ISO 28000 Implementation Gantt Chart

[bsedge]

Hi,


Does any one have a sample for ISO 28000 implementation gantt chart or a timeline ?


many thanks


bsedge

[Stijloor]

In Reply to Parent Post by bsedge

Hi,

Does any one have a sample for ISO 28000 implementation Gantt chart or a timeline ?

Many thanks

bsedge

Can someone help with this?

Thank you!!

Stijloor.

[AndyN]

That's almost impossible for anyone else to provide. No-one is in an organization like yours, with the amount of work/assignments you require to get to ISO 28000 compliance...sorry to say. If there was one, you'd spend more time to modify it, than to create your own.

Do you need to know what the basic time line looks like? The phases of implementation? If so, we can provide some guidance on that!

[bsedge]

Hi,

That would be great if you can give some guidance on ISO 28000 implementation such as phases/milestones, documents.....;

Many thanks.

AB

bsedge

[AndyN]

Well, I'd suggest you get a copy of the standard...

You should begin with a Needs and Risk Assessment - you will have some gaps to fill between what the standard requires and what you in place currently. You don't say so, but if your organization is already ISO 9001 compliant, you will have less gaps, since many aspects of the 28001 standard can be (partially) fulfilled by those 9001 systems.

The Needs and Risk assessment results can be used to complete a time line (GANTT chart) with clear responsibilities and deliverables.

The system needs to be 'designed' - what do your management want the various processes to 'look like as a system? How should the documentation be structured etc. The risks should be addressed in considering the processes, supply chain steps etc. The necessary documentation will have to be created, gathered up (where currently existing) and, where necessary, modified, approved etc.

The Implementation phase will require new processes to be started up, existing processes to be communicated, monitored etc. and ineffective processes to be improved. The risk assessment will require risks to be prioritized, assigned an owner, actions taken etc.

Then, a phase of internal audits and reviews will be required to look at the system for action - either correction or improvement.

This is a very basic set of phases that most management system implementations will (in my experience) go through.

[John Broomfield]

In Reply to Parent Post by bsedge

Hi,


Does any one have a sample for ISO 28000 implementation gantt chart or a timeline ?


many thanks


bsedge

bsedge,

Sorry, no Gantt chart because these belong to our clients. Our action planning checklist has evolved over 25 years of use and is attached.

You've probably developed your own Gantt chart by now but you may find the checklist useful for evaluating its completeness.

All the best,

John