FAQs On ISO 9001 Standards
What is ISO?
The International Organization for Standardization (ISO) was established in 1947 and is (currently) an association
of approximately 157 members, which each represent their own country. ISO employs a system of Technical
Committees, Sub-committees and Working Groups to develop International Standards. Besides the National
Standards Bodies, ISO permits other international organizations that develop standards to participate in its work,
by accepting them as Liaison members. ISO works in accordance with an agreed set of rules of procedure, the
ISO/IEC Directives, which also include requirements on the presentation of standards.
What are the ISO 9000 standards ?
The ISO 9000 standards are a collection of formal International Standards, Technical Specifications, Technical
Reports, Handbooks and web based documents on Quality Management. There are approximately 25 documents
in the collection altogether, with new or revised documents being developed on an ongoing basis.
(It should be noted that many of the International Standards in the ISO 9000 family are numbered in the ISO
10000 range.)
Who is responsible for developing the ISO 9000 standards?
ISO Technical Committee (TC) number 176 (ISO/TC 176), and its Sub-committees, are responsible for the
development of the standards. The work is conducted on the basis of “consensus” among quality and industry
experts nominated by the National Standards Bodies, representing a wide range of interested parties.
Where can copies of the standards be obtained?
Copies of the standards may be purchased from your National Standards Body or ISO 9000 store like http://www.iso9001store.com
Where can copies of the supporting ISO 9000 guidance notes or other documents be found ?
Copies of the ISO 9000 Introduction and Support Package modules:
- Guidance on ISO 9001:2008 Sub-clause 1.2 ‘Application’
- Guidance on the Documentation Requirements of ISO 9001:2008
- Guidance on the Terminology used in ISO 9001 and ISO 9004
- Guidance on the Concept and Use of the Process Approach for management systems
- Guidance on ‘Outsourced Processes’
as well as details of the Quality Management Principles can be found at: www.iso.org/tc176/sc2
Copies of the ISO 9001 Auditing Practices Group guidance notes.
Where can information be obtained on the ISO 9001 standards?
There are a number of sources of information on the ISO 9000 quality management system standards, including
ISO’s web site (www.iso.org), which carry information on the standards. Your National Standards Body should be
able to provide copies of the standards, and registrars/certification bodies will be able to provide guidance on
registration arrangements.
Why are the standards being revised?
ISO’s formal review process:
- Requires continual review to keep standards up to date. Must be initiated within 3 years of publication of a standard.
User inputs from:
- A global user questionnaire/survey
- A market Justification Study
- Suggestions arising from the interpretation process
- Opportunities for increased compatibility with ISO 14001
- The need for greater clarity, ease of use, and improved translation
Current trends:
- Keeping up with recent developments in management system practices.
Who is responsible for revising the standards?
The revision process is the responsibility of ISO Technical Committee no.176, Sub-committee no.2 (ISO/TC 176/SC 2) and is conducted on the basis of consensus among quality and industry experts nominated by ISO Member bodies, and representing all interested parties.
When will the revised standards be available?
The revised quality management system standards (ISO 9000, 9001 and 9004) are scheduled as follows:
- ISO 9000:2005 already published – no major changes expected for 2009
- Current plan is for small changes to ISO 9001 (an “amendment”) to be published in November 2008.
- More significant changes are planned for ISO 9004 (a “revision”) to be published in mid 2009.
How much is the implementation of the new standard going to cost?
One of the goals of ISO/TC 176/SC 2 is to produce standards that will minimize any potential costs during a smooth implementation. Any additional costs may be considered as a value-adding investment. A key factor in the development of ISO 9001:2008 was to limit the impact of changes on users.
Will my organization have to re-write all its documentation?
No. ISO 9001:2008 doesn’t introduce major changes to the requirements, when compared to ISO 9001:2000. However, to benefit from the changes, we suggest you get acquainted with the new version of the standard and the clarifications introduced. If, during your analysis of the clarifications you find there are differences from your current interpretation of ISO 9001:2000, then you should analyse the impact on your current documentation and make the necessary arrangements to update it. It is intended that the amendment of ISO 9001 will have minimal or no impacts on documentation.
Will the revised standards address financial issues?
Financial issues are not addressed in ISO 9001:2008, which is a requirements standard. The ISO 10014:2006 and ISO 9004:2000, Guidelines for performance improvements standards will emphasize the financial resources needed for the implementation and improvement of a quality management system.
What are the benefits of the revised standards?
For ISO 9001:2008 the major benefits are:
- Simple to use
- Clear in language
- Readily translatable and easily understandable
- Compatibility with other management systems such as ISO 14001.
For ISO 9004:
- Facilitates improvement in users’ quality management systems.
- Provides guidance to an organization for the creation of a quality management system that:
- creates value for its customers, via the products it provides
- creates value for all other interested parties
- balances all interested-party viewpoints.
- Provides guidance for managers on leading their organization towards sustained success.
- Forward compatibility to allow organizations to build on existing quality management systems.
What are the main changes in ISO 9001:2008?
ISO 9001:2008 has been developed in order to introduce clarifications to the existing requirements of ISO 9001:2000 and changes that are intended to improve compatibility with ISO 14001:2004. ISO 9001:2008 does not introduce additional requirements nor does it change the intent of the ISO 9001:2000 standard.
Certification to ISO 9001:2008 is not an “upgrade”, and organizations that are certified to ISO 9001:2000 should be afforded the same status as those who have already received a new certificate to ISO 9001:2008
What are the main benefits to be derived from implementing an ISO 9000 quality management system?
The ISO 9000 standards give organizations an opportunity to increase value to their activities and to improve their performance continually, by focusing on their major processes. The standards place great emphasis on making quality management systems closer to the processes of organizations and on continual improvement. As a result, they direct users to the achievement of business results, including the satisfaction of customers and other interested parties.
The management of an organization should be able to view the adoption of the quality management system standards as a profitable business investment, not just as a required certification issue.
Among the perceived benefits of using the standards are:
- The connection of quality management systems to organizational processes
- The encouragement of a natural progression towards improved organizational performance, via:
- the use of the Quality Management Principles
- the adoption of a “process approach”
- emphasis of the role of top management
- requirements for the establishment of measurable objectives at relevant functions and levels
- being orientated toward “continual improvement” and “customer satisfaction”, including the monitoring of information on “customer satisfaction” as a measure of system performance.
- measurement of the quality management system, processes, and product
- consideration of statutory and regulatory requirements.
- attention to resource availability
How will the implementation of the amended standard help my organization to improve its efficiency?
ISO 9001:2008 aims at guaranteeing the effectiveness (but not necessarily the efficiency) of the organization. For improved organizational efficiency, however, the best results can be obtained by using ISO 9004 in addition to ISO 9001:2008. The guiding quality management principles are intended to assist an organization in continual improvement, which should lead to efficiencies throughout the organization.
What benefits are there to an organization implementing ISO 9004 ?
If a quality management system is appropriately implemented, utilizing the eight Quality Management Principles, and in accordance with ISO 9004, all of an organization’s interested parties should benefit. For example:
Customers and users will benefit by receiving the products (see ISO 9000:2005, Fundamentals and vocabulary) that are:
- Conforming to the requirements
- Dependable and reliable
- Available when needed
- Maintainable
People in the organization will benefit by:
- Better working conditions
- Increased job satisfaction
- Improved health and safety
- Improved morale
- Improved stability of employment
Owners and investors will benefit by:
- Increased return on investment
- Improved operational results
- Increased market share
- Increased profits
Suppliers and partners will benefit by:
- Stability
- Growth
- Partnership and mutual understanding
Society will benefit by:
- Fulfilment of legal and regulatory requirements
- Improved health and safety
- Reduced environmental impact
- Increased security
Are the standards compatible with national quality award criteria?
The standards are based on 8 Quality Management Principles, which are aligned with the philosophy and objectives of most quality award programs. These principles are:
- Customer focus,
- Leadership,
- Involvement of people,
- Process approach,
- System approach to management,
- Continual improvement,
- Factual approach to decision making, and
- Mutually beneficial supplier relationships.
ISO 9004 recommends that organizations perform self-assessments as part of their management of systems and processes, and includes an annex giving guidance on this approach. This is similar to many quality awards programmes.
Why is the requirement for monitoring “customer satisfaction” included in ISO 9001?
“Customer satisfaction” is recognized as one of the driving criteria for any organization. In order to evaluate if a product meets customer needs and expectations, it is necessary to monitor the extent of customer satisfaction.
Improvements can be made by taking action to address any identified issues and concerns.
Can the standards improve “customer satisfaction”?
The quality management system details that are described in the standards are based on Quality Management Principles that include the “process approach” and “customer focus”. The adoption of these principles should provide customers with a higher level of confidence that products will meet their needs and increase their satisfaction.
What is meant by “continual improvement”?
Continual improvement is the process focused on continually increasing the effectiveness and/or efficiency of the organization to fulfil its policies and objectives. Continual improvement (where “continual” highlights that an improvement process requires progressive consolidation steps) responds to the growing needs and expectations of the customers and ensures a dynamic evolution of the quality management system.
What is a process?
Any activity or operation, which receives inputs and converts them to outputs, can be considered as a process. Almost all activities and operations involved in generating a product or providing a service are processes. For organizations to function, they have to define and manage numerous inter-linked processes. Often the output from one process will directly form the input into the next process. The systematic identification and management of the various processes employed within an organization, and particularly the interactions between such processes, may be referred to as the ‘process approach’ to management.
What is the “process approach”?
The “process approach” is a way of obtaining a desired result, by managing activities and related resources as a process. The “process approach” is a key element of the ISO 9000 standards. For further guidance, please refer to the ISO 9000 Introduction and Support Package module: Guidance on the Concept and Use of the Process Approach for management systems.
Can the “process approach” be applied to other management systems?
Yes. The “process approach” is a generic management principle, which can enhance an organization’s effectiveness and efficiency in achieving defined objectives.
How can the PDCA cycle be used in the “process approach”?
The PDCA cycle is an established, logical, method that can be used to improve a process.
This requires:
(P) planning (what to do and how to do it),
(D) executing the plan (do what was planned),
(C) checking the results (did things happened according to plan) and
(A) act to improve the process (how to improve next time).
The PDCA cycle can be applied within an individual process, or across a group of processes.
Can any organization apply the “process approach”?
Yes. Many organizations already apply a “process approach” without recognizing it. They could achieve additional benefits by understanding and controlling it.
Why should an organization apply the “process approach”?
By applying the “process approach” an organization should be able to obtain the following types of benefits:
- The integration and alignment of its processes to enable the achievement of its planned results.
- An ability to focus effort on process effectiveness and efficiency.
- An increase in the confidence of customers and other interested parties as to the consistent performance of the
organization.
- Transparency of operations within the organization.
- Lower costs and shorter cycle times through effective and efficient use of resources.
- Improved, consistent and predictable results.
- The identification of opportunities for focused and prioritized improvement initiatives.
- The encouragement and involvement of people, and the clarification of their responsibilities.
- The elimination of barriers between different functional units and the unification of their focus to the objectives
of the organization.
- Improved management of process interfaces.
What is meant by the “sequence” of processes and their “interactions”?
The “sequence” of processes shows how the processes follow, or link, to each other to result in a final output.
For example, the output from one process may become the input of the next process or processes.
The “interactions” show how each process affects or influences one or more of the other processes. For example,
the monitoring or controlling of a process may be established in a separate process.
How can the processes in an organization be determined?
Identify the organization’s intended outputs, and the processes needed for achieving them. These will need to
include processes for Management, Resources, Realization and Measurement and Improvement.
- Identify all process inputs and outputs, along with the suppliers and customers, who may be internal or
external.
- Identify the sequence and interactions of the processes.
Should an organization define and document all its processes?
The main purpose of documentation is to enable the consistent and stable operation of an organization’s
processes.
Although statutory, standards’ or customer requirements may require certain documentation, there is no defined
“catalogue”, or list of processes that has to be documented in ISO 9001, apart from the 6 indicated ones.
The organization should determine which processes are to be documented on the basis of:
- The size of the organization and type of its activities,
- The complexity of its processes and their interactions,
- The criticality of the processes and
- Availability of competent personnel.
A number of different methods can be used to document processes, such as graphical representations, written
instructions, checklists, flow charts, visual media, or electronic methods.
How much detail is required in process documentation?
The extent of detail is likely to depend upon factors such as:
- the size of an organisation and its types of activities,
- the complexity of its processes and their interactions, and
- the competence (level of education, training, skills and experience) of its personnel.
What is the difference between a “process” and a “procedure”?
A “process” may be explained as a set of interacting or interrelated activities, which are employed to add value. A
“procedure” is a method of describing the way or How in which all or part of that process activities shall/should be
performed.
ISO 9000:2005 defines a procedure as a “specified way to carry out an activity or a process”, which does not
necessarily have to be documented.
An organization has a well-established set of procedures. Can these procedures be used to help
describe its processes?
Yes, if the procedures describe inputs and outputs, appropriate responsibilities, controls and resources needed to satisfy customer requirements.
What documentation is required by ISO 9001?
ISO 9001:2008 refers specifically to only 6 documented procedures; however, other documentation (including more documented procedures not specifically mentioned in ISO 9001:2008) may be required by an organization, in order to manage the processes that are necessary for the effective operation of the quality management system. This will vary depending on the size of the organization, the kind of activities in which it is involved and their complexity. For further guidance, please also refer to the ISO 9000 Introduction and Support Package module “Guidance on the Documentation Requirements of ISO 9001:2008″
What does an organization need to do to comply with ISO 9001?
When initially starting to use ISO 9001, an organization should familiarize its personnel with the Quality Management Principles, analyze the standards (especially ISO 9000 and ISO 9004), and consider how their guidance and requirements may affect your activities and related processes. If it then wishes to proceed to registration/certification, it should perform a gap analysis against the requirements of ISO 9001 to determine where its current quality management system does not address the applicable ISO 9001:2008 requirements, before developing and implementing additional processes to ensure that compliance will be achieved.
What will happen to the 2000 version of ISO 9001?
ISO 9001:2008 will supersede ISO 9001:2000 However, noting the IAF/ISO-CASCO/ISO TC176 agreement that accredited certification to the 2000 edition should remain possible for up to 2 years after the publication of ISO 9001:2008, copies of the 2000 edition will still be available on request from ISO and the national standards bodies during that period, and possibly for even longer.
Can organizations remain certified/registered to the 2000 version?
Yes. Certification to ISO 9001:2008 is not an “upgrade”, and organizations that are certified to ISO 9001:2000 should be afforded the same status as those who have already received a new certificate to ISO 9001:2008. However, certificates to ISO 9001:2000 will only remain valid until 2 years after the publication of ISO 9001:2008. Contact your certification/registration body to get details on the certificates transition process.
What will happen to the other standards and documents in the current (2000) ISO 9000 family?
The four primary standards of the current ISO 9000 family are the following:
- ISO 9000:2005 already published – no major changes expected for 2009
- ISO 9001:2000 to be superseded by ISO 9001:2008
- More significant changes are planned for ISO 9004 with a planned publication date of late 2009.
- ISO 19011:2002 is currently beginning the revision process, with a new version expected in 2011.
The other standards and documents will be reviewed and updated as necessary
