Our company has a separate spreadsheet for 4.1/4.2 regarding the organization's context with the needs/expectations, risks, opportunities and actions of ext. and int. issues and interested parties.
We also have a process risk assessment matrix (addresses 6.1 but listed under Clause 4 in our QMS) that addresses risks like product quality, OTD, resources, CoQ, etc. when evaluating each of our QMS Processes (Sales, Purchasing, Production) & Support Functions (QMS Planning, Monitoring, Improvement). It was created in a way that makes it difficult to understand rather than using an SEP matrix.
With our parent company moving into our facility, many of their customers have asked me to provide a risk analysis of the move. Since we are not AS9100 certified, our risk analysis is not a documented process. A company relocation risk analysis is new to me so I'm not 100% sure what I can/should use to accomplish the requested task.
1) I would use the Org. Profile (as mentioned above) to address the risk & opportunities along with their actions.
2) However, am I obligated to use the Process Risk Assessment Matrix we have even though the scope of its use is outside of it?
- Could I deviate and use an SEP matrix or should I just reword the existing Matrix?
Hi, ASdriven
take a look at this:
You can kill two birds with one bullet... Planning and risk considerations.
From TS 9002 9002
6.3 Planning of changes
The intent of this subclause is to determine the need for changes to the organization’s quality management system in order to adapt to changes in its business environment, as well as to ensure that any proposed changes are planned, introduced and implemented in a controlled manner.
Properly planning a change can help to avoid negative consequences such as rework, or cancellation or postponement of a service; it can also result in positive consequences such as the reduction of nonconforming outputs, or reduced incidents of human error. The purpose of planning the change is to maintain the integrity of the quality management system and the organization’s ability to continue to provide conforming products and services during the change. The organization should consider actions that could reduce the potential for negative impacts of the change, such as first conducting a trial of the change before full implementation, or determining actions to be taken when the change is not successfully implemented.
The application of risk-based thinking can be helpful in determining the actions necessary in planning changes to the quality management system. The organization should consider the availability of resources and necessary allocation or reallocation of responsibilities for any change. This could be done by assigning persons to a team to manage the change, or by delaying the change until the right resources are available.
The need for a change to the quality management system can be determined in many different ways, for example as part of management review, from audit results, reviews of nonconformities, complaints analysis, analysis of process performance, changes in context or from the changing needs of customers and other relevant interested parties.
The need for changes can result from, for example, the transfer of production lines from one site to another, changing process methods to improve trends in non-conforming outputs, using new information and communication technology (ICT) for a service or process, outsourcing important processes, persons in key roles leaving (either due to retirement or medical issues), or moving to online order handling.
The impact of such changes on the quality management system should be evaluated by the organization and the necessary actions taken to prevent undesired effects. This can range from the application of project management approaches to establishing performance and validation testing of new processes.
Hope it helps