ISO Certification



             


Sunday, December 30, 2007

The Orphan Child Called ISO

ISO wasn't easy to change on early digital cameras.

First, here's a quick definition: ISO stands for the International Standards Organization. What it really indicates is a digital sensor's sensitivity to light.

A low ISO is less sensitive and a high ISO is very sensitive.

Further translated: a high ISO like 3200 means that the sensor can capture a clear photo, even in low-light conditions. A low ISO like 100 requires a lot of ambient light for clear shots.

So why is this setting so often ignored? It's harder to sell the benefits of ISO (which is pretty confusing to anyone who is not a camera junkie) versus something simpler like speed (2 photos per second or 5 photos per second...which one's faster?).

Well, I'm here today to try to illustrate the benefits of ISO. It is a prominent feature on all of the latest digital cameras, and is something that you should be aware of when you're trying to take photos in available light.

Benefit #1 - Clear hand-held photos

Here's the problem: you're taking photos indoors on an overcast day. The only way that you can get a proper exposure is to slow down the shutter speed to 1/30 of a second.

The camera's shutter needs to stay open 1/30 of a second to let in plenty of light. Unfortunately, the longer the shutter stays open, the more likely your photo will turn out blurry. The blur is caused by camera shake when you hold the camera in your hands.

While blur is sometimes desirable to illustrate motion, most ot the time it's not the effect you want.

You really want to get a clear photograph, but there isn't enough ambient light. You think you're stuck with two options: use a flash, or attach the camera to a tripod so it's stable.

But here comes ISO to offer up a third alternative: set your ISO to 800 or 1600.

This boosts the light sensitivity of the camera's sensor, so you're not forced to keep the shutter open so long. With a shutter speed of 1/125 or 1/250 you can now hold the camera in your hands and get perfectly clear available-light photographs.

Benefit #2 - Atmosphere

As you increase the ISO on your digital camera, you also increase the noise in the photograph. "Noise" is the appearance of dots and specks, typically in shadow areas of the image.

Digital camera manufacturers have gone to great lengths to minimize noise, even at high ISO settings. This is due to benefit #1 above.

But sometimes you might want that noise in your photograph. Let's say you're taking shots on a foggy day, and the mood of the scene could really use some noise, to give the photo an old-time look.

Boost the ISO as high as it will go (usually 3200) and that noise will appear in your photo. In black and white, it really adds to the atmosphere and the quality of the image.

Benefit #3 - Fast shutter speeds

One of the best uses of a really fast shutter speed is to freeze motion.

If you take a lot of photos of sporting events, you need to be using shutter speeds around 1/1000 of a second or faster. There are not many days where there is enough ambient light to use these super-fast shutter speeds.

The only way that you will be able to catch all the action is if you increase your ISO. If you don't want noise in the photo, just increase the ISO enough to get the shutter speed you want. If ISO 400 will get the job done, then use that.

Summary

I hope that this brief introduction has opened your eyes to the usefulness of ISO settings on digital cameras.

I think that the ability to change ISO on the fly is one of the biggest advantages that digital cameras have over film.

With film you'd have to shoot an entire roll at one ISO setting before you could switch to another (or you had to have 2 cameras with different ISO films).

With digital you can change the ISO anytime, anywhere. It gives you complete flexibility and control over the photos that you take.

Changing the ISO setting does take some getting used to, and it's still not easy to do on some digital camera models.

I am sure though that once you start using it, you'll find yourself saying "Please, sir, may I have some more?"

Chris Roberts purchased his first digital SLR camera 3 years ago, and hasn't looked back. He continues to learn and write about new and emerging digital SLRs to this day on his web sites, the Digital SLR Guide and the Digital SLR Guide Weblog

Labels: , , , , , ,

Thursday, December 27, 2007

What is ISO 9000?

ISO 9000 refers to a group of international standards developed by professionals from around the world. These standards allow companies to create in-house quality standard systems and to monitor their existing quality systems. The standards were developed and are maintained by the International Organization for Standardization and are implemented in over 90 countries worldwide. The standards set within ISO 9000 are considered to be generic because they can apply to any business, product or service regardless of the industry.

The International Organization for Standardization first developed standards for quality control in 1987 and has updated it twice since then. According to the organization, the standards were developed to enhance the growing global marketplace. With a set of standards that has met widespread acceptance, and people of all nations can recognize and understand their value.

ISO 9000 has quickly become the leading set of standards for companies throughout the globe. Quality management saves time, money and ensures customers are satisfied. Because many managers ask the question, “What is ISO 9000?” many resources for information have become available.

“9000” refers to five standards that are not specific to any particular company or industry. These standards do not reflect the quality of goods or service, but rather refer to the manner in which a company ensures its quality level. Registration and certification as compliant with ISO 9000 means that the company adheres to the rigorous set of standards as determined by an independent auditor. Employee relations, record keeping, product testing, and response to issues are among a few of the areas that are covered in ISO certification.

Whether large or small, ISO 9000 standards have been widely accepted in nearly every developed country. Having a set of quality standards has shaped the new millennium’s global marketplace and provides for enhanced customer service and employee relations. A company that has undergone ISO 9000 certification basically guarantees that they are true to their word. This gives customers and clients a sense of satisfaction and peace of mind.

ISO 9000 Info provides detailed information about ISO 9000 standards, software, consulting, help, and solutions. ISO 9000 Info is affiliated with Business Plans by Growthink.

Labels: , , ,

Wednesday, December 26, 2007

ISO 4217 in Forex Trading

ISO 4217 is an international standard describing three letter codes to define the names of currencies established by the International Organization for Standardization (ISO).

The first two letters of the code are the two letters of ISO 3166-1 alpha-2 country codes (which are similar to those used for national top-level domains on the internet) and the third is usually the initial of the currency itself. So Japan's currency code becomes JPY—JP for Japan and Y for yen. This eliminates the problem caused by the names dollar, franc and pound being used in dozens of different countries, all with wildly differing values.

The standard also defines the relationship between the major currency unit and any minor currency unit. Often, the minor currency unit has a value that is 1/100 of the major unit, but 1/10 or 1/1000 are also common. Some currencies do not have any minor currency unit at all. Mauritania does not use a decimal division of units, setting 1 ouguiya (UM) = 5 khoums, and Madagascar has 1 ariary = 5 iraimbilanja.

ISO 4217 includes codes for not only currencies, but also codes for precious metals (gold, silver, palladium and platinum; normally measured in troy ounces) and certain other entities used in international finance, e.g. Special Drawing Rights. There are also special codes allocated for testing purposes (XTS), and to indicate no currency transactions (XXX). These codes all begin with the letter "X". ISO 3166 never assigns country codes beginning with "X", so ISO 4217 can use "X" codes for non-country-specific currencies without risk of clashing with future country codes.

Supranational currencies, such as the East Caribbean dollar, the CFP franc, the CFA franc BEAC and the CFA franc BCEAO are normally also represented by codes beginning with an "X". However, the Euro is represented by the code EUR; although EU is not an ISO 3166-1 country code, it was used anyway, and in order to do so EU was added to the ISO 3166-1 reserved codes list to represent the European Union. The predecessor to the Euro, the European Currency Unit, had the code XEU.

More detail about ISO 4217 can be found on wikipedia.org

The author blog: Marketiva Forex

Labels: , , ,

Friday, December 21, 2007

ISO 9000 Certification and Consulting

The process of becoming ISO 9000 certified can be intimidating. The manuals regarding standards and certification are written in such a way that most of us can barely comprehend what they are saying. Fortunately, several specialists are available to assist in the process. These specialists are experts in providing ISO 9000 consulting.

ISO 9000 consultants can help you to understand and effectively manage new and existing standards. By enlisting the help of a qualified professional, you can be assured that you are correctly implementing the processes. Consultants can also help you to utilize your ISO 9000 software program to document and implement your new program.

Even if you have been ISO 9000 certified for many years, a consultant can help keep you abreast the new issues and standards. An ISO 9000 consultant can help your company to achieve maximum performance and benefits from your quality control standards.

Many ISO 9000 consulting firms offer individual and comprehensive packages. The comprehensive packages include training for the implementation of ISO 9000 standards, training for internal auditors, training for documentation and training for lead auditors. When implementing these standards it is important to know that your management team is on board with the changes and fully understand the importance and implications.

Other ISO 9000 consultants offer training for individual areas. Your company can choose between on-site training or attending an overview class. For those considering taking the ISO 9000 plunge, an overview class on standards, regulations and certifications is an excellent place to start. You can gain a vast amount of knowledge by attending the courses and get a good idea of what the process entails.

When choosing a consulting firm you should begin by identifying your company’s particular needs. Some firms specialize in creating individual training programs specific to your company. They can get an idea of what you need and develop a comprehensive plan to meet those goals. Other firms only offer generic or pre-packaged training and advice. For some industries, pre-packaged training programs may be suitable and for others it may not. Perhaps a company should begin by asking for references from the consultants and find out exactly what they can do to help your company in the ISO 9000 process.

ISO 9000 Info provides detailed information about ISO 9000 standards, software, consulting, help, and solutions. ISO 9000 Info is affiliated with Business Plans by Growthink.

Labels: , ,

Wednesday, December 19, 2007

The ISO Network Management Model

The rumor on how Disney uses Network Management. When the temperature rises on the park grounds at Disneyland all the prices of the beverage vending machines automatically goes up by 10% to fully capitalize on consumer demand. I believe that is an old Information Technology rumor to explain how network management works... at least I hope it is a rumor.

Why Network Management is important.
More and more organizations depend on their networks. Business’ the depend heavily on the status of their networks must have network management tools as they grow. If a network dependent business such as ebay, Google, Yahoo and many others go down for even a few minutes, they can loose literally hundreds of thousands of dollars in sales and even a small piece of their customer’s confidence which could in turn affect the value of their stock. When every second of network time counts the system must be monitored continuously. The most cost effective way to do this is to use an automated network management tool.

Network Management Standards
The International Organization for Standards (ISO) addresses the five major functional area of the Network Management Model as performance management, accounting management, configuration management, fault management and security management.

Performance Management
Performance management is monitoring, assessing, and adjusting the available bandwidth and network resource usage in order make a network run more efficiently. Performance management is a very important part of the network management model particularly to the business and/or organization that wants to streamline their network's performance. SolarWinds is a great tool for performance management.

Accounting Management
Accounting management monitors and assesses the usage of data and/or resources for the purpose of billing. This aspect of the network management is by Internet Service Providers to bill customers for the resources they use.

Configuration Management
The configuration side of network management is for tracking the hardware and software versions on the network to identify their effects on the network's operation. An example of this is Microsoft’s System Management Server (SMS) which has the capability to monitor, manage and track every piece of software and hardware on a given network.

Fault Management
Fault Management is what most people think of when they think of network management. The purpose of this area of network management is to detect, log and alert the system administrators of problems that might effect the systems operations.

Security Management
Security Management deals with controlling access to resources and even alerting the proper authorities when certain resources are accessed. In the same way that a network manager can be paged or emailed when a resource goes down, network management systems can be used to send messages when certain files, servers or routers is accesses. Intrusion detection systems such as Symantec’s Intruder Alert have this security management capability.

There are many products that support some or even all of these areas of network management. What most network management systems have in common is their use of protocols such as Simple Network Management Protocols (SNMP), SNMPv3, and Common Management Information Protocol (CMIP). There are a variety of Network Management tools ranging from Intuit's Network Management Software to IBM's Tivoli, Fidelia's Helix to AdventNet. Maybe your network management solution does not include a system that increases vending machine prices as the heat rises, but you can definitely find what you need among these and other excellent tools on the market.

References:

Cisco. Network Management Basics. Cisco.com. Feb 2002
http://www.cisco.com/

RFC 1157. Simple Network Management Protocol.
http://www.faqs.org/rfcs/rfc1157.html

Wikipedia. Network Management. Wikipedia.org.
http://en.wikipedia.org/wiki/Network_management

ITPRC. Network Management. Itprc.com
http://www.itprc.com/nms.htm

Robert Elam is a System Security Engineer who works for the U.S. government.

You can find a more detailed version of this and other articles at his blog, http://elamb.org.

Labels: , , , , ,

Tuesday, December 18, 2007

ISO 9001, What Next?

The overriding goal of ISO-14000. (History 1995)

As ISO-9000 becomes a way of life for the global business community, ISO-14000 is almost ready to debut with its own set of standards for voluntary environmental compliance.

Much has been heard recently about the antiregulation sentiment sweeping across the country. Lawmakers in Washington have responded with talk of "regulatory reform" and programs aimed at "re-inventing government."

One of the targets of this regulatory backlash has been the ever-burgeoning flood of environmental laws and regulations continuing to impose burdens on corporate America. A common thread running throughout this rhetoric has been a perception that government is too big and that corporate self-policing and self-management can achieve far greater benefits at far less cost.

It is unlikely that meaningful relief from environmental regulations will come any time soon. However, a major step in the direction of voluntary corporate initiatives in this area is on the horizon.

Getting Ready for 14000

The Geneva-based International Standards Organization, with the assistance of representatives from over 40 countries, is in the final stages of developing ISO-14000, a set of voluntary international environmental quality standards designed to promote sound corporate management of environmental compliance matters.

When fully adopted in early 1996, the standards will allow companies to obtain ISO-14000 certification of their operations in recognition of the development of these comprehensive environmental quality standards.

ISO-14000 is the second major undertaking of the International Standards Organization in developing international quality management systems for business enterprises. In the mid-1980s the Organization adopted its ISO-9000 series of standards for corporate quality management. The ISO-9000 program provided a formal mechanism for certifying that a company had developed and integrated certain quality management principles into its business operations.

While initially slow to gain acceptance in the business community, ISO-9000 certification is fast becoming a necessary part of standard business practices, both in the US and abroad. It is estimated that by 1996, 12,000 US companies will be ISO-9000-certified, up from only 100 in 1990. Internationally, more than 50,000 companies have received ISO-9000 certification.

The idea behind extending the ISO quality management principles into the environmental arena arose out of the historic United Nations Conference on Environment and Development held in Rio de Janeiro in 1992.

Joe Cascio, IBM program director/environmental, health and safety standardization, and chairman of one of the ISO technical advisor groups, reports that the Rio conference discussions produced "a proliferation of national and regional environmental management, labeling and audit schemes that could have impacted international trade in a very severe way." The need to bring some standardization to these conflicting programs ultimately provided the impetus for the formation of ISO-14000.

What IS0-14000 is - and isn't - About

What, then, is ISO-14000 all about? The overriding goal of ISO-14000 is to develop a comprehensive system of universally accepted corporate standards to ensure that companies will be in a position to successfully manage their environmental compliance matters.

ISO-14000 is not about developing regulations to attain certain pollution standards. Instead, the focus is on the management of environmental issues or the development of internal corporate management programs ultimately leading to responsible and verifiable operating strategies that will result in the efficient use of natural resources and the protection of the environment.

ISO-14000 calls for the development of corporate Environmental Management Systems (EMSs) to guide not only the environmental performance of a company's industrial operations but also the potential environmental impact of the goods or services produced.

As envisioned by ISO-14000, an effective corporate EMS requires that a company review the environmental issues and challenges confronting the organization and ultimately develop policies, objectives, target strategies and production processes to meet and properly manage these challenges.

ISO-14000 spells out in detail the guiding principles for the development of effective EMS programs:

First and foremost, ISO-14000 acknowledges that environmental management must be among the highest corporate priorities. ISO-14000 also acknowledges that a company and its highest levels of management must demonstrate their commitment to the EMS process.

Additionally, for effective implementation of EMS programs, ISO-14000 recognizes the importance of adequate resources, including proper employee training, to the success of any EMS.

Finally, ISO-14000 recognizes that standardized and comprehensive procedures must be in place in order to correctly assess the effectiveness of these EMS programs and ensure the accountability of responsible corporate managers for the success or failure of these endeavors.

Moving beyond philosophical principles, ISO-14000 also details the critical elements of an effective EMS. It requires companies to perform an "Initial Environmental Review" of their operations. This review will include an identification of all regulatory obligations and potentially significant environmental impacts of a company's operations. This initial review must also include an honest assessment of the company's compliance status and the extent to which the company is meeting its regulatory obligations.

Once this review is completed and a company understands the status of its environmental compliance efforts, it can then move on to the EMS planning process. ISO-14000 states as one of its guiding principles that "an organization should focus on what needs to be done - it should have a purpose and a plan."

For the implementation of an EMS, the purpose and plan includes the development of overriding environmental policies, the establishment of environmental objectives and targets to meet these policy goals, and the preparation of a strategic plan and management program aimed at implementing these identified policies and objectives through scheduled action items.

The remaining critical component of an effective EMS, as recognized in ISO-14000, is the development of procedures to measure and monitor a company's success in carrying out its EMS and achieving its environmental policy and performance goals.

Critical components of ISO-14000 are the development of standardized performance evaluation and auditing procedures. Once completed, these procedures will be used as benchmarks to assess the true effectiveness of any EMS.

The EMS program outlined in ISO-14000 is by no means revolutionary. In fact, critics of ISO-14000 argue the program is nothing more than a paperwork exercise with few benefits and many burdens. Proponents offer that evaluating existing compliance, documenting findings and actively attempting to manage the environmental impact of one's operation is a challenge for even the most e nvironmentally responsible of corporate citizens.

The corresponding benefits to be gained from this process, say these proponents, include the fostering of good public relations and community and consumer support, the simplification of the compliance challenge through an understandable and orderly EMS implementation process, and the opportunity for cost savings and increased profits resulting from proactive management of environmental liabilities and the thoughtful development of pollution prevention and resource conservation strategies.

What Will the Impact Be?

At this early stage in the ISO-14000 development process, it is hard to predict the exact impact these new standards will have on the industrial community, including the converting industry. Many observers are predicting the impact to be significant and pervasive. In part, this view is bolstered by the dramatic integration of the ISO-9000 standards into the industrial community.

It is expected that companies with substantial international operations will be obligated to pursue ISO-14000 certification as this program continues to gain momentum abroad.

For US operations the impact is a little less certain. The Environmental Protection Agency (EPA) has adopted a "wait and see" attitude on ISO-14000. To date, the Agency has resisted programs that have strayed too far from traditional "command and control" regulatory schemes. Recently, though, with its Common Sense Initiatives and Environmental Leadership Program, EPA appears to be moving in the direction of affirming, if not promoting, ISO-14000-styled programs.

In order for ISO-14000 to truly catch on in the US, however, EPA must move beyond merely a tacit recognition of the program and provide tangible benefits to the regulated community for achieving ISO-14000 recognition.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , ,

Friday, December 14, 2007

ISO 9001 Okay Now You Have It How Do You Market It?

Marketing ISO 9001 2000.

Lately we've been seeing a lot of press releases from wineries and suppliers touting their ISO certifications. "We've obtained ISO 9001: 2000," they trumpet. Great! But what exactly does that mean?

In simple terms, ISO certification verifies a company's compliance to a set of globally accepted s tandards for quality management and operational systems. The name ISO refers to both the Greek word for equal, and the International Organization for Standardization, a worldwide federation established in 1947 with a mission to facilitate the international exchange of goods and services. More than 90 countries use the ISO standard.

According to Anke Varcin, head of public relations for ISO, the organization's function is to develop the standards that auditors use to evaluate companies seeking certification. "ISO ... does not audit organizations and does not issue certificates attesting to the fact that they conform to ISO standards," Varcin explained. "Certification is carried out independently of ISO by some 750 certification bodies around the world. ISO does not control their activities."

How does ISO determine its standards? "What happens is that the need for a standard is felt by an industry or business sector which communicates the requirement to one of ISO's national members," Varcin said. "The latter then proposes the new work item to ISO as a whole. If accepted, the work item is assigned to an existing technical committee. Proposals may also be made to set up technical committees to cover new scopes of technological activity. In order to use resources most efficiently, ISO only launches the development of new standards for which there is clearly a market requirement."

There are many different types of certification, depending on the company's function and the year in which certification was issued. "Previously, 'ISO 9000-certified' organizations were actually certified to one of the three standards in the 1994 version of the ISO 9000 series: ISO 9001, ISO 9002 and ISO 9003," Varcin said. "The scope of these standards differed, but they were of equal rank." (For more information about the various certifications, visit the ISO Web site: iso.org.)

In 2000, the revised and improved ISO 9001:2000 standard was introduced to replace the 1994 versions. Organizations certified to the 1994 versions were given until Dec. 15, 2003, to upgrade to ISO 9001:2000. Both ISO 9000 and ISO 14000 concern the way a company goes about its work--but not directly the result of this work. However, the way in which a company manages its processes will obviously affect its final product.

So why seek ISO certification? "Deciding to have an independent audit of a management system ... is a decision to be taken on business grounds," Varcin said. Companies may decide to seek ISO certification for any number of reasons, including market requirements, customer preferences or staff motivation. Companies that adhere to ISO standards may benefit from increased demand for their products, more positive customer feedback and a reduction in costs.

On the subject of cost, there is no set price for certification. According to Varcin, it varies depending on such factors as the company's current quality management system, the size and complexity of the organization and the attitude and commitment of the top management.

Setting An Example

If anyone knows how the ISO certification process works, it's Lisa Farrell, director of communications for New York's Canandaigua Wine Company. Two of Canandaigua's wineries--Mission Bell, in Madera, Calif., and New York's Widmer's Wine Cellars--have obtained ISO 9001:2000, and several more of the company's California, New York and Washington wineries are scheduled to follow.

"Canandaigua Wine is making a concerted effort toward standardizing its processes throughout the production environment to gain discipline and sustainability," Farrell explained. "The ISO certification provides us with standard operating procedures, which include valuable communication and system feedback loops among Canandaigua Wine and its customers, employees and managers. It helps us document and control our manufacturing processes to help exceed customer expectations and ensure quality processes within our production environment."

To get the process rolling, Canandaigua worked with Dr. Judy Luchsinger, who consulted with Fetzer during its ISO certification in 1994. With Luchsinger's help, Mission Bell and Widmer's completed the following steps leading to their ISO 9001:2000 certifications.

Applied to approved ISO-certifying bodies and selected Lloyd's Register Quality Assurance for auditing toward certification

Formation of ISO leadership teams at both wineries

Kick-off meetings held with employees at both wineries

Quality manuals created at both wineries

Employee training at both wineries

Audit and certification process, including all areas of production, bottling and distribution, including internal and external audits conducted by an assessor representing Lloyd's Register Quality Assurance.

"After the external audit, the assessor then makes a recommendation for or against certification, which is reviewed by the management team of (the certifying body)," Farrell said. Both Mission Bell and Widmer's were approved after about a year.

"The (certification) standards are challenging to meet," Farrell said. "To pursue them, you must follow standard operating procedures as outlined in your quality manual and have the discipline and focus needed to follow these consistently and in a highly efficient manner. This process demands strong leadership from senior management and a sense of commitment and teamwork among employees at all levels."

Is Getting Certified Worth The Effort?

To get the inside scoop, we asked wine industry suppliers (listed in the W & V Buyer's Guide/Directory) to tell us why their companies took the plunge, and whether or not they're happy with the results. This partial list represents a random sampling.

Supreme Corq, Inc. Kent, Wash.

According to marketing manager Joyce Steers-Greget, Supreme Corq decided to pursue ISO certification "to ensure a consistent, quality product ... to ensure continuing customer satisfaction and effective process controls ... and to receive a globally recognized quality process certification." The company earned ISO 9001:2000 in July of 2002. "Our customers are pleased that we have taken this proactive step ... Some larger wineries or grocers require compliance to quality and food standards to be an approved supplier. As the wine industry becomes more global, ISO certification will likely be necessary to compete in this international arena."

M.A. Silva Corks, USA Santa Rosa, Calif.

"Our supplier in Portugal felt that the market was looking for companies that had that certification, that (it would give them) some sort of competitive advantage. They also felt that it would greatly improve the company's performance and (help it to) operate at a better standard," said company representative Neil Foster. After meeting the requirements for ISO 9001, Foster said, the company's product improved and business increased. "And also new markets opened up for us...and we noticed that we saw increasing business from (existing) customers. It's a positive thing, without a doubt."

Novembal San Francisco, Calif.

Though Novembal itself is not ISO certified, its supplier--TetraPak Plastics in Mexico--obtained ISO 9001:2000 in Nov., 2002. "We (felt) that is was important for our company to adopt a quality system like ISO, because this system permits us to integrate all of the company's processes--human resources, maintenance and management," said TetraPak ISO coordinator Adriana Flores. Since adopting ISO standards, Flores said, her company's clients feel more secure and the company's processes run more smoothly. "The most important improvement is the process standardization."

Scott Laboratories, Inc. Petaluma, Calif.

"In order for our growing company to continually improve we needed a good documented quality management system," said ISO lead auditor Mary Ann Changnon. "Also some of our customers were requiring ISO certification from their vendors." The company's cork and laboratory sectors were awarded ISO 9000:1994 in July of 1999, and all company sectors obtained ISO 9001:2000 in August of 2001. "We use ISO certification as a sales tool. We open our quality system to our customers so they can see our commitment to continually improve both our products and services. We have noticed improvements in many of our products due to improved processes as a result of customer input."

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , ,

Wednesday, December 12, 2007

ISO 9001 and Total Quality Management

Total Quality Management

Total Quality Management, or TQM, has become one of the most frequently discussed topics in current business literature. Because of the competitive pressures created by Japanese companies, quality became a competitive weapon in the 1980s in most industries. Its role in economic life seems to be attaining a new level in the 1990s; in some industries, such as the automotive industry, quality no longer seems to be a competitive weapon, but rather a prerequisite to survival.

Competitive pressures of the 1980s and 1990s have been felt most strongly in the major industries that are dominated by very large firms. Large U.S. corporations were the first to feel the impact of international competition and suffer its devastating effects. Thus, it is natural that almost all discussions of quality and related issues have focused on large corporations. Small firms seem all but forgotten. This article attempts to attract attention to this neglect and propose a conceptual framework for implementing TQM in the small business environment. Specifically, its emphasis is on small firms in the United States.

The main assumption is that quality is as important for small businesses as it is for large corporations. One reason is that some small companies have been competing directly with foreign firms for a long time; some have suffered the same consequences as large companies, while others have prospered in the competition. A second reason is that many large firms rely on a number of small companies for parts and services they use in producing their products. Quality-conscious corporations are demanding continuously higher quality in the goods and services they buy from small businesses; at the same time, they are reducing considerably the number of vendors. Criteria used in deciding which company to keep as a vendor are based almost entirely on cost and quality. Third, competition in the American economy seems to be intensifying, and new conditions emerge to which small firms have to adapt. Quality and productivity seem to be the indispensable main ingredients in a small firm's struggle for survival in these new conditions.

SMALL BUSINESS DEFINED

A challenging issue one must deal with when writing about small business--an issue that has not yet been settled in a generally accepted manner--is to define what small business is and distinguish it from big business. Most of the attempts at defining small business have to rely on some quantifiable characteristic, such as the number of employees, sales volume, or worth of assets. One classification scheme defines a small business as a firm with fewer than 500 employees. A more detailed classification divides this range further into subcategories: very small (1-19); small (20-99); and medium (100-499). Any company with more than 500 employees is considered to be a big business.

But there are other, qualitative approaches that offer valuable insight into understanding small business. According to The Small Business Act of 1953, a small business is independently owned and operated and not dominant in its field of operation. The Committee for Economic Development, as reported in Broom and Longenecker (1993), proposed identifying a small business as a firm that is characterized by at least two of the following:

Management is independent; usually the manager is also the owner.

Capital is supplied and ownership is held by an individual or a small group.

The area of operations is mainly local; workers and owners tend to be in one home community, although the markets need not be.

The business is small compared to the biggest units in its field.

Clearly, these are all useful definitions of small business, with some more appropriate for certain purposes than others. The classification that divides small businesses into three sub-categories (very small, small, and medium) with respect to the number of employees will be used in the rest of the discussion in this paper--not as rigid groups that are clearly distinguishable from others, but as reference points along a continuum of small businesses of different sizes.

The main reason for this approach is that the number of people a firm employs is usually proportional to the magnitude of its financial and human resources. Consequently, the number of employees is a proxy for the resources a firm may possess. The resources at the disposal of a company play an important role in the implementation of TQM. Therefore, the position of small firms along the size continuum (from 1 to 499 employees) will indicate the level of resources they possess.

THE NATURE OF SMALL BUSINESS

Many believe that a small business is more than just a "scaled-down" version of a big business. What makes it different may be discussed in four categories: (a) ownership, management, and organizational structure; (b) capital and resources; (c) objectives; and (d) markets and customers. In the following paragraphs, characteristics in each category will be described briefly. Later they will be referred to as they relate to applying TQM in the small business environment.

Ownership, Management, and Organizational Structure

Almost all small businesses start small and stay that way. Usually they are started by an entrepreneur who has a bright idea about a service or has developed a new product that fills a niche. A majority of small firms are privately owned; only about 40,000 of them are publicly traded. In most cases the business is owned by the entrepreneur, or jointly by close family members. The management is independent; usually the owner is the manager and reports to no one, or to other members of the family if they are also owners. Absentee ownership is very rare.

Although owners/entrepreneurs are generally experts in the product or service they produce, they usually have neither the education nor the skills required to manage a business. Many small business owners, who do not understand the intricacies of running a business and being proud craftsmen, may think those duties are beneath them. Yet they end up making most of the decisions--at least all the critical ones. Often they do not know how to delegate authority and responsibility, or the organization lacks qualified people to assume some of the authority and responsibility. Consequently, an owner has to make decisions in areas such as inventory or finance that are usually the responsibility of expert professionals in large firms.

Organization structure in a small firm is usually very simple, with few layers. Sometimes management positions are filled by family members, making it a truly family business. Employees usually perform a variety of tasks, often giving the business greater flexibility than larger businesses have. In general, organizational complexity and the number of levels increase as one moves from companies with a few employees to the higher end of the size continuum.

Capital and Resources

Because of the nature of ownership, typical small business firms often suffer from a shortage of capital. Originally, capital is supplied by the owner or the owner's family. Additional capital for growth, or Short-term credit for weathering bad times, is very difficult to raise. The main reason for the difficulty in obtaining long-term financing is that a large proportion of a typical small firm's assets includes short-lived equipment and fixtures, leaving insufficient long-term assets to qualify for long-term loans. Many small businesses do not even have sufficient record keeping to provide the necessary documents for bank loans. Insufficient capital is usually the main reason why most small businesses are service companies.

In addition to sparse. physical resources, small businesses are also severely limited in human resources, and so cannot attract highly qualified and experienced managers or professionals. Again, this weakness disappears as the firm grows in size and sales. Many small companies, however, provide some employees with a rich learning experience because of their focus on craftsmanship and the multitude of tasks required of them.

Objectives

Many small businesses are established as a means of self-employment. As long as the owner receives a satisfactory income, there may be no desire to expand the business. In some cases, the motive for profit may take a back seat to other motives, such as pride and craftsmanship. Some may become small business owners because they prefer a more relaxed and less competitive environment. Some have the objective of maintaining ownership and control of the business. Thus, growth is not an objective for many owners. According to Solomon (1986), most small firms fall into this category.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , ,

Friday, December 7, 2007

ISO 9001 What Records Does My Business Need To Keep?

Which documents must I keep for ISO 9001?

In addition to the legislative requirement for your business to keep certain records ISO 9001 2000 requires your business to retain other records to demonstrate compliance with its various clauses.

From an ISO 9001 2000 viewpoint records are documents generated whilst operating your Quality Management System. Typical examples are records of management reviews, purchase orders, sales orders, test results and internal quality system audits.

An ISO 9001 2000 consultant can be very helpful to your business in deciding which records are required and those that are not.

The standard is not specific about how long your business must retain each record but in order not to fall foul of your own Quality Management System, or the law, you might like to consider the following.

If your business offers a period of (x) years guarantee with its product you must keep associated records for at least (x) years.

If your business sells products that have legislative requirements for product testing you must keep associated records for the life of the product and sometimes longer.

Any legislative requirement for you to keep records associated with your product or service.

Records can be in many formats including computer generated records such as those maintained by the Easy ISO 9001 2000® software package.

It would be wise to remember when keeping computer based records for long periods (say 10 - 30 years) the medium upon which the data is stored will deteriorate and therefore you must periodically validate its integrity. Another factor to consider with long term data storage is will a device still be available in 30 years time to read the media upon which the data is stored? I still have computer programs on punch tape but I no longer have a punch tape reader! If you do not know what I am talking about here take it as validation of this advice. (Punch tape was a medium for storing computer programs and data in the 1960's and 1970's)

The following table identifies the specific records required by ISO 9001 2000. The list does not include records that your business might choose to retain voluntarily or those required by legislative requirements for your product or service.

Clause Document to retain, (Record)

5.6.1 Minutes from your Quality Management Review meetings, including any actions raised.

6.2.2 Education, training, skills and experience.(Sub clause-e)

7.1 Evidence that the realization processes and resulting product fulfill requirements. (Sub clause-d)

7.2.2 Results of the review of the requirements relating to the product and actions arising from the review.

7.3.2 Design and development inputs.

7.3.4 Results of design and development reviews and any necessary action.

7.3.5 Results of design and development verification and any necessary action.

7.3.6 Results of design and development validation and any necessary action.

7.3.7 Results of the review of design and development changes and any necessary action.

7.4.1 Results of supplier evaluations and actions arising from evaluations.

7.5.2 As required by the organization to demonstrate the validation of processes where the resulting output cannot be verified by subsequent monitoring and measurement. (Sub clause-d)

7.5.3 The unique identification of the product, where traceability is a requirement.

7.5.4 Customer property that is lost, damaged or otherwise found to be unsuitable for use.

7.6 Standards used for calibration or verification of measuring equipment where no international or national measurement standards exist. (Sub clause-a)

7.6 Validity of previous results when measuring equipment is found not to conform with its requirements.

7.6 Results of calibration or verification of measuring equipment.

8.2.2 Internal audit results.

8.2.4 Evidence of product conformity with the acceptance criteria and indication of the authority responsible for the release of the product.

8.3 Nature of the product non-conformities and any subsequent actions taken, including concessions obtained.

8.5.2 Results of corrective actions.

8.5.3 Results of preventive actions.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one. To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , ,

Wednesday, December 5, 2007

Is ISO 9001 2000 Right For My Business?

 

Firstly you should decide your own reasoning behind considering ISO 9001 2000 registration for your business.

Is the number of registrations in your market sector increasing?

Are your competitors seeking registration?

Are your customers asking about registration?

Are registrations increasing in your industry?

Are your customers asking you to become registered?

Have your group HQ asked you to gain registration?

Do you want to reap the financial benefits of registration?

Have the number of customer or consumer complaints increased?

Preventable errors reoccur again and again?

It is not possible to state exactly what benefits your organization will gain by having a formal quality system, primarily because each organisation is different. However, I think it is fair to say that most organisations will benefit from having a formalised Quality Management system where:

Work proceeds in an orderly and predictable way.

The same old preventable errors stop occurring.

Customer and consumer complaints fall dramatically.

Your Management System improves.

Internal communication within your organisation improves.

Returned product from customers reduces week on week.

The quality of your product and or service improves.

The level of customer and employee satisfaction improves.

Your organisation produces quality data to improve your business.

By now you should have a reasonable idea of whether or not ISO 9001 2000 registration is right for your organisation and whether or not you will gain financially from adopting the ISO 9001 2000 standard as a method of running your business effectively and efficiently.

If you are now seriously considering seeking registration to the ISO 9001 2000 standard you must begin to understand what the standard requires of an organization. There are many books and resources available which discuss implementing the ISO 9001 2000 Quality Management Standard into an organisation including the articles on this web site.

You may like to begin your ISO 9001 2000 education by reading the various articles on this web site. You will find they cover a broad spectrum of businesses, There is also an excellent Q&A sectionthat will answer the majority of commonly asked questions about ISO 9001 2000 registration and related topics.

Alternatively you could take an ISO 9001 2000 Quality Management training course, there are many available and they cater for beginners right through to ISO 9001 2000 experts.

To determine the amount of input required by your organisation to comply with the requirements of the ISO 9001 2000 standard will require that you assess your existing management system. You could to fetch in a consultant at this stage, a consultant will be able to identify exactly what your organisation needs to do in order to achieve the requirements of the ISO 9001 2000 Quality Management Standard.

Many organisations opt to carry out a gap analysis audit using a member of staff. However, the initial gap analysis audit is arguably the most important stage in the ISO 9001 2000 registration process. If the initial gap analysis is incorrect then both financial and human resources will be wasted. For this reason alone it is well worth seeking professional help from a consultant to carry out the gap analysis for you.

Many organisations who opt to jump straight into the Gap Analysis process themselves can often waste time, money and resources by not fully understanding the intent of the ISO 9001 2000 standard. Whereas seeking professional advice from a consultant will set your organisation on the right path with clear instructions on who, what, where, why, when and how things should be done.

If on the other hand your organization already has a very good understanding of the ISO 9001 2000 Quality Management Standard and has:

A documented Quality policy.

Been setting and using documented Quality objectives.

Customer and consumer complaints fall dramatically.

Documented Top management reviews of your Quality Management System.

A documented top level Quality Management System Manual.

Documented effective and efficient process procedures and or work instructions.

Documented employee skills and training records which are regularly reviewed.

Documented and compliant Quality Management System Audits.

Formal Customer complaint process with effective corrective and preventive action methods.

If you are doing all the above then you may be well on your way toward gaining ISO 9001 2000 registration. However, if your Quality Management System is incomplete or immature it will require much more effort to become compliant. You can continue to adjust your system, audit for compliance, train employees etc. until you reach a position where you feel you have done as much as you are able to do yourself.

If however, you have reached this stage and are concerned if you have missed something important you can hire a consultant to carry out a [Pre-Assessment]. A pre-assessment is a gap-analysis survey carried out by a professional who compares what processes your organisation has in place compared to those required by the ISO 9001 2000 Quality Management Standard.

The consultant will report any deficiencies in your organisations processes, it is then up to you to decide if you want to tackle these deficiencies by yourself or to engage the professional services of the consultant.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , , , , , , ,

ISO 9001 2000, Getting Started on The Route To Registration

 

ISO 9001 2000, Getting started

Before starting the ISO 9001 2000 route to registration you will need to have the top management on board. This can be achieved by highlighting to top management the cost benefits to the business of ISO 9001 2000 registration.

If you feel unable to sell the benefits of ISO 9001 registration to your business or that you are unqualified to do this then it will be worth you contacting a consultant to assist you with this process. The consultant will have all the necessary tools and examples to hand.

Next you will need to consider what your business is trying to achieve, most businesses want to make money but as with all things there are many ways of achieving the same goal. Some businesses are very good at what they do but I have never yet encountered the perfect business.

If you feel there is no room for improvement in you business you may need to see your doctor about delusional thoughts.

(If you genuinely think you have the perfect business, be it ISO 9001 2000 related or otherwise please contact me at [admindriso.co.uk] and invite me to audit your business. Yes I do charge, albeit the normal daily rate.)

Okay, so you now know what your business is trying to achieve. I'm sure it will be something like:

"We aim to provide our customers with the best value (Widgets or service) on time, every time etc.

Well done, you have just written your companies Quality Management System Policy.

Next we have to look at how your business is going to work towards and then achieve its new Policy. A good starting point is to identify the objectives each department need to set in order to meet the requirements of your policy. Some typical examples for a Sales order process might be:

Reply to customer enquiries within 1 hours of receipt.

Update sales database with customer details before order acknowledgment.

After sales database entry send order acknowledgement on the same day as order received.

Send product catalogue to new customer on day of order receipt.

Run credit check on new customers before loading order to production schedule.

The process objectives can be documented in text format or as flow simple flow diagram. Many businesses now opt for a simple flow diagram because it dictates pictorially how a process works.

Great, you have now documented your first process. Next we need to consider what records to keep so that you can demonstrate the process objectives have been met. In the above example all the necessary records are kept on the sales database. The database automatically records the time between order entry, reply to customer, completion of customer details, acknowledgment sent, product catalogue sent, completion of credit check and loading of order to production schedule. The database will only allow things to be completed in a certain order; for example it will not allow the order to be loaded to the production schedule prior to an acceptable credit check being received. To ensure that only authorised people access the sales database it is password protected and it records the computer users ID against each sales database entry.

At the end of each week the sales manager runs an exception report to identify which targets have or have not been met, this gives him the opportunity to implement corrective action if the process is not being operated as planned. The corrective action may simply involve the re-allocation resources or additional employee training. You can of course run this process without a computer system by using a check-sheet where the process checkpoints are recorded. Using a paper-based system relies heavily on your business not entering into a blame culture, otherwise your employees may decide to falsify results rather than report a process failure. A business that operates a blame culture will never be successful, as there is no incentive for employees to report process errors and more importantly the business does not know where its processes are breaking down.

Excellent, you have documented a Quality Management System policy for your business, set departmental objectives needed to meet that policy and generated records which can be used for business process improvement.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , ,

Monday, December 3, 2007

ISO 9001 the Process Approach to Quality Assurance

What is the Process Approach to Quality?

The ISO 9001 2000 standard is designed to manage and improve organizations processes. There is a great deal of misunderstanding and misinterpretation of the meaning of the process approach to Quality.

If you have at all been involved with quality assurance I am sure that you will at least heard of the "process approach" to Quality Assurance even if you are not fully aware of its meaning. The process approach to Quality Assurance is based on the idea that an organization is a system of interlinked processes.

If an organization does not define how its individual activities work together and the order in which the activities are performed it cannot deliver a quality product to its customers.

The process approach to quality involves analysing and then documenting the actual activities and links between those activities within an organization using simple process flowcharts. This technique is typically used by an auditor when conducting a gap analysis on a business. If you are unsure about your ability to identify your processes then you can employ a consultant to assist you.

Once the process and their interactions have been identified a framework of procedures and work instructions can be built around them.

It can often be the case that the output from one process in an organization is the input for another process within the same organization. As can be seen in the diagram below where the output for activity one is the input for activity two and similarly the output of activity two is the input for activity three.

When analysing the processes within your organization it should be remembered that processes may link to processes outside of your organization. A typical example of this might be the product design interface between you and your customer.

Your organization sends a design concept to the customer (the Process input).

The customer approves the design (the Process activity).

You receive back the approved concept design (Process output)

In many organizations it may be possible to break down each process still further into their individual sub-process components, (please forgive the simplistic example).

For example: The posting of a letter might be broken down into.

Process 1: Selection of the envelope type. E.g. Padded, anti static, brown, white, anti-static.

Process 2: Selection of postal method. E.g. Courier, air-freight, secure, insecure.

Process 3: Selection of first or second class postage, same day, seven day.

Each of these processes can then be broken down into sub-processes. E.g. The closure of the envelope. Should it be the type you lick, self adhesive, secured with sticky tape, security fastener or wax seal?

One always has to look at the common sense approach as to how far you should break each process down into sub-processes. For example: If the customer does not specify the method of envelope seal to be used then any type of seal may be used as long as it is fit for purpose. However, if the customer specifies a particular type of seal for certain products the process becomes more important to both you and your customer and therefore the process is worthy of documentation.

If you have difficulty documenting your processes, especially regarding the amount of detail required then it may be worth employing a consultant to guide you through the process. If your procedures are too prescriptive you will end up with unmanageable documents which serve no real purpose. A consultant will be able to minimise your documentation while ensuring compliance with ISO 9001 2000.

Many organizations already have documented instructions in the form of standard operating procedures (SOP's) and work instructions (WI's) that define how individual activities are performed. However, it is often the case that the interfaces between these instructions are misaligned. In some cases the interfaces are not even considered let alone documented. Misaligned process interfaces within an organisaton often leads to process fragmentation and eventually to break down of the organizations processes.

The ISO 9001 2000 standard has adopted the process approach to Quality management systems which is designed to improve an organizations processes.

The following rules may be used to implement a process approach to your Organizations Quality Management System.

Identify your Organizations key processes.

Define Quality Assurance levels for those processes.

Decide how process quality will be measured.

Document your approach to achieving the desired quality.

Evaluate your quality level and continuously improve it.

The following example will help guide you through the methology of identifying process inputs, activities and outputs.

As an example, let us consider the Purchasing Process:

1. The Input to the Purchasing process is a requirement to purchase materials, components or services.

2. The Purchasing Activity involves selecting a supplier from our approved supplier list and preparing a purchase order. We will interact with - The supplier: to place the order. - Receiving: to notify them of the material ordered. We may interact with - Engineering: if Purchasing specifications are needed. - Quality Assurance: if Receiving inspection is needed and to disposition the product if it is non-conforming when received.

3. The Output of the purchasing process is an approved purchase order released to the supplier.

A typical manufacturing company will have the following product realization processes:

Customer Enquiry.

Review and Quote.

Receive Order

Prepare Process Control Documentation

Purchase Materials

Receive Materials

Production

Pack

Label and Ship

In addition, we have the following support processes:

Management Review

Training

Document Control

Internal Auditing

Corrective and Preventive Action

Summary: As you develop your quality system, you must define the sequence and interaction of your processes in your quality manual as required in Section 4.2.2 of the new standard.

As you define your processes and prepare the accompanying documentation, be sure that the inputs, activities, interactions and outputs are fully defined so your quality system is effective.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one. To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , , , ,

Saturday, December 1, 2007

Preparing For ISO 9001 2000 Registration

The steps need to be taken to prepare an organization for ISO 9001 2000 registration:

Whilst the following text is not exhaustive in its content it should give you a reasonable idea of what’s involved in setting up an ISO 9001 2000 registration within an organization.

First and most importantly you should either purchase a copy of the ISO 9001 2000 standard or read a copy at your local library.

At first glance many of the terms referred to in the standard sound quite confusing but if you study the content of this web site you will soon become familiar with the terminology used.

Now that you are a little more familiar with the ISO 9001 2000 Quality Management Standard and its terminology you should start to analyze the current practices of your organization to those documented within the ISO 9001 2000 standard,This process is known as a gap analysis audit. You can either carry this process out yourselves or employ the skills of an ISO 9001 2000 consultant to carry out the task for you.

It is very important to get this audit right as the results will be used to set the direction of your organization on its route to full ISO 9001 2000 registration. In short if this audit is wrong or incomplete your organization will happily steam along in the wrong direction, wasting resources as it goes, until someone tells you otherwise. If I were to give one piece of advice here it would be to recommend using a professional, a small amount of money spent at this stage could save you unnecessary expenditure if you were to get it wrong.

As the gap analysis audit on your organization progresses you will be able to identify the processes which are already documented, and those that are not. It will be useful to your organization to compile a list of documents that you will need for the Quality Management System as you complete the gap analysis audit, there is no sense in doing the same job twice.

It is important to remember that just because a process is documented does not necessarily mean it is compliant with the requirements of the ISO 9001 2000 standard. Almost certainly your organization will have to tweak existing processes and or instigate new ones in order to comply with the documented requirements of the ISO 9001 2000 standard.

For this purpose you may decide to bring together a team of employees and have them review the processes and suggest improvements which will make the process compliant with ISO 9001 2000. Alternatively you may wish to employ an ISO 9001 2000 consultant to carry out this task for you. Whilst a consultant may initially seem expensive he or she will have the experience to complete the task expediently and cost effectively.

Now that the organizations processes and any short falls against the ISO 9001 2000 standard have been identified they have to be documented in a within a controlled document control system. Whilst there is not a definitive, prescribed method to document an ISO 9001 2000 Quality Management System there are, as with most things, easy and hard ways of doing this. If you are unsure how to do this there is an example procedure here or once again you can employ a consultant to complete this task expediently.

Design and implement the Quality Management System to comply with the requirements of ISO 9001 2000.

This will typically require:

Establishing a quality policy and measurable quality objectives.

Documenting a quality manual, describing your Quality Management System.

Documenting procedures which describe the processes in your organization.

Creating a document issue, withdrawal and re-issue of documents system.

Documenting test and inspection methods.

Documenting a corrective and preventive action process.

Identification of training needs and necessary job skills.

Calibrating and controlling measuring and test equipment.

Measuring and monitoring customer satisfaction.

Measuring process, and product conformity.

Training employees on the operation of the quality management system.

Planning, conducting and following up internal Quality Management System audits.

Continual improvement of the Quality Management System.

As each process in your organization is revised, documented and implemented you need to ensure that your employees are trained accordingly in the operation of the revised process and that their documented training records are updated. All employees must have had at least basic ISO 9001 2000 training so that they can demonstrate that they understand what is required of them. You can either attempt this training your self or employ a consultant trainer to do this task for you.

You must generate and keep documented records of employee training in accordance with your new processes procedures which, of course must be compliant with ISO 9001 2000.

These records will be used as evidence to prove to your ISO assessor that you are operating your Quality Management System in accordance with your documented procedures and ISO 9001 2000. Driso's Easy ISO 9001 2000® software will record, control all of your organisations training records in an ISO 9001 2000 compliant format.

As your processes evolve you must start internal quality management system audits so as to satisfy your organization that it is in fact operating its processes in accordance with its own documented procedures and the requirements of ISO 9001 2000.

Your ISO 9001 2000 auditor will look at the records generated by your internal audits. ISO 9001 2000 relies on Quality Management System audits to provide assurance that the organization is meeting the requirements of the ISO 9001 2000 standard.

An audit includes an inspection of the documents and records that make up your quality system. Most importantly it is an inspection of the way the people in the organization work and the knowledge they have about the operation of the quality management system. management reviews must be carried out by the top management in your organization to ensure that your Quality Management System is working effectively and that it is geared to produce continual improvement of your products or service.

Registration requirements vary slightly between the various certification bodies but it is usual to have a Pre-Assessment. A pre-assessment is a mock audit similar in duration to a full registration audit which your organization neither passes nor fails. The important feature of a pre-assessment is that it will provide a full list of any short falls between the requirements of the ISO 9001 2000 standard and your Quality Management System.

As a senior lead auditor I would always advise an organization to opt for a pre-assessment.

You now need to select a registration agency.

There are many registration agencies to choose from and in theory they are similar inthe services they provide, chiefly because they all have to abide by the same to EN standards, EN45011 and EN45012. In practice they offer different service levels, response times and re-assessment periods. So my advice would be to choose your registration body very carefully.

Finally the day has arrived for your registration rudit. This is where an auditor from the chosen certification body visits your organization and carries out a comprehensive audit of your organization.

When the auditor identifies a discrepancy or non-conformance between the work that is being performed and the requirements of ISO 9001 and how you say you operate your processes the discrepancy or non-conformance will be written up. There is no specific number of non-conformances that have to be raised for your organization to either pass or fail. It depends on how serious each point raised is or if a number of minor issues are all raised against one clause of ISO 9001 2000, say for example design.

For example: If only a few minor non-conformances are found during the registration audit, the registration body will issue a certificate of registration to ISO 9001 2000 stating that your organization complies with the requirements of the ISO 9001 standard. If however a major non-conformance is raised this results in your organisation being told that you must correct the non-conformance(s) and re-apply for another registration audit. This is why I would always recommend that you have a consultant carry out a Pre-Assessment audit on your business, re-applying for a complete re-assessment from a registration body can be a very expensive business.

Once a certificate of registration is issued it typically expires after three years, however some registration bodies certificates never expire. All registration bodies typically require Quality Management System surveillance audits of your organization at six months intervals to maintain the validity of the certificate.

At this point, you deserve to celebrate your accomplishments! However, once the certificate is issued you need to continue to monitor your own Quality Management System to ensure you continue to comply with the requirements of ISO 9001 2000.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , , , , ,