Training or Retraining for Changes to External Standards?

Does your Notified Body Auditor require you to train to external standards?


  • Total voters
    6

gdwaikle

Involved In Discussions
#1
Recently our notified body auditor wrote a minor obsveration regarding ongoing training or maintaining familiarity with regulations and QS standards. It was triggered in part because our system for keeping current to external standards had severed due to a change in ownership of the company. That link and the ability to become of aware of external standards has been restored. However the harder part is showing that everyone who needs to know about changes to external standards has been "trained" or made aware of the change.

The exact finding is as follows:
"The process for identifying who must be familiar with regulations and QS standards and the process on how the familiarity is updated when standards and regulations change, is not clearly defined."

We have a very robust training system that keeps track of all the internal procedures we need to train to and upon completion records most of these "training" records via an Intranet electronic system. We can even show that each person who needs to be aware of changes is sent an email from Document Control that a change has occured.

However where we have extenal standards that we need to be aware that system doesn't allow auto-tracking of the training. An individual would have to read the changed standard and create a paper record and forward that to the training department.

Has anyone else had a Notified Body auditor require evidence of training to extenal standards or changes to external standards. In most cases it is not the initial "training" but the ongoing documenting the training for changed standards and regulatons that is difficult to maintain. Most exempt staff are hired because they are already trained and familiar with the standards that affect their job area.
 
Elsmar Forum Sponsor

Helmut Jilling

Auditor / Consultant
#2
Recently our notified body auditor wrote a minor obsveration regarding ongoing training or maintaining familiarity with regulations and QS standards. It was triggered in part because our system for keeping current to external standards had severed due to a change in ownership of the company. That link and the ability to become of aware of external standards has been restored. However the harder part is showing that everyone who needs to know about changes to external standards has been "trained" or made aware of the change.

The exact finding is as follows:
"The process for identifying who must be familiar with regulations and QS standards and the process on how the familiarity is updated when standards and regulations change, is not clearly defined."

We have a very robust training system that keeps track of all the internal procedures we need to train to and upon completion records most of these "training" records via an Intranet electronic system. We can even show that each person who needs to be aware of changes is sent an email from Document Control that a change has occured.

However where we have extenal standards that we need to be aware that system doesn't allow auto-tracking of the training. An individual would have to read the changed standard and create a paper record and forward that to the training department.

Has anyone else had a Notified Body auditor require evidence of training to extenal standards or changes to external standards. In most cases it is not the initial "training" but the ongoing documenting the training for changed standards and regulatons that is difficult to maintain. Most exempt staff are hired because they are already trained and familiar with the standards that affect their job area.
As an auditor, it is difficult to comment on another auditor's ruling, without having access to everything he saw at the time. You run the risk of not seeing the whole picture.

However, as an auditor, I don't see this was necessarily an approrpiate finding. Perhaps, if the lack of an appropriate system is clear enough. But, to presume inadequate understanding because you could not demonstrate a formal training process for external standards appears to be a stretch. I think I would write an NC only if I see a lack of knowing the requirements in the external standard, not based on an assumption of not knowing them.
 

Randy

Super Moderator
#3
I'm in agreement and it sounds like HS :horse: to me too.

As long as you keep folks up to speed with relevant information IAW your requirments or the way you say you will, and it's effective then who really gives a rip? Not me.

Without all the details this just tastes a bit bogus and fells like a personal "whim".
 

Wes Bucey

Quite Involved in Discussions
#4
What kind of external Standards? I have a hunch the issue is regulations from a government body directly affecting product or usage. Seems to me simple enough to write a procedure which shows what job title has responsibility and authority to "use personal discretion to ensure organization receives all necessary updates to Standards and Regulations which directly affect our product or business."

Further, "to coordinate with top management to ensure all applicable personnel receive notice and training as required to implement any changes required to comply."

MAJOR RULE OF PROCEDURES: Don't paint yourself into a corner!
 

Jim Wynne

Staff member
Admin
#5
The exact finding is as follows:
"The process for identifying who must be familiar with regulations and QS standards and the process on how the familiarity is updated when standards and regulations change, is not clearly defined."
What does "familiarity" mean in this context? Does it mean identifying who needs to know that standards exist, or that those people need to be able to recite the requirements without looking at the standard? If the standards in question are necessary to producing conforming product or services, and people need to be aware of changes in order for there to be a continous stream of conforming product, then you need to define your method for disseminating the information. IMO, it's perfectly legitimate in such instances for an auditor to ask people who need the standards how they verify that they're working to the current requirements.

It seems that the finding could have been worded better, perhaps changing "familiar with" to "aware of" and "familiarity" to "awareness."
 

Sidney Vianna

Post Responsibly
Staff member
Admin
#6
I agree with most of what has been offered. However, from a risk management perspective, and since we are talking about the feedback from a Notified Body auditor, what implies, regulatory compliance with European Directives and Harmonized Standards, the auditor might have assessed a process not robust enough, which could lead to products being either designed or manufactured against invalid versions of directives or standards. It seems a valid risk, which should be managed, in my opinion. This is one of the situations, as I see it, that the auditor might be adding value by identifying a risk to the organization.

Just my 1.1 oz of oil, roughly :2cents:
 

gdwaikle

Involved In Discussions
#7
This particular auditor had a particular concern about keeping current with CMDCAS rules and regulations, since he was a CMDCAS certified auditor. I also formerly worked for 2 1/2 years as a notified body auditor and understand that there is a constant change to the directions Health Canada meters out. This is through audits of the Notified Body organization as well as other changes that take place periodically.

Except for these concerns, I think we have a system that stays current on external standards. We are notifed by a service about changes. Our document control group sends an email to each affected group, individual within the group and the manager of that group. It is then up to each individual to read and understand the changed standard or regulation and then fill out a individual training form that is sent to the manager of the department to be filled in the individuals department folder.

This is not quite the same as training for floor personnel. This is primarily for salaried Exempt personnel responsible for understanding external standards and implementing appropriate changes to the company Quality System to deal with the content of those standards. Therefore it is there job to maintain current knowledge of externals standards that affect their job in some way.
 

Jim Wynne

Staff member
Admin
#8
Our document control group sends an email to each affected group, individual within the group and the manager of that group.
In view of the finding, which made reference to "The process for identifying who must be familiar with regulations..."

I guess the question might be, "How does the doc control group know who to notify?"

I'm still not certain what the auditor meant by "familiarity." I think if he's looking for training, retraining and records thereof, he's barking up the wrong tree. It sounds to me like you have the bases covered, except perhaps for formally identifying who gets notified when new versions are available.
 

gdwaikle

Involved In Discussions
#9
Jim

Thanks for your reply. We have who should be notified as well. Each group/department that needs to be kept appraised of a specific standard lets document control know that they need to be notified. Doc Control has a list of all the external standards needed within the company. Along side of the standard is a list of departments, individuals, etc. that need to be notified. When Doc Control is notified by the service that a standard has changed an email is sent to everyone affected that the standard/regulation is changed. It is then up to each individual to seek out a copy of the changed document and read it. The service provides us with a copy of those electronically so we can easily get them as we need them.

The only concern I have again is that changes made by Health Canada may not be so easy to keep up with.
 

Jim Wynne

Staff member
Admin
#10
You need to get with the auditor and have him explain the finding vis a vis what you're actually doing, and have him show you the "shall" that's been (allegedly) violated.
 
Thread starter Similar threads Forum Replies Date
C Documentation of training and retraining procedures, specifically how training should Document Control Systems, Procedures, Forms and Templates 6
A Self-training or Self-studying ISO 13485:2016 - Medical Device Quality Management Systems 8
N ISO 9001 - Training business with fewer than 5 employees ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
S Employees training database Document Control Systems, Procedures, Forms and Templates 4
optomist1 Rates Daily or Hourly Process Improvement Training Consultants and Consulting 2
Le Chiffre Online training available for ISO/IEC 17021-1: Requirements for bodies providing audit and certification of management systems Training - Internal, External, Online and Distance Learning 3
S IEC60601-1 Training recommendations Training - Internal, External, Online and Distance Learning 1
P Training department ideas and development for automotive supplier Training - Internal, External, Online and Distance Learning 6
A Document release vs its related training. Which should come first? ISO 13485:2016 - Medical Device Quality Management Systems 18
C RA (Regulatory Assurance) Training (FDA) looking for resources Training - Internal, External, Online and Distance Learning 5
was named killer Onsite Level II N.D.T. Training in Florida Training - Internal, External, Online and Distance Learning 0
T Training recommendations? Bringing our RoHS and REACH compliance efforts in-house REACH and RoHS Conversations 2
S Quality Audit Training Activities Quality Manager and Management Related Issues 2
M Audit Criteria Training Materials Internal Auditing 1
B Looking for 10 Internal Audit Online Training Participants ISO 17025 related Discussions 2
optomist1 Informational Training IMDS - Management of Product Chemical Regulatory Compliance RoHS, REACH, ELV, IMDS and Restricted Substances 2
Anonymous16-2 Labelling Training Training - Internal, External, Online and Distance Learning 3
J Recommendations for online ISO 19011 training? Training - Internal, External, Online and Distance Learning 8
J Looking for a training organization that can provide in house DFMEA training FMEA and Control Plans 4
A AS9100 Training - Where do I start? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 14
R What's the major difference between Green Belt and Black Belt in term of training and project Six Sigma 3
S ISO 13485 Lead Auditor - Debate between our Quality Team and Regulatory Auditor - Internal Auditor Training ISO 13485:2016 - Medical Device Quality Management Systems 17
I Where can I beg, steal (just kidding of course) or borrow good training material on the ISO 9001:2015 standard? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
JAMESH Building a "Lean" Job Shop Training Program Training - Internal, External, Online and Distance Learning 0
I Does training have to be written? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 14
I Root Cause Analysis as Training ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
Q Regulations for Medical Device Kit for Training Personnel? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
S Can we provide training plan as corrective action for IATF 16949 Non conformity? IATF 16949 - Automotive Quality Systems Standard 9
S IRCA Lead Auditor training and Exam tips Training - Internal, External, Online and Distance Learning 5
N ... and some have greatness thrust upon them - Training for novice QA manager ? Training - Internal, External, Online and Distance Learning 6
C Looking for APQP Training recommendations preferably in the aerospace industry APQP and PPAP 2
B VDA 6.3 Qualification as Process Auditor training course and exam VDA Standards - Germany's Automotive Standards 0
L Hazardous Waste - Tips for creating standardized training Miscellaneous Environmental Standards and EMS Related Discussions 2
R ISO 13485 QMS Implementation Training ISO 13485:2016 - Medical Device Quality Management Systems 7
R How to keep track of employee read-only training ISO 13485:2016 - Medical Device Quality Management Systems 13
I "On the job training" as a response to how someone was trained? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 75
J Getting training either from ASQ or from SAI Global - ISO 9001 Lead Auditor training Training - Internal, External, Online and Distance Learning 1
I Date of Quality Management System - Training Records ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19
R ISO 13485 and QMS related concepts Training - Small medical device startup company ISO 13485:2016 - Medical Device Quality Management Systems 9
R Training Matrix for Document revisions ISO 13485:2016 - Medical Device Quality Management Systems 4
I Training records and "grandfather" clauses ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
S Education authority requires approval of all courses - Training services provider ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
S ISO 9001 Clause 8.3 - Design & Development for training course center ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
M ESD (Electrostatic Discharge) Training Misc. Quality Assurance and Business Systems Related Topics 2
S Is Annual QMS Training Required? ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 6
D ISO 9001:2015 Internal Audit Training Advice Internal Auditing 10
C Recommendations for UK-based ISO 13485 internal auditor training ISO 13485:2016 - Medical Device Quality Management Systems 1
A ISO9001:2015 Document control and training aids ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
J Customer VDA Audit - We must provide refresher training? VDA Standards - Germany's Automotive Standards 4
T QMS Training for my organization - IATF16949 and also AS9100 or 9145 Manufacturing and Related Processes 2

Similar threads

Top Bottom