Control of Documents on two separate networks

B

Babel

#1
Hi,

Our company with about 200 employees works basically simultanously on two physically separated networks. Some employees have two computers in order to have access to both networks (files are transferree back and forth by e-mail), but most have only access to one or the other network.

Now, to have 2 separated networks is a customer requirement and ISO 9001 surely appreciates that we take this into account :) However, the ISO requirements regarding document control gives me some headache. Along a project, people from "both network worlds" are involved at some point.

Some documents are sometimes used/needed on both networks. So, on an on-need basis people just transfer the needed documents back and forth between the two networks, save them here and there. When a new version of a controlled document is released to a controlled location, who will remember that he/she transferred an old version of that document half a year ago to a lcoation on the other network.

Hence, with the current system I cannot guarantee that the latest version of documents are available at the point of use and that obsolete documents are removed.

Any advice on how to proceed with this? Currently we don't comply with the ISO 9001 requirements regarding control of documents, on the other side ISO 9001 also says that we must ensure customer requirements (2 networks in this case). I made several proposals how to overcome this (e.g. replicated doc library database) but they were all rejected.

Thanks!
 
Elsmar Forum Sponsor
D

D.Scott

#3
Re: Control of documents on two separated networks

Welcome to the Cove Babel.

Do you mean you map 2 different drives/servers on your computers or are they completely separate systems? Can you access both sets of documents from the same computer?

I think the solution could be to establish a third "server/drive" in which your controlled documents are stored. This will preserve the confidentiality of the customer defined drive while still giving access to the needed documents. All documents would have to be stored "read only" with change authority given only to the document administrator. All changes, notes, etc. would be made in "red-line" only until approved then all documents would be revised at the same time.

I agree with Claes, a better description of what you are currently doing would be helpful.

Dave
 
B

Babel

#4
Hi,

Thanks for your answers and for welcoming me :)

The two separated networks are a security requirement by one of our major customers. Unfortunately I am not given more details regarding the technical setup :-(

I have also suggested a third server which can be accessed from both networks. Unfortunately this suggestion was rejected.

Basically, something that is on one network must not be accessible from the other network and vice-versa, which is a problem because in the course of a project the usage of the network shifts:

Pre-production: mainly data/docs from network 1 needed
Production: mainly data/docs from network 2 needed
Post-production: data/docs from both networks needed

Naturally, the border line between the different stages can be fluent... Although not very efficient, we have managed so far. But while driving toward ISO 9001 compliance I discovered so many duplicated/outdated documents which occured because the 2 networks (people copying them back and forth). So, I am wondering if we can actually ever reach ISO 9001 compliance with the current setup...

Babel
 
B

BadgerMan

#5
Sounds like an attempt at a forced configuration management process to me.

You could designate a CM lead person who would have sole authority for moving documents from the pre-production server to the production server and then on to the legacy server, etc. You could control this via the CM person’s (and everyone else’s) access rights for the network.

Sounds fairly simple to me……………am I seeing the whole picture?
 
T

tomvehoski

#6
In actuality, your servers are not separate. They have a manual, slow and cumbersome connection called e-mail (or flash drives, CDs and so on). I would think this already violates whatever the intent of the "requirement" is.

I would:
1. Check to make sure this is a real customer requirement. I know automotive customers require that team members working on Customer A's project don't have access to Customer's B's data. This is handled with folder level security, NOT two servers. It could be that your situation was somebody's interpretation years ago and now a case of "the customer says we have to do it this way". If it is not really a customer requirement, get rid of the two server setup and all of the extra overhead it creates.

2. If it really is mandated by the customer that way, see if you can negotiate it away. If so, proceed with getting rid of the second server.

3. Try again for common server #3 to house these documents. If not...

4. If you really have to have two and only two servers, look at an automated mirror type setup - like many internet sites will do to avoid having to pull documents all over the world. Set it to synchronize every night and you are all set.
 

Jim Wynne

Staff member
Admin
#7
Hi,

I have also suggested a third server which can be accessed from both networks. Unfortunately this suggestion was rejected.
You don't need a third server; just a network disk drive, containing only the controlled documentation, that can be mapped from both networks. If your IT people do this properly, applying the requisite security policies, the integrity of the two systems can still be maintained.
 
T

Tupham - 2008

#8
The two separated networks are a security requirement by one of our major customers.
I worked in a similar environment a few years ago where there was a contractual agreement with a client that there would be no physical connection between two networks. We overcame the problem by installing two physical backbones and putting two network cards into each computer. Staff then selected a network at login and could log in and out of either network during the day. At the highest technical level the two networks were connected via a single switch with high level firewall and some encryption, then designated a very few specifically qualified people to access both networks at the same time. In this scenario, we replicated the QS on both networks and the tech did the document transfers.

Later, we proposed a higher level of network security which satisfied the client's requirements and joined the two networks into one.
 
P

potdar

#9
I may sound simplistic, but we in India work with simplistic solutions within available resourses and the constraints that go with them.

In your situation, I would simply declare all printed copies, except those stamped and released by the controller as 'Uncontrolled'. - This would ensure that only official prints would be recognised as 'Controlled'.

Put print controls on all documents not 'belonging' to the system. - This would ensure that obsolete documents wont get printed by unauthorised sources.

Colour the terminals of the two systems differently - say black and white. Put watermarks on the documents saying "Up to date document if viewed on BLACK terminal".

Name the document files to reflect the system they belong to. Periodically clean the systems at administrator level, of all documents that dont belong to the system. Or do it whenever a document is revised. Whoever needs it may copy it afresh.

I think that should take care of your problems. Any further issues can be solved equally simply. Its routine for us here.
 
B

Babel

#10
Hi all!

Thanks a lot for you help - and sorry for my late reply! I put several of your ideas forward to your IT Manager and he agreed to have a look into the possibility of having a separate drive for document storage which could be accessed from both networks. That would help a lot.

Let's see what happens over the next few weeks!

Babel
 
Thread starter Similar threads Forum Replies Date
C Corrective action for failure in documents control ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
C Document Control Stamps - Does anyone still stamp their documents? Document Control Systems, Procedures, Forms and Templates 24
R Process control documents - Context of API Spec Q1, Clause 5.7.1.3 Other ISO and International Standards and European Regulations 0
qualityegghead ISO13485:2016 4.2.4 Control Of Documents - Lifetime of the Medical Device ISO 13485:2016 - Medical Device Quality Management Systems 3
C Defining Approvals Required for Design Control Documents ISO 13485:2016 - Medical Device Quality Management Systems 6
N Responding to NADCAP nonconformance - Control of External Documents AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
B Control of Duplicate Documents - Limited Scope (long) Document Control Systems, Procedures, Forms and Templates 5
P Document Control - Do hard copies of documents need to be signed? Document Control Systems, Procedures, Forms and Templates 3
M Retiring documents in Document Control Procedures ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
R Managing Level 3 Production Documents - Document Control System Help Document Control Systems, Procedures, Forms and Templates 6
M Document Control Management - External documents flowed down from customers Document Control Systems, Procedures, Forms and Templates 2
S AS9100 Control of Documents and SAP Implementation Document Control Systems, Procedures, Forms and Templates 1
M Control of External Documents such as customer manuals AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 28
Gman2 Control of Documents and (FORMS) on a Computer Network ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 16
T Information Gathering Documents and Document/Record Control Requirements Document Control Systems, Procedures, Forms and Templates 9
T Customer Specific Documents and Records - ISO 9001 Control Requirements ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
C Control of Records - Differences between Controlled Documents and Controlled Records Records and Data - Quality, Legal and Other Evidence 18
drgnrider Control of External Audit Notes and Documents Document Control Systems, Procedures, Forms and Templates 8
drgnrider How to control documents that most likely won't change ever ? Document Control Systems, Procedures, Forms and Templates 5
U Do we have to have foreign legal documents? (ISO13485 4.2.3 document control) ISO 13485:2016 - Medical Device Quality Management Systems 3
A Company Name Change & Control of Documents Document Control Systems, Procedures, Forms and Templates 9
C Document Control - Details to include on Documents Document Control Systems, Procedures, Forms and Templates 2
N Control of Documents Scope - Product Specifications ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
J ISO/IEC 17025 - Which External Documents require control? ISO 17025 related Discussions 6
S Read Only & Password Protected - Sufficient to Control Documents under 4.2.3? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
W Control of Obsolete Documents Document Control Systems, Procedures, Forms and Templates 21
T Are Control Plans "Summary Documents" not meant to replace Work Instructions? IATF 16949 - Automotive Quality Systems Standard 3
C Control of Documents Procedure - Audit Nonconformance Document Control Systems, Procedures, Forms and Templates 30
Q Control Of Documents and Forms - Formats and Numbering Document Control Systems, Procedures, Forms and Templates 3
Q Control of Customer Documents (Documents of External Origin) AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 6
T Document Control Master List for Obsolete Documents Document Control Systems, Procedures, Forms and Templates 6
K Control of Documents or Control of Records? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 27
S Referencing other documents in Control Plans Quality Manager and Management Related Issues 5
F Nonconforming Product Procedure vs. Control of Documents ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
L How to control some Documents and Records (ECN's and ECR's) Document Control Systems, Procedures, Forms and Templates 1
P Electronic Record Control (Specifically editable records not fixed documents!) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
C Document Control using Wiki - Cannot Create all Documents as Wiki Pages Document Control Systems, Procedures, Forms and Templates 10
G Document Control-AS9100 - Marking of Documents as Master Copy of Controlled Copy AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
B Reusing paper of Obsolete Documents to Control Waste Document Control Systems, Procedures, Forms and Templates 12
S Document Control - Different documents which must be controlled not identified Document Control Systems, Procedures, Forms and Templates 11
R Which documents to control apart from QMS related procedures? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 23
K Link between Control of Documents, CPAR & Control of Non-Conforming Product Procedure ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
C Control of Documents - Converted online in SharePoint Document Control Systems, Procedures, Forms and Templates 9
T External Document (Documents of External Origin) Control Template example wanted Document Control Systems, Procedures, Forms and Templates 14
A Designing a Documents Control System from scratch (in a php intranet) Document Control Systems, Procedures, Forms and Templates 5
R Control of Documents - Drawing (soft copy) for further work by other Consultants Document Control Systems, Procedures, Forms and Templates 1
H 4.2.3 Document Control using Microsoft Sharepoint - Visibility of Draft Documents ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
C Controlling Documents: Beyond the standard, how do we truly define what to control ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
T Living Documents which change every day - Control or Uncontrolled? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
H Document Control Defined? Determining what documents must be controlled ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 15

Similar threads

Top Bottom