SBS - The best value in QMS software

Procedures Required by ISO 9001:2008

Antonio Vieira

Involved - Posts
Trusted Information Resource
#31
Re: ISO 9001:2008 Required Procedures

The best way is to write all the procedures you need (and of course those 6 areas required by ISO 9001). In time you’ll see those that are superfluous or not.
 
Elsmar Forum Sponsor
S

snappy

#32
Re: ISO 9001:2008 Required Procedures

Hi,

I found this info under a very old post about 9001:2000. Can someone please tell me if these are still valid for 2008?

Note: there are only six "required" procedures:

* Document Control (clause 5.5.6)?
* Control of Quality Records (clause 5.5.7)?
* Internal Audit (clause 8.2.2)?
* Control of Nonconformity (clause 8.3)?
* Corrective Action (clause 8.5.2)?
* Preventive Action (clause 8.5.3)?

If/as appropriate, procedures may also be "needed" for:

* Planning (5.4, 7.1, 8.1, 8.5.1)
* Communications (5.5.4)
* Management Review (5.6)
* Resource Management (6)
* Training (6.2.2)
* Customer Processes (7.2)
* Design and Development (7.3)
* Purchasing(7.4)
* Operations Control (7.5.1)
* Product ID/Traceability ( 7.5.2)
* Customer Property (7.5.3)
* Preservation of Product (7.5.4)
* Validation of Processes (7.5.5)
* Process Measurement/Monitoring (8.2.3)
* Product Measurement/Monitoring (8.2.4)
* Analysis/ Improvement (8.4, 8.5)


Thanks!
Deb
:)
While six procedures are required of the 2000/2008, this does not mean that six separate documents are required. "Documented procedures" means that it is documented in QMS procedures somewhere.

In 1994, many thought that 20 procedures were required of the standard. This was not true, in fact it illustrates an element-by-element approach--which is a bad idea from the perspective of quality assurance.

Now that the 2000/2008 standard explicitly requires six procedures, many think that six is the clever/magic number of procedures. Same mistake.

The number of procedures depends upon how many processes are in operation that impact quality. Don't confuse activities with processes here, and you'll be okay. (Focus on major processes--processes at their highest level, maybe.)

A procedure simply describes how a process is carried out. If you have a process, you have a procedure. The standard does not, and never has, identified companies' "quality system processes" (with the exception of the required support processes). So the number of procedures (beyond the required six) depends on the organization--not upon the standard.

Don't write procedures to address the requirements you sited, write procedures to describe the processes. Then review them to make sure that conformity to the sited requirements is clear, as applicable.

:)
 
#33
Re: ISO 9001:2008 Required Procedures

Why are procedures required? Can't an organization rely on spoken process descriptions? Even the ISO audit working group recognize undocumented processes exist...
 
J

JaneB

#34
Re: ISO 9001:2008 Required Procedures

Snappy,
I thought most of your advice was sound, but I'm completely in agreement with Andy that processes can very definitely exist without a procedure.

An example: many of my clients at the smaller end of the spectrum don't have any written procedure for purchasing. Yes, there's a process. But no, they do not have a procedure and they do not need one.

I disagree with you when you say:

The number of procedures depends upon how many processes are in operation that impact quality.
and particularly:
If you have a process, you have a procedure.
Totally agree with you that the number of procedures (or flowcharts/ maps/ instructions/whatever) is up to the organisation. But there is not a 1:1 relationship between processes and procedures.

Processes can exist without any procedure whatsoever. See, for example, 4.2.1c) which refers to the need to determine 'criteria and methods' to ensure effectiveness of processes. If they meant 'you must have at least one documented procedure per process', it would have been stated explicitly. It wasn't and isn't.
 

Jim Wynne

Staff member
Admin
#35
Re: ISO 9001:2008 Required Procedures

While six procedures are required of the 2000/2008, this does not mean that six separate documents are required. "Documented procedures" means that it is documented in QMS procedures somewhere.

In 1994, many thought that 20 procedures were required of the standard. This was not true, in fact it illustrates an element-by-element approach--which is a bad idea from the perspective of quality assurance.

Now that the 2000/2008 standard explicitly requires six procedures, many think that six is the clever/magic number of procedures. Same mistake.

The number of procedures depends upon how many processes are in operation that impact quality. Don't confuse activities with processes here, and you'll be okay. (Focus on major processes--processes at their highest level, maybe.)

A procedure simply describes how a process is carried out. If you have a process, you have a procedure. The standard does not, and never has, identified companies' "quality system processes" (with the exception of the required support processes). So the number of procedures (beyond the required six) depends on the organization--not upon the standard.

Don't write procedures to address the requirements you sited, write procedures to describe the processes. Then review them to make sure that conformity to the sited requirements is clear, as applicable.

:)
Why are procedures required? Can't an organization rely on spoken process descriptions? Even the ISO audit working group recognize undocumented processes exist...
Snappy,
I thought most of your advice was sound, but I'm completely in agreement with Andy that processes can very definitely exist without a procedure.

An example: many of my clients at the smaller end of the spectrum don't have any written procedure for purchasing. Yes, there's a process. But no, they do not have a procedure and they do not need one.

I disagree with you when you say:


and particularly:


Totally agree with you that the number of procedures (or flowcharts/ maps/ instructions/whatever) is up to the organisation. But there is not a 1:1 relationship between processes and procedures.

Processes can exist without any procedure whatsoever. See, for example, 4.2.1c) which refers to the need to determine 'criteria and methods' to ensure effectiveness of processes. If they meant 'you must have at least one documented procedure per process', it would have been stated explicitly. It wasn't and isn't.
There is a lot unclear thinking when it comes to "procedure" and "process" and part of it is due to the standard, I think. ISO 9001 refers to "documented procedures" which is either a redundancy or intended to differentiate between documents and procedures. In other words, the way the standard is worded, "procedure" and "process" are synonymous, and the question is whether or not a document is needed in a given situation.

Documents should exist when there's a useful purpose for their existence. If a document can be eliminated without losing something, it should almost always be eliminated, or not written to begin with.
 
T

treesei

#36
Re: ISO 9001:2008 Required Procedures

ISO 9001 refers to "documented procedures" which is either a redundancy or intended to differentiate between documents and procedures. In other words, the way the standard is worded, "procedure" and "process" are synonymous, and the question is whether or not a document is needed in a given situation.

.
Jim hit the point.

The definition of "procedure" by Webster,

http://www.merriam-webster.com/dictionary/procedure

implies that a procedure may not be in written form. Therefore, when there is a process, there is a procedure that tells one how to implement the process. This procedure may not be in written form unless the ISO requires so or the company wants to. There are pros and cons for each written procedure NOT required. It is the company's call to reach the optimal balance.
 
S

snappy

#37
Re: ISO 9001:2008 Required Procedures

Snappy,
I thought most of your advice was sound, but I'm completely in agreement with Andy that processes can very definitely exist without a procedure.

An example: many of my clients at the smaller end of the spectrum don't have any written procedure for purchasing. Yes, there's a process. But no, they do not have a procedure and they do not need one.

I disagree with you when you say:


and particularly:


Totally agree with you that the number of procedures (or flowcharts/ maps/ instructions/whatever) is up to the organisation. But there is not a 1:1 relationship between processes and procedures.

Processes can exist without any procedure whatsoever. See, for example, 4.2.1c) which refers to the need to determine 'criteria and methods' to ensure effectiveness of processes. If they meant 'you must have at least one documented procedure per process', it would have been stated explicitly. It wasn't and isn't.
The purpose of a procedure is to describe how a process is carried out--to ensure that process performance is carried out as required. If there is no specified way to perform a process, then there is no procedure. If there is a proper way to perform the process, there is a procedure--whether it is documented or not.
 

Sidney Vianna

Post Responsibly
Staff member
Admin
#38
Re: ISO 9001:2008 Required Procedures

If there is a proper way to perform the process, there is a procedure--whether it is documented or not.
Despite the fact that you are using the definition of ISO 9000 for procedure, let's not be dogmatic.

I can make scrambled eggs in 20+ different ways. Each way will give me slightly different results, but at the end of the process, I will have scrambled eggs to eat. So, what is the "proper way" to scramble eggs? The way I feel like that day....:tg:
 

Jim Wynne

Staff member
Admin
#39
Re: ISO 9001:2008 Required Procedures

The purpose of a procedure is to describe how a process is carried out--to ensure that process performance is carried out as required.
Here you're referring to "procedure" as a document.

If there is no specified way to perform a process, then there is no procedure. If there is a proper way to perform the process, there is a procedure--whether it is documented or not.
Here you're referring to "procedure" as a set of steps or operations--not necessarily documented--to follow in operating a process.

This is exactly the sort of confusion I alluded to in my earlier post. "Procedure" is given more than one meaning. It would have made life a lot simpler if the standard referred to documented processes instead of documented procedures.

In any event, there can be processes/procedures that have a prescribed order and method of operations but don't need to be documented. 4.2.1(d) of ISO 9001:2008 says that we must have "...documents, including records, determined by the organization to be necessary to ensure the effective planning, operation and control of its processes." (My emphasis)

The organization gets to decide when documentation is necessary.
 
S

snappy

#40
Re: ISO 9001:2008 Required Procedures

Despite the fact that you are using the definition of ISO 9000 for procedure, let's not be dogmatic.

I can make scrambled eggs in 20+ different ways. Each way will give me slightly different results, but at the end of the process, I will have scrambled eggs to eat. So, what is the "proper way" to scramble eggs? The way I feel like that day....:tg:
Is there a difference between making scrambled eggs for yourself and making a complicated product for your customer? Do you think there is a proper way to achieve hard chrome plating of .001" thick, or do you just plate them how you feel that day?
 
Thread starter Similar threads Forum Replies Date
Gman2 Can I use ONLY the six required procedures in my ISO 9001 QMS? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
K List of procedures and forms or records required by ISO 15189:2012 Document Control Systems, Procedures, Forms and Templates 2
I Quality Procedures (as required by ISO 9001) for Inspection Bodies ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
M Quality Manual - ISO 17025 required Mandatory and Operational Procedures ISO 17025 related Discussions 7
E List of Sales Procedures required for ISO 13485 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
R Identifying procedures that are NOT required by ISO 9001 Quality Manager and Management Related Issues 17
G Rookie to the ISO 9001:2008 World - Required Procedures and Documents ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 11
V List of Required Procedures as per ISO 13485 & MDD EU Medical Device Regulations 8
D ISO 9001:2008 Six (6) Required Procedures Presentation ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
V Mandatory Procedures required by ISO 14001-2004 ISO 14001:2015 Specific Discussions 10
M The 6 documented procedures required by ISO 9001:2008 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 30
Ajit Basrur ISO 17025 - Required Procedures and Records ISO 17025 related Discussions 11
H Any examples of the required ISO 9001 Procedures for a Small Recruitment Company Document Control Systems, Procedures, Forms and Templates 7
M Adding More Procedures than are Required by ISO 9001 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
D How many procedures are required by ISO 14001? ISO 14001:2015 Specific Discussions 12
I ISO 13485 - List of required / needed procedures and records attached ISO 13485:2016 - Medical Device Quality Management Systems 51
M Input Needed (Help): My List of 'Required' ISO 9001 Procedures ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
I Required ISO 9000:2000 Procedures - Are procedures still necessary? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
P ISO 9001:2000 - Required Procedures or minimum required number? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 45
Marc ISO 9001:2000 Required Procedures Listing ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
S Are 2 Hard Copies of Procedures and Instructions Required? ISO 13485:2016 - Medical Device Quality Management Systems 6
A AS9100 Rev D - List of Required Procedures Document Control Systems, Procedures, Forms and Templates 5
K AS9100:2016 (Rev. D) Required Procedures AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 19
O QMS / EMS required procedures ISO 14001:2015 Specific Discussions 4
S Forecasting and Material Planning - Are formal procedures required? Document Control Systems, Procedures, Forms and Templates 3
M Mining Operation Sand Plant - Required Standards and Procedures ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
N AS9110 Audit Stage 2 - What procedures are required? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
A Changes required to procedures after introduction of SAP Document Control Systems, Procedures, Forms and Templates 3
M Additional Procedures required for QA Department Document Control Systems, Procedures, Forms and Templates 10
J How to determine what procedures are required - AS9100 AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 12
S Number of Documented / Controlled Procedures Required by TS 16949 IATF 16949 - Automotive Quality Systems Standard 6
E TS 16949 Clause 4.2.3 - How many Procedures are Required? IATF 16949 - Automotive Quality Systems Standard 13
A Policies and Procedures are required but what is the reason? General Measurement Device and Calibration Topics 16
Q What are the required procedures for Medical Device Specification Developer? ISO 13485:2016 - Medical Device Quality Management Systems 24
E Are we required to update our procedures even though no changes? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 10
M List of FDA Required Procedures Other US Medical Device Regulations 5
A Are two separate procedures required for Corrective action and preventive actions Document Control Systems, Procedures, Forms and Templates 38
B What other Procedures are required apart from the Basic Six & Management Review? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
T What Are The "6" Procedures Required by ISO9001:2000 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
Ajit Basrur List of mandatory or required procedures for 21 CFR Part 820 ISO 13485:2016 - Medical Device Quality Management Systems 9
S EN AS 9100 Procedures and WI (Work Instructions) Required Document Control Systems, Procedures, Forms and Templates 3
T Sarbanes Oxley Act (SOX) linkage to a documented QMS - Detailed Procedures Required? Document Control Systems, Procedures, Forms and Templates 21
P Procedures Required by TS 16949 Document Control Systems, Procedures, Forms and Templates 3
F How many procedures are required by TS 16949:2002 Document Control Systems, Procedures, Forms and Templates 6
A The 7 Procedures Required by TS 16949 IATF 16949 - Automotive Quality Systems Standard 15
S Detail Required in Documented Procedures Document Control Systems, Procedures, Forms and Templates 7
Y Procedures on Contract Review Document Control Systems, Procedures, Forms and Templates 3
L Separate Corrective Action and Preventive Action Procedures ISO 13485:2016 - Medical Device Quality Management Systems 13
L Where to place the what/when/how/who/where procedures in a multi-regulation AS9110C organisation AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
F Standard Calibration Procedures: Recommended Practice ISO 17025 related Discussions 0

Similar threads

Top Bottom