SBS - The best value in QMS software

Risk Management Compliance - Implementing AS9100:2009

Randy

Randy

Super Moderator
#21
#21
Yeah...We only "think" risk management is new because it has a proper name, but it fact we use it one way or another in all aspects of our lives.
 
Elsmar Forum Sponsor
J

John Graham

#22
#22
Hello Sidney,

I was just finishing the upgrades to my business management system and saw the discussion about Risk Management. I purchased a copy of the ISO 31000 FDIS and spent considerable time going over it. I have to agree with you that it is extreamly broad in nature and overkill for most contract manufacturers. However, it does serve to help give some direction to developing a risk management program that will fit this group of companies.

Since you posted this comment earlly this year, have you had a chance to review the ISO 31000 standard or the ARP for managing supply chain risk?

Regards,

John
 
Sidney Vianna

Sidney Vianna

Post Responsibly
Staff member
Admin
#23
#23
John Graham said:
Since you posted this comment earlly this year, have you had a chance to review the ISO 31000 standard or the ARP for managing supply chain risk?
Click to expand...
Hi John, glad to see you here.

Yes. And I still think that ISO 31000 is way too broad for what AS9100 rev. C aims at and the ARP 9134 focuses on supplier risks.

If we had an aviation, space & defense equivalent to ISO 14971 for medical devices, it would be an elegant solution, in my opinion. I am still very concerned with the possibility of the IAQG not clearly defining the expectations for risk management in the A,S&D supply chain, and I dread the scenario when a CB auditor "mandates" the same sophisticated risk management protocols that would apply to a NASA tier one supplier, to a small, build-to-print machine shop.

I hope the upcoming IAQG sanctioned training package that will be used to "qualify" all CB auditors for 9100 Rev. C sets proper guidance for this aspect of the standard.

I would be interested to know what the people who already developed material for AS9100 Rev. C are telling their customers about that paragraph.
 
J

John Graham

#24
#24
Hello Sidney,

Thanks for your feedback. I share your concerns with the auditor training on risk management. The topic of the our next AS9100 Users Group Meeting is Risk Management. I will let you know if anything interesting comes out of that discussion next week. Also I will see if Alan from Boeing can join us and explain the proposed training for this subject.

Regards,

John
 
K

Koala

#25
#25
John,
I look forward to hearing about your Users Group Meeting (if anything is of interest).
Thank you,
Koala.
 
J

John Graham

#27
#27
We had about 12 people in the AS9100 Users Group Meeting representing small to medium sized suppliers. After reviewing the requirements in AS9100 we reviewed ISO 31000. A sample flowcharted procedure was used to review how ISO 31000 could be used for small and medium suppliers.

The general concensus of the group was that ISO 31000 could be used as a guideline for developing a risk management process but it must be carefully tailored to the company size and product type.

Attached is the meeting agenda with notes from the meeting.
 

Attachments

Q

Q4Aero

#29
#29
Hello Sidney/ John - it is good to have you both in the fray. One of the open posts, "The Evolution of Risk Management: Just Do It" by John Shortreed at 2008 International Risk Management Conference in Toronto is that the Standard is Not Certifiable, and along with definitions currently in ISO Guide 73, provides a format for assessing and managing the effect of uncertainty on objectives, aka planned arrangements.
Business owners and managers practice risk analysis on a daily basis and the question is, or will be, how will clients demonstrate a structured model in sufficient detail to satisfy a registrar without creating unworkable layers and processes?
The actual process of quantification while subjective is relatively straight forward, actually quite similar to FMEA and self assessment for ISO 14001.
Viewed from the Customer, small and build-to-print shops are key supply links in a Lean - reduced inventory, dock-to-stock scenario who should generally limit their focus to the risk of failing to deliver or that of delivering incorrect or nonconforming product. This likely leads to assessing supplier risks and internal processes; and it could address business continuance issues such as disaster recovery and financial stability as well as labor and staffing.
Large organization, particularly those who include design, must expand the scope and their task is a good deal more robust.
Hopefully the AS9104 and AS9101 committees get the message and provide appropriate guidance for suppliers and registrars.
Chuck Doland
 
Sidney Vianna

Sidney Vianna

Post Responsibly
Staff member
Admin
#30
#30
Q4Aero said:
Business owners and managers practice risk analysis on a daily basis and the question is, or will be, how will clients demonstrate a structured model in sufficient detail to satisfy a registrar without creating unworkable layers and processes?
Click to expand...
Excellent way of phrasing it, Chuck. As I have been saying for a while, now, it is CRITICAL that the IAQG makes it very clear what the expectations are for implementers and auditors, as part of the 9101C roll out process. Otherwise, we will end up with extreme disparity on the range of acceptable solutions for the risk management challenge.

Please note that some of the additional 9100C deployment material*, recently posted at the IAQG website contains reference to risk management expectations.

While I agree with you that business owners and managers practice risk management on a daily basis, some do a lousy job of it. So, we need to remember that risk management will also be subjected to an assessment in terms of effectiveness, as part of the 9101D methodology.

*
Deployment Support Materials
Click to expand...
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
M Streamlined Risk Management Process - Focus on Compliance with Standards ISO 14971 - Medical Device Risk Management 5
E Retrofitting Risk Management for IEC EN 60601 3rd Edition Compliance IEC 60601 - Medical Electrical Equipment Safety Standards Series 6
E Compliance with AS9100 Rev C Risk Management Purchasing Requirements AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
T Software to Manage Compliance to ISO 14971 (Medical Device Risk Management). ISO 13485:2016 - Medical Device Quality Management Systems 9
K Do we require compliance to ISO 14971 (Risk Management)? ISO 14971 - Medical Device Risk Management 6
T Biological Evaluation (10993) & Risk Management ISO 14971 - Medical Device Risk Management 7
D Cybersecurity and Risk Management: Loss of confidentiality IEC 62304 - Medical Device Software Life Cycle Processes 4
S Risk Management Review ISO 14971 - Medical Device Risk Management 4
S Risk Management and other Files ISO 14971 - Medical Device Risk Management 8
silentmonkey Overall Benefit/Risk Analysis - Risk Management VS Clinical Evaluation ISO 14971 - Medical Device Risk Management 3
Aymaneh Medical Device Cybersecurity Risk Management IEC 27001 - Information Security Management Systems (ISMS) 2
A 21 CFR 820 - Risk Management - Looking for some guidance US Food and Drug Administration (FDA) 3
Sravan Manchikanti Software Risk Management & probability of occurrence as per IEC 62304 IEC 62304 - Medical Device Software Life Cycle Processes 8
R Identify Medical Device characterstics as Annex C of ISO 14971 Risk Management ISO 14971 - Medical Device Risk Management 5
N Device Labeling - Medtronic Ventilator Files (Risk Management documents) Coffee Break and Water Cooler Discussions 2
T How do you define your Hazards? <a Risk Management discussion> ISO 14971 - Medical Device Risk Management 16
adir88 MDR requirement: Risk Management Plan for "each device" ISO 14971 - Medical Device Risk Management 5
D Risk Analysis & Technical File - What detail goes in the Risk Management Report ISO 14971 - Medical Device Risk Management 5
C AS9100 Rev D 8.1.1 & APQP - Operational risk management process AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 1
B ATP 5-19 "Risk Management" Misc. Quality Assurance and Business Systems Related Topics 2
N Risk Management besides mandated FDA requirements 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
M Identifying Hazards - Risk management process ISO 14971 - Medical Device Risk Management 6
R Risk Management in the Medical Device Industry ISO 14971 - Medical Device Risk Management 4
F Linking an ISO 31000 Risk management SOP to ISO 17025 ISO 17025 related Discussions 2
Ronen E The unbearable insensitivity of risk management language Other Medical Device and Orthopedic Related Topics 1
S ISO 14971 Risk Management - Questions for Hazard identification ISO 14971 - Medical Device Risk Management 2
M Risk/Benefit vs. benefit-risk - Revising an SOP covering Risk Management with the MDR in mind EU Medical Device Regulations 10
A Defining Expected Service Life in Risk Management File Reliability Analysis - Predictions, Testing and Standards 5
R Linking the Processes of Continual Improvement, Change Management, Risk Management, Action Planning, etc? Preventive Action and Continuous Improvement 5
D Risk management according to ISO 14971 - When to document risk controls? ISO 14971 - Medical Device Risk Management 10
J Software for Techfiles and Risk management ISO 14971 - Medical Device Risk Management 1
M Informational ISO TC 210 IEC SC 62A JWG 1 Medical device risk management – São Paulo meeting 2019 Medical Device and FDA Regulations and Standards News 6
M Medical Device News ISO TC 210 IEC SC 62A JWG 1 Medical device risk management – São Paulo meeting 2019 Medical Device and FDA Regulations and Standards News 0
D Where does FMEA fit in your ISO 14971 Risk Management process? ISO 14971 - Medical Device Risk Management 13
M Informational ISO TC 210 JWG 1 meeting in São Paulo – Revision of ISO 14971 and ISO TR 24971 – Medical Device Risk Management Medical Device and FDA Regulations and Standards News 0
T Risk Management Report as per MDR Requirements EU Medical Device Regulations 4
S Medical Device Cybersecurity Risk Management File ISO 14971 - Medical Device Risk Management 2
M Medical Device News Health Canada Notice of intent: Strengthening the post-market surveillance and risk management Canada Medical Device Regulations 1
Q Evidence of precautions (clinical evaluation report, risk management report) EU Medical Device Regulations 6
Q Risk / benefit Analysis in Risk Management Report CE Marking (Conformité Européene) / CB Scheme 12
A How to view supplier APQP timeline and do risk management APQP and PPAP 4
O Medical Device EMC Risk Management CE Marking (Conformité Européene) / CB Scheme 4
S ISO 13485:2016 - How I can integrate a risk management approach in our SOPs ISO 13485:2016 - Medical Device Quality Management Systems 1
B Time necessary for all Risk Management activities ISO 14971 - Medical Device Risk Management 2
W Virtual Manufacturer and Risk Management ISO 14971 - Medical Device Risk Management 3
O CQE Handbook - Missing Section VII - Risk Management Misc. Quality Assurance and Business Systems Related Topics 1
F Medical Device HACCP (Hazard Analysis and Critical Control Point) Risk Management ISO 14971 - Medical Device Risk Management 2
J Differences between a Risk Management Plan vs. Production Part Approval Process AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
M Free Risk Management Webinar - Design for Quality - May 2017 Risk Management Principles and Generic Guidelines 1
J Will this fulfill the AS9100D Risk Management Requirement AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 7

Similar threads

Top Bottom