SlideShare a Scribd company logo
1 of 33
ISO 9001:2015 What
Changed?
Debra Hay Hampton
ISO 9001 Lead Auditor
Debra Hampton has over 30 years of improving processes and systems with
experience from hospitals, schools, and many types of manufacturing
facilities, a methodical approach is used to focus on building a system of
processes that collect data to make decisions that create sustainable,
continual improvement and consistent product. Companies she works with
become better at “turning effort into dollars”.
Contact Information
+1 229 798 0277
debra@ce-q.com
www.ce-q.com
linkedin.com/debra-matthews-hay-hampton
twitter.com/name.surname
fb.com/debrahayhampton
Structure Changed
• New Common format for use in all management system standards
• Standardized core text and structure for multiple ISO management systems
for integration
• Standardized core definitions
• Allows Integrating multiple management systems (quality,
environmental, information security, health and safety) and easier
implementation
• Annex SL of the www.iso.org/directives
What are the Benefits of the New Standard
• More risk control
• Better cost control
• Improved morale and motivation
• Customer retention and loyalty
• Interested party messaging
• Improved image and reputation
• Credibility
• Ability to respond quickly
• Improved customer satisfaction
• Improvement
Structure of ISO 9001:2015
1. Scope
2. Normative References
3. Terms and Definitions
4. Context of the Organization
5. Leadership
6. Planning for the QMS
7. Support
8. Operation
9. Performance Evaluation
10. Improvement
Changed Definitions
• Organization
• Interested Party
• Management System
• Objective
• Competence
• Corrective Action
• Continual Improvement
New Definitions
• Risk
• Documented Information
• Performance
• Context of the Organization
• Monitoring
• Improvement
• Knowledge
Additional Terms Not Defined in 9000:2005
Additional Terms not Defined in 9000:2005 Terms that were Defined but are Different to 9000
3.23 involvement
3.25 function
3.35 strategy
3.36 object
3.38 statutory requirement
3.39 regulatory requirement
3.42 innovation
3.46 output
3.48 service
3.49 data
3.52 information system
3.56 feedback
3.58 complaint
3.66 performance indicator
3.67 determination
3.26 customer
3.27 supplier/provider
3.30 quality management
3.33 quality management system
3.34 quality policy
3.37 quality
3.41 traceability
3.44 design and development
3.45 quality objective
3.47 product
3.57 customer satisfaction
3.60 audit criteria
3.6.3 concession
3.68 review
Quality Management Principles
Were 8 Principles Now 7 Principles
Customer Focus Customer Focus
Leadership (Involvement) Leadership (engagement)
Involvement of People Engagement of People (empower, engage, capability
to deliver value)
Process Approach Process Approach (integrates into System into
definition)
System Approach to Management (Included in the Process Approach)
Continual Improvement Improvement
Factual Approach to Decision Making Evidence Based Decision Making (Evaluation is
included in the principle)
Mutually Beneficial Supplier Relationships Relationship Management (expands influence)
Conceptual Changes: Greater Emphasis on -
• Customer
• Risk-Based Thinking
• Aligning QMS Policy and Objectives with the Strategy of the
Organization
• Greater Flexibility with Documentation
• Consistently Providing Conforming Products and Services
Key Changes
• Understand Context of the Organization – Necessary to understand
“one size doesn’t fit all”
• Process Approach Strengthened/More Explicit
• Concept of Preventive Action Now Addressed Throughout the
Standard by Risk Identification and Mitigation
• Term Documented Information Replaces the Terms Document and
Record
• Control of Externally Provided Products and Services Replaces
Purchasing/Outsourcing
Structural Changes
ISO/TC176/SC2/N1220
4 Context of the
Organization
5 Leadership 6 Planning 7 Support 8 Operation
9 Performance
Evaluation
10
Improvement
4.1 Understand
Organization and
its Context
4.2 Understand
Needs &
Expectations of
Interested Parties
4.3 Determine
Scope of QMS
4.4 QMS and It’s
Processes
5.1 Leadership and
Commitment
5.2 Policy
5.3 Organizational
Roles,
Responsibilities &
Authorities
6.1 Actions to
Address Risks &
Opportunities
6.2 Quality
Objectives &
Planning to
Achieve
6.3 Planning of
Changes
7.1 Resources
7.2 Competence
7.3 Awareness
7.4
Communication
7.5 Documented
Information
8.1 Operational
Planning and
Control
8.2 Requirements
for Products &
Services
8.3 Design &
Development
8.4 Control of
External Processes,
Products & Services
8.5 Production
and Service
Provision
9.1 Monitoring,
Measurement,
Analysis &
Evaluation
9.2 Internal Audit
9.3 Management
Review
10 General
10.2
Nonconformity &
Corrective Action
10.3 Continual
Improvement
ISO/TC176/SC2/N1220
4 Context of the
Organization
5 Leadership 6 Planning 7 Support 8 Operation
9 Performance
Evaluation
10
Improvement
4.1 Understand
Organization and
its Context
4.2 Understand
Needs &
Expectations of
Interested Parties
4.3 Determine
Scope of QMS
4.4 QMS and It’s
Processes
5.1 Leadership and
Commitment
5.2 Policy
5.3 Organizational
Roles,
Responsibilities &
Authorities
6.1 Actions to
Address Risks &
Opportunities
6.2 Quality
Objectives &
Planning to
Achieve
6.3 Planning of
Changes
7.1 Resources
7.2 Competence
7.3 Awareness
7.4
Communication
7.5 Documented
Information
8.1 Operational
Planning and
Control
8.2 Requirements
for Products &
Services
8.3 Design &
Development
8.4 Control of
External Processes,
Products & Services
8.5 Production
and Service
Provision
9.1 Monitoring,
Measurement,
Analysis &
Evaluation
9.2 Internal Audit
9.3 Management
Review
10 General
10.2
Nonconformity &
Corrective Action
10.3 Continual
Improvement
Planning
Changes
Plan
(4, 5, 6, 7)
Do
Check
Act
Planning – Concept (Clause 4.0)
• Concept of the Organization must be determined
• Internal and External Issues
• Relevant Internal and External Interested Parties and their requirements
Planning – Process ID and Defined (Clause
4.0)
• Emphasis and One of the Most Significant Changes for Some
Organizations if 1994 Style, Lots-of-Documents, Lots-of-Words, SOP,
Procedural Based System
• IF PROCESS MAP BASED System, little change needed
Example of
a Process
Map
Meeting
Requireme
nts of ISO
9001:2015,
4.2.4.
For more information on
Process Mapping, email
debra@ce-q.com.
Planning – Leadership (Clause 5.0)
• Engaged Leadership
• Hard questions for some managers (Section 5.1 of ISO 9001:2015)
a) What evidence would I find that you, Mr. Top Manager, has taken accountability for the
effectiveness of the qms?
b) Tell me how the policy and the objectives are compatible with the context of the organization?
What is the strategic direction of the organization? Explain how the policy and objectives
parallel this strategic direction.
c) How are the QMS processes integrated into the business processes?
d) What methods are used by you to promote the use of process approach and risk-based
thinking? (What is the process approach? What is risk-based thinking?)
e) How do you ensure resources needed are available?
f) How do you communicate the importance of an effective quality management and conforming
to quality management system requirements?
g) What is the intended result of the QMS? Is it achieving its intended results
h) How do you engage people to contribute to the effectiveness of the qms? How do they know
this is what you want?
i) What drives improvement in the organization?
j) How do you ensure other managers demonstrate leadership and commitment and would
answer these questions the same way?
Planning – Leadership Roles and
Responsibilities (Clause 5.0)
• Must be a Plan for achieving objectives
• Five distinct roles must be appointed (can all be one person – no
longer a requirement for Management Representative
1. Ensures qms conforms to standard
2. Process are delivering their intended outputs
3. Report on performance of and opportunities for improvement
4. Ensure promotion of customer focus
5. Ensure the integrity of qms when changes are planned or implemented
…a valid question would be who has each of these roles? And asking
them examples of how they fulfilled their roles.
Planning – Risk and Opportunities (Clause 6.0)
• Most Noise about this one
• Requirements:
- Consider the Issues and Parties from determining the context (don’t overlook
their requirements)
- Use the risks and opportunities to PLAN actions to mitigate them
- Integrate and implement these actions into the qms processes and evaluate
the effectiveness of actions
• Notes: avoid risk, take risk in order to pursue an opportunity, eliminate the
risk source, change the likelihood or consequences, share the risk, or retain
the risk by informed decision.
Example of
a Process
Map
Meeting
Requireme
nts of ISO
9001:2015,
4.2.4.
For more information on
Process Mapping, email
debra@ce-q.com.
Planning – Objectives and Planning Change
(Clause 6.0)
• Must be able to present a plan for how objectives will be achieved
• Must have a process for planning change
…. Both of these are significant changes, as significant as the
Risk/Opportunities
Planning – Support (Clause 7.0)
7.1 Organizational Knowledge: knowledge necessary for the operation of its processes and to
achieve conformity of products and services.
- Must be considered when changes occur (planning/management of change)
- This is knowledge specific to the organization, gained by experience and necessary to achieve the
organization’s objectives
- It is obtained or based upon internal and external sources
7.2 Competence – determine necessary competence of persons doing work that affects the qms
(note in past was product); ensure competency, retain evidence
7.3 Awareness: Policy, Objectives, Their Contribution to the effectiveness, Implications of not
conforming with QMS
7.4 Communication: Who Communicates; What, When, to Whom and How to Communicate
7.5 “Maintain Documented Information” and “Retain Documented Information” replaced words
“documents” and “records”
Most Changes
in this Section
Do
Plan
(4, 5, 6, 7)
Do
(8)
Check
Act
Clause 8.0 Production and Service Provision
• Few changes
• A few words are different but similar requirements
• Still need to read
• Note old 7.1 Planning of Product Realization is 8.1
old 7.2 Customer Requirements is 8.2
old 7.3 Design and Development is 8.3
old 7.4 Purchasing is 8.4 Externally Provided Products & Services
Clause 8.0 Production and Service Provision
Continued
• Old 7.5 is now 8.5
• Some words are written different and more to think about but nothing truly
new if process approach has been previously used
• If Procedural based approach in the organization, much will need to be
reviewed
• 8.6 Release of Products and Services is what was 8.2.4
• Requires planned release at appropriate stages and retained documented
information (not new) of evidence of conformity and who released
• 8.7 Control of Nonconforming Outputs Moved from old 8.3 but same
basic requirements
Check
Plan
(4, 5, 6, 7)
Do
(8)
Check
(9)
Act
9. Performance Evaluation
9.1 Monitoring, Measurement, Analysis and Evaluation
(was 8.2.3 in 2008 – wording added “Evaluation”, required
monitoring of customers’ perceptions)
9.2 Internal Audit
9.3 Management Review – Changes in internal and
external issues, the performance of external providers,
extent to which quality objectives have been met,
adequacy of resources, effectiveness of actions to address
risks and opportunities
9 Performance
Evaluation
9.1 Monitoring,
Measurement,
Analysis &
Evaluation
9.2 Internal Audit
9.3 Management
Review
Check
Plan
(4, 5, 6, 7)
Do
(8)
Check
(9)
Act
(10)
10.0 Improvement
10.1 Determine and select opportunities for improvement.
10.2 Nonconformity and Corrective Action: React to the
nonconformity, much is similar except for update risks and
opportunities determined during planning, make changes
to the qms
10.3 Continual improvement of the suitability, adequacy
and effectiveness of the qms based on results of analysis
and evaluation and outputs from management review.
10
Improvement
10 General
10.2
Nonconformity &
Corrective Action
10.3 Continual
Improvement
Summary of “To Do”
1. Determine Context
2. ID and Define Processes
3. Prepare Top Manager and Assign 5 Roles
4. Determine Risks/Opportunities
5. Have a plan for achieving objectives
6. Establish process for planning changes.
7. Capture Organizational Knowledge.
8. Change intent of competence assessment to be skills and knowledge for
effective QMS
9. Plan how “awareness” and “communication” will be addressed
10. Ensure all “Documented Information” requirements are known and
addressed.
THANK YOU
?
+1 229 798 0277
debra@ce-q.com
www.ce-q.com
linkedin.com/debra-matthews-hay-hampton
fb.com/debrahayhampton

More Related Content

What's hot

Internal Audit 03-03-16
Internal Audit 03-03-16Internal Audit 03-03-16
Internal Audit 03-03-16
Lisa Barnes
 
Basic quality concepts(3)
Basic quality concepts(3)Basic quality concepts(3)
Basic quality concepts(3)
ngiyari
 

What's hot (20)

Iso 9001 2015
Iso 9001 2015 Iso 9001 2015
Iso 9001 2015
 
Iso 9001 2015 process audit checklist
Iso 9001 2015 process audit checklistIso 9001 2015 process audit checklist
Iso 9001 2015 process audit checklist
 
Overview of the iso 9001:2015
Overview of the iso 9001:2015Overview of the iso 9001:2015
Overview of the iso 9001:2015
 
BASICS FOR ISO 9001 QMS LEAD AUDITOR COURSE
BASICS  FOR ISO 9001 QMS LEAD AUDITOR COURSEBASICS  FOR ISO 9001 QMS LEAD AUDITOR COURSE
BASICS FOR ISO 9001 QMS LEAD AUDITOR COURSE
 
A brief Introduction to ISO 9001 2015-Quality Management System
A brief Introduction to ISO 9001 2015-Quality Management SystemA brief Introduction to ISO 9001 2015-Quality Management System
A brief Introduction to ISO 9001 2015-Quality Management System
 
ISO 9001:2015 Documentation Requirements
ISO 9001:2015 Documentation RequirementsISO 9001:2015 Documentation Requirements
ISO 9001:2015 Documentation Requirements
 
Iso 9001 2015 checklist
Iso 9001 2015 checklistIso 9001 2015 checklist
Iso 9001 2015 checklist
 
Risk based thinking
Risk based thinkingRisk based thinking
Risk based thinking
 
ISO9001:2015 presentation
ISO9001:2015 presentationISO9001:2015 presentation
ISO9001:2015 presentation
 
ISO 9001 2015 Quality Management System (Implementation)
ISO 9001 2015 Quality Management System (Implementation)ISO 9001 2015 Quality Management System (Implementation)
ISO 9001 2015 Quality Management System (Implementation)
 
ISO 9001:2015 Audit Checklist Preview
ISO 9001:2015 Audit Checklist PreviewISO 9001:2015 Audit Checklist Preview
ISO 9001:2015 Audit Checklist Preview
 
Internal auditchecklistiso9001 2015
Internal auditchecklistiso9001 2015Internal auditchecklistiso9001 2015
Internal auditchecklistiso9001 2015
 
Iso 9001 2015 Understanding
Iso 9001 2015 Understanding Iso 9001 2015 Understanding
Iso 9001 2015 Understanding
 
Internal Audit 03-03-16
Internal Audit 03-03-16Internal Audit 03-03-16
Internal Audit 03-03-16
 
ISO 9001 2015 Overview presentation
ISO 9001 2015 Overview presentation ISO 9001 2015 Overview presentation
ISO 9001 2015 Overview presentation
 
Iso9001training slide
Iso9001training slideIso9001training slide
Iso9001training slide
 
ISO 9001:2015
ISO 9001:2015   ISO 9001:2015
ISO 9001:2015
 
Iso 9001:2015 Documented Information Guidance
Iso 9001:2015 Documented Information GuidanceIso 9001:2015 Documented Information Guidance
Iso 9001:2015 Documented Information Guidance
 
Basic quality concepts(3)
Basic quality concepts(3)Basic quality concepts(3)
Basic quality concepts(3)
 
ISO 9001: 2015 QUALITY MANAGEMENT SYSTEMS
ISO 9001: 2015 QUALITY MANAGEMENT SYSTEMSISO 9001: 2015 QUALITY MANAGEMENT SYSTEMS
ISO 9001: 2015 QUALITY MANAGEMENT SYSTEMS
 

Viewers also liked

Viewers also liked (13)

How to successfully implement ISO 9001:2015 with a minimal documents approach
How to successfully implement ISO 9001:2015 with a minimal documents approachHow to successfully implement ISO 9001:2015 with a minimal documents approach
How to successfully implement ISO 9001:2015 with a minimal documents approach
 
PECB Webinar: Minimizing the Documentation of an Environmental Management System
PECB Webinar: Minimizing the Documentation of an Environmental Management SystemPECB Webinar: Minimizing the Documentation of an Environmental Management System
PECB Webinar: Minimizing the Documentation of an Environmental Management System
 
Introduction to ISO 9001-2008
Introduction to ISO 9001-2008Introduction to ISO 9001-2008
Introduction to ISO 9001-2008
 
Overview Section 1,2,3
Overview Section 1,2,3Overview Section 1,2,3
Overview Section 1,2,3
 
ISO 9001:2015
ISO 9001:2015ISO 9001:2015
ISO 9001:2015
 
PECB Webinar: Minimizing the Documentation in a QMS system
PECB Webinar: Minimizing the Documentation in a QMS systemPECB Webinar: Minimizing the Documentation in a QMS system
PECB Webinar: Minimizing the Documentation in a QMS system
 
ISO 9001:2015-Consequences for Organisation
ISO 9001:2015-Consequences for OrganisationISO 9001:2015-Consequences for Organisation
ISO 9001:2015-Consequences for Organisation
 
PECB Webinar: ISO 9001:2015 Transition – Understanding the changes
PECB Webinar: ISO 9001:2015 Transition – Understanding the changes PECB Webinar: ISO 9001:2015 Transition – Understanding the changes
PECB Webinar: ISO 9001:2015 Transition – Understanding the changes
 
ISO 9001:2008 Internal Auditing of Quality Management Systems - Introduction
ISO 9001:2008 Internal Auditing of Quality Management Systems - IntroductionISO 9001:2008 Internal Auditing of Quality Management Systems - Introduction
ISO 9001:2008 Internal Auditing of Quality Management Systems - Introduction
 
Introduction to iso 9001
Introduction to iso 9001 Introduction to iso 9001
Introduction to iso 9001
 
ISO 9000 Quality Management System - A Presentation by Akshay Anand
ISO 9000 Quality Management System - A Presentation by Akshay AnandISO 9000 Quality Management System - A Presentation by Akshay Anand
ISO 9000 Quality Management System - A Presentation by Akshay Anand
 
JARO Thermal ISO9001 2015 internal auditor training 20170118
JARO Thermal ISO9001 2015 internal auditor training  20170118JARO Thermal ISO9001 2015 internal auditor training  20170118
JARO Thermal ISO9001 2015 internal auditor training 20170118
 
ISO 9001:2015 Revision Overview: part 2
ISO 9001:2015 Revision Overview: part 2ISO 9001:2015 Revision Overview: part 2
ISO 9001:2015 Revision Overview: part 2
 

Similar to ISO 9001:2015 What Are the Main Changes?

Productivity and quality_mgmt_v2
Productivity and quality_mgmt_v2Productivity and quality_mgmt_v2
Productivity and quality_mgmt_v2
akkie16
 
Running head QUALITY TRAINING MANUAL .docx
Running head QUALITY TRAINING MANUAL                             .docxRunning head QUALITY TRAINING MANUAL                             .docx
Running head QUALITY TRAINING MANUAL .docx
toltonkendal
 
FINAL IMS PPT - Read-Only - Compatibility Mode.pdf
FINAL IMS PPT  -  Read-Only  -  Compatibility Mode.pdfFINAL IMS PPT  -  Read-Only  -  Compatibility Mode.pdf
FINAL IMS PPT - Read-Only - Compatibility Mode.pdf
KShah24
 
Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)
Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)
Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)
rhefner
 
DHL Quality Control Manual Quality Management (BADM370).docx
DHL Quality Control Manual Quality Management (BADM370).docxDHL Quality Control Manual Quality Management (BADM370).docx
DHL Quality Control Manual Quality Management (BADM370).docx
mariona83
 
39635837 iso-9001-2008-awarness
39635837 iso-9001-2008-awarness39635837 iso-9001-2008-awarness
39635837 iso-9001-2008-awarness
sride01
 

Similar to ISO 9001:2015 What Are the Main Changes? (20)

Productivity and quality_mgmt_v2
Productivity and quality_mgmt_v2Productivity and quality_mgmt_v2
Productivity and quality_mgmt_v2
 
30-9(ISO9001-2015).pptx
30-9(ISO9001-2015).pptx30-9(ISO9001-2015).pptx
30-9(ISO9001-2015).pptx
 
Key changes of ISO 9001:2015
Key changes of ISO 9001:2015Key changes of ISO 9001:2015
Key changes of ISO 9001:2015
 
ISO 9001-2015 QMS Awareness & Interpretation Training.pdf
ISO 9001-2015 QMS Awareness & Interpretation Training.pdfISO 9001-2015 QMS Awareness & Interpretation Training.pdf
ISO 9001-2015 QMS Awareness & Interpretation Training.pdf
 
Running head QUALITY TRAINING MANUAL .docx
Running head QUALITY TRAINING MANUAL                             .docxRunning head QUALITY TRAINING MANUAL                             .docx
Running head QUALITY TRAINING MANUAL .docx
 
Software quality models
Software quality modelsSoftware quality models
Software quality models
 
FINAL IMS PPT - Read-Only - Compatibility Mode.pdf
FINAL IMS PPT  -  Read-Only  -  Compatibility Mode.pdfFINAL IMS PPT  -  Read-Only  -  Compatibility Mode.pdf
FINAL IMS PPT - Read-Only - Compatibility Mode.pdf
 
Risk elimination and safety committee
Risk elimination and safety committeeRisk elimination and safety committee
Risk elimination and safety committee
 
Total quality management
Total quality managementTotal quality management
Total quality management
 
Summary of changes ISO 9001:2015
Summary of changes ISO 9001:2015Summary of changes ISO 9001:2015
Summary of changes ISO 9001:2015
 
Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)
Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)
Applying the CMMI for Services to the Process Group (Physician, Heal Thyself!)
 
FunctionalOverview
FunctionalOverviewFunctionalOverview
FunctionalOverview
 
ISO 9001 Implementation Series - Session 1.pptx
ISO 9001 Implementation Series - Session 1.pptxISO 9001 Implementation Series - Session 1.pptx
ISO 9001 Implementation Series - Session 1.pptx
 
ISO 9001:2015 Requirements.pptx
ISO 9001:2015 Requirements.pptxISO 9001:2015 Requirements.pptx
ISO 9001:2015 Requirements.pptx
 
Ch28
Ch28Ch28
Ch28
 
ISO QMS 9001: 2015 clauses
ISO QMS 9001: 2015 clausesISO QMS 9001: 2015 clauses
ISO QMS 9001: 2015 clauses
 
DHL Quality Control Manual Quality Management (BADM370).docx
DHL Quality Control Manual Quality Management (BADM370).docxDHL Quality Control Manual Quality Management (BADM370).docx
DHL Quality Control Manual Quality Management (BADM370).docx
 
39635837 iso-9001-2008-awarness
39635837 iso-9001-2008-awarness39635837 iso-9001-2008-awarness
39635837 iso-9001-2008-awarness
 
Iso9001 2015
Iso9001 2015Iso9001 2015
Iso9001 2015
 
PECB Webinar: Aligning ISO 25000 and CMMI for Development
PECB Webinar: Aligning ISO 25000 and CMMI for DevelopmentPECB Webinar: Aligning ISO 25000 and CMMI for Development
PECB Webinar: Aligning ISO 25000 and CMMI for Development
 

More from PECB

Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
PECB
 
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of CybersecurityDORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
PECB
 
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI GovernanceSecuring the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
PECB
 
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
PECB
 
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
PECB
 
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks EffectivelyISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
PECB
 
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
PECB
 
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital TransformationISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
PECB
 
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulationsManaging ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
PECB
 
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
PECB
 
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
PECB
 
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
PECB
 
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
PECB
 
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
PECB
 
IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?
PECB
 
Student Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptxStudent Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptx
PECB
 
Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023
PECB
 

More from PECB (20)

Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
 
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of CybersecurityDORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
 
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI GovernanceSecuring the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
 
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
 
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
 
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks EffectivelyISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
 
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
 
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital TransformationISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
 
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulationsManaging ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
 
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
 
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
 
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
 
Student Information Session University KTMC
Student Information Session University KTMC Student Information Session University KTMC
Student Information Session University KTMC
 
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
 
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
 
Student Information Session University CREST ADVISORY AFRICA
Student Information Session University CREST ADVISORY AFRICA Student Information Session University CREST ADVISORY AFRICA
Student Information Session University CREST ADVISORY AFRICA
 
IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?
 
Information Session University Egybyte.pptx
Information Session University Egybyte.pptxInformation Session University Egybyte.pptx
Information Session University Egybyte.pptx
 
Student Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptxStudent Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptx
 
Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023
 

Recently uploaded

Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
ZurliaSoop
 
Salient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functionsSalient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functions
KarakKing
 

Recently uploaded (20)

UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdfUGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
 
SOC 101 Demonstration of Learning Presentation
SOC 101 Demonstration of Learning PresentationSOC 101 Demonstration of Learning Presentation
SOC 101 Demonstration of Learning Presentation
 
Jamworks pilot and AI at Jisc (20/03/2024)
Jamworks pilot and AI at Jisc (20/03/2024)Jamworks pilot and AI at Jisc (20/03/2024)
Jamworks pilot and AI at Jisc (20/03/2024)
 
Accessible Digital Futures project (20/03/2024)
Accessible Digital Futures project (20/03/2024)Accessible Digital Futures project (20/03/2024)
Accessible Digital Futures project (20/03/2024)
 
Exploring_the_Narrative_Style_of_Amitav_Ghoshs_Gun_Island.pptx
Exploring_the_Narrative_Style_of_Amitav_Ghoshs_Gun_Island.pptxExploring_the_Narrative_Style_of_Amitav_Ghoshs_Gun_Island.pptx
Exploring_the_Narrative_Style_of_Amitav_Ghoshs_Gun_Island.pptx
 
Micro-Scholarship, What it is, How can it help me.pdf
Micro-Scholarship, What it is, How can it help me.pdfMicro-Scholarship, What it is, How can it help me.pdf
Micro-Scholarship, What it is, How can it help me.pdf
 
Sociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning ExhibitSociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning Exhibit
 
Mehran University Newsletter Vol-X, Issue-I, 2024
Mehran University Newsletter Vol-X, Issue-I, 2024Mehran University Newsletter Vol-X, Issue-I, 2024
Mehran University Newsletter Vol-X, Issue-I, 2024
 
Single or Multiple melodic lines structure
Single or Multiple melodic lines structureSingle or Multiple melodic lines structure
Single or Multiple melodic lines structure
 
Graduate Outcomes Presentation Slides - English
Graduate Outcomes Presentation Slides - EnglishGraduate Outcomes Presentation Slides - English
Graduate Outcomes Presentation Slides - English
 
Python Notes for mca i year students osmania university.docx
Python Notes for mca i year students osmania university.docxPython Notes for mca i year students osmania university.docx
Python Notes for mca i year students osmania university.docx
 
FSB Advising Checklist - Orientation 2024
FSB Advising Checklist - Orientation 2024FSB Advising Checklist - Orientation 2024
FSB Advising Checklist - Orientation 2024
 
Key note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdfKey note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdf
 
How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17
 
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
 
This PowerPoint helps students to consider the concept of infinity.
This PowerPoint helps students to consider the concept of infinity.This PowerPoint helps students to consider the concept of infinity.
This PowerPoint helps students to consider the concept of infinity.
 
ICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptxICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptx
 
Plant propagation: Sexual and Asexual propapagation.pptx
Plant propagation: Sexual and Asexual propapagation.pptxPlant propagation: Sexual and Asexual propapagation.pptx
Plant propagation: Sexual and Asexual propapagation.pptx
 
Salient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functionsSalient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functions
 
Sensory_Experience_and_Emotional_Resonance_in_Gabriel_Okaras_The_Piano_and_Th...
Sensory_Experience_and_Emotional_Resonance_in_Gabriel_Okaras_The_Piano_and_Th...Sensory_Experience_and_Emotional_Resonance_in_Gabriel_Okaras_The_Piano_and_Th...
Sensory_Experience_and_Emotional_Resonance_in_Gabriel_Okaras_The_Piano_and_Th...
 

ISO 9001:2015 What Are the Main Changes?

  • 2. Debra Hay Hampton ISO 9001 Lead Auditor Debra Hampton has over 30 years of improving processes and systems with experience from hospitals, schools, and many types of manufacturing facilities, a methodical approach is used to focus on building a system of processes that collect data to make decisions that create sustainable, continual improvement and consistent product. Companies she works with become better at “turning effort into dollars”. Contact Information +1 229 798 0277 debra@ce-q.com www.ce-q.com linkedin.com/debra-matthews-hay-hampton twitter.com/name.surname fb.com/debrahayhampton
  • 3. Structure Changed • New Common format for use in all management system standards • Standardized core text and structure for multiple ISO management systems for integration • Standardized core definitions • Allows Integrating multiple management systems (quality, environmental, information security, health and safety) and easier implementation • Annex SL of the www.iso.org/directives
  • 4. What are the Benefits of the New Standard • More risk control • Better cost control • Improved morale and motivation • Customer retention and loyalty • Interested party messaging • Improved image and reputation • Credibility • Ability to respond quickly • Improved customer satisfaction • Improvement
  • 5. Structure of ISO 9001:2015 1. Scope 2. Normative References 3. Terms and Definitions 4. Context of the Organization 5. Leadership 6. Planning for the QMS 7. Support 8. Operation 9. Performance Evaluation 10. Improvement
  • 6. Changed Definitions • Organization • Interested Party • Management System • Objective • Competence • Corrective Action • Continual Improvement
  • 7. New Definitions • Risk • Documented Information • Performance • Context of the Organization • Monitoring • Improvement • Knowledge
  • 8. Additional Terms Not Defined in 9000:2005 Additional Terms not Defined in 9000:2005 Terms that were Defined but are Different to 9000 3.23 involvement 3.25 function 3.35 strategy 3.36 object 3.38 statutory requirement 3.39 regulatory requirement 3.42 innovation 3.46 output 3.48 service 3.49 data 3.52 information system 3.56 feedback 3.58 complaint 3.66 performance indicator 3.67 determination 3.26 customer 3.27 supplier/provider 3.30 quality management 3.33 quality management system 3.34 quality policy 3.37 quality 3.41 traceability 3.44 design and development 3.45 quality objective 3.47 product 3.57 customer satisfaction 3.60 audit criteria 3.6.3 concession 3.68 review
  • 9. Quality Management Principles Were 8 Principles Now 7 Principles Customer Focus Customer Focus Leadership (Involvement) Leadership (engagement) Involvement of People Engagement of People (empower, engage, capability to deliver value) Process Approach Process Approach (integrates into System into definition) System Approach to Management (Included in the Process Approach) Continual Improvement Improvement Factual Approach to Decision Making Evidence Based Decision Making (Evaluation is included in the principle) Mutually Beneficial Supplier Relationships Relationship Management (expands influence)
  • 10. Conceptual Changes: Greater Emphasis on - • Customer • Risk-Based Thinking • Aligning QMS Policy and Objectives with the Strategy of the Organization • Greater Flexibility with Documentation • Consistently Providing Conforming Products and Services
  • 11. Key Changes • Understand Context of the Organization – Necessary to understand “one size doesn’t fit all” • Process Approach Strengthened/More Explicit • Concept of Preventive Action Now Addressed Throughout the Standard by Risk Identification and Mitigation • Term Documented Information Replaces the Terms Document and Record • Control of Externally Provided Products and Services Replaces Purchasing/Outsourcing
  • 13. ISO/TC176/SC2/N1220 4 Context of the Organization 5 Leadership 6 Planning 7 Support 8 Operation 9 Performance Evaluation 10 Improvement 4.1 Understand Organization and its Context 4.2 Understand Needs & Expectations of Interested Parties 4.3 Determine Scope of QMS 4.4 QMS and It’s Processes 5.1 Leadership and Commitment 5.2 Policy 5.3 Organizational Roles, Responsibilities & Authorities 6.1 Actions to Address Risks & Opportunities 6.2 Quality Objectives & Planning to Achieve 6.3 Planning of Changes 7.1 Resources 7.2 Competence 7.3 Awareness 7.4 Communication 7.5 Documented Information 8.1 Operational Planning and Control 8.2 Requirements for Products & Services 8.3 Design & Development 8.4 Control of External Processes, Products & Services 8.5 Production and Service Provision 9.1 Monitoring, Measurement, Analysis & Evaluation 9.2 Internal Audit 9.3 Management Review 10 General 10.2 Nonconformity & Corrective Action 10.3 Continual Improvement
  • 14. ISO/TC176/SC2/N1220 4 Context of the Organization 5 Leadership 6 Planning 7 Support 8 Operation 9 Performance Evaluation 10 Improvement 4.1 Understand Organization and its Context 4.2 Understand Needs & Expectations of Interested Parties 4.3 Determine Scope of QMS 4.4 QMS and It’s Processes 5.1 Leadership and Commitment 5.2 Policy 5.3 Organizational Roles, Responsibilities & Authorities 6.1 Actions to Address Risks & Opportunities 6.2 Quality Objectives & Planning to Achieve 6.3 Planning of Changes 7.1 Resources 7.2 Competence 7.3 Awareness 7.4 Communication 7.5 Documented Information 8.1 Operational Planning and Control 8.2 Requirements for Products & Services 8.3 Design & Development 8.4 Control of External Processes, Products & Services 8.5 Production and Service Provision 9.1 Monitoring, Measurement, Analysis & Evaluation 9.2 Internal Audit 9.3 Management Review 10 General 10.2 Nonconformity & Corrective Action 10.3 Continual Improvement
  • 16. Planning – Concept (Clause 4.0) • Concept of the Organization must be determined • Internal and External Issues • Relevant Internal and External Interested Parties and their requirements
  • 17. Planning – Process ID and Defined (Clause 4.0) • Emphasis and One of the Most Significant Changes for Some Organizations if 1994 Style, Lots-of-Documents, Lots-of-Words, SOP, Procedural Based System • IF PROCESS MAP BASED System, little change needed
  • 18. Example of a Process Map Meeting Requireme nts of ISO 9001:2015, 4.2.4. For more information on Process Mapping, email debra@ce-q.com.
  • 19. Planning – Leadership (Clause 5.0) • Engaged Leadership • Hard questions for some managers (Section 5.1 of ISO 9001:2015) a) What evidence would I find that you, Mr. Top Manager, has taken accountability for the effectiveness of the qms? b) Tell me how the policy and the objectives are compatible with the context of the organization? What is the strategic direction of the organization? Explain how the policy and objectives parallel this strategic direction. c) How are the QMS processes integrated into the business processes? d) What methods are used by you to promote the use of process approach and risk-based thinking? (What is the process approach? What is risk-based thinking?) e) How do you ensure resources needed are available? f) How do you communicate the importance of an effective quality management and conforming to quality management system requirements? g) What is the intended result of the QMS? Is it achieving its intended results h) How do you engage people to contribute to the effectiveness of the qms? How do they know this is what you want? i) What drives improvement in the organization? j) How do you ensure other managers demonstrate leadership and commitment and would answer these questions the same way?
  • 20. Planning – Leadership Roles and Responsibilities (Clause 5.0) • Must be a Plan for achieving objectives • Five distinct roles must be appointed (can all be one person – no longer a requirement for Management Representative 1. Ensures qms conforms to standard 2. Process are delivering their intended outputs 3. Report on performance of and opportunities for improvement 4. Ensure promotion of customer focus 5. Ensure the integrity of qms when changes are planned or implemented …a valid question would be who has each of these roles? And asking them examples of how they fulfilled their roles.
  • 21. Planning – Risk and Opportunities (Clause 6.0) • Most Noise about this one • Requirements: - Consider the Issues and Parties from determining the context (don’t overlook their requirements) - Use the risks and opportunities to PLAN actions to mitigate them - Integrate and implement these actions into the qms processes and evaluate the effectiveness of actions • Notes: avoid risk, take risk in order to pursue an opportunity, eliminate the risk source, change the likelihood or consequences, share the risk, or retain the risk by informed decision.
  • 22. Example of a Process Map Meeting Requireme nts of ISO 9001:2015, 4.2.4. For more information on Process Mapping, email debra@ce-q.com.
  • 23. Planning – Objectives and Planning Change (Clause 6.0) • Must be able to present a plan for how objectives will be achieved • Must have a process for planning change …. Both of these are significant changes, as significant as the Risk/Opportunities
  • 24. Planning – Support (Clause 7.0) 7.1 Organizational Knowledge: knowledge necessary for the operation of its processes and to achieve conformity of products and services. - Must be considered when changes occur (planning/management of change) - This is knowledge specific to the organization, gained by experience and necessary to achieve the organization’s objectives - It is obtained or based upon internal and external sources 7.2 Competence – determine necessary competence of persons doing work that affects the qms (note in past was product); ensure competency, retain evidence 7.3 Awareness: Policy, Objectives, Their Contribution to the effectiveness, Implications of not conforming with QMS 7.4 Communication: Who Communicates; What, When, to Whom and How to Communicate 7.5 “Maintain Documented Information” and “Retain Documented Information” replaced words “documents” and “records” Most Changes in this Section
  • 25. Do Plan (4, 5, 6, 7) Do (8) Check Act
  • 26. Clause 8.0 Production and Service Provision • Few changes • A few words are different but similar requirements • Still need to read • Note old 7.1 Planning of Product Realization is 8.1 old 7.2 Customer Requirements is 8.2 old 7.3 Design and Development is 8.3 old 7.4 Purchasing is 8.4 Externally Provided Products & Services
  • 27. Clause 8.0 Production and Service Provision Continued • Old 7.5 is now 8.5 • Some words are written different and more to think about but nothing truly new if process approach has been previously used • If Procedural based approach in the organization, much will need to be reviewed • 8.6 Release of Products and Services is what was 8.2.4 • Requires planned release at appropriate stages and retained documented information (not new) of evidence of conformity and who released • 8.7 Control of Nonconforming Outputs Moved from old 8.3 but same basic requirements
  • 28. Check Plan (4, 5, 6, 7) Do (8) Check (9) Act
  • 29. 9. Performance Evaluation 9.1 Monitoring, Measurement, Analysis and Evaluation (was 8.2.3 in 2008 – wording added “Evaluation”, required monitoring of customers’ perceptions) 9.2 Internal Audit 9.3 Management Review – Changes in internal and external issues, the performance of external providers, extent to which quality objectives have been met, adequacy of resources, effectiveness of actions to address risks and opportunities 9 Performance Evaluation 9.1 Monitoring, Measurement, Analysis & Evaluation 9.2 Internal Audit 9.3 Management Review
  • 30. Check Plan (4, 5, 6, 7) Do (8) Check (9) Act (10)
  • 31. 10.0 Improvement 10.1 Determine and select opportunities for improvement. 10.2 Nonconformity and Corrective Action: React to the nonconformity, much is similar except for update risks and opportunities determined during planning, make changes to the qms 10.3 Continual improvement of the suitability, adequacy and effectiveness of the qms based on results of analysis and evaluation and outputs from management review. 10 Improvement 10 General 10.2 Nonconformity & Corrective Action 10.3 Continual Improvement
  • 32. Summary of “To Do” 1. Determine Context 2. ID and Define Processes 3. Prepare Top Manager and Assign 5 Roles 4. Determine Risks/Opportunities 5. Have a plan for achieving objectives 6. Establish process for planning changes. 7. Capture Organizational Knowledge. 8. Change intent of competence assessment to be skills and knowledge for effective QMS 9. Plan how “awareness” and “communication” will be addressed 10. Ensure all “Documented Information” requirements are known and addressed.
  • 33. THANK YOU ? +1 229 798 0277 debra@ce-q.com www.ce-q.com linkedin.com/debra-matthews-hay-hampton fb.com/debrahayhampton

Editor's Notes

  1. Context requires the organization to determine the issues and requirements that can impact on the planning of the qms and can be used as an input into the development of the qms.
  2. Preventive action is gone
  3. Existing system and completion of these 10 “To Do”s should prepare you.