March, 2005

This e-Newsletter is in HTML format and may not be displayed properly by some email programs. Please click on our web site address above to see the e-Newsletter with its proper formatting.
 

March Articles

Atlanta Classes

To see a list of recommended ISO 9001, Auditing, and Six Sigma books, click on: http://www.whittingtonassociates.com/v2/books.shtml Click on a title to jump to the article: 1. Next Revision to ISO 9001 is Planned for 2008 2. ISO Software Engineering Standards Issued in 2004 3. Whittington to Speak at ASQ's 12th Annual ISO 9000 Summit 4. Business Continuity, Security, and Emergency Management 5. ISO Guidelines on Social Responsibility 6. Classes: March, 2005 - May, 2005 Call us at 1-800-404-7585 for these 1-day onsite classes: AS9100B: Requirements Beyond ISO 9001:2000 ISO 9001:2000 Auditor Update - The Process Approach Understanding ISO/TS 16949:2002 Requirements To see previous articles, go to Newsletter Archives. To avoid this newsletter being rejected, or placed in a junk folder, please add <Larry@WhittingtonAssociates.com> to your address book or accepted list.

Students attending a class in Atlanta receive a 20% discount on future Atlanta classes. ISO 9001:2000 Lead Auditor April 18-22, 2005 ISO 9001:2000 Internal Auditor March 29-31, 2005 May 24-26, 2005 Understanding ISO 9001:2000 Requirements May 16, 2005 Quality System Documentation May 17-18, 2005 Implementing ISO 9001:2000 May 19-20, 2005 Green Belt Certification March 28-30, 2005 Black Belt Certification  Group 15 (3 weeks): April 4-8 + May 2-6 + June 6-10 Training Classes in Other Cities

These software engineering standards issued by ISO in 2004 may be of interest to your organization:

ISO/TR 9126-4:2004 - Software engineering - Product quality:
Part 4: Quality In Use Metrics. Provides quality in use metrics for measuring the attributes defined in ISO 9126-1 (Quality Model). ISO/TR 9126-4 contains an explanation of how to apply software quality metrics, a basic set of metrics for each characteristic, and an example of how to apply metrics during the software product life cycle.

Larry Whittington will speak at the ASQ 12th Annual ISO 9000 Summit  (April 4-5) in Atlanta, GA. His session on "Document and Record Control: Basic Requirements and Industry Views" will be 11:15 AM - 12:15 PM on Tuesday, April 5.

Early bird registration rates for the conference are available until March 10. Learn more at (http://www.asq.org/ed/conferences/iso/2005/index.html).

Larry's presentation will address the basic document and record control requirements of ISO 9001:2000, plus the guidance of:

• ISO 9004 (quality)
• ISO 90003 (software)
• ISO 15489 (records)

• AS9100 (aerospace)
• TL 9000 (telecommunications)
• ISO/TS 16949 (automotive)
• ISO 13485 (medical devices)
• ISO 14001 (environment)

If you attend his presentation, you should be able to:

• Understand the basic ISO 9001:2000 requirements for document and record control
• Contrast these basic requirements with additional requirements in related standards
• Develop a more comprehensive system for controlling their documents and records

Do you know the right questions to ask about your organization's level of preparedness in business continuity, information security, physical security, and emergency management? These questions posed by Paul Kirvan at ContingencyPlanning.com may help determine if your organization needs help.

Information Security

1. When was the last time you experienced a breach of security that resulted in damage to valuable company information?
2. How do you currently ensure the confidentiality, integrity, and availability of your firm's critical data and information technology?
3. How do you protect your communications networks from unauthorized internal or external access?
4. How do you protect the information being communicated among your staff and external users?
5. How do you identify and validate potential threats to your information systems and networks?
6. How do you identify and validate potential vulnerabilities to those assets?
7. How do you protect your employees from identity theft?
8. What policies and procedures have you established for dealing with data protection and network security?
9. How do you measure the effectiveness of the security programs you have in place?
10. How often do you test your information security programs, and when was your last test?

Physical Security

1. When was the last time you experienced a security breach that allowed someone's unauthorized access to your offices?
2. What was the outcome of that occurrence?
3. How do you currently control access to your properties for employees and guests?
4. How do you identify potential security threats within your premises?
5. How do you identify potential security threats external to your premises?
6. How do you monitor your corporate property's perimeters?
7. How do you currently respond to existing security threats?
8. What policies and procedures have you established to protect your physical premises from unauthorized access?
9. How do you measure the effectiveness of the physical security programs currently in place?
10. How often do you test your physical security programs, and when was your last test?

Business Continuity

1. What are your most critical business processes and supporting systems (e.g., payroll, A/P, manufacturing)?
2. If those processes and systems were no longer available, how would you get yourself back into business?
3. How do you currently minimize the damage to your business from disabled or compromised information systems?
4. What procedures do you initiate to recover systems and processes that have been disabled or destroyed?
5. How will your employees respond in an emergency situation, especially one that involves evacuating the premises?
6. If you were no longer able to access your office, for whatever reason, how would you restore business operations?
7. Facing a disaster situation, how would you notify employees, family members, local authorities, and clients?
8. What policies and procedures have you established to keep your company in business following a crisis or disaster?
9. How do you measure the effectiveness of these response, recovery and restoration programs?
10. How often do you test your business response and recovery programs, and when was your last test?

Emergency Management

1. When was the last time you experienced a crisis or disaster situation that threatened your business or your employees?
2. What was the outcome of that event?
3. How do you currently respond to emergencies and other crisis situations?
4. What procedures are in place to mitigate the severity or outcome of potential disasters?
5. How would you describe your company’s level of preparedness for dealing with crisis situations?
6. What is your normal level of interaction with public authorities, such as police/fire/EMT, and city/county/state offices of emergency management?
7. Faced with an emergency, how would you interact with those same public sector organizations?
8. What policies and procedures have you established to deal with emergency situations?
9. How do you measure the overall effectiveness of existing emergency and crisis response programs?
10. How often do you test your emergency and crisis response plans, and when was your last test?

The first meeting of the ISO group developing the International Standard for guidelines on social responsibility has been scheduled for March 7-11, 2005 in Salvador, Bahia, Brazil. ISO expects that developing the standard will take three years, with publication in early 2008.

The standard will provide guiding principles on social responsibility. It will not be a management system standard and will not be for certification purposes. For more information, go to http://www.iso.org/iso/en/info/Conferences/SRConference/home.htm

To enroll in these public classes, you can click on the course title, go to Class Schedule at our web site, or call us at 800-404-7585.

Classes taught by Larry Whittington are shown in yellow.

ISO 9001:2000 Lead Auditor (RABQSA Certified) - BSI Management Systems
Initial course version developed by Larry Whittington
 

March	April	May
07-11  St. Louis, MO	04-08  Chicago, IL	02-06  San Diego, CA
14-18  Las Vegas, NV	11-15  Newport Beach, CA	09-13  Reston, VA
21-25  Reston, VA	18-22  Atlanta, GA	16-20  San Juan, PR
- -	18-22  Providence, RI	23-27  Columbus, OH
- -	25-29  Memphis, TN	- -

ISO 9001:2000 Internal Auditor (RABQSA Certified) - BSI Management Systems
Initial course version developed by Associate at Whittington & Associates
  

March	April	May
15-17  San Jose, CA	19-21  Newport Beach	24-26  Atlanta, GA
22-24  Chicago, IL	- -	24-26  Reston, VA
29-31  Atlanta, GA	- -	- -

Implementing ISO 9001:2000
Course developed by Larry Whittington

Understanding ISO 9001:2000

Understanding ISO 9001:2000 Requirements (Atlanta Only - $295)
Course developed by Larry Whittington

Quality System Documentation (ISO 9001:2000)
Course developed by Larry Whittington

The above public courses can be offered on-site at your facility. In addition, we offer these on-site courses:

• ISO 9001:2000 Auditor Update - The Process Approach (1 Day) - Course developed by Larry Whittington
• Understanding ISO/TS 16949:2002 Requirements (1 Day) - Course developed by Larry Whittington
• Internal Quality Auditing (2 Days) - Course developed by Larry Whittington (based on ISO 19011)
• AS9100B: Requirements Beyond ISO 9001:2000  (1 Day) - Course developed by Larry Whittington

To arrange an economical on-site class, please call us at 800-404-7585.  

Copyright © 2000 - 2007  Whittington & Associates, LLC.
All Rights Reserved.
242 Highlands Drive, Woodstock, GA 30188
770-517-7944 or fax 770-517-7945

 
Whittington & Associates provides training, consulting and auditing services for quality systems based on
ISO 9001, ISO/TS16949, TL9000, AS9100, ISO 13485, as well as, ISO 27001, ISO 20000, ISO 22000, and ISO 14001.