Re: 5.5.1 Responsibility and authority
The famous 5.5.1 of ISO 9001:2008 says: Top management shall ensure that responsibilities and authorities are defined and communicated within the organization.
The word “documented” is knocked off from the 2000 version.
Many phrases are there about this authority viz ..
1. There is no authority without responsibility
2. Authority is never given, it must be taken
3. The real authority is the top management
4. If its ok, then I authorize. If not, then its you.
5. Authority is always a shared responsibility …. There may be many more >>>
How is this 5.5.1 applied in various organizations and how are they audited? How does the CB assess this?
The requirements stated in 2000 & 2008 versions are exactly similar. However. the 1994 standard specified the type of tasks to be considered in this clause (4.1.2.1) which, in my opinion, was a better clarification of the intent of this clause.
TC 176 guidelines explains the term 'authority' as under:
Authority (noun)
- power or right to enforce obedience
- moral or legal supremacy
- right to command or give a final decision
We have shown the various positions people hold in the organization on an organogram. Their key responsibilities are defined in their job descriptions. Additionally each department also maintains a 'responsibility matrix' to define who is responsible for what. An example sheet attached.
As for the authorities, these are defined in the respective procedures. Authority is not something like power to recruit or sack but about the jobs people are supposed to be doing and are necessary for proper execution of their jobs. For example, if one is responsible to operate a machine, he is also authorized to stop it if it is likely to endanger someone's life or may sustain a damage if not stopped. Likewise, if one is supposed to manage the law & order, he must be authorized to liaison with concerned regulatory/ local authorities. Authorities inter alia include power to raise indents for resources (material, information, human etc.), power to take disciplinary actions, power to enforce rules and policies, engagement of extra manpower/ overtime etc. Different authorities are defined at different levels.
If authorities are not delegated, a person will only be looking at the fire as a mute spectator.
