TL9000 Clause 7.1.C.3 - Interpreting the Disaster Recovery clause

X

xmonteon

#1
Need help. I'm a consultant who specializes in Business Continuity Planning and Disaster Recovery. However, the consultant that my client is using to assist them in TL9000 certification is interpretting the Disaster Recovery section quite oddly. It almost feels like this section is being treated like a smoke and mirrors section. My concern is that I recently spoke to a company that was audited and the questions looked very closely at:

-Suppliers (what backup plans were in place)
-Materials
-ERP System (IT Disaster Recovery)
-Manufacturing ability (in other words if site A disappeared, could site B continue operations and deliver to customers)

Any input from anyone having gone through this type of audit or received auditor training. I'm not comfortable with a broad states such as:

7.1.C.3 Disaster Recovery – The organization shall establish and maintain methods for disaster recovery to ensure the organization’s ability to recreate and service the product throughout its life cycle.

Without having the actual "methods" in place, it seems to expose the company to quite a bit of liability.

Thanks
 
Elsmar Forum Sponsor

Marc

Fully vaccinated are you?
Leader
#2
I'm not a TL specialist, and it's obvious there aren't any who visit here regularly because it's really a niche 'market'. However, QS-9000 is very keen on Disaster Recovery so I'll give this a shot.

First one must remember that most companies can only go so far in disaster recovery - plans for or not. If I have a shop that makes wire harnesses and I employ 150 people I may (for example) have a contingency plan for one of my suppliers folding. But how far can and should I go? I may have alturnate suppliers in mind but if I'm not going to place an order with 'alturnate' suppliers I can't ensure they will even take on extra business. Heck - they may be wiped out in the disaster which wiped me out.

The first thing I do is list possible disasters and 'suppose' what I can do in each case with respect to reality. For example, if my plant is destroyed completely in an earthquake or tornado I cannot have a plant set up somewhere else ready and waiting to take over production (remember I'm a small supplier).

So - take the list and address each issue with your intention or actual plan. Some can be real - for example I can have a data backup in San Diego while my plant is in Toledo. I did some work for an insurance company which had 3 geologically distant locations and data redundancy at each. They could sustain a loss of one entire facility (and theoretically 2) and still maintain their business without interruption. They didn't have manufacturing equipment, however so it was really a no brainer.

I can understand your comment about smoke and mirrors but the reality is there is no company which can really have in place a contingency plan for every possible disaster. You listed:

-Suppliers (what backup plans were in place)
-Materials
-ERP System (IT Disaster Recovery)
-Manufacturing ability (in other words if site A disappeared, could site B continue operations and deliver to customers)

I don't see a problem with the first 3 but the 4th would be (to many companies) impossibly expensive unless you're a quite big company. For many companies there simply is no 'Site B'.

I think what I'm saying is 7.1.C.3 gives some leeway to a company to address reality with respect to them. One could go so far as to say by ensuring a print exists and is protected against loss they can "...recreate and service the product throughout its life cycle...".

So - in my example company I make my list and lay out contigency plans for what I can 'control'. I suggest you take a read through http://Elsmar.com/Forums/showthread.php?t=238 which is a consolidation of several threads from the 'old' forums on contingency plans with respect to QS-9000 for some thoughts.

You end up stating: "...Without having the actual 'methods' in place, it seems to expose the company to quite a bit of liability..." For what a company can realistically control I agree and 7.1.C.3 does not give a company an out as I read it. What 7.1.C.3 does not do is define how or what. If you would like to discuss this in more detail, I'll be happy to 'chat' here.

From what I can tell is you are saying that the company you are dealing with does not want to have defined plans. Is that correct?
 

Marc

Fully vaccinated are you?
Leader
#3
I received this from xmonteon -- I think the 'wrong' link was pressed on the notification e-mail and he sent it to me instead of replying to the thread:
*********************

Thanks for the input. The Company I'm working with is the process, and has been in the process for the last 3 months, of evaluating their current status and developing recovery strategies for a worst case scenario. We figure if we plan for the worst case we'll address other scenarios with no problem. The concern is having it done in time for the TL9000 registration. I agree that a lot of it is left to interpretation. So, we'll do what we can and implement some short-term plans with documented long-term plans, in particular for IT and manufacturing.

thanks again,

XM
 
Thread starter Similar threads Forum Replies Date
Q TL9000 - 9.1.3.C.3 - Sustainability Assessment TL 9000 Telecommunications Standard and QuEST 0
W TL9000 transition from 5.5 to 6.0 - help needed TL 9000 Telecommunications Standard and QuEST 1
Q Gap assessment on TL9000 with respect to ISO TS 16949 TL 9000 Telecommunications Standard and QuEST 3
S TL9000 - requirements 5.5 released - TL alert - July 2013 TL 9000 Telecommunications Standard and QuEST 1
P Outsourced Manufacturing - Making Subcontractors comply with TL9000 TL 9000 Telecommunications Standard and QuEST 2
J TL9000 Common Measurements - Design and Development for Telecommunication Products TL 9000 Telecommunications Standard and QuEST 5
J Telecommunication Products - TL9000 Product Category TL 9000 Telecommunications Standard and QuEST 3
R Audit Checklist for Telco Start Up Business - TL9000 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
Q ISO 9001 vs. TL9000 - Which standard is more applicable? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
Marc What are TL9000 and QuEST (Quality Excellence for Suppliers of Telecommunications)? TL 9000 Telecommunications Standard and QuEST 0
B Development of the TL9000 and the QuEST-Forum in the last 8 years TL 9000 Telecommunications Standard and QuEST 6
F TL9000 and AS9100 for the different business we're going after - TL 9000? Anyone? TL 9000 Telecommunications Standard and QuEST 1
R TL9000, 7.3.1.C.1 Project Plan TL 9000 Telecommunications Standard and QuEST 4
H Is it possible to establish a new subforum for TL9000? TL 9000 Telecommunications Standard and QuEST 7
R TL9000 Implementation - Has anyone out there been through TL9000 Implementation? TL 9000 Telecommunications Standard and QuEST 6
J Drop TL9000 cert but maintain standards TL 9000 Telecommunications Standard and QuEST 7
D TL9000 Measurements for PC (product category) 5.3 TL 9000 Telecommunications Standard and QuEST 3
J TL9000 Release 2.5 and 3.0 - Mapping matrix showing the difference TL 9000 Telecommunications Standard and QuEST 4
Jerry Eldred The basics of TL9000 - Where Can I get some info? TL 9000 Telecommunications Standard and QuEST 9
Casana QS9000 vs. TL9000 - What are the differences? TL 9000 Telecommunications Standard and QuEST 4
Marc The usefullness of TL 9000 - The key to TL9000 is metrics TL 9000 Telecommunications Standard and QuEST 0
T TL9000 Release - 22 March 1999 TL 9000 Telecommunications Standard and QuEST 1
Marc TL9000 (Telecommunications) - Availability of the Standard TL 9000 Telecommunications Standard and QuEST 8
E Clause 15.4.2.1 d) - Loss of ESSENTIAL PERFORMANCE IEC 60601 - Medical Electrical Equipment Safety Standards Series 2
K Clause 7.5.2 of ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 5
S Is design and development clause 8.3 applicable for laboratory ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
S Clause for use of expired quality alerts AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 14
H DIN 12880:2007-05 Clause 7.2 Test Equipment Description CE Marking (Conformité Européene) / CB Scheme 0
D API Q1 clause (1.0) Scope Oil and Gas Industry Standards and Regulations 1
D API Q1 clause (5.6.3) Verification of Purchased Products or Activities ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
R 9001 and 9004 clause misalignment ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
L 60601-2-10 clause 201.12.4.103 Output Indicator (itself in SFC?) IEC 60601 - Medical Electrical Equipment Safety Standards Series 3
B IATF 16949 clause 10.2 - requirements following a customer complaint. IATF 16949 - Automotive Quality Systems Standard 9
R Clause 8.5.1.2 - Y1 Capacitors in Series IEC 60601 - Medical Electrical Equipment Safety Standards Series 6
eule del ayre Clause 7.1.5 Monitoring and measuring resources IATF 16949 - Automotive Quality Systems Standard 14
P AS9100D clause 8.6 - Documentation required to show evidence of conformity AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
H IEC 61010-1 Clause No. 10.5 Resistance to Heat - Sub Clause 10.5.3 Insulating Material CE Marking (Conformité Européene) / CB Scheme 6
H Does this clause mean i must be in compliance with AS9100 or is 9001 enough? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
J Iso 9001 Clause 7.1 - Advice needed ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 21
T Need help understanding AS6174 clause 3.1.5. AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
H Required explanation of sub clause 7.2.101.2 (Exception) of IEC 61010-2-020:2006 CE Marking (Conformité Européene) / CB Scheme 5
J ISO 9001:2015 Clause 8.2.3 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
D Integrated Management System (IMS) - Process Vs Clause Based Audits ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
D IATF 16949 Clause 7.2.2 - On the job training IATF 16949 - Automotive Quality Systems Standard 2
J IEC 60601-1 Clause 7.9.3.1 IEC 60601 - Medical Electrical Equipment Safety Standards Series 4
C Need help in determining applicable clause for an audit finding (based on AS9120B) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
P Exclusion of clause 8.2.3 Reporting to regulatory authorities ISO 13485:2016 - Medical Device Quality Management Systems 7
J API Q2 clause 5.4.3 b) Oil and Gas Industry Standards and Regulations 3
K ISO9001:2015 clause 8 ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
E Clause 8.9.1.2 of AMD2:2020 of IEC 60601-1 IEC 60601 - Medical Electrical Equipment Safety Standards Series 1

Similar threads

Top Bottom