy and objectives

• The continued effective interaction between the processes of the management system

• A review of internal audits, management reviews, document changes during this certification period