S
sathis
Risk Based certification ( Risk based approach) is been followed by DNV
Any inputs on this ?
How it is been done?
How the audits is been done?
Sathish
Any inputs on this ?
How it is been done?
How the audits is been done?
Sathish
B
Bulksupplier
Hi Sathis,
We have been using DNV's Risk Based Certification for over a year now, and find it adds value to our ISO 9001 and ISO/TS 16949 Certificates. It also raises the profile and respect for the auditor.
The process is that we agree on a few 'focus areas' with the auditor ahead of the visit. These are areas we consider to be of 'high risk' - typically changes to processes, products, packaging, suppliers, hauliers etc. which could impact directly on the customer. The auditor then assesses the degree of control we have in each focus area (simple traffic light system), along with recommendations on how to make the control match the risk.
The report produced at the end of the audit is a management level presentation which identifies clearly which of our high-risk areas are in need of improved control. This is far more interesting to senior management than the fact that a few instruments were overdue for calibration, or that an uncontrolled copy of the quality policy was found in a messroom!
Of course, traditional nonconformity notes are also raised and need to be addressed, but tend to reflect where the lack of control is also out of compliance with the standard.
We have been using DNV's Risk Based Certification for over a year now, and find it adds value to our ISO 9001 and ISO/TS 16949 Certificates. It also raises the profile and respect for the auditor.
The process is that we agree on a few 'focus areas' with the auditor ahead of the visit. These are areas we consider to be of 'high risk' - typically changes to processes, products, packaging, suppliers, hauliers etc. which could impact directly on the customer. The auditor then assesses the degree of control we have in each focus area (simple traffic light system), along with recommendations on how to make the control match the risk.
The report produced at the end of the audit is a management level presentation which identifies clearly which of our high-risk areas are in need of improved control. This is far more interesting to senior management than the fact that a few instruments were overdue for calibration, or that an uncontrolled copy of the quality policy was found in a messroom!
Of course, traditional nonconformity notes are also raised and need to be addressed, but tend to reflect where the lack of control is also out of compliance with the standard.
An article in IRCA's website provides further information.
As mentioned before, even the Accreditation Bodies realize the benefit of auditors using the concept of risk assessment to add more value to the audits.
As mentioned before, even the Accreditation Bodies realize the benefit of auditors using the concept of risk assessment to add more value to the audits.
Similar threads
