Re: Some departments don't have quality objectives - Non Conformity ?
First, don't confuse a department with a process. Departments aren't mentioned anywhere in ISO 9001 for a reason.
The standard requires the organization to establish quality objectives at "relevant functions and levels." There may be objectives established for the overall organization that may apply to the purchasing and HR processes. I don't see evidence of a nonconformity against 5.4.1.
Instead of looking at objectives, I'd look at process measurements. Please read clause 8.2.3:
As you can see, each process is required to have some method to monitor/measure it to determine its ability to achieve "planned results." I suspect that this is really what you are talking about. If the organization has no method to do this, then it IS a nonconformity to 8.2.3.
Well said!
This topic reaches into another topic, KPI, or Key Performance Indicators (some people call them Key Process Indicators). KPI are a form of quality objectives, or at least are closely related. The term KPI is not used in the standard, but it is there as I will explain. Most importantly, Certification Bodies are looking for KPI during registration and surveillance audits for an organization's core processes.
Where is KPI in the standard?
It starts in 0.2 where the process approach is explained (but with no shalls attached). This sets the tone.
0.2 b & c
When used within the quality management system, such an approach emphasizes the importance of . . . obtaining results of process performance and effectiveness . . . continual improvement of process based on objective measurements"
4.1 starts the shalls involved with the process approach.
"The organization shall:
a) determine the processes needed for the quality management system . . . c) determine criteria and methods needed to ensure that both the operation and control of these processes are effective . . .
e) monitor, measure where applicable, and analyse these processes . . . f) implement actions necessary to achieve planned results and continual improvement of these processes."
(emphasis added)
As was already mentioned by others, 5.4.1 includes the need to have quality objectives "at relevant functions and levels within the organization".
As Howste pointed out, 8.2.3 requires the monitoring and measurement of your processes. 8.2.3 somewhat repeats what was in 4.1.
"The organization shall apply suitable methods for monitoring and, where applicable, measurement of the quality management system processes. These methods shall demonstrate the ability of the processes to achieve planned results. When planned results are not achieved, correction and corrective action shall be taken, as appropriate."
Perhaps even more telling is from 8.4 c.
"The organization shall determine, collect and analyse appropriate data to demonstrate the suitability and effectiveness of the quality management system and to evaluate where continual improvement of the effectiveness of the quality management system can be made . . . The analysis of data shall provide information relating to . . . c) characteristics and trends of processes . . . "
The Certification Bodies are being pushed by their Accreditation Bodies to continue to expand the application of the process approach. The use of KPI is a fairly recent one. An even more recent one is the question in at least some audit workbooks is the question for the top manager or top managers that in effect asks "Do you feel that your quality management system is effective as a whole" (where knowledge of KPI and how they are tracking would be very useful in answering the question) and the question for process owners "Is your process effective and do you have any performance data to support your response".
The short answer is that you are expected to have some sort of measurable objective that you are tracking for whatever processes lend themselves to such measurements and these objectives / KPI are expected to be at relevant functions and levels within the organization (core processes).