ISO Certification



             


Wednesday, February 6, 2008

ISO 9000 Services

Designing a quality management system that fulfills the requirements of ISO 9000 is not a difficult task. Many ISO 9000 services help businesses build up systems that obey the requirements of the ISO 9000 series of international standards.

ISO 9000 is a complete quality control system recognized and respected throughout the world. It applies to all types of businesses irrespective of their size and final outcome. ISO 9000 now includes three quality standards, namely, ISO 9000:2000, ISO 9001:2000 and ISO 9004:2000. The first one introduces requirements and other two present guidelines.

These services assist business organizations to attain ISO 9000 knowledge, implement the standard, and prepare for registration with the least time, in the most convenient way, and cost-effectively too. Both product and service oriented businesses seek the assistance of ISO 9000 services to improve their productivity and customer happiness through reduced waste and rework, shortened cycle times, superior supplier relations, and improved problem tracking. Most ISO 9000 services are customized to your organization?s particular needs.

Their auditor team of these ISO 9000 services consists of experienced professionals who are qualified to evaluate companies pursuing all variations of certification under the ISO 9000 standard. The audits done by such professionals provide public recognition that your business is dedicated to producing quality products or services, and giving prompt delivery.

With many years of experience, ISO 9000 services can prepare your organization to implement standards and avoid unforeseen casualties. They offer assistance through unique services, tools, and workshops and training events such as facilitator training, internal audit training, and documentation training.

Many ISO 9000 services also offer project planning with senior management, compliance reviews and gap analyses, quality manual/procedure review, writing and organizing procedures and other documentation, assistance with supplier development, and liaison with third-party assessors.

ISO 9000 provides detailed information on ISO 9000, ISO 9000 Standards, ISO 9000 Software, ISO 9000 Consulting and more. ISO 9000 is affiliated with Home Inspections.

Labels: , , , , , ,

Tuesday, February 5, 2008

ISO 9000 Vicarious Liability

ISO 9000 is an enormously successful international quality management system set by the international standards organization. Apart from helping in designing a quality assurance system, ISO 9000 also imposes many liabilities and responsibilities on the part of business organizations.

ISO certification can guard organizations against corporate vicarious liability. Vicarious liability refers to the legal responsibility (accountability) of an employer for the actions, crime or injury done by one of his employees in the course of discharging duties. Crimes that come under the purview of vicarious liability include fraud and theft, defamation, breach of confidence and data protection, and discrimination based on race and gender.

ISO 9000 vicarious liability processes help firms reduce risks. The extent of liability depends upon the relation between the nature of the employment and the crime that has been committed. When the two are connected closely enough, the employer can be held liable.

Common forms of vicarious liabilities include employers' vicarious liability, principals' vicarious liability, and the liability of corporations in tort. Consider, for example, principals? liability. In this case, the owner of a car is vicariously liable for the rash and negligent driving of the driver. The owner is the principal and the driver is his employee. Laws have been reluctant to extend this liability to the owners of some other kinds of chattel. For instance, the owner of an airplane is not vicariously liable for a pilot?s misdeeds.

A business can operate only through the actions and deeds of its employees and agents. Therefore, it is important to decide to what extend vicarious liability will apply to hold a business liable for the frauds of its directors or other officers. ISO 9000 certification provides a clear description of such situations.

ISO 9000 provides detailed information on ISO 9000, ISO 9000 Standards, ISO 9000 Software, ISO 9000 Consulting and more. ISO 9000 is affiliated with Home Inspections.

Labels: , , , , , ,

Saturday, January 19, 2008

ISO 9000 Solutions

Businesses that have undergone the process of registering, training and certifying as ISO 9000 compliant will tell you that it is nothing short of tiresome. From attempting to decipher the complex language of the manuals to the actual implementation of the ISO 9000 standards, the entire process can be overwhelming to unsuspecting managers.

Over 300 software solutions are available for guidance on the process. These programs generally assist in the creation, implementation and management of the quality control system. In addition, hundreds of consulting firms exist throughout the world and offer ISO 9000 solutions. Either of these options can help you begin the difficult process of ISO 9000 certification.

Experts have estimated that it takes approximately 7-10 months to read and understand the complex ISO 9000 manual. In addition to the time it takes to actually read through the manual, companies should take into consideration the cost of the auditor's visit. You certainly want to make sure you understand what is expected of you before you dish out upwards of $10,000 for the auditor. If you are not prepared at the time of the auditor's visit, he or she will certainly be happy to come back for a second round. However, this will cost your company even more money and can quickly become a very expensive process.

Companies offering ISO 9000 solutions can help your company to save time and money. By helping you with the entire process, from understanding the training manuals to grilling you on issues that the auditor will cover, you can expect big savings and a much less daunting process. If your company needs ISO 9000 help, you should consult with a specialist.

Many good resources on ISO 9000 are available through the web. An excellent book is ISO 9000 Answer Book by Rob Kantner. This book is written in plain English that is easier to read and understand than the complex certification manuals, and offers assistance with ISO 9000 solutions. The book covers the details of some of the most frequently asked questions from companies around the world. ISO 9000 Answer Book is an excellent resource for both novices and those experienced in the ISO 9000 process.

ISO 9000 Info provides detailed information about ISO 9000 standards, software, consulting, help, and solutions. ISO 9000 Info is affiliated with Business Plans by Growthink.

Labels: , , , , , ,

Wednesday, January 9, 2008

Seven Layers of ISO OSI Model

The ISO OSI model are explained below. The seven layers of the OSI model are:
 

  • Application
  • Presentation
  • Session
  • Transport
  • Network
  • Antiqua">Data Link
  • Physical

 

1 Application layer:
This layer provides a means for the user to access information on the network through an application. Many user applications that need to communicate over the network interact with the Application layer protocol directly. The user applications are not part of OSI Application layer, use the networking services offered by the networking protocol suite. Application layer functions typically include identifying communication partners, and determining availability of required resources. Some examples of application layer implementations include Telnet, File Transfer Protocol (FTP), and Simple Mail Transfer Protocol (SMTP).
 

2 Presentation layer:
Presentation layer converts local host computer data representations into a standard network format for transmission on the network. On the receiving side, it changes the network format into the appropriate host computer's format so that data can be utilized independent of the host computer. ASCII and EBCDIC conversions, cryptography, and the like are handled here. Examples of Presentation layer coding and conversion schemes include common data representation formats, conversion of character representation formats, common data compression schemes, and common data encryption schemes.
 

Presentation layer implementations are not typically associated with a particular protocol stack. Some well-known standards for video include QuickTime and Motion Picture Experts Group (MPEG). QuickTime is an Apple Computer specification for video and audio, and MPEG is a standard for video compression and coding.

3. Session layer:
The session layer establishes, manages, and terminates communication sessions. Communication sessions consist of service requests and service responses that occur between applications located in different network devices. These requests and responses are coordinated by protocols implemented at the session layer. Some examples of session-layer implementations include AppleTalk's Zone Information Protocol (ZIP), and Decent Phase Session Control Protocol (SCP).
 

4.Transport layer:
Transport layer is responsible for providing reliable service between the hosts. Upper layer datagrams are broken down into manageable datagrams and then appropriate header information (such as sequence number, port number, etc.) is added to the datagram before passing it on to the Network layer. Two frequently used transport protocols are the TCP (Transmission Control Protocol) and the UDP (User Datagram Protocol).
 

Important features of Transport layer:

 

  • Transport layer ensures reliable service.
  • Breaks the message (from sessions layer) into smaller datagrams, and appends appropriate unit header information.
  • Responsible for communicating with the Session layer

 

Important features of TCP/UDP:

 

  • TCP/IP widely used protocol for Transport/Network layers
  • TCP: (Transport Control Protocol) TCP ensures that a packet has reached its intended destination by using an acknowledgement. If not, it retransmits the lost messages. Hence, TCP is called a connection oriented protocol.
  • UDP (Universal Data gram Protocol): UDP simply transmits packets over the internet. It does not wait for an acknowledgement. It is the responsibility of upper layer protocols to ensure that the information had reached the intended partner(s). Hence, UDP is often called connectionless protocol.
  • Application programs that do not need connection-oriented protocol generally use UDP.

 

5. Network layer:
Network layer is responsible for the routing of packets through the entire network. The layer uses logical addressing for this purpose. Note that the physical address (like MAC address) keeps changing from hop to hop when a packet travels from source to destination. As a result, an address that doesn't change is required to ensure continuity between hops. This is nothing but logical address. For IP networks, IP address is the logical address; and for Novell network, IPX address is the logical address, and so on. This layer also provides for congestion control, and accounting information for the network. IP (Internet Protocol) is an example of a network layer protocol.
 

6. Data link layer:
Data link layer provides delivery of information frames between communicating partners. This layer is responsible for flow regulation, error detection and correction, and framing of bits for transmission. The network data frame is made up of checksum, source address, destination address, and the data itself. The largest frame size that can be sent is known as the maximum transmission Unit (MTU).

Important features of Data link layer:
 

 

  • Assembles bits into frames, making them ready for transmission over the network.

     

     

  • Provides error detection, and correction to transmitted frames. If the checksum is not correct, it asks for retransmission. (Send a control message).

     

     

  • Consists of two sub layers:

     

     

    1. Logical Link Control (LLC): Defines how data is transferred over the cable and provides data link service to the higher layers.

       

       

    2. Medium Access Control (MAC): Controls media access by regulating the communicating nodes using pre-defined set of rules. (i.e. Token passing, Ethernet [CSMA/CD] all have MAC sub-layer protocol).
Different Data link layer protocols define different network and protocol characteristics, including physical addressing, network topology, error notification, sequencing of frames, and flow control. Physical addressing (as opposed to logical addressing) defines how devices are addressed at the data link layer. The protocols used in Data link layer are SLIP, PPP, and CSLP.
 

 

7. Physical layer:
This is the bottom-most layer of the OSI model. The Physical layer handles the bit-level communications across the physical medium. The physical medium could be made up of wired electrical signals, or light, or radio (wireless) signals. Physical layer specifications define characteristics such as media, data rates, maximum transmission distances, and physical connectors.
Some of the important standards that deal with physical layer specifications are:
RS-232(for serial communication lines), X.21, EIA 232, and G730.
Physical layer and Data link layer implementations can be categorized as either LAN or WAN specifications.

Vijayanand has done his post graduation (M.E.) in Communication Systems. He has several years of experience in electronic assembly and design, rf testing, and networking. He is a Cisco Certified Networking Professional, and an MCSE (Microsoft Certified Systems Engineer). He is a director of Anand Software and Training Pvt. Ltd. Complete tutorial on Networking is available at SimulationExams.com

Labels: , , , , , ,

Saturday, December 1, 2007

Preparing For ISO 9001 2000 Registration

The steps need to be taken to prepare an organization for ISO 9001 2000 registration:

Whilst the following text is not exhaustive in its content it should give you a reasonable idea of what’s involved in setting up an ISO 9001 2000 registration within an organization.

First and most importantly you should either purchase a copy of the ISO 9001 2000 standard or read a copy at your local library.

At first glance many of the terms referred to in the standard sound quite confusing but if you study the content of this web site you will soon become familiar with the terminology used.

Now that you are a little more familiar with the ISO 9001 2000 Quality Management Standard and its terminology you should start to analyze the current practices of your organization to those documented within the ISO 9001 2000 standard,This process is known as a gap analysis audit. You can either carry this process out yourselves or employ the skills of an ISO 9001 2000 consultant to carry out the task for you.

It is very important to get this audit right as the results will be used to set the direction of your organization on its route to full ISO 9001 2000 registration. In short if this audit is wrong or incomplete your organization will happily steam along in the wrong direction, wasting resources as it goes, until someone tells you otherwise. If I were to give one piece of advice here it would be to recommend using a professional, a small amount of money spent at this stage could save you unnecessary expenditure if you were to get it wrong.

As the gap analysis audit on your organization progresses you will be able to identify the processes which are already documented, and those that are not. It will be useful to your organization to compile a list of documents that you will need for the Quality Management System as you complete the gap analysis audit, there is no sense in doing the same job twice.

It is important to remember that just because a process is documented does not necessarily mean it is compliant with the requirements of the ISO 9001 2000 standard. Almost certainly your organization will have to tweak existing processes and or instigate new ones in order to comply with the documented requirements of the ISO 9001 2000 standard.

For this purpose you may decide to bring together a team of employees and have them review the processes and suggest improvements which will make the process compliant with ISO 9001 2000. Alternatively you may wish to employ an ISO 9001 2000 consultant to carry out this task for you. Whilst a consultant may initially seem expensive he or she will have the experience to complete the task expediently and cost effectively.

Now that the organizations processes and any short falls against the ISO 9001 2000 standard have been identified they have to be documented in a within a controlled document control system. Whilst there is not a definitive, prescribed method to document an ISO 9001 2000 Quality Management System there are, as with most things, easy and hard ways of doing this. If you are unsure how to do this there is an example procedure here or once again you can employ a consultant to complete this task expediently.

Design and implement the Quality Management System to comply with the requirements of ISO 9001 2000.

This will typically require:

Establishing a quality policy and measurable quality objectives.

Documenting a quality manual, describing your Quality Management System.

Documenting procedures which describe the processes in your organization.

Creating a document issue, withdrawal and re-issue of documents system.

Documenting test and inspection methods.

Documenting a corrective and preventive action process.

Identification of training needs and necessary job skills.

Calibrating and controlling measuring and test equipment.

Measuring and monitoring customer satisfaction.

Measuring process, and product conformity.

Training employees on the operation of the quality management system.

Planning, conducting and following up internal Quality Management System audits.

Continual improvement of the Quality Management System.

As each process in your organization is revised, documented and implemented you need to ensure that your employees are trained accordingly in the operation of the revised process and that their documented training records are updated. All employees must have had at least basic ISO 9001 2000 training so that they can demonstrate that they understand what is required of them. You can either attempt this training your self or employ a consultant trainer to do this task for you.

You must generate and keep documented records of employee training in accordance with your new processes procedures which, of course must be compliant with ISO 9001 2000.

These records will be used as evidence to prove to your ISO assessor that you are operating your Quality Management System in accordance with your documented procedures and ISO 9001 2000. Driso's Easy ISO 9001 2000® software will record, control all of your organisations training records in an ISO 9001 2000 compliant format.

As your processes evolve you must start internal quality management system audits so as to satisfy your organization that it is in fact operating its processes in accordance with its own documented procedures and the requirements of ISO 9001 2000.

Your ISO 9001 2000 auditor will look at the records generated by your internal audits. ISO 9001 2000 relies on Quality Management System audits to provide assurance that the organization is meeting the requirements of the ISO 9001 2000 standard.

An audit includes an inspection of the documents and records that make up your quality system. Most importantly it is an inspection of the way the people in the organization work and the knowledge they have about the operation of the quality management system. management reviews must be carried out by the top management in your organization to ensure that your Quality Management System is working effectively and that it is geared to produce continual improvement of your products or service.

Registration requirements vary slightly between the various certification bodies but it is usual to have a Pre-Assessment. A pre-assessment is a mock audit similar in duration to a full registration audit which your organization neither passes nor fails. The important feature of a pre-assessment is that it will provide a full list of any short falls between the requirements of the ISO 9001 2000 standard and your Quality Management System.

As a senior lead auditor I would always advise an organization to opt for a pre-assessment.

You now need to select a registration agency.

There are many registration agencies to choose from and in theory they are similar inthe services they provide, chiefly because they all have to abide by the same to EN standards, EN45011 and EN45012. In practice they offer different service levels, response times and re-assessment periods. So my advice would be to choose your registration body very carefully.

Finally the day has arrived for your registration rudit. This is where an auditor from the chosen certification body visits your organization and carries out a comprehensive audit of your organization.

When the auditor identifies a discrepancy or non-conformance between the work that is being performed and the requirements of ISO 9001 and how you say you operate your processes the discrepancy or non-conformance will be written up. There is no specific number of non-conformances that have to be raised for your organization to either pass or fail. It depends on how serious each point raised is or if a number of minor issues are all raised against one clause of ISO 9001 2000, say for example design.

For example: If only a few minor non-conformances are found during the registration audit, the registration body will issue a certificate of registration to ISO 9001 2000 stating that your organization complies with the requirements of the ISO 9001 standard. If however a major non-conformance is raised this results in your organisation being told that you must correct the non-conformance(s) and re-apply for another registration audit. This is why I would always recommend that you have a consultant carry out a Pre-Assessment audit on your business, re-applying for a complete re-assessment from a registration body can be a very expensive business.

Once a certificate of registration is issued it typically expires after three years, however some registration bodies certificates never expire. All registration bodies typically require Quality Management System surveillance audits of your organization at six months intervals to maintain the validity of the certificate.

At this point, you deserve to celebrate your accomplishments! However, once the certificate is issued you need to continue to monitor your own Quality Management System to ensure you continue to comply with the requirements of ISO 9001 2000.

Driso provide ISO 9001 2000 consultancy, auditing, software, and training Services. They also supply Easy ISO 9001 2000® software for initially setting up an ISO 9001 2000 compliant Quality Management System or improving upon an existing one.

To contact Driso Consultancy Services visit the web site below and see what they can do for you and your business. Contact: http://www.driso.co.uk for more details.

Labels: , , , , , , , ,