ISO Management Systems Guidance n understanding the benefits f an ISO Management System
Welcme & Intrductins
4031 University Drive, 206, Fairfax, VA 22030 3 Grant Square, 243, Hinsdale, IL 60521 www.radiancmpliance.cm Sally Smczynski SSmczynski@RadianCmpliance.cm 630-728-7181
Agenda Brief intr t ISO General understanding fr ISO certificatin Elements f an ISO Management System What s the new Annex SL? Benefits f an ISO Management System
Brief Intrductin
Wh is IOS and What Is ISO? The Internatinal Organizatin fr Standardizatin (IOS) is a wrldwide federatin f natinal standards bdies. Wrking thrugh Technical Cmmittees, it has develped and published ver 18,000 different ISO standards that are used internatinally fr subjects ranging frm film speeds t wine glasses t quality management systems. The fficial purpse fr the issuance f ISO Standards is t facilitate wrld trade thrugh standardizatin.
ISO 20000-1:2011 Service Management ISO 27001-2005 Infrmatin Security Management System Management Systems ISO 9001: 2008 Quality Management System ISO 22301 Business Cntinuity Management ISO 31000 Risk Management
Understanding the Standards - Dcuments Mst standards have at least tw supprting dcuments; Requirements these are the Shalls and are required t be implemented unless exclusins can be taken. The auditr can nly audit against the Shalls. Cde f Practice these are the Shulds and are guidance t assist yu in implementatin. Guidance a fully implementable standard that des nt have a certificatin scheme. Yu can be cmpliant, but nt certified.
Understanding the Standards - PDCA Plan Act D Check
Understanding the Standards - Scpe Determine yur Scpe f Registratin Hw many peple within yur rganizatin supprt this Management System? Hw many prcesses are included? Hw many lcatins?
Requirements fr Certificatin
Stages fr Registratin Submit applicatin t registrar Stage 1: Assessment f readiness Stage 2: Assessment fr registratin audit Registratin/certificatin awarded fr 3 years Surveillance audits (at least annually) Recertificatin audit at the end f 3 rd year
Registratin Usually takes 1 r pssibly 2 auditrs 1 t 3 days depending n scpe, size, lcatins and persnnel Yu will be tld whether r nt yu will be recmmended fr registratin at the cmpletin f the Stage 2 audit Certificate usually arrives a 2 6 weeks later Maintaining yur ISO Certificatin(s) is the first step in cntinuus imprvement
Registrar/Auditr Selectin Criteria Accreditatin and scpe f accreditatin Reputatin and custmer acceptance Availability, cst, and lcatin Knwledge f yur business Culture fit with yur rganizatin Ability t audit all f yur future standards Nte: The external auditr is hired by the Registrar and presented with qualificatins t yu upn agreement f audits. Yu cannt g ut and hire yur wn external auditr.
Getting Ready fr the Audit Determine team, set budget Internal auditr(s) training if using in-huse resurces Hire cnsulting firm if applicable Gap Assessment Implement requirements f standard t meet yur business needs against the gap assessment G-Live Hld Management Review Meeting Cnduct Internal Audit Refine dcumentatin Emplyee invlvement training System adjustment Registratin audit Stage 1 System adjustment Registratin audit Stage 2
Onging Cmmitment Getting certificatin is nly the beginning Management Representative must keep up weekly/mnthly/quarterly with tasks Internal audits are required at least annually Management review is required at least annually Timely cmpletin and updates t CARs/PARs/OFIs Annual Surveillance audit by external registrar
An ISO Management System
Elements f a Management System Management Cmmitment Tp management shall. Participatin in Management Reviews Prvide input fr cntinuus imprvement Accuntable fr resurce management Resurce Management Identificatin f resurces including human, technical, infrmatin and financial Identificatin f rles, accuntability and respnsibility (RACI) Cmpetence, awareness & training
Elements f a Management System Management Reviews Required inputs including reviews f audits, custmer feedback, perfrmance measurements, imprvements, changes Required utputs including actins recrded fr imprvements, dcumented imprvements and the effectiveness f thse imprvements, additinal fllw-thrugh f actins identified such as resurce needs r cmpletin f changes identified Dcument & Recrds Cntrl Dcumented prcedure fr creating, apprving, maintaining, prtecting archiving and destrying dcuments & recrds Identifying dcuments f external rigin
Elements f a Management System Internal Audit Dcument an audit plan Identify internal auditrs, hire r train Dcument utputs and act upn findings Timely reprting Cntinual Imprvement Organizatin shall cntinually imprve the effectiveness f the management system thrugh the use f the plicy, bjectives, audit results, analysis f data, crrective and preventive actins and management review Crrective/Preventive Actins recrded, planned and updated timely Gd Rt Cause methdlgy Review f effectiveness f actins taken
ISO 20000, 27001, 9001 ISO 20000 ISO 27001 ISO 9001 4.0 SMS General Requirements 4.1.1 Management Cmmitment 4.3.2 Cntrl f Dcuments 4.0 ISMS 5.0 Management Respnsibility 5.1 Management Cmmitment 4.1 General requirements 5.0 Management Cmmitment 4.3.2 Cntrl f Dcuments 4.2.3 Cntrl f Dcuments 4.3.3 Cntrl f Recrds 4.3.3. Cntrl f Recrds 4.2.4 Cntrl f Recrds 4.4.1 Prvisin f Resurces 4.4.2 Human Resurces 5.2.1 Prvisin f Resurces 5.2.2 Training, Awareness & Cmpetence 6.0 Resurce Management 4.5.4.2 Internal Audit 6 Internal ISMS audits 8.1.2 Internal audit 4.5.4.3 Management Review 4.5.5 Maintain and imprve the SMS 7 Management Review 5.6 Management Review 8 ISMS imprvement 8.4 Cntinual imprvement
A New Structure Starting with ISO 22301, the Annex SL cncept was intrduced t standardize the management system requirements fr ALL management system standards. The next standards t be published with the Annex SL is ISO 27001 later this year and the much anticipated 2015 release f ISO 9001.
Annex SL Intrductin 1. Scpe 2. Nrmative references 3. Terms and definitins 4. Cntext f the rganizatin 5. Leadership 6. Planning 7. Supprt 8. Operatin 9. Perfrmance evaluatin 10. Imprvement
Benefits f ISO
Benefits f the Management System There are bvius internal benefits Cmpetitive Advantage Cmmitment t detail fr the scpe; ie: quality, security, services, etc Better emplyee engagement thrugh training, cmmunicatin and accuntability Frmalized & repeatable prcesses Accuntability at all levels Onging internal and external audits ensure weaknesses are identified and imprvements are cmpleted Better gvernance and management f suppliers and utsurced prcesses Mre efficient ability t change Reductin in duplicate effrt
Custmer Benefits ISO 9001 certified cmpanies queried 75% imprved their levels f custmer satisfactin and lyalty 75% bster their peratinal perfrmance 71% acquired new custmers and retained existing nes. 55% achieved cst savings Surce: BSI Excelleratr Research 2011
Reducing Risk 85% f infrmatin security (ISO 27001) clients built stakehlder cnfidence 79% experienced faster recvery speeds frm incidents 83% f business cntinuity (ISO 25999) clients reprted enhanced reputatin as the key benefit 64% f health & safety clients reduced incidents while 49% made cst savings 99% f rganizatins meets their Infrmatin Security bjectives nce they have implemented ISO 27001 Surce: BSI Excelleratr Research 2011 and Erasmus University Study
Organizatinal Benefits 64% attribute direct cst saving t ISO 14001 74% reprt imprvements t their crprate reputatin 76% imprve their cmpliance 61% reprt higher mrale amng staff Surce: BSI Excelleratr Research 2011
Client Insights Large Printing Cmpany The biggest benefit we have seen ver the curse f ur ISO certificatin is a reductin in spilage. Befre we were ISO certified, we averaged abut 6.5% spilage per year. Last year ur spilage was 1.2%. Earnings fr 2012 were 57 millin s 1.2% was apprx. $684,000 versus 6.5% wuld be 3.7 millin. Pretty significant benefit. We have als benefitted frm standardizatin f prcesses and imprved cmmunicatin.
Credits Ggle Images Clients persnal benefit stats BSI marketing brchure Why we d what we d Quality Management CQI. CMI (BSI white paper)
Questins