ISO 9000 Process Based Auditing

Any effective quality management system (including the subsystems) works as a control process, which has the ability to detect deviations and nonconforming products and assures that the corrective and preventive action measures are effective. The regulatory auditor should check that all subsystems and processes of the quality management system are structured as self-regulating control processes. For example Deming’s PDCA cycle demonstrates such a process with the following components:

i) Plan – Has the manufacturer established the objectives and processes to enable the quality system to deliver the results in accordance with the regulatory requirements?

ii) Do – Has the manufacturer implemented the quality system and the processes?

iii) Check – Has the manufacturer checked process monitoring and measurement results against the objectives and the regulatory requirements? Does the manufacturer evaluate the effectiveness of thequality system periodically through internal audits and management reviews?

iv) Act – Has the manufacturer implemented effective corrective and preventive actions? Confirm that the company is committed to providing high quality safe and effective medical devices, and that the company is conforming with applicable laws and regulations.

ISO 9001:2008 Draft Changes

0.1 Changes here are a statement about whom and where the standard is including any statutory requirements and have the same scale as any customer or regulatory requirements. It’s also clarified that these requirements are restricted to those applicable to the product.

0.4 There is a comment that state that the new standard is made due consideration to ISO 14001:2004.

1.1 &1.2 Statutory requirements had been referred in connection with purchased products and product realization. Second note explains that a statutory requirement can be a legal requirement.

After so many years of auditions the long last debate had been settled. Statutory legal requirements and statutory requirements are obliged to the purchasing processes. It was always an open area that no one had the correct answer: is your supplier must follow the law or not? Apparently yes.

2Normative reference – the ISO 9000 is now replaced by ISO 9000:2005.

3The explanations about what is a customer and what is an organization and what is a supplier had been removed.

4.1 Clause a – The word “determine” is replacing the “identify”

A note had been added stating that a purchased processes are regarded as purchasing products and another note that demand that these processes would be controlled as far as products.

4.2.1 Slight change of words but when you examine the change you realize the meaning is the same.

Note 2 was changed – a single document may include requirements for more than one procedure and requirements of one procedure may appear in more than one document.

It’s about time. A lot of headaches are vowed to be save. If your audit was one of the old school and demanded everything by the book – now you may combine two quality procedures to one document: Job description and training for example or you can split one document into two. How ever it is suitable for you as long as you provide the requirements.

4.2.3 A clarification that external documentation is considered while it is part of the quality management system.

5.1 Clause a – the word “statutory” had been added.

5.5.2 An addition for a requirement that the management representative would be a member of the organization’s management.

That addition puts all external consultants at risk – you can no longer be the

management representative. That sets a whole new line of form and documentations for you to develop in order that the external consultants would be considered as a management representative.

6.2.2Clause b –”provide training or take other actions to satisfy these needs” changed to “where applicable training needs to be provided to achieve the necessary competence”

Clause c – you must ensure that the training is with competence rather than if it was an effective training.

It all goes back to defining .You defined what is necessary now you must provide it nothing is new.

On one hand it is an improvement. The training must be reviewed before. But I think it’s not such an improvement. Instead of testing your employees if they got anything of the training you must now check the training itself before.

6.3 Clause c – information systems are included.

6.4 A new note: noise, humidity, temperatures are part of a working environment.

7.1 Clause c – measurement had been added to the activities.

7.2.1

Clause a – change of words – not of the meaning.

Clause c – the word ‘applicable’ replaces ‘related’.

Clause d – change of words – not of meaning.

A note has been added to explain what is the meaning of “post delivery activities”.

7.3.1 A note had been added clarifying that design review, verification and

validation are separated processes but they might be conducted together.

7.3.3

A change of words.

A note had been added clarifying what is included in “preservation of product”.

7.5.3 A requirement added specifying that product traceability must be included throughout the product realization.

That actually means that the product must be identified not only on the shelves after or between, but also throughout the realization process. Is pacticable? Only time will tell…

7.5.4

A change of words in the requirement to inform the customer of any problem

regarding his property.

The note had been amended that also personal data is included as customer’s

property.

7.5.5

A change of words:

from “conformity of” to “in order to maintain conformity to requirements”.

7.6

A change of words: from “devices” to “equipment”.

The reference to paragraph 7.2.1 had been removed.

Clause c – from “be identified to enable the”

to ” identification to enable their”.

Changes in the notes:

Note 1 – the reference to ISO 100012-2 had been removed.

Note 3 – explanation about when configuration of computer must be applied when the computer is used for monitor and measurements processes.

That means that from now on a computers that provides any kind of measurements services is considered a monitoring and measuring device. How can one calibrate a computer? Ask the supplier or your system administrator. They will know better than anyone. But you would have to prove it has been done.

8.2.1

A note had been added to suggest some means of conducting customer satisfaction evaluation.

8.2.2

Requirements for the audit evidence and results had been added and also that the management is responsible for ensuring preventive and corrective action to be taken.

The reference to the ISO 10011 is changed to ISO 19011.

8.2.3

A change of words:

“to ensure conformity of the product” had been removed.

A note had been added to clarify that the organization should determine the type of the monitoring and measuring according to the processes and how will this affect the quality management system.

8.2.4

A change of word:

“maintain evidence of conformity with acceptance criteria” had been removed but it is still a requirement.

8.3

An addition Clause d – specify how to deal with a nonconforming product that was discovered after delivery – but actually there nothing new only that they moved it to a new clause.

Save The Environment – Implement ISO 14001 Standards

Global warming, ozone depletion, pollution and extinction of numerous species of animals. These are just a few of the environmental issues that the world faces, in the name of development. As responsible corporate citizens, SMEs can play their part in preserving our natural environment for our next generation.

Both individuals and businesses especially have a social and environmental responsibility to fulfil. With the rapid development in today’s industrialised world, the issue of preserving and managing our environment has become crucial. The increasing awareness of the importance of good environmental management systems is evidenced by the amendments made to the Environmental Quality Act 1974 and other environmental regulations which serve to ensure stricter compliance of environmental standards. Malaysia also adopted the National Environment Policy in 2002 as a means of addressing environmental issues in an integrated manner while more and more companies are striving to attain the MS14001 EMS certification.

WHAT SMEs CAN DO TO SAVE THE ENVIRONMENT
As responsible corporate citizens, SMEs have a major role to play in preserving the environment. For starters, they can help the Government to achieve its recycling goals, by creating mechanisms to facilitate the segregation of recyclable wastes and to ensure that these wastes are sent to the relevant parties instead of being dumped in landfills and illegal dumpsites. Furthermore, SMEs must also ensure that proper waste management systems are in place in conducting their day-to-day businesses.

Below are a few steps that SMEs can take to do their part for the environment:
• Dispose off company wastes properly and responsibly.
• Encourage employees to reuse items where possible, for example, printing on both sides of the paper, etc.
• Practise recycling in the office, by introducing a recycling programme. Among the items that can be recycled are papers, cardboards, glass, aluminium cans and scrap metals.
• Implementing an Environmental Management System (EMS).

WHAT IS AN ENVIRONMENTAL MANAGEMENT SYSTEM (EMS)?
An EMS provides a framework for managing environmental practices that integrates with overall business goals in a systematic way. Various models can be applied to develop, implement and maintain an EMS. One of the more common models used by industries is the model described by the ISO 14001 standard which was developed by the International Organisation for Standardisation (ISO). The ISO 14001 standard EMS model focuses on continuous improvement through an on-going cycle of actions called the continual improvement cycle which incorporates the elements of planning, doing, checking and acting.

An EMS typically begins with a strong environmental policy which describes the organisation’s approach in managing its environmental affairs and reflects its commitment to protect the environment and human well-being. The environmental policy establishes the framework for environmental leadership and serves as a contract between an organisation’s employees and its stakeholders. As such, commitment and strong support from top management is essential in making an EMS a success. Developing the environmental policy also helps to lay the groundwork for the planning phase of the EMS cycle. It is in this stage that active management support is sought, a multi-disciplinary EMS implementation team is formed and an introduction meeting is held to brief employees on the implementation of EMS. On top of that, the scope and budget for the implementation of EMS is also pre-defined. In other words, it is important that management provides all the resources necessary for the successful implementation of EMS.

CURRENT ENVIRONMENTAL PRACTICES
It is evident that some SME has put in place various initiatives to preserve the environment while utilizing resources efficiently. These initiatives include the following:

1. Discouraging open burning in fields and plantation sites while encouraging the composting of felled trees and crops in an environmentally-friendly way which in turn prepares land for replanting by using natural fertilizer;
2. Discouraging the use of chlorofluorocarbons (CFCs) in various industrial, commercial and household appliances; and
3. Encouraging the recycling of resources for example, in the plastic manufacturing industry, materials are being regenerated through the forming process in an effort to reuse biodegradable products in an environmentally-friendly way.

WHAT IS WASTE MANAGEMENT?
Waste management involves collecting, transporting, processing, recycling and disposing waste materials, in an effort to reduce their adverse effects on human health and the environment. Waste materials include solid, liquid or gaseous substances. The implementation of waste management requires careful planning and also adequate financial resources and is the responsibility of all parties involved such as individuals, businesses and corporations, including SMEs.

INCENTIVES FOR ENVIRONMENTAL PROTECTION AND WASTE MANAGEMENT
In an effort to support an enhanced level of environmental pro activity, the government provides a range of fiscal activities which includes the Pioneer Status tax exemption and the Investment Tax Allowance for the manufacture of environmentally-friendly products, the provision and supply of environmentally-friendly services and specific activities which contribute towards the presentation of the environment. The said incentives are available for the following activities:

• Storage, treatment and disposal of toxic and hazardous waste
• Waste recycling activities which are high-tech in nature for instance, recycling agricultural wastes, chemicals and the production of reconstituted wood-based panel boards or other products
• Energy-generating activities using biomass which are renewable and environmentally-friendly. Examples of biomass resources include palm oil mill waste, rice mill waste, sugar cane mill waste, timber/sawmill waste and paper recycling mill waste
• Energy conservation services

Accelerated Capital Allowance with a special initial rate of 40% and an annual rate of 20% for total write-off within three years is given to organisations that are waste generators, for their capital expenditure on machinery and equipment incurred, to set up facilities to store, treat and dispose their waste. This incentive is also available to companies undertaking waste recycling activities.

Top Management Commitment In ISO 9000 Standards

Top Management Commitment In ISO 9000 Standards

The top management (managing director or chief executive) should demonstrate a commitment and a determination to implement an ISO 9000 quality management system in the organization. Without top management commitment, no quality initiative can succeed. Top management must be convinced that registration and certification will enable the organization to demonstrate to its customers a visible commitment to quality. It should realize that a quality management system would improve overall business efficiency by elimination of wasteful duplication in management system.

The top management should provide evidence of its commitment to the development and implementation of the quality management system and continually improve its effectiveness by:

- Communicating to the organization the importance of meeting customer as well as statutory and regulatory requirements,

- Defining the organization’s quality policy and make this known to every employee,

- Ensuring that quality objectives are established at all levels and functions,

- Ensuring the availability of resources required for the development and

implementation of the quality management system,

- Appointing a management representative to coordinate quality management

system activities, and

- Conducting management review.

The top management should also consider actions such as:

a. Leading the organization by example,

b. Participating in improvement projects,

c. Creating an environment that encourages the involvement of people.

This type of top management commitment may be driven by:

a. Direct marketplace pressure: requirements of crucial customers or parent

conglomerates.

b. Indirect marketplace pressure: increased quality levels and visibility among

competitors.

c. Growth ambitions: desire to exploit market opportunities.

d. Personal belief in the value of quality as a goal and quality management systems as a means of reaching that goal.

The top management should identify the goals to be achieved through the quality

management system. Typical goals may be:

• Be more efficient and profitable

• Produce products and services that consistently meet customers’ needs and

expectations

• Achieve customers satisfaction

• Increase market share

• Improve communications and morale in the organization

• Reduce costs and liabilities

• Increase confidence in the production system

Conduct Initial Status Survey In ISO 9000 Standards

Conduct Initial Status Survey In ISO 9000 Standards

ISO 9000 does not require duplication of effort or redundant system. The goal of ISO 9000 is to create a quality management system that conforms to the standard. This does not preclude incorporating, adapting, and adding onto quality programs already in place. So the next step in the implementation process is to compare the organization’s existing quality management system, if there is one — with the requirements of the standard (ISO 9001:2008).

For this purpose, an organization flow chart showing how information actually flows (not what should be done) from order placement by the customer to delivery to this customer should be drawn up. From this over-all flow chart, a flow chart of activities in each department should be prepared.

With the aid of the flow charts, a record of existing quality management system should be established. A significant number of written procedures may already be in place.

Unless they are very much out of date, these documents should not be discarded.

Rather, they should be incorporated into the new quality management system.

Documents requiring modification or elaboration should be identified and listed. This exercise is some times referred to as ” gap analysis”. During these review processes, wide consultation with executives and representatives of various unions and associations within the organization is required to enlist their active cooperation.

In the review process, documents should be collected, studied and registered for

further use, possibly after they have been revised. Before developing new quality

management system documentation, you need to consider with which quality

requirements or department you should start. The best is to select an area where

processes are fairly well organized, running effectively and functioning satisfactorily.

The basic approach is to determine and record how a process is currently carried out.

We can do this by identifying the people involved and obtaining information from them during individual interviews. Unfortunately, it often happens that different people will give different, contradicting versions of a process. Each one may refer to oral instructions that are not accurate or clear. This is why the facts are often not described correctly the first time around, and have to be revised several times.

Once it has been agreed how to describe the current process, this process has to be adapted, supplemented and implemented according to the requirements of the quality standard (ISO 9001:2008). This requires organizational arrangements, the drawing up of additional documents and possible removal of existing documentation (e.g. procedures, inspection/test plans, inspection/test instructions) and records (e.g. inspection/test reports, inspection/test certificates).

In introducing a quality management system, the emphasis is on the improvement of the existing processes or the re-organization of processes.

In general, the steps to follow are the following:

a. Ascertain and establish the following:

What is the present operation/process? What already exists?

b. Analyze the relevant sections of the quality standard – ISO 9001:2008:

What is actually required?

c. If necessary, supplement and change operational arrangements in accordance

with the standard, develop documents and records, and describe operations/

processes:

What is the desired operation/process?

The gap analysis can be done internally, if the knowledge level is there. Or a formal pre-assessment can be obtained from any one of a large number of ISO 9000 consulting, implementing, and registration firms.

Create a Documented Implementation Plan In ISO 9000 Standards

Create a Documented Implementation Plan In ISO 9000 Standards

Once the organization has obtained a clear picture of how its quality management system compares with the ISO 9001:2008 standard, all non-conformances must be addressed with a documented implementation plan. Usually, the plan calls for identifying and describing processes to make the organization’s quality management system fully in compliance with the standard.

The implementation plan should be thorough and specific, detailing:

a. Quality documentation to be developed

b. Objective of the system

c. Pertinent ISO 9001:2008 section

d. Person or team responsible

e. Approval required

f. Training required

g. Resources required

h. Estimated completion date

These elements should be organized into a detailed chart, to be reviewed and

approved. The plan should define the responsibilities of different departments and personnel and set target dates for the completion of activities. Once approved, the Management Representative should control, review and update the plan as the implementation process proceeds.

Typical implementation action plan is shown in Figure 2. Use ISO 10005:1995 for guidance in quality planning.