Hi

I'm very new to this forum and found it very useful in order to get ideas on how to estalish the ISO 9001:2008 requirement for my company.
we are totally a consulting company and we design management systems for our clients. we have no product to sell but we do have public training sessions which run by our internal instructors.

I would like to know:
1) how to implemet the requirements 7.5.1 and 7.5.5 to our company?
2) what auditor will look for?
3) what are the required documents and records?

:thanks:

Iman, welcome to the Cove :bigwave:

There are many organisations like yours that apply ISO 9001 to their operations so you are not alone!

7.5.1 is the control over the activities you perform for your clients such as providing the consultancy service or delivering a training course. It would be quite normal to suggest that this is being provided by competent people so that would be the main method of control.

As for 7.5.5, I was discussing this with a colleague just recently and we came to the conclusion that it could perhaps be excluded as there is no physical product to 'preserve'. Now, we could consider the paper or electronic files that we may produce and handover but I think they are probably covered elsewhere such as 4.2.3 & 4.2.4 and 7.5.4.

As for what the auditor will look for - control over the process is the main point. The records and documents will be those that occur as an output from your normal activities.

As for 7.5.5, I was discussing this with a colleague just recently and we came to the conclusion that it could perhaps be excluded as there is no physical product to 'preserve'. Now, we could consider the paper or electronic files that we may produce and handover but I think they are probably covered elsewhere such as 4.2.3 & 4.2.4 and 7.5.4.


Dear Colpart

thnak you for your reply.
but for 7.5.5, what if we have our deliverables to our customers in electronic format? is that our product? taking regular backups from them is not preserving our product?

If you are referring to education/training, you should consider preserving academic documents such as syllabus, curricula, storage medias, computer programs and files.

Yes, your deliverables are the product but that should be covered under 'doc control' and back-ups are covered under 'records'

I would argue that your "product" are the electronic reports that you deliver to your clients. Under preservation you may want to consider:
1. How you ensure confidentiality of these items.
2. Data back up could fall under 4.2.3 or here. Physical hazards still apply since fire, flood can still impact the "product". Have you considered off site data back ups?

Just some ideas to think about.

:thanx:Thank you all for your comments.