
|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Visit and bookmark our web site today: http://www.WhittingtonAssociates.com This e-newsletter is in HTML format and may not be displayed properly by some email programs. Please click on our web site address above to see the e-newsletter with its proper formatting. Note: The prices of our Atlanta classes in June have
been cut by 20%. If you send three or more students from the same company,
the prices for those classes are reduced by 50%.
Benjamin Franklin said, "Tell me and I forget. Teach me and I remember. Involve me and I learn." According to ISO 9001:2000 clause 6.2.2, an organization must:
ISO (International Organization for Standardization) and the IAF (International Accreditation Forum) have announced they will begin sharing information on complaints received about ISO 9000 certification and the actions taken regarding the complaints. Pooling information on complaints will help protect the image and integrity of conformity assessment. The groups said in their efforts to protect the customers and users from unethical or inappropriate practices, they had identified three kinds of problems: 1. Malpractice (unethical and dishonest practices) by conformity assessment bodies (registrars); 2. Misleading advertising of the status of conformity assessment results, including misuse of marks of conformity; 3. Confusion in the market-place between "certification" and "accreditation". They said a number of steps are being taken to deal with these problems. One action is to publicize the existence of complaint handling systems and to encourage dissatisfied customers to use them. When accreditation bodies have proof that an accredited conformity assessment body has behaved inappropriately, they will take the necessary action, including the suspension or withdrawal of accreditation. In the USA, you can complain
to the Registrar Accreditation Board (RAB) at: <http://www.rabnet.com/f_complaint.shtml>.
The complaints received by the RAB for the past three years are listed
at their site. The total complaints by category for 2001 and 2002 are:
The ISO and IAF announcement defined certification and accreditation as "Certification" is when a conformity assessment provider gives written assurance in the form of a certificate that a product, service, system, process or material conforms to specific requirements. The most well known examples are the certification of quality management systems and environmental management systems as conforming, respectively, to ISO 9000 and ISO 14000 standards. Certification is known in some countries as "registration". The providers of these services are known as "certification bodies", "registration bodies", or "registrars". "Accreditation" is the
procedure by which an authoritative body gives formal recognition that
a body or person is competent to carry out specific tasks. In the ISO 9000
or ISO 14000 context, it relates to the work of the accreditation bodies
that have been set up in a number of countries to evaluate the competence
of certification bodies. An accreditation body will accredit - approve
- a conformity assessment body as competent to carry out ISO 9000 or ISO
14000 certification in specific business sectors. Accreditation is also
carried out of testing laboratories, inspection bodies, and product certification
bodies.
Do you say conformity or compliance? Is it okay to use conformance instead of conformity? Does it matter? The ISO 9000:2000 Fundamentals and Vocabulary standard defines conformity as the fulfillment of a requirement. A note says conformance is synonymous, but deprecated (meaning use of that term is considered obsolete). ISO 9000 defines nonconformity as the non-fulfillment of a requirement. It doesn't define compliance. Although QS-9000 doesn't define conformity, it does define nonconformity as a "process" which does not conform to a quality system requirement. It makes the distinction that a nonconformance is a "product or material" which does not conform to customer requirements or specifications. So, QS-9000 uses both conformity (process) and conformance (product). However, ISO 9000 uses conformity as fulfilling either process or product requirements. ISO/TS 16949:2002 (the replacement for QS-9000 by 2006) uses the ISO 9000:2000 definitions for conformity and nonconformity. It dropped the QS-9000 use of nonconformance. TL 9000 Release 3.0 refers to the ISO 9000:2000 definitions for conformity and nonconformity. The Release 2.5 definition of compliance has been dropped. The prior release defined compliance as an affirmative indication or judgment that a product has met the requirements of the relevant specifications, contract or regulation; also the state of meeting the requirements. ISO/IEC Guide 2:1996 defines conformity as "fulfillment by a product, process, or service of specified requirements". The American Heritage Dictionary defines conformity as acting or behaving in accordance with socially accepted standards, conventions, rules, or laws. It defines compliance as the disposition or tendency to yield to the will of others. Conformity can be
viewed as internally driven, such as our voluntary, consensus-based standards.
Compliance
can be viewed as externally imposed. So, we should use
conformity,
not conformance or compliance, when referring to fulfilling product and
process requirements. Of course, if customers impose conformity to ISO
9001, your organization may feel like it has to comply rather than
conform.
The Society of Manufacturing Engineers (SME) has introduced a free e-Newsletter called Lean Directions. Each monthly issue offers five highly focused articles for a quick and easy way to stay up-to-date with one of today's hottest topics -- Lean Manufacturing. You can subscribe to Lean
Directions at SME
e-Newsletters. You can also subscribe to their free 6-Sigma e-Newsletter.
The QS-9000 Task Force and the International Automotive Task Force have announced that adherence to ISO/TS 16949:2002 will become a requirement after December 15, 2006 for all suppliers subject to QS-9000. Special permission has been granted for QS-9000 to continue using ISO 9001:1994 until that date. However, earlier dates may be established by the original equipment manufacturers, for example, BMW has set December 15, 2003 for its suppliers to have ISO/TS 16949:2002 registration. Also, suppliers that are required by their non-automotive customers to be registered to ISO 9001:2000 will still have to make the transition before the ISO 9001:1994 withdrawal on December 16, 2003. Organizations moving to ISO/TS 16949:2002 certificates will see a more rigorous approval process for registrars, more process-oriented auditing, and more emphasis on meeting customer requirements. How well customer needs are being met will be evaluated through measures such as delivered part quality performance, customer disruptions, delivery schedule performance, and special status customer notifications related to quality or delivery issues. Registrars must be accredited to issue both ISO 9001:2000 and ISO/TS 16949:2002 certificates. However, they will be able to issue an ISO/TS 16949:2002 certificate without an accompanying ISO 9001:2000 certificate. As a result, suppliers will have to negotiate with their registrars if for business reasons they want to also receive an ISO 9001:2000 certificate. According to the International Automotive Oversight Bureau (IAOB), suppliers will need to provide their registrar with a list of customers and the current customer ratings before each ISO/TS 16949:2002 audit. Suppliers will also need to provide their registrars with performance data for the past 12 months, a list of internal auditors, and their internal audit results. Joe Bransky, the GM representative, is quoted as saying he will fly any where in the world to buy a steak dinner for the first auditor that refuses to perform an audit due to inadequate client preparation with regard to customer data. Auditors may have relied too heavily on checklists for QS-9000 audits. They will now be expected to rely more on control plans, failure mode effects analysis, and part approval ratings for ISO/TS 16949 audits. Also, more focus will be placed on determining if the customer-specific requirements are being met. Auditors will follow the processes from department to department instead of assessing each clause of the standard in isolation from the rest of the system. Checklists should be used to verify the audit completeness, not limit the audit coverage.. For more information about ISO/TS 16949:2002, see "New Edition of ISO/TS 16949:2002 Published" in our May 2002 e-newsletter. If you have any questions
about ISO/TS 16949:2002 requirements, send them to the Sanctioned Interpretations
Fax Mail Box (248-799-3943) set up by the IAOB (which includes DaimlerChrysler,
Ford Motor Company, General Motors, and the Automotive Industry Action
Group).
A recent Inside Quality survey by Quality Digest identified six key areas where companies making the transition to ISO 9001:2000 would like more information. The survey respondents should look at the back issues of our e-newsletter for guidance: 1. ISO 9001:2000 and customer
satisfaction
2. ISO 9001:2000 and management
participation
3. Auditing to ISO 9001:2000
4. Interpretation issues
related to ISO 9001:2000
5. ISO 9001:1994 to ISO 9001:2000
transition
6. Comparison between ISO
9001:1994 and ISO 9001:2000
If you would like to see
other topics in one of our upcoming e-newsletters, please let me know.
Organizations of all sizes and from all sectors have a common problem - the inherent vulnerability of their information systems. If your information is not safe, your future is not secure. No matter how well protected an organization may seem, sensitive data can be lost or leaked without you realizing it. Information security is not just an issue for computer experts. A single breach of security could severely reduce profits and damage your image and reputation. All information in all departments, whether in computer systems, paper files, or employee minds, is at risk from very real threats. With the increase in reported information security breaches, the need has intensified for a structured approach to managing information security. The ISO 17799 standard for information security management deals with the confidentiality, integrity, availability, and accountability of all kinds of sensitive information. The standard was developed to make sure organizations have the most appropriate controls and systems in place to manage the storage and exchange of information, whether it is in paper or electronic form. The ISO 17799 Code of Practice for Information Security Management has chapters on:
To enroll in any of these public classes, go to the Class Schedule at our web site, or call us at 800-404-7585. The classes taught by Larry Whittington are shown in gold. Note: The prices of our Atlanta classes in June have been cut by 20%. If you send three or more students from the same company, the prices for those classes are reduced by 50%. ISO 9001:2000 Lead Auditor (ANSI/RAB-NAP Accredited) - CEEM, Inc.
ISO 9001:2000 Internal Auditor (ANSI/RAB-NAP Accredited) - CEEM, Inc.
ISO 9001:2000 Auditor
Transition (RAB-Approved)
Implementing ISO 9001:2000 (for New Systems)
ISO 9001:2000 Conversion
(for Existing Systems)
Quality System Documentation (Revised for ISO 9001:2000)
To arrange an economical
on-site class, please call us at 800-404-7585.
Quality Expo Detroit
Conference On Quality
In Commercial Aviation
11th Annual Service Quality
Conference
QuEST Forum Best Practices
Conference
10th National Quality
Education Conference
World Quality Congress
22nd Southeastern Quality
Conference
APICS International Conference
and Exposition
12th International Conference
on Software Quality
Society for Advancement
of Material and Process Engineering
Customer-Supplier Division
Conference
ASQ's 3rd Six Sigma Conference
ASQ Quality Management
Division Conference
25th International Conference
on Software Engineering
57th Annual ASQ Quality
Conference
© 2000-2002 Whittington & Associates, LLC. All rights reserved. You may copy this e-Newsletter provided you copy it completely, do not change it, and include this copyright notice. |
|
|
|
|
|
|