Authors Posts by ISOUpdate.com

ISOUpdate.com

185 POSTS 23 COMMENTS
ISO Update aims to provide information, resources, and updates around the Standards and Certification industry. We believe that organizational standards can help businesses of all shapes and sizes become more efficient and successful on a local, federal, or global scale.

by -

ISO 14001 is an international standard. An accredited certification to this standard demonstrates a committed stance on environmental management to stakeholders. Moreover, when an organization has correctly implemented an environmental management system it ensures environmental compliance, improves environmental performance and provides a systematic and strategic approach to environmental issues.

There are many benefits to implementing ISO 14001, here are the top 5.

1. Ensuring Management Commitment

ISO 14001 requires top management to commit and lead the implementation and maintenance of best environmental practices. Engaging the leadership team will increase employee engagement. When everyone in the organization is working towards the same goal, the probabilities of achieving it increase.



2. Strengthen Stakeholder Relationships

An ISO 14001 certification can improve an organization´s reputation and improve stakeholder relationships. If a stakeholder requires ISO 14001 certification, it is obvious the relationship will improve upon certification. However, even if stakeholders do not require ISO 14001 certification, having the certification can increase stakeholder confidence.

3. Improve Business Development

If an organization is seeking for new clients, it is possible that an organization might encounter a client that requires its suppliers to be ISO 14001 certified. Thus, having certification can give organizations a competitive advantage.

4. Identify Risk and Opportunities

Every organization is different, ISO 14001 allows organizations to identify the environmental issues that apply to them. It guides organizations in the management, monitoring and control of these issues and the identification of risks and opportunities that could either enhance or prevent the achievement of their environmental goals.

5. Safeguards Process Improvement

The certification audit process can also be beneficial to an organization. A certification body audit ensures that the management system has been implemented and maintained correctly, and it also identifies opportunities for improvement and potential risks that the organization might have missed.

Organization can implement ISO 14001 without seeking certification, however, in many cases it is the certification that will give confidence to stakeholders. To find an accredited certification body visit the ISO Update Registrar Directory.


by -
ISO Implementation Process

Preparing for an ISO implementation process of any ISO standard can be overwhelming and stressful for organizations of any size. How an organization prepares for an ISO implementation process will depend on factors such as size and complexity of its processes, the current knowledge and culture related to the standard; i.e., quality, environmental, safety, etc; the maturity of any other existing systems related to the standard wishing to implement, and many others.

6 Tips to Facilitate the ISO Implementation Process

Despite the differences there may be between organizations, there are a few tips that will facilitate the ISO implementation process of any management system.

Know the Standard

It is essential that some personnel knows the management system’s requirements. Everyone does not need to be an expert on the requirements of the specific standard that will be implemented, but key workers need to fully know and understand all of the requirements of the standard.

Keep Everyone Informed

The implementation process is not a task of just a few chosen ones. Everyone needs to be involved in this process. Every worker needs to know what is being implemented, why is it being implemented, which are the benefits for the organization and for themselves, and how they will be involved in the process. When people are informed, they will be more open and willing to collaborate in the implementation.

Analyze the Organization’s Current Situation

Before starting to implement any ISO management system, an organization needs to know its level of compliance with the standard. This will allow the organization to understand beforehand its strengths and weaknesses regarding the ISO management system wishing to implement and estimate the time needed for implementation.

Map Your Processes

Establish and record current processes in order to know the relationships between departments and how the processes flow within the organization. This will allow organizations to plan their implementation by processes and not just by areas and departments.

Review Existing Procedures and Work Instructions

Many processes need written and documented information that will guarantee that activities are carried out in the correct manner. Organizations need to review which processes are documented and how many work instructions there are. It is not the same to develop a few documents and just review work instructions than to develop them from scratch. Organizations need to have an idea of how much time they will have to invest in developing and reviewing documents.

Review Current Training Programs

Evaluate existing training and awareness programs. Training and awareness are an important part in the implementation process and if an organization has not considered training its workers, it would be best to redefine these programs to make sure that a large percentage of workers are trained and informed about policies, procedures, regulations, etc that will be a part of their daily activities.

These are some recommendations that will help your organization prepare for the ISO implementation process of any ISO management system.

Note: Make sure that the whole organization is working for the same objectives and pulling in the same direction.

by -

An Internal Audit is a mandatory requirement in all ISO Management System Standards. An Internal Audit program can act as a powerful tool to ensure an organization is meeting requirements effectively – and identify process improvement opportunities. This can help a company streamline processes to move faster and more efficiently. Effective Internal Audits can give management important insights into process compliance issues and help them take pro-active measures.

How Can I Conduct an Effective Internal Audit?

Conducting an effective audit is in the best interest of the company, and for you, as an auditor. Following these simple guidelines and suggestions will ensure you have success with each audit.

Remain Independence and Objectivity

The Internal Audit activity must be independent, and you, as an Internal Auditors, must be objective in performing your work. Auditors assigned for a department should not have any personal or professional association with the work being audited. Remaining independent and objective is required to ensure the auditor can conduct audit without bias and report all relevant non-conformities.

The auditor needs to look at all evidences objectively to determine audit findings.  Avoid being judgmental and do not be influenced by others.

Relevant Experience & Knowledge

ISO 19011 defines an auditor as a person with the competence to conduct an audit. Competence is demonstrated ability to apply knowledge and skills.

While assigning an auditor, an organization will be careful, paying close attention to skills, training, and years of experience in the industry.  An auditor with inadequate experience and knowledge will not justify the intent for which audits are conducted.

Maintaining current knowledge is essential to thriving in this industry by staying current in news and trends, and attending training courses.

Plan in Advance

Insufficient time allocated for an audit may result in audits getting conducted in a rush – and this can significantly drop the quality in your audit, and your reputation.  Audits need to be planned in advance and allowed adequate time allocated based on the complexity of work being carried out.

Planning in advance and allowing for sufficient time also ensures process owners can respond to non-conformities and address them before they face external audits.

Audit Reporting

Ensure each Audit report you submit is clear, concise, and complete in all respects.

The aim of audit is not only to highlight non-conformity; the aim is also to identify process improvements and best practices. The real value-add that audits can make is through identification of process improvements and best practices. This helps organizations optimize their processes and utilize the best practices across the organization.

Internal Audits give an objective assurance to the management that the existing controls are adequate to ensure all requirements are met. An effective Internal Audit can help an organization to further improve its systems.

Find more ways to better career with ISOUpdate’s Training Resources.



by -
Become a Third Party Auditor - ISOUpdate.com

An accredited registrar, also called an accredited certification body (CB), is an organization accredited by a recognized accrediting body for its competence to audit and issue certification confirming that an organization meets the requirements of a standard (e.g. ISO 9001 or ISO 14001). There are many benefits of using an accredited registrar when looking to obtain certification for your organization.

Accreditation means an independent, objective body recognizes that an organization is qualified to provide specific services. An accreditation body should assess a registrar’s facilities, procedures and staff against a set of criteria that define acceptable competence levels and capabilities.



There are many registrar companies that offer their services to audit and determine if an organization meets the requirements of a specific standard; however, not all registrars are accredited. An organization may decide to seek certification from any of these registrars, accredited and non-accredited. Nonetheless, choosing an accredited registrar can bring the following benefits to an organization:

  • Organizations can be assured of the registrar’s ability, since the accreditation represents an independent assessment of the registrar’s credibility to perform management system registration.
  • It provides assurance that the certification is based on conformance with internationally accepted practices and procedures, thus offering credibility to the certificate.
  • Many clients and customers require suppliers’ management system is certified by an accredited registrar.
  • Accredited registrars are prohibited to offer both consulting and registration services to one organization, in order to ensure that the value of the certificate will not be compromise due to conflict of interest; on the other hand, some non-accredited registrar do offer both services as one package in order to offer more competitive prices whilst jeopardizing the credibility of the certification.
  • Accreditation assures organizations that a registrar meets specific requirements on an ongoing basis.
  • Accredited registrars can assure that the auditors selected are properly qualified for the industry specialty, and that certification audits will be effective and objective.
  • Accreditation provides an added safeguard against improper and fraudulent activities.
  • In order to maintain accreditation, registrars are pressured to enforce internationally sanctioned registration standards and practices within its organization and among its auditors.
  • Accreditation registrar are often stipulated and supported by local governments.

Organizations that choose an accredited registrar and develop an active relationship with it will ensure the value of its registration certificate, and they can guarantee their customers and clients that their management system has been certified by an unbiased, objective and professional audit.



by -

Improving your Quality Management System is simpler than you think. By learning about ways to improve, you are already well on your way to achieving success with your organization or auditor training. Follow these 10 simple suggestions and you will see changes.

10 Simple Ways to Improve your Quality Management System

1. Commit to improvement

For any QMS to improve, it is essential that everyone is committed to seeking problems, evaluating efficiency and effectiveness of processes and implementing better and improved ideas. Management should be the first to make this commitment and if management “walks the talk” then everyone will follow.

2. Analyse and assess current QMS

Organizations need to take a closer look at their current practices in order to identify any gaps between what is being done and what should be done. This can be achieved by interviewing workers in critical control points, reviewing procedures and records and observing how processes are occurring. Any steps that are not adding value to the process, the system or the organization must be identified, removed or improved.

3. Include everyone in training programs

A QMS is not the responsibility of one person or one department. Everyone must be involved in improving the quality of products, services and processes.

Organizations should establish a training program for new employees and existing ones.  These programs should promote knowledge, produce skills and capacities and reduce resistance when implementing new ideas for improvement.

4. Define clear goals and objectives

QMS should aim at achieving specific goals. If a clear path is not drawn, there’s a risk that people will be working real hard but in different directions. Time should be spent in assuring everyone knows these goals, how they’ll be achieved, how they’re measured and periodically they should be informed of where the organization is standing in relation to these goals.

5. Use the correct key performance indicators

Organizations need to carefully select and review their KPI’s (Key Performance Indicators). KPI’s let an organization know how efficient and effective processes are, and indicate where possible problems could be. If they are not giving a real overall picture of where the organization is at regarding quality, then another look should be taken to change or improve what and how performance is being measured.

6. Listen to the suggestion

Create a system that will promote workers and customers to share improvement ideas. Many great improvement ideas come directly from the people processing a product or the people that actually use it.

7. Give credit

Giving credit to those who deserve it encourage participation throughout the organization and motivates workers by recognizing their work and their ideas. Compensation or recognition should not necessarily be monetary, a simple public recognition in working meetings to can have great effects in lifting workers morale.

8. Make the system simple

A QMS that is extremely complex and overloaded with documents is not necessarily the best one. If documents and procedures are long and complicated, it is very likely that people will never use them.

Evaluate the system and make sure that it makes sense and that it’s as simple as possible.

9. Create quality groups

Some organizations face difficulty with workers from different departments or areas that are reluctant with sharing information. By bringing together people from different areas to evaluate processes and recommend improvements, an open and more effective communication can be achieved between areas that operationally seem to be apart.

10. Have a quality attitude

In order to reach the goals that have been set, organizations need to identify and detect problems and weaknesses but they must focus on improvements. If managers are constantly focusing on failures and defects and not on how to remove or improve them, the right attitude and mindset for quality will never be achieved.

Learn how to prepare your company for the ISO Implementation Process.

by -

The Process of Managing Outsourced Suppliers in accordance with ISO 14001:2105  

Following the release of the ISO 14001:2015 standard, organizations had to incorporate multiple changes and activities into their EMS (Environmental Management System) and enable to meet the terms of the ISO 14001:2015 standard. One of the changes that might not seem so obvious is the process by which one’s organization manages outsourced services and suppliers, ensuring that they are aligned with the standard’s terms. By mentioning “outsourced suppliers,” the standard denotes third parties who are contracted to perform critical parts of one’s process and service normally, but not always outside one’s own facility. What does one need to understand and what actions does one need to take in order to ensure that one’s EMS remains compliant? 

Important Changes in ISO 14001:2015 

The ISO 14001:2015 standard states that the organization shall “determine its environmental requirement(s) for the operational planning and control regarding products and services as appropriate.” While this statement does not seem drastically different compared to the 14001:2004 standard, Annex A provides more information. One is told how an organization should decide on the amount of control needed over its external suppliers based on factors such as the ability to meet compliance, technical aptitude, the significance and the consequences of the product or service for the organization, and the average capability of the organization’s purchasing process of delivery.  

Additionally, Annex A explains that the amount of control exerted by the organization over the delivery of a service or product is variable. However, one thing is certain: one’s organization must assume all final responsibilities for the environmental performances of any outsourced suppliers in the delivery of one’s product or service.  



How would one achieve this? 

Laying down the foundations 

Regarding the ISO 14001:2015 standard, there are several criteria that should be checked: 

  • How likely are one’s suppliers to deliver one’s key environmental performance indicators? 
  • If one’s supplier is not ISO 14001:2015 certified, do they have an environmental policy? If not, do they follow the terms of one’s organization’s environmental policy? 
  • Does one’s supplier have an internal audit policy and results readily available? 
  • Does one’s supplier completely comprehend legislation that pertains to one’s product and its delivery? 
  • Does one’s supplier have evidence of factoring in risks and identifying environmental aspects to mitigate environmental impacts? 

Now, how can an organization guarantee that its supplier has the capability to manage environmental performance in accordance with the ISO 14001:2015 guidelines? Consider: 

  • Insisting on routinely creating key performance indicators for the outsourced supplier. 
  • Ensuring one’s supplier places great emphasis on environmental criteria whenever they make purchases. 
  • Seeing evidence of actions such as assessing risks and identifying environmental impacts that will produce improvement.  
  • Asking for a record of the supplier’s legislation and proof that they comply with environmental laws that pertain to their work 
  • Seeking proof that any environmental accidents or hazards as a result of the supplier will be documented and reported to the organization according to an emergency preparedness procedure and confirm the existence of a procedure whenever authorities, containment, and corrections are involved. It is advised that the supplier is guided as to how this process should operate, given that the organization itself is responsible any outcomes. 
  • Ensuring that one’s organization agrees to a program for the supplier’s regular inspections, where the environmental performance of the supplier is judged. If necessary, the supplier may take action. 

An Organization’s Key Responsibilities 

When managing one’s outsourced suppliers, it is important to remember that one’s organization has the ultimate responsibility for environmental performance and all internal and external environmental impacts caused by the manufacturing of one’s product or service. As a result of the more descriptive Annex A, the more control one’s organization asserts over its supplier, the better one’s general environmental performance. Taking the steps mentioned above will help one ensure that the suppliers’ environmental performance is managed effectively and the terms of ISO 14001:2015 are consistently surpassed. 

 

by -

ISO 9001:2015 has brought a variety of new concepts to the field of standards and certification. One of these being the process of aligning the Quality Management System with the organization’s own strategic direction – and, understanding this relationship to maximize a company’s efficiency and potential.

Understanding the company’s context while ensuring quality in policies and objectives stated by the board is paramount. However, the difficulty lies in both factors being in line with the body’s general strategic direction.

Knowing your Strategic Direction

Knowing the strategic direction for an organization may seem like simple task to undertake, but there is more to it than meets the eye.

Strategic direction refers to the path of actions you are utilizing to achieve the goals you and your company has set out to do in the basics of organizational strategy.

The creation of achievements and goals are a common step that a company takes during the building process. Consider a companies Mission and Vision Statement, something that I am sure you have noticed written on the organization’s walls for all to see. These statements articulate their companies agenda on where they see the company headed, as well as dictate a plan to make sure they heading in the right direction. This will guide the company’s course of action through the years of growth and progress.

Utilizing Quality Objectives towards the Strategic Direction

Quality objectives are the target statements that will be looked upon when considering growth and progress in an organization. These objectives provide bullet points for consistent and continued improvement all around the organization, and each objective has a specific layout or plan to ensure that the motives are in line with the scope of the vision of the company.

Consider an organization’s formulated mission statement involves the improvement in quality of their product while still maintaining a competitive edge on quantity and creation – the quality objective would involve a specific targeted percentage of growth in an predetermined time frame. This would give an outline and guide on the mission’s landmark sand benchmarks for success.

Quality objective must be realistic – enough to foresee some roadblocks and adjust accordingly. Ensure to use a grounded approach to goals. This is especially important when trying to meet the standards set in the time estimated.

The Harms with a Lack of Strategic Direction

In earlier stages of progress, a company may; due to many extenuating circumstances; delay the creation of the mission and vision statements. This is inadvisable, as it often leads to a vague strategic direction for the entire process.

If you are applying ISO 9001:2015 or undertaking the transitional process from using an ISO 9001:2008 to 2015, an overall mission and vision is paramount to a company’s initial growth. These goals create a critical role and aspect in the successful implementation of the requirements provided by the QMS.

A lack of an overall vision could lead to: decreased focus in specific standards; an inferior demonstration of the company’s quality policies, objectives, and management review.

The best way of getting a head start in this process is the creation of a unified and specific vision, ensuring that all the elements involved have a general direction and focus. This ultimately leads to an easier time creating and maintaining standards set by the QMS.

These factors will create a steady form of development and improvement for the company, and may even provide ways to improve relations with customers, build rapport, all while growing your business.

 

Learn more about ISO 9001:2015 & Organizational Knowledge



by -
What are the differences between ISO 14001:2015 and ISO 14001:2004 - ISOUpdate.com

The latest version of ISO 14001, ISO 14001:2015 has brought changes to the most widely used standard on Environmental Management Systems (EMS). One of the major changes is its structure. ISO 14001:2015 now has the high level structure that is now common to all ISO management system standards referred to as Annex SL. This new common structure brings a more strategic focus to the standard and facilitates the integration with other ISO management system standards. In addition to this new structure, there are many differences between ISO 14001:2015 and ISO 14001:2004.  Here we will briefly explain the most relevant ones.



Organizational Context

Organizations are now required to systematically take into account the organizational context.  Organizational context can be looked at as the environment in which your business operates.  Now you will need to consider which internal and external factors can influence the environmental goals of your organization.

This will allow organizations to have a better understanding of the risks and opportunities it will encounter and to be better prepared to minimize (risks) and maximize (opportunities) in order to favour the organization’s environmental performance.

Needs and Expectations of Interested Parties

Organizations are now required to take a careful look at the needs and expectations of interested parties (stakeholders). They will need to identify relevant stakeholders and understand how these can impact the EMS if their needs and expectations are not met.

Leadership and Commitment

Top management is now required to demonstrate commitment and leadership to the EMS. In the new standard there is no such a thing as a management representative, now everyone is required to commit in a number of specified ways.

In ISO 14001:2004, organizations were required to commit, among other things, to reducing negative environmental impacts. Now, the new standard goes further by requiring organizations to also aim at having a positive impact and improve environmental conditions.

Life Cycle Perspective

The term life cycle has been included many times more in the new standard than in the 2004 revision. While in the last version, organizations were not required to consider the life cycle of products or services for the identification of environmental impacts, the new one does.

Organizations are now required to take a life cycle perspective when identifying and evaluating environmental aspects. For example, procurement, designed, transportation and disposal activities will now need to be considered. The purpose of this life cycle perspective is to contribute to sustainable development and prevent negative environmental impacts from shifting through the life cycle of a product or service.

Environmental Performance

The standard is now more specific regarding the evaluation of environmental performance. Organizations are required to use quantitative data in the evaluation process.

Communications

According to this new version, organizations are required to communicate externally relevant information regarding the EMS. This should be done following a communication process that the organization must establish.

In general, this new standard emphasises environmental performance improvement and drives organization to focus on organizational context and relevant stakeholders. It also promotes risk based thinking and a life cycle perspective.



by -

All management systems require organizations to conduct internal audits in order to obtain information that will evidence the degree to which requirements are being met. In other words, internal audits check practice against policies, processes and procedures and thoroughly document any differences.

Although internal audits are an important tool for organizations to evaluate their management systems and to uncover areas that are in need of attention, for many, this process induces an enormous amount of stress. For audits to serve as a means to identify gaps and effective solutions, it is essential that these are formal, planned and organized. Other key characteristics internal audits should have are:



They are scheduled
Surprise audits are not welcomed by anyone. A schedule should be set and communicated to everyone, preferably at the beginning of the year. There’s no need to audit all processes at once; different processes can be audited at different times throughout the year, organizations just need to make sure that at the end of the year all processes have been audited.

Auditors are competent
Auditors need to demonstrate in-depth knowledge of the standard which they are auditing against and they should have an understanding of the processes being audited. They should be objective and impartial; this means that they can’t audit a process which they manage or control. Large organizations usually have a team of trained auditors, but that is not necessary; an alternative is to hire the services of an external consultant to perform the internal audits.

They are planned
The audit needs to be confirmed with the process owner. At this stage the auditor should review procedures and previous findings or issues related to the audited process. A checklist with a pre-determined list of questions can be sought to be used during the audit; this checklist should be provided to the auditee so they have time to organize any information.

It’s conducted in an objective and friendly manner
An audit should start with an opening meeting with the auditor and the auditee(s). It’s recommended that the auditor works systematically through the checklist or procedure, while reviewing records, observing the process, analyzing process data and talking to employees. During the audit, the auditor must discuss the findings with the auditee before recording it.

Audit findings are recorded
A closing meeting with the auditee is fundamental so information is not delayed. Here the auditor should point out possible weaknesses and areas for improvement. Findings and their details (these include non-conformities, positive areas and improvement areas) need to be recorded and communicated to the auditee(s) and management.

Findings are monitored
The auditor is responsible for ensuring that corrective actions have been taken to fix any problems found during the audit.

If everyone takes advantage of the positive results internal audits can bring, and if these aid organizations to improve their processes and management system- whether is a quality, environmental or any other system- an internal audit can be considered a success.



ISO 9001:2015 represents a major change to the 9001:2008 version. One of these changes regards the Quality Management Systems (QMS) documentation.

The 2008 version of the standard, uses two separate terms “documents” and “records” to identify its documentation, whereas, in the recently published Draft International Standard of the new revision, both these terms are combined as “documented information”.



For those familiar with the 2008 version, it can be said that where it refers to “documented procedures” in the new revision it is expressed as a requirement to maintain documented information. Also, where the 2008 version refers to as “records” it is now expressed as a requirement to retain documented information. Below, there’s a list of the documented information that the new standard requires to be maintained and retained.

Documented information that is required to be maintained with ISO 9001:2015

  • The scope of the QMS, including the products and services it covers and the justification of those requirements that the QMS will not be able to apply.
  • Information that supports the operations of processes.
  • The quality policy.
  • Information that defines characteristics of products and services, activities to be performed, and the results to be achieved.

Documented information that is required to be retained with ISO 9001:2015

  • Information necessary to have confidence that processes are being performed as planned and conform to requirements.
  • Information on the quality objectives.
  • Information as evidence of fitness for purpose of monitoring and measurement resources.
  • Information as evidence of competence.
  • Information describing the results of the review of requirements related to products and services.
  • Information resulting from the design and development process.
  • Information on review of design and development changes.
  • Information of the results of the evaluation, monitoring of performance and re-evaluation of the external providers.
  • Information necessary to maintain traceability when required.
  • Information describing the results of the review of changes, personnel authorizing the change, and any necessary actions
  • Information providing traceability to the person(s) authorizing release of products and services for delivery to the customer.
  • Information on actions taken on nonconforming process outputs, products and services.
  • Results of monitoring and measurement activities.
  • Information as evidence of the implementation of the audit programme and the audit results
  • Information as evidence of the results of management reviews.
  • Information as evidence of the nature of the nonconformities, actions taken, and the results of any corrective action.

As it can be seen from the above list, in the new version of the standard, it will not be required to create and maintain a Quality Manual, which has been around since the creation of ISO 9001 in 1987.