ISO Management Systems. Guidance on understanding the benefits of an ISO Management System

Transcription

1 ISO Management Systems Guidance n understanding the benefits f an ISO Management System

2 Welcme & Intrductins

3 4031 University Drive, 206, Fairfax, VA Grant Square, 243, Hinsdale, IL Sally Smczynski SSmczynski@RadianCmpliance.cm

4 Agenda Brief intr t ISO General understanding fr ISO certificatin Elements f an ISO Management System What s the new Annex SL? Benefits f an ISO Management System

5 Brief Intrductin

6 Wh is IOS and What Is ISO? The Internatinal Organizatin fr Standardizatin (IOS) is a wrldwide federatin f natinal standards bdies. Wrking thrugh Technical Cmmittees, it has develped and published ver 18,000 different ISO standards that are used internatinally fr subjects ranging frm film speeds t wine glasses t quality management systems. The fficial purpse fr the issuance f ISO Standards is t facilitate wrld trade thrugh standardizatin.

7 ISO :2011 Service Management ISO Infrmatin Security Management System Management Systems ISO 9001: 2008 Quality Management System ISO Business Cntinuity Management ISO Risk Management

8 Understanding the Standards - Dcuments Mst standards have at least tw supprting dcuments; Requirements these are the Shalls and are required t be implemented unless exclusins can be taken. The auditr can nly audit against the Shalls. Cde f Practice these are the Shulds and are guidance t assist yu in implementatin. Guidance a fully implementable standard that des nt have a certificatin scheme. Yu can be cmpliant, but nt certified.

9 Understanding the Standards - PDCA Plan Act D Check

10 Understanding the Standards - Scpe Determine yur Scpe f Registratin Hw many peple within yur rganizatin supprt this Management System? Hw many prcesses are included? Hw many lcatins?

11 Requirements fr Certificatin

12 Stages fr Registratin Submit applicatin t registrar Stage 1: Assessment f readiness Stage 2: Assessment fr registratin audit Registratin/certificatin awarded fr 3 years Surveillance audits (at least annually) Recertificatin audit at the end f 3 rd year

13 Registratin Usually takes 1 r pssibly 2 auditrs 1 t 3 days depending n scpe, size, lcatins and persnnel Yu will be tld whether r nt yu will be recmmended fr registratin at the cmpletin f the Stage 2 audit Certificate usually arrives a 2 6 weeks later Maintaining yur ISO Certificatin(s) is the first step in cntinuus imprvement

14 Registrar/Auditr Selectin Criteria Accreditatin and scpe f accreditatin Reputatin and custmer acceptance Availability, cst, and lcatin Knwledge f yur business Culture fit with yur rganizatin Ability t audit all f yur future standards Nte: The external auditr is hired by the Registrar and presented with qualificatins t yu upn agreement f audits. Yu cannt g ut and hire yur wn external auditr.

15 Getting Ready fr the Audit Determine team, set budget Internal auditr(s) training if using in-huse resurces Hire cnsulting firm if applicable Gap Assessment Implement requirements f standard t meet yur business needs against the gap assessment G-Live Hld Management Review Meeting Cnduct Internal Audit Refine dcumentatin Emplyee invlvement training System adjustment Registratin audit Stage 1 System adjustment Registratin audit Stage 2

16 Onging Cmmitment Getting certificatin is nly the beginning Management Representative must keep up weekly/mnthly/quarterly with tasks Internal audits are required at least annually Management review is required at least annually Timely cmpletin and updates t CARs/PARs/OFIs Annual Surveillance audit by external registrar

17 An ISO Management System

18 Elements f a Management System Management Cmmitment Tp management shall. Participatin in Management Reviews Prvide input fr cntinuus imprvement Accuntable fr resurce management Resurce Management Identificatin f resurces including human, technical, infrmatin and financial Identificatin f rles, accuntability and respnsibility (RACI) Cmpetence, awareness & training

19 Elements f a Management System Management Reviews Required inputs including reviews f audits, custmer feedback, perfrmance measurements, imprvements, changes Required utputs including actins recrded fr imprvements, dcumented imprvements and the effectiveness f thse imprvements, additinal fllw-thrugh f actins identified such as resurce needs r cmpletin f changes identified Dcument & Recrds Cntrl Dcumented prcedure fr creating, apprving, maintaining, prtecting archiving and destrying dcuments & recrds Identifying dcuments f external rigin

20 Elements f a Management System Internal Audit Dcument an audit plan Identify internal auditrs, hire r train Dcument utputs and act upn findings Timely reprting Cntinual Imprvement Organizatin shall cntinually imprve the effectiveness f the management system thrugh the use f the plicy, bjectives, audit results, analysis f data, crrective and preventive actins and management review Crrective/Preventive Actins recrded, planned and updated timely Gd Rt Cause methdlgy Review f effectiveness f actins taken

21 ISO 20000, 27001, 9001 ISO ISO ISO SMS General Requirements Management Cmmitment Cntrl f Dcuments 4.0 ISMS 5.0 Management Respnsibility 5.1 Management Cmmitment 4.1 General requirements 5.0 Management Cmmitment Cntrl f Dcuments Cntrl f Dcuments Cntrl f Recrds Cntrl f Recrds Cntrl f Recrds Prvisin f Resurces Human Resurces Prvisin f Resurces Training, Awareness & Cmpetence 6.0 Resurce Management Internal Audit 6 Internal ISMS audits Internal audit Management Review Maintain and imprve the SMS 7 Management Review 5.6 Management Review 8 ISMS imprvement 8.4 Cntinual imprvement

22 A New Structure Starting with ISO 22301, the Annex SL cncept was intrduced t standardize the management system requirements fr ALL management system standards. The next standards t be published with the Annex SL is ISO later this year and the much anticipated 2015 release f ISO 9001.

23 Annex SL Intrductin 1. Scpe 2. Nrmative references 3. Terms and definitins 4. Cntext f the rganizatin 5. Leadership 6. Planning 7. Supprt 8. Operatin 9. Perfrmance evaluatin 10. Imprvement

24 Benefits f ISO

25 Benefits f the Management System There are bvius internal benefits Cmpetitive Advantage Cmmitment t detail fr the scpe; ie: quality, security, services, etc Better emplyee engagement thrugh training, cmmunicatin and accuntability Frmalized & repeatable prcesses Accuntability at all levels Onging internal and external audits ensure weaknesses are identified and imprvements are cmpleted Better gvernance and management f suppliers and utsurced prcesses Mre efficient ability t change Reductin in duplicate effrt

26 Custmer Benefits ISO 9001 certified cmpanies queried 75% imprved their levels f custmer satisfactin and lyalty 75% bster their peratinal perfrmance 71% acquired new custmers and retained existing nes. 55% achieved cst savings Surce: BSI Excelleratr Research 2011

27 Reducing Risk 85% f infrmatin security (ISO 27001) clients built stakehlder cnfidence 79% experienced faster recvery speeds frm incidents 83% f business cntinuity (ISO 25999) clients reprted enhanced reputatin as the key benefit 64% f health & safety clients reduced incidents while 49% made cst savings 99% f rganizatins meets their Infrmatin Security bjectives nce they have implemented ISO Surce: BSI Excelleratr Research 2011 and Erasmus University Study

28 Organizatinal Benefits 64% attribute direct cst saving t ISO % reprt imprvements t their crprate reputatin 76% imprve their cmpliance 61% reprt higher mrale amng staff Surce: BSI Excelleratr Research 2011

29 Client Insights Large Printing Cmpany The biggest benefit we have seen ver the curse f ur ISO certificatin is a reductin in spilage. Befre we were ISO certified, we averaged abut 6.5% spilage per year. Last year ur spilage was 1.2%. Earnings fr 2012 were 57 millin s 1.2% was apprx. $684,000 versus 6.5% wuld be 3.7 millin. Pretty significant benefit. We have als benefitted frm standardizatin f prcesses and imprved cmmunicatin.

30 Credits Ggle Images Clients persnal benefit stats BSI marketing brchure Why we d what we d Quality Management CQI. CMI (BSI white paper)

31 Questins