e-Newsletter


February, 2002

Welcome to the Whittington & Associates e-Newsletter!

Visit and bookmark our web site today: http://www.WhittingtonAssociates.com

This e-newsletter is in HTML format and may not be displayed properly by some email programs.
Please click on our web site address above to see the e-newsletter with its proper formatting.

  

February Articles

Training Spotlight

Summary of ISO 9001:2000 Requirements

Requirement Differences from ISO 9001:1994

Required ISO 9001:2000 Documents

2nd Edition of ISO/TS 16949 Expected by March 2002

Class Schedule: February, 2002 - April, 2002
 

To see previous articles, go to Newsletter Archives.

Atlanta, Georgia

Understanding ISO 9001:2000 
April 22-23, 2002

ISO 9001:2000 Internal Auditor 
February 27 - March 1, 2002
April 24-26, 2002

ISO 9001:2000 Lead Auditor
March 18-22, 2002

Auditor Refresher (Transition)
February 25-26, 2002

Implementing ISO 9001:2000
March 4-5, 2002

Quality System Documentation
March 6-7, 2002

Training Classes in Other Cities

Summary of ISO 9001:2000 Requirements

The requirements for clause 5, Management Responsibility, are summarized below. To see a summary of all the ISO 9001:2000 clauses, go to ISO 9001:2000 Requirements at the Resources section of our web site.

5. Management Responsibility

5.1 Management Commitment

Top management must provide evidence of its commitment to develop and implement the quality management system, as well as, continually improve its effectiveness by:

  • Expressing the importance of meeting requirements

  • Establishing the quality policy and quality objectives

  • Conducting management reviews

  • Ensuring the availability of necessary resources

5.2 Customer Focus

Top management must ensure customer requirements are determined and met in order to improve customer satisfaction.

5.3 Quality Policy

Top management must ensure the quality policy is:

  • Appropriate to the purpose of the organization

  • Focused on meeting requirements and continual improvement

  • Used as a framework for quality objectives

  • Communicated and understood at appropriate levels

  • Reviewed for continuing suitability

5.4 Planning

5.4.1 Quality Objectives

Top management must ensure quality objectives, including those needed to meet product requirements, are established at the relevant functions and levels within the organization. Quality objectives must be measurable and consistent with the quality policy.

5.4.2 Quality Management System Planning

Top management must ensure that planning for the quality management system:

  • Meets the general requirements (4.1), as well as, quality objectives (5.4.1)

  • Maintains the system integrity when changes are planned and implemented

5.5 Responsibility, Authority, and Communication

5.5.1 Responsibility and Authority

Top management must ensure responsibilities and authorities are defined and communicated within the organization.

5.5.2 Management Representative

Top management must appoint a member of management who, irrespective of other duties, has the responsibility and authority to:

  • Ensure the needed processes are established, implemented, and maintained

  • Report to top management on quality management system performance

  • Report to top management on any need for improvement

  • Ensuring the promotion of awareness of customer requirements

Note: The responsibility of a management representative may include liaison with external parties on matters pertaining to the quality management system.

5.5.3 Internal Communication

Top management must ensure the appropriate communication processes are established and carried out within the organization regarding the effectiveness of the system.

5.6 Management Review

5.6.1 General

Top management must review the quality management system at planned intervals to:

  • Ensure a suitable, adequate, and effective system

  • Assess possible opportunities for improvement

  • Evaluate the need for any changes to the system

  • Consider the need for changes to the quality policy and objectives

Records of the management reviews must be maintained.

5.6.2 Review Input

Inputs for management review must include information on:

  • Results of audits

  • Customer feedback

  • Process performance and product conformity

  • Status of preventive and corrective actions

  • Follow-up actions from earlier reviews

  • Changes that could affect the quality system

  • Recommendations for improvement

5.6.3 Review Output

Outputs from the management review must include any decisions and actions related to:

  • Improvement of the effectiveness of the quality management system and its processes

  • Improvement of product related to customer requirements

If you have any questions about the new requirements, send a note to: Larry@WhittingtonAssociates.com.
 

Requirement Differences from ISO 9001:1994

The key differences for the first five of the ISO 9001:1994 clauses are shown below (with the corresponding ISO 9001:2000 clause numbers identified). To see the differences for all 20 clauses, go to ISO 9001:2000 Differences at our web site.

4.1 Management Responsibility

  • Emphasis on top management commitment (5.1)

  • Policy on requirements and improvement (5.3.b)

  • Measurable objectives at relevant levels (5.4.1)

  • Awareness of customer requirements (5.1.a; 5.5.2.c)

  • Resources for improvement and satisfaction (6.1.a)

  • Requirement for internal communication (5.5.3)

  • More duties for management representative (5.5.2)

  • Specific topics for management reviews (5.6.2)

4.2 Quality System

  • Measurement and analysis of processes (4.1.e)

  • Continual improvement of effectiveness (4.1.f)

  • Identification and control of outsourcing (4.1)

  • Fewer specific procedures are required (4.2.1)

  • (see 4.2.3, 4.2.3, 8.2.2, 8.3, 8.5.2, and 8.5.3)

  • Quality manual with process interaction (4.2.2)

  • Expanded planning for quality system (5.4.3)

4.3 Contract Review

  • Now in Customer-Related Processes (7.2)

  • No requirement for documented procedure

  • Delivery and post-delivery requirements (7.2.1.a)

  • Unstated, but necessary requirements (7.2.1.b)

  • Statutory and regulatory requirements (7.2.1.c)

  • Records kept of actions from reviews (7.2.2)

  • Requirement for customer communication (7.2.3)

4.4 Design Control

  • Renamed as Design and Development (7.3)

  • No requirement for documented procedure

  • Functional and performance requirements (7.3.2.a)

  • Applicable statutory and regulatory inputs (7.3.2.b)

  • Outputs to purchasing, production, service (7.3.3.b)

  • Actions noted from Reviews and Changes (7.3.4; 7.3.7)

  • Actions from Verification and Validation (7.3.5; 7.3.6)

  • Impact on constituent parts; shipped product (7.3.7)

4.5 Document and Data Control

  • Renamed as Control of Documents (4.2.3)

  • Document reviews and updates as necessary (4.2.3.b)

  • Changes to documents must be identified (4.2.3.c)

  • Legible and readily identifiable documents (4.2.3.e)

  • Distribution control for external documents (4.2.3.f)

If you have any questions about the differences, send a note to: Larry@WhittingtonAssociates.com.
 

Required ISO 9001:2000 Documents

Clause 4.2.1 of ISO 9001:2000 identifies the requirement for a quality policy, quality objectives, quality manual, and procedures.

Documented Statement of Quality Policy

ISO 9001:2000, clause 5.3, requires top management to ensure the quality policy is:

  • Appropriate to the purpose of the organization

  • A framework for establishing and reviewing quality objectives

  • Communicated and understood within the organization

  • Reviewed for continuing suitability

The policy must include a commitment to comply with requirements and continually improve the effectiveness of the quality management system.

Note that the quality policy must be controlled, which means paying particular attention to these 4.2.3 sub-clauses:

c. changes and current revision status are identified
d. relevant versions are available at points of use
g. obsolete versions are prevented from unintended use

Documented Statement of Quality Objectives

ISO 9001:2000, clause 5.4.1, requires top management to ensure quality objectives, including those needed to meet product requirements, are established at the relevant functions and levels within the organization.

Quality objectives must be measurable and consistent with the quality policy. Some organization may discover that their current quality objectives are really broadly stated goals instead of specific, measurable targets.

These defined quality objectives are subject to document control since they represent your current plan and will be revised in the future.

Quality Manual

ISO 9001:2000, clause 4.2.2, specifies the minimum content for a quality manual. It must be established and maintained with:

  • Scope of the quality management system

  • Details and justification for any exclusions

  • Procedures or references to the procedures

  • Description of interaction between processes

Although not specifically required in the quality manual as before, providing an outline of the structure of your documented system would be a good idea. Also, the new standard no longer says the quality manual must cover all the requirements of the standard. However, if all the requirements are not addressed, it would appear that they have been excluded from your system.

The format and structure of the quality manual is up to the organization and depends on the size and complexity of their system. Of course, ordering the sections by the clause numbers of the new standard will make it easier to ensure no requirements are overlooked.

The quality manual may be the reader’s first impression of your system. You want it to convey your management commitment to quality and represent your organization well.

Required Procedures

ISO 9001:2000 clause 4.2.1(d) explains that the quality system documentation must include the documented procedures required by the standard. Six documented procedures are identified in the standard (4.2.3, 4.2.4, 8.2.2, 8.3, 8.5.2, and 8.5.3) and have to be controlled in accordance with the requirements of clause 4.2.3.

Some organizations may find it convenient to combine the procedures for several activities into a single procedure, for example, corrective action and preventive action. Others may choose to document an activity with more than one procedure, for example, internal audits.

Procedure for Control of Documents

Documents required by the quality management system must be controlled. A documented procedure must be established to define controls to:

  • Approve documents for adequacy prior to issue

  • Review and update as necessary and re-approve documents

  • Ensure that changes and current document revision status are identified

  • Ensure relevant versions of documents are available at points of use

  • Ensure the documents are legible and readily identifiable

  • Ensure external documents are identified and their distribution controlled

  • Prevent the unintended use of obsolete documents

  • (Apply suitable identification to obsolete documents if they are retained)

Note that reviewing documents and updating them as necessary implies an ongoing review process to ensure your documents are valid and current.

The 1994 version of the standard said the nature of document changes had to be identified, where practical. ISO 9001:2000 dropped the “where practical”. Changes should be identified in the document or an attachment.

The new standard has added that documents must be legible and readily identifiable. ISO 9001:2000 also clarified that control of external documents includes the control of their distribution.

Procedure for Control of Records

Records required for the quality management system must be controlled. These records must be established and maintained as evidence of conformance to requirements and to demonstrate the effective operation of the quality management system. Records must remain legible, readily identifiable, and retrievable.

A documented procedure must be established for the control of records:

  • Identification

  • Storage

  • Protection

  • Retrireview

  • Retention

  • Disposition

Although a few words have been dropped from the description of the activities addressed by the record control procedure, the basic intent is the same
.
Also, dropping the reference to maintaining pertinent subcontractor records, as well as, dropping the reference to making the records available for customer evaluation, does not in practice eliminate these requirements (if the records are needed to show conformity or satisfy a contract).

Procedure for Internal Audit

The organization must conduct periodic internal audits to determine if the quality management system, conforms to planned arrangements, conforms to requirements of ISO 9001, and is effectively implemented and maintained.

A documented procedure must address the responsibilities and requirements for:

  • Planning audits

  • Conducting audits

  • Reporting results

  • Maintaining records

Prior audit results must now be considered when planning the audit program, in addition to considering the status and importance of the areas to be audited.

The new standard requires the audit criteria, scope, frequency and methods to be defined. We knew to do this based on our audit training, but now it is spelled out as a requirement.

ISO 9001:1994 states the auditor must be independent of those with direct responsibility for the audited activity. The new standard says the auditor must be impartial and objective, and that the auditor cannot audit their own work. The revised text may give small organizations more latitude in assigning auditors.

Although ISO 9001:1994 requires an internal audit procedure, the new standard specifies the procedure must define responsibilities and requirements for planning and conducting audits, reporting results, and maintaining records.

Procedure for Control of Nonconforming Product

The organization must ensure any nonconforming product is identified and controlled to prevent its unintended use or delivery. These activities and related responsibilities and authorities must be defined in a documented procedure.

The ISO 9001:1994 standard identifies several actions that might be taken to deal with nonconforming product. The product could be reworked, accepted by concession, regraded, or rejected or scrapped. The new standard covers these actions in different words.

Clause 8.3 says one way of dealing with nonconforming product is by "taking action to eliminate the detected nonconformity". This is the definition of “correction” from ISO 9000:2000, which states in a note that the correction may be to rework or regrade the product.

When the new standard refers to actions to preclude the original intended use or application of the nonconforming product, it covers rejecting or scrapping. Both of the standards refer to concessions as an option.

However, there is a new requirement that for any nonconforming product detected after delivery or use, the organization take action appropriate to the effects, or potential effects, of the nonconformity. Be sure to address this possibility in your procedure.

Procedure for Corrective Action

The organization must take corrective action to eliminate the cause of the nonconformity and prevent recurrence. Corrective action must be appropriate to effects of the problem.

The documented procedure for corrective action must define requirements for:

  • Reviewing nonconformities (including customer complaints)

  • Determining the causes of nonconformities

  • Evaluating the need for actions to prevent recurrence

  • Determining and implementing the needed action

  • Records of the results of the action taken

  • Reviewing the corrective action taken

The new standard clarifies that corrective action is to prevent the “recurrence” of a detected nonconformity. Although worded differently throughout the clause, the requirements are basically the same.

Some auditors have expressed a concern that 8.5.2 (f) only requires the "reviewing of corrective action taken". They point out that clause 4.14.2 (d) of ISO 9001:1994 required "application of controls to ensure that corrective action is taken and that it is effective". Based on the definition of “review”, corrective actions must still be effective. ISO 9000:2000 defines Review as the "activity  undertaken to determine the suitability, adequacy, and effectiveness of the subject matter to achieve established objectives."

Procedure for Preventive Action

The organization must determine the action to eliminate the causes of potential nonconformities in order to prevent their occurrence. Preventive actions must be appropriate to the anticipated effects of the potential problem.

The documented procedure for preventive action must define requirements for:

  • Determining potential nonconformities and their causes

  • Evaluating the need for actions to prevent occurrence

  • Determining and implementing the needed action

  • Records of the results of the action taken

  • Reviewing the preventive action taken

The new standard clarifies that preventive action is to prevent the “occurrence” of potential nonconformities. Although worded differently throughout the clause, the requirements are basically the same.

Most organizations have a combined corrective and preventive action procedure. Although the new standard identifies the need for a corrective action procedure and a preventive action procedure, they can be placed together if the resulting procedure addresses the unique differences of their requirements.
 

2nd Edition of ISO/TS 16949 Expected by March 2002

ISO/TS 16949 for the automotive industry has been revised for ISO 9001:2000. Although the US delegation voted No, the draft  document received a 79% approval. An approval vote of 67% is needed to ratify an ISO Technical Specification, so publication is expected by March of this year.

Since 8 countries voted No, the release of ISO/TS 16949 may end up being delayed to accommodate their concerns and comments. As a result, automotive suppliers should wait for the official final version instead of using the draft document that was approved.

Watch for announcements from the Big Three on their polices about registration to QS-9000 or ISO/TS 16949:2002. If QS-9000 suppliers are asked to make a transition to ISO/TS 16949:2002, the cutoff may match the current ISO 9001:2000 deadline of December 15, 2003.

ISO standards are reviewed for possible revision every 5 years. However, technical specifications are revised after only 3 years. Once a technical specification has been revised, its next change is to become a full international standard or to be eliminated. That being the case, ISO/TS 16949 will likely become ISO 16949:2005.
 

Class Schedule for February, 2002 - April, 2002

To enroll in any of these public classes, go to the Class Schedule at our web site, or call us at 800-404-7585. The classes taught by Larry Whittington are shown in gold.

ISO 9001:2000 Lead Auditor (ANSI/RAB-NAP Accredited) - CEEM, Inc.
 

February

March

April

04-08  San Jose, CA

04-08  Dallas, TX

08-12  San Antonio, TX

11-15  Reston, VA

11-15  San Jose, CA

15-19  Phoenix, AZ

25-01  Orlando, FL

18-22  Charlotte, NC

22-26  Reston. VA

ISO 9001:2000 Internal Auditor (ANSI/RAB-NAP Accredited) - CEEM, Inc.
 

February

March

April

06-08  Reston, VA

06-08  Reston, VA

17-19  Reston, VA

27-01  Atlanta, GA 

  - -

24-26  Atlanta, GA

ISO 9001:2000 Auditor Transition (RAB-Approved)
* Auditor Refresher (same content as Auditor Transition)
 

February

March

April

21-22  Orlando, FL

05-06  San Diego, CA

11-12  Reston, VA

25-26  Atlanta, GA *

11-12  Dallas, TX

  - - 

Implementing ISO 9001:2000 (for New Systems)
 

February

March

April

04-05  Reston, VA

04-05  Reston, VA

15-16  Reston, VA

ISO 9001:2000 Conversion (for Existing Systems)
 

February

March

April

11-13  San Jose, CA

04-06  Orlando, FL

3-5  San Antonio, TX

 * *  Note: A two-day Conversion course is available for on-site classes.

Quality System Documentation (Revised for ISO 9001:2000)
 

February

March

April

  - -

13-14  Dallas, TX

  - -

Understanding ISO 9001:2000 Requirements
 

February

March

April

  - -

  - - 

22-23  Atlanta, GA

To arrange an economical on-site class, please call us at 800-404-7585.


                                    © 2000-2002 Whittington & Associates, LLC. All rights reserved.
You may copy this e-Newsletter provided you copy it completely, do not change it, and include this copyright notice.


-top-

Site by Frogtown Media Web Design

Send this page to a friend