No New Requirements in ISO 9001:2008?

[Polly Pure Bread]

I think it depends upon the replacement word. The ‘meaning’ of new word has something to do with the requirement. If the requirement is ‘customer satisfaction’ and changed it with ‘customer fulfillment’, therefore there is no new requirement. However, if you changed it with ‘customer choice’, that’s another story.

 

[Marc]

Also see the 'main' thread on the differences: Summary of Changes - ISO 9001:2000 vs. ISO 9001:2008

 

[meo786]

[FONT=&quot]Nice discussion, it will clear more about new upgraded standard [/FONT]

 

[ganeshmc]

Hi John
Good questions to ponder. I have been pondring especially on the below clause for a couple of days now,
6.3c: Does your system include information systems, an essential infrastructure (as for most organizations)?
In our organization we have a process and manual in place for ISO 9001:2000 and I am in charge to make the required amendments interms of ISO 9001:2008.
We are an IT services company and are in industry for more than 20 years.
What I could presume interms of Information Systems with respect to our company is that a separate process is in place for Design to Maintanance and all the support services like purchase, technical support defined exclusively.
My problem now is, since it has been defined as Inforation Systems, In tech support process we have procedure in place to control the hardware,software, backup, recovery etc.. I think this is suffice. But something says that more could be added specifically interms of controlling servers like mail servers, routers, Firewall, classified informations that will be handled only by top management etc. I am struck as how to start with implementing this. Can you please give some inputs on this? Or is the existing process suffice... Your suggestion will be highly valuable. Thanks in advance.

 

[janak]

It occurs to me that the changes were made because of confusion over requirements--why else would "clarifications" be thought necessary? If that's the case, there should be a lot of people who had to make changes, otherwise the clarifications serve no purpose. I'm with you--it would be interesting to hear from people who have (or are planning to) make changes.

Our company is one of others which will change the Quality manual according to new ISO 9001:2008 requirements. The clarification has maybe good reason but in Czech some clarifications have almost the same meaning. I'm very curious about the translation . We ordered the standard (Czech-English version) but still don't have.

Jana

 

[John Broomfield]

Hi John
Good questions to ponder. I have been pondring especially on the below clause for a couple of days now,
6.3c: Does your system include information systems, an essential infrastructure (as for most organizations)?
In our organization we have a process and manual in place for ISO 9001:2000 and I am in charge to make the required amendments interms of ISO 9001:2008.
We are an IT services company and are in industry for more than 20 years.
What I could presume interms of Information Systems with respect to our company is that a separate process is in place for Design to Maintanance and all the support services like purchase, technical support defined exclusively.
My problem now is, since it has been defined as Inforation Systems, In tech support process we have procedure in place to control the hardware,software, backup, recovery etc.. I think this is suffice. But something says that more could be added specifically interms of controlling servers like mail servers, routers, Firewall, classified informations that will be handled only by top management etc. I am struck as how to start with implementing this. Can you please give some inputs on this? Or is the existing process suffice... Your suggestion will be highly valuable. Thanks in advance.

Do not write procedures, you are right to analyze your processes instead. "Design and maintenance of support services", though, is a too broad. Try one process per service.

Analyze your process for design and maintenance of the network (hardware, software, LAN, WAN, telephones, etc).

This key process may start with management specifying the network for implementing their strategic plan. From whom do you get your specifications for the network to support planning, design and delivery of your company's product? Include the licensing of software and the availability of hardware, for example the objective of this process may be: 99.999% availabilty. Include remote users, upkeep of protective software and information security (see 7.5.4) as well. You have already mentioned back-ups etc...

So, you need to determine an earlier start-point for this process by connecting IT services to planning the future of the business and planning the fulfillment of customer needs.