Underqualified admin trying to get recertified
- Thread starter thight
- Start date
Im currently doing the same for our 27001. Ive got a spreadsheet with the controls and have entered the policies and procedures from our QMS against each clause so I know which bits are covered and where there are updates or additional controls needed to be considered in our organisation.
I would start with the basics - Does your company have a quality policy? what does it say you will do? who is named in it? and maybe work from there - try and mark off against each clause, the policys and procedures that are in place in your organisation.
Maybe look at training avaiable as well, you will need to understand how to manage the system as well as conduct audits.
I would start with the basics - Does your company have a quality policy? what does it say you will do? who is named in it? and maybe work from there - try and mark off against each clause, the policys and procedures that are in place in your organisation.
Maybe look at training avaiable as well, you will need to understand how to manage the system as well as conduct audits.
Welcome thight!
Why was your shop not certified to the 2015 version of ISO yet?
I am concerned that an Admin would be given this job to "get our shop ISO 9001:2015." The 2015 version is much more focused on top management commitment than the 2008 version was. They need to drive this more than an Admin.
I recommend the book ISO 9001:2015 In Plain English to understand the standard. Planning of processes needs to somehow incorporate "risk based thinking." That is something managers and leaders need to be closely involved with in order to ensure the system is better than just a certificate on the wall.
Why was your shop not certified to the 2015 version of ISO yet?
I am concerned that an Admin would be given this job to "get our shop ISO 9001:2015." The 2015 version is much more focused on top management commitment than the 2008 version was. They need to drive this more than an Admin.
I recommend the book ISO 9001:2015 In Plain English to understand the standard. Planning of processes needs to somehow incorporate "risk based thinking." That is something managers and leaders need to be closely involved with in order to ensure the system is better than just a certificate on the wall.
We have a quality policy. From what i understand, the Policy is good. There is quite a few non conformities in the gap analysis that i am seeing.
I don't have an answer as to why we are not 2015 certified yet. I was given reasons, but they are neither here nor there. I have the iso 9001:2015 in English book in pdf format.
Okay, start with the book to help you understand the subject.
Does your shop have any qualified internal auditors from before?
Does your shop have a business plan? I have found that most business plans go a great length in planning to address recognized risk.
If your shop has an active business plan, does management meet to review it? If yes, a lot of that can work for Management Review and top management commitment; the core would be in place.
If there is no business plan, I suggest that the words "getting ISO 9001:2015" in your shop's vocabulary be replaced with "getting a business plan going" because so much about ISO 9001 is really just good sense good business practices. A whole lot of "shalls" were removed and replaced with a broader structure that is not just stuff that QA does. I would, in fact try to not use the word "quality" because it tends to make people think it is some kind of mystical specialty. it really should be more about doing things well.
I hope this makes sense.
Start from the beginning. Are they still operating under their ISO 9001:2008 system? If they are, you're most of the way there. What we did was create our own gap worksheet. Column A has the clause number. Column B has the details of the clause. Column C indicates where in our system we cover the clause requirements. (This eventually became our "quality manual" and allows for quick cross reference when needed). Then look at column C and wherever there are gaps work with the powers that be to fill in those gaps. As long as everyone is reasonably on board, it should be pretty easy. As Jen said, get rid of the "ISO language" and talk in terms of good business practices. Good luck.
Johnnymo62
Haste Makes Waste
Search "gap analysis" in the Attachment List tab at the top of this page. There are some spreadsheets available. The one I looked at had instructions.
