FAS 605 – Food Manufacturing

Quality management System : Definitions and terminology in Quality

Management Systems. History of quality control and quality management.

Prepared by : Dr. Nada EL DARRA

2018-2019
Week number 1 & 2
 Learning objectives

• To define quality management systems

• To get introduced to ISO systems: Introduction of the ISO 9000:2000 Family of

Standards

• To introducing the required “Quality” related Procedures

• To elaborating a Corporate Quality Policy & Objectives

• To presenting the Key Terms & Definitions

• To identify the 8 Quality Management Principles

• To define the Process Approach

• To gain a comprehensive overview and analysis of ISO 9001:2000 Quality

Management Systems – Requirements
2
 Quality management system (QMS)
A quality management system (QMS) is a formalized system that documents processes, procedures,
and responsibilities for achieving quality policies and objectives. A QMS helps coordinate and
direct an organization’s activities to meet customer and regulatory requirements and improve its
effectiveness and efficiency on a continuous basis.

ISO 9001:2015, the international standard specifying requirements for quality

management systems, is the most prominent approach to quality management
systems.

Quality management systems serve many purposes, including:

• Improving processes
• Reducing waste
• Lowering costs
• Facilitating and identifying training opportunities
• Engaging staff
• Setting organization-wide direction
 The Quality Management System

Organization Personnel Equipment

Purchasing Process Information

& Control Management
Inventory

Documents Occurrence
& Assessment
Management
Records

Process Customer Service Facilities

Improvement &
Safety

4
 Benefits of quality management systems

Implementing a quality management system affects every aspect of an organization's

performance.

Two overarching benefits to the design and implementation of documented quality

management systems include:

1.Meeting the customer’s requirements, which helps to instill confidence in the

organization, in turn leading to more customers, more sales, and more repeat business.

2.Meeting the organization's requirements, which ensures compliance with regulations

and provision of products and services in the most cost- and resource-efficient manner,
creating room for expansion, growth, and profit.
 What is ISO?

The International Organization for Standardization

Founded in 1947

Based In Geneva

A Worldwide Federation of National Standardization Bodies

It sets and unifies International Standards

What Is Quality? Degree to which a set of inherent
characteristics fulfils requirements
ISO 9001: Quality management System
ISO 9000:2000
• Quality refers to all those features of a product (or
service) which are required by the customer.
• Quality management means what the organization
does to
 Ensure that its products or services satisfy the customer's quality requirements
and
 Comply with any regulations applicable to those products or services.

Quality management also means what the organization does to

 Enhance customer satisfaction, and
 Achieve continual improvement of its performance.
 Generic standards
ISO 9001 is a generic standard.
Generic means that the same standards can be applied:
• To any organization, large or small, whatever its product or
service,
• In any sector of activity, and
• Whether it is a business enterprise, a public administration, or
a government department.

Generic also signifies that

• No matter what the organization's scope of activity
• If it wants to establish a quality management system, ISO
9001 gives the essential features
• Or if for example it wants to establish an environmental
management system, ISO 14001 gives the essential features.
 ISO 9001:2000
Based on the 8 Quality Management Principles:
1. Customer Focus
2. Leadership
3. Involvement of People
4. Process Approach
5. System Approach to Management
6. Continual Improvement
7. Factual Approach to Decision Making
8. Mutually Beneficial Supplier Relationships
 Certification and registration
• Certification is known in some countries as
registration.

• It means that an independent, external body has

audited an organization's management system
and verified that it conforms to the requirements
specified in the standard (ISO 9001 or ISO 22000
or ISO 14001 or other similar standards).

• ISO does not carry out certification and does not

issue or approve certificates,
 Accreditation
• Accreditation is like certification of the certification body.
• It means the formal approval by a specialized body - an
accreditation body - that a certification body is competent to carry
out ISO 9001:2008 or ISO 22000 (or any other certifiable standard)
certification in specified business sectors (coded according to NACE
- Statistical Classification of Economic Activities in the European
Community- coding in the EU).

• Certificates issued by accredited certification bodies - and known as

accredited certificates - may be perceived on the market as having
increased credibility.

• ISO does not carry out or approve accreditations.

 Certification not a requirement
• Certification is not a requirement of ISO 9001 or ISO 22000.
• The organization can implement and benefit from an ISO 9001 or ISO
22000 system without having it certified.
• The organization can implement them for the internal benefits without
spending money on a certification programme.

Certification is a business decision

• Certification is a decision to be taken for business reasons:
• If it is a contractual, regulatory, or market requirement,
• If it meets customer preferences
• It is part of a risk management programme, or
• If it will motivate staff by setting a clear goal.
 Audit
• First party audit: often called internal audits. This is when someone from the
organization itself will audit a process or set of processes in the quality management
system to ensure it meets the procedure that the company has specified.

• Second party audit: occurs when when a company performs an audit of a supplier to
ensure that they are meeting the requirements specified in the contract.

• Third party audit: occurs when a company has decided that they want to create a
quality management system (QMS) that conforms to a standard set of requirements,
such as ISO 9001, and hire an independent company to perform an audit to verify that
the company has succeeded in this endeavor. These independent companies are called
certification bodies or registrars, and they are in the business of conducting audits to
compare and verify that the QMS meets all the requirements of the chosen standard,
and continues to meet the requirements on an ongoing basis.
Quality Management System
Advanced Training
Comprehensive overview of ISO 9001:2000 Quality
Management Systems – Requirements
Quality management system
Management responsibility

Resource management

Product realization

Measurement, analysis and improvement

 Typical Quality Management System
Documentation Hierarchy
• Scope of the QMS
(exclusions if any)
• Documented procedure (or
•Interrelated Quality reference to them)
processes&activities manual
•Description of the interaction
required to implement the (Level A) between the processes of the
QMS. QMS
•Required (where
specified by the Quality Management
standard) System Procedures
•Optional (where (Level B)
needed in the
organization)
Work instructions and other documents for •Detailed work do
quality management system
(Level C)
 Documentation Preparation
The extent of documentation is dependent on:

• Size of organization
• Type of activities
• Complexity of processes & their interaction
• Competence of personnel
 Documentation Preparation (cont’d)

• Establish commitment
• Define responsibility
• Agree on content- sketch the process
• Policy statements
• Identify system requirements
• Collect information
• Sort information
• Draft procedures, format the procedures
• Implement, test, revise, re-implement, audit
 Example of Framework for a
Documented Procedure

Procedure/Work Instruction
Date (WHEN)
Title (WHAT)
Scope (WHERE)
Purpose (WHY)
Responsibility/Authority (WHO)
Methodology (HOW)

References:

Approval
Date/Revision
 Documented Procedures

Provide evidence that:

• the process has been defined

• the procedures are approved
• the procedures are under change control
 Forms
1. Store and communicate information
2. Should contain:
• name of form
• company, location
• information required
• filing instructions
• dates, recorder
• Form #, issue date, revision #
 Value of Effective Documentation

1. Enables communication of intent and consistency

of action.

2. Importance:
• Involvement of employees
• Conservation of knowledge
• Effectiveness of systems review
• root cause analysis
• Expectations easily defined
 Value of Effective Documentation (Cont’d)

Benefits:
• achievement of conformity of customer requirements
and quality improvement
• provision of appropriate training
• repeatability and traceability
• provision of objective evidence
• evaluation of the effectiveness and continuing suitability
of the QMS
 QUALITY MANAGEMENT PRINCIPLES

1. Customer Focus
2. Leadership
3. Involvement of People
4. Process Approach
5. System Approach to Management
6. Continual Improvement
7. Factual approach to decision making
8. Mutually beneficial suppliers relationships
 ISO 9001:2000 Quality Management
Systems - Requirements
Structural Content of the Standard
Introduction
1. Scope
2. Normative reference
3. Terms and Definitions
4. Quality Management System
5. Management Responsibility
6. Resource Management
7. Product Realization
8. Measurement, Analysis and Improvement
 Introduction
0.1 General

0.2 Process Approach

0.3 Relationship with ISO 9004

0.4 Compatibility with other

Management Systems
 0.1 General
• The adoption of a QMS should be a strategic decision of an
organization

• The design and implementation of an organization’s QMS will

be greatly influenced by its individual needs, which will in turn
be largely dependent upon its products and/or services and
size of operation

• The QMS requirements specified in this international standard

are complementary to the requirements for product.
Information contained in a NOTE is provided for guidance in
understanding/clarifying the relevant requirement specified in
the standard
 0.1 General (cont’d)

• This international standard may be used by both

internal and external parties (including certification
bodies) for the purpose of assessing an
organization’s ability to meet customer, regulatory,
and its own requirements

• Both ISO 9001:2000 are based upon the 8 Quality

Management Principles
 0.2 Process Approach
DEFINITIONS:

« Process Approach » = application of a system of

processes within an organization+ identification
& interactions of these processes + their
management

« Process » = « Any activity or set of activities that

uses resources to transfer inputs to outputs can
be considered as a process. »
 0.2 Process Approach
ADVANTAGE:

Ongoing control over the linkage between the individual

processes within the system of processes, as well as over
their combination & interaction

“A desired result is achieved more efficiently when activities

and related resources are managed as a process.”

ISO 9000:2000 defines a process under clause 3.4.1 as follows:

“A set of interrelated or interacting activities which transforms
inputs into outputs”
 0.2 Process Approach
SCOPE OF APPLICATION:

According to the International Standard, a process

approach is adopted when developing, implementing &
Improving the effectiveness of a QMS to enhance customer
satisfaction by meeting customer requirements.

The principles of process management are reflected by the

structural content of this International Standard.
 0.2 Process Approach
An effective & functional organization has to Identify &
Manage numerous interrelated activites.

An activity using resources, & managed in order

to enable the transformation of inputs into
outputs, can be considered as a process. Often
the output from one process directly forms the
input to the next.
 0.2 Process Approach
IMPORTANCE OF PROCESS APPROACH
WITHIN A QMS:

a) understand & meet requirements,

b) the need to consider processes in terms of
added value,
c) obtain results of process performance &
effectiveness, and
d) continual improvement of processes based on
objective measurement
0.2 Process Approach
 0.2 Process Approach
All processes follow the “Plan-Do-Check-Act” (PDCA)
PDCA methodology:

Plan: establish the objectives and processes necessary

to deliver results in accordance with customer
requirements and the organization’s policies.
Do: implement the processes.
Check: monitor and measure processes and product
against policies, objectives and requirements for the
product and report the results
Act: take actions to continually improve process
performance.

•
 0.2 Process Approach
• A Process Owner is the designated person who is
ultimately responsible for clarity of roles within the
process, its documentation, updating, administration and
integrity
• Process owners must also assume responsibility for
leadership, support, direction and measurement of the
process
• They are accountable for customer satisfaction and they
have the authority to change the process when it no
longer meets requirements
0.3 Relationship With ISO 9004
•The 2000 editions of ISO 9001 and ISO 9004 were
developed as a “consistent pair” of QMS standards
- “consistent pair” because they have different
scopes but similar structures so as to facilitate
user application as a consistent pair of documents

•ISO 9001 and ISO 9004 were designed to

complement one another, but may be used
independently
 ISO 9001:2000 & ISO 9004:2000
ISO 9001:2000
• Quality Management System –
Requirements
• Specifies requirements for a QMS
that can be used for:
• internal application by
organizations, or
• certification, or
• contractual purposes.
• FOCUS: Effectiveness of the QMS
in meeting customer
requirements.
ISO 9004:2000
• Quality Management Systems
Guidelines for performance
improvements
• guidance on a wider range of
objectives, particularly for the
continual improvement of an
organization’s overall
performance&efficiency, as well
as its effectiveness
• Is recommended as a guide for
organizations whose top
management wishes to move
beyond the requirements of ISO
9001, in pursuit of continual
improvement of performance.
Not intended for certification or for
contractual purposes
• ISO 9004:2009 provides guidance to organizations to
support the achievement of sustained success by a
quality management approach. It is applicable to any
organization, regardless of size, type and activity.

• ISO 9004:2009 is not intended for certification,

regulatory or contractual use.
Core concepts of the new standard ISO 9001 : 2015
 0.4 Compatibility with other management
systems

ISO 9001:2000 has been aligned with ISO14001:1996

in order to enhance the compatibility of the two
standards for the benefit of the user community.
 1. Scope
1.1 General

ISO 9001:2000 specifies requirements for a QMS where an

organization:

a) needs to demonstrate its ability to consistently

provide product meeting customer & applicable regulatory
requirements, and

b) aims to enhance customer satisfaction through the

effective application of the system, including processes for
continual improvement of the system and the assurance of
conformity to customer and applicable regulatory
requirements.
 1.2 Application
• Regardless of type, size and product provided, all
requirements of ISO 9001:2000 are generic and are intended
to be applicable to all organizations.

• Exclusion = Any requirement(s) of this International

Standard that cannot be applied due to the nature of an
organization and its product.

• Exclusions are solely limited to requirements within Clause

7 (Product Realization).

• Exclusions should not affect the organization’s ability, or

responsibility, to provide product that fulfils customer &
applicable regulatory requirements
 1.2 Application (Cont’d)

ISO has provided a comprehensive document

providing a number of examples/scenarios for the
purpose of assisting the user in understanding more
clearly the intent of the standard:

“Introduction and Support package: Guidance on ISO

9001:2000 Sub-Clause 1.2 Application”
 1.2 Application (Cont’d)

Most likely exclusions within Clause 7: “Product

realization” (though not the only ones):

7.3 (“Design and development”)

where the organization has no responsibility for the
design and development of the products it provides.

7.5.3 (“Identification and traceability”)

this clause would only be partially applicable where
there is no specific traceability requirement for the
organization’s products
 2. Normative reference

ISO 9000:2000 Quality Management

Systems – Fundamentals and Vocabulary
 3. Terms and Definitions
As provided in ISO 9000:2000 Quality Management
Systems - Fundamentals and Vocabulary

Wherever the term “product” is used, it can also

mean “service”

SUPPLIER  ORGANIZATION  CUSTOMER

 4. Quality Management System

4.1 General requirements

4.2 Documentation requirements

 4.1 General requirements

The organization shall:

• ESTABLISH, DOCUMENT, IMPLEMENT and

MAINTAIN a quality management system, and

• Continually improve its effectiveness as required by

the Standard
 4.1 General requirements (Cont’d)
The organization shall:

a) identify the processes needed for the QMS

and their application throughout the organization
(refer clause 1.2 Application)

b) determine the sequence & interaction of these

processes

c) determine criteria & methods needed to

ensure that both the operation and control of
these processes are effective
 4.1 General requirements (Cont’d)
d) ensure the availability of resources & information
necessary to support the operation & monitoring
of these processes

e) monitor, measure & analyze these processes,

f) implement actions necessary to achieve planned

results & continual improvement of these
processes

These processes shall be managed by the

organization in accordance with the requirements of
this International Standard.
 4.1 General requirements (Cont’d)
Where an organization chooses to outsource any
process that affects product conformity with
requirements, the organization shall ensure control
over such processes and control of such
outsourced processes must be identified within the
QMS.

NOTE: Processes needed for the QMS referred to

above should include processes for:
• management activities,
• provision of resources,
• product realization & measurement.
 4.2 Documentation requirements
4.2.1 General (cont’d)

d) documentation is required by the organization to

ensure the effective planning, operation and control
of its processes (as identified earlier under 4.1(a)),
and

e) records required by this International Standard

(ref. 4.2.4)
 4.2 Documentation requirements (Cont’d)

4.2.2 Quality Manual

The organization shall ESTABLISH and MAINTAIN a Quality Manual that

includes:

1. The scope of the QMS including any ‘exclusions’ covered

under 1.2
Note: Remember that these exclusions are limited to Section 7
Product realization only

2. The documented procedures established for the QMS - or

reference to them

3. A description of the interaction between the QMS processes

identified under Section 4.1(a) “Identify the processes needed for the
QMS and their application throughout the organization (see 1.2)” and
4.1(b) “determine the sequence and interaction of these processes”
4.2 Documentation requirements (Cont’d)
4.2.3 Control of documents

• Documents required by the QMS shall be controlled.

(Records are a special type of document and are to be
controlled according to 4.2.4)

• Documented procedure is required to define the

controls needed to:

a) approve documents for adequacy prior to issue,

b) review and update as necessary and re-approve

documents,
 4.2 Documentation requirements (Cont’d)
4.2.3 Control of documents (Cont’d)

c) ensure that changes and the current revision status of

documents are identified

d) to ensure that relevant versions of applicable documents are

available at points of use,

e) to ensure that documents remain legible and readily

identifiable,

f) to ensure that documents of external origin are identified and

their distribution controlled, and
 4.2 Documentation requirements (Cont’d)

4.2.3 Control of documents (Cont’d)

g) to prevent the unintended use of obsolete

documents, and to apply suitable identification to
them if they are retained for any purpose.
 Typical Types of Document:
• Policy statement
• Quality manual
• Quality Plans
• Procedures - Handbooks
• Work Instructions - Standard Operations
• Forms - Meeting Minutes - Reports
• Reference Manuals - Technical Specifications -
Standards
 What does a Procedure
• What is done ?
• Why are we doing it ?
• When is it done ?
• Where is it done ?
• How is it done ?
• Who does it ?
• What if ?
 When do you need a procedure?

• When it is necessary to document an activity

that affects consistent Quality

• If the implemented activities change

• To assist with training

 Procedure Framework - Typical
• Title and Identity
• Purpose
• Scope
• Responsibilities
• References
• Procedure Description
• Records
• Review and Approval Authorizations
• Prepared by …
Documents Hierarchy

Policy

Processes

Procedures, Instructions

Records
 Process (ISO 9000:2000):
“For an organization to function effectively, it has to identify and
manage numerous linked activities. An activity using resources, and
managed in order to enable the transformation of inputs into output,
can be considered as a process. Often the output from one process
directly forms the input to the next.”

An activity using resources, and managed in order to enable the transformation of

inputs into output, can be considered as a process.
 An example of a Process

ON
 Process Approach
“The application of a system of processes within an organization, together
with the identification and interactions of these processes, and their
management, can be referred to as the Process Approach”

“An Advantage of the Process Approach is the ongoing control that it

provides over the linkage between the individual processes within the
system of processes, as well as over their combination and interaction.”
 Documents versus records
• The term « documentation » generally means documents and
records.

• Documents, by their nature, are revised and updated at determined

frequencies and generally provide some direction to do a specific
task (e.g. work instructions, procedures).

• Records are historical evidence that do not change (e.g. a blank form
is a document, a completed form – signed and dated- is a record).
 Documentation
Required documented procedures:
– Control of documents
– Control of records
– Emergency Preparedness and Response
– Handling of potentially unsafe products
– Corrective actions
– Notification to interested parties in the event of withdrawal
– Internal audits
 Required documents & records :
• Management of the prerequisite
programs
• Characteristics and intended use of the
end product
• The HACCP plan
• Product/process flow diagram
• Hazard identification
• Hazard analysis
• Selection of control measures
• Critical limits
• Corrective action records
• Internal audit records
• Calibration records
• Traceability records
• Raw material and ingredient records
• Evaluation and handling of potentially unsafe
product or nonconforming product
• Internal and external communication
• Management review
• Monitoring records for operational prerequisite
program and HACCP plan
• Product withdrawal records
• Verification
• Training and knowledge records
• Agreements with external food safety experts.
 What are Internal References?
• Other Internal or External Documents to which reference
must be made
• Typical Internal References
– Price Schedules (Contract Review)
– Standard Tender Formats
– Technical Data Sheets
– Approved Supplier List
• Note: Some Internal References may be better classed as
Instructions
 What are External References?
• Typical External References
– Standards
– Instruction Manuals
– Catalogues
– Technical Data Sheets
 Document and Data Control?
• Correctly and unambiguously IDENTIFIED
• Control the ISSUE / REVISION STATUS
• Control the DISTRIBUTION
• Control of CHANGES
• Authority for REVIEW and APPROVAL
• Prompt REMOVAL of obsolete documents
Note: Any document that is likely to be
changed, or of which there is more than one
copy, must have some form of control
 Control Methods - Typical
• Issue / Revision Master Registers
• Document Distribution Master Registers
• Security of Storage and Access (especially
computerized documents)
• Back-up systems (especially computerized
documents)
When to do Document Changes?
• Existing document incorrect
• Change of system
• Change of activities
• New equipment
• Revised standard
• Contract variations
• Design changes
• Etc …….
Note: Reasons for document change usually arise as a result of an audit . A
DOCUMENT REVIEW must be done on relevant documents before any
change is carried out.
 Basic rules for Document Change:
• Must be identified and recorded
• Must be traceable to the required extent
• Record the nature of, and reason for, the
change
• Changes must be reviewed and approved
Note: Document Change procedures may differ
in different Company functions
 4.2 Documentation requirements (Cont’d)
4.2.4 Control of Records

1. Records must be ESTABLISHED and MAINTAINED by the

organization to provide evidence of
• conformity to requirements of the standard, and the
• effective operation of the QMS

2. Records must be legible, readily identifiable and retrievable

3. Documented procedure required to define the controls

needed for the identification, storage, protection, retrieval,
retention time, and disposition of records
 What are Forms?
• Pre-printed, formatted documents to record information e.g.
– Purchase Order
– Job Card
– Invoice
– Computer Templates
– Checklist?
 What are Records?
• Documented information providing evidence
and traceability e.g.
– Reports
– Computer Records
– Completed Forms
– Minutes of Meetings
• Note: “Quality Records are simply those that
affect Quality - are there any that don’t?
 5. Management responsibility
5.1 Management Commitment

5.2 Customer Focus

5.3 Quality Policy

5.4 Planning

5.5 Responsibility, Authority and Communication

5.6 Management review

 Top Management
•All sub-sections within section 5 Management
responsibility commence with the words “Top
Management”

•Definition of ‘top management’ as provided under

ISO 9000:2000 (Quality Management Systems -
Fundamentals and vocabulary) Para 3.2.7:
“Person or group of people who direct and control
an organization at the highest level”

The intent of the standard is clear - commitment and

involvement must come from the top
 5. Management responsibility (Cont’d)

5.1 Management Commitment

Top management shall provide evidence of its

commitment to the:

• development and implementation of the

QMS, and
• continually improving its effectiveness
How?
 5.1 Management Commitment (Cont’d)
By doing the following:

a) communicating to the organization the importance of

meeting not only customer requirement but statutory and
regulatory requirements as well

b) establishing the quality policy

c) ensuring that quality objectives are established

d) conducting management reviews, and

e) ensuring the availability of resources

 5.2 Customer Focus

Top management shall ensure that customer

requirements are determined and are met with the
aim of enhancing customer satisfaction.

(refer 7.2.1 Determination of requirements related to

the product and 8.2.1 Customer Satisfaction).
 5.3 Quality Policy
Top management shall ensure that the organization’s quality
policy:
a) is appropriate to the purpose of the organization

b) includes a commitment to:

- comply with requirements and
- continually improve the effectiveness of the QMS

c) provides a framework for establishing and reviewing

quality objectives (see 5.4.1)

d) is communicated and understood within the

organization

e) is reviewed for continuing suitability

 5.4 Planning
5.4.1 Quality Objectives
Top management shall ensure that:

1) quality objectives, including those required to

meet product requirements (see 7.1.(a) Planning
of product realization - quality objectives and
requirements for the product) are established at
relevant functions and levels within the
organization

2) the quality objectives are measurable and

consistent with the quality policy
 5.4 Planning (Cont’d)
5.4.2 Quality Management System Planning
Top management shall ensure that:

a) appropriate planning is carried out to meet:

• the QMS requirements identified under 4.1
• the quality objectives defined under 5.4.1

b) the integrity of the QMS is maintained when it

is subjected to change/s
 5.5 Responsibility, Authority and
Communication
5.5.1 Responsibility and Authority

Top Management shall ensure that the responsibilities

and authorities are defined and communicated within
the organization.
 5.5 Responsibility, Authority and
Communication (Cont’d)
5.5.2 Management representative

Top management shall appoint a member of management whose

responsibility and authority will specifically include (irrespective of
his/her other responsibilities within the organization):

a) ensuring that processes needed for the QMS are established,

implemented and maintained,

b) reporting to top management on the performance of the QMS

and any need for improvement, and

c) ensuring the promotion of awareness of customer

requirements throughout the organization.
 5.5 Responsibility, Authority and
Communication (Cont’d)
5.5.2 Management representative (Cont’d)

NOTE:
The responsibility of a management representative can
include liaison with external parties on matters relating
to the quality management system.
 5.5 Responsibility, Authority and
Communication (Cont’d)

5.5.3 Internal Communication

Top management shall ensure that appropriate

communication processes are established within the
organization to communicate matters relating to the
effectiveness of the QMS.
 5.5.3 Internal Communication
Communication on matters relating to the
effectiveness of the QMS: (2-way) can be done by:

• Communicating policies, objectives

• Communicating accomplishments
• Feed back from employees (suggestion schemes,
employee surveys)

• Newsletters, team briefings

• Management Review
 5.6 Management Review
Top management shall review the organization’s QMS at
planned intervals to ensure its continuing SUITABILITY,
ADEQUACY and EFFECTIVENESS

Review to include assessing:

• opportunities for improvement
• need for any changes to the QMS as
appropriate - including the quality policy
(5.3) and quality objectives (5.4.1)

Records of management reviews need to be maintained

(4.2.4)
 5.6.2 Review Input
Input to management review shall include information on:
a) results of audits,

b) customer feedback,

c) process performance and product conformity,

d) status of preventive and corrective actions,

e) follow-up actions from previous management reviews,

f) changes that could affect the QMS, and

g) recommendations for improvement

 5.6.3 Review Output
The output from the management review shall
include any decisions and actions related to:

a) improvement of the effectiveness of the

quality management system and its processes,

b) improvement of product related to customer

requirements, and

c) resource needs.
 6. Resource Management

6.1Provision of resources

6.2Human Resources

6.3 Infrastructure

6.4Work environment
 6. Resource Management (Cont’d)
6.1 Provision of resources

The organization shall DETERMINE and PROVIDE the

resources it needs to:

a) - implement and maintain the QMS and

- continually improve its effectiveness, and

b) enhance customer satisfaction by meeting

customer requirements
 6. Resource Management (Cont’d)
6.2 Human resources

6.2.1 General

The organization is required to ensure that personnel

performing work that affects product quality shall be
competent on the basis of appropriate EDUCATION,
TRAINING, SKILLS and EXPERIENCE.
 6. Resource Management (Cont’d)

6.2.2 Competence, awareness and training

The organization shall:

a) determine competence necessary for personnel performing

work that affects product quality,

b) provide the required training or take other actions to satisfy

these needs relating to competence,
 6. Resource Management (Cont’d)
c) evaluate the effectiveness of the actions taken, (see b above)

d) ensure that its personnel are aware of the relevance and

importance of their activities and how they contribute to the
achievement of the organization quality objectives, and

e) maintain appropriate records of personnel education, training,

skills and experience (see 4.2.4)
 6. Resource Management (Cont’d)

6.3 Infrastructure
The organization shall DETERMINE, PROVIDE and MAINTAIN the
infrastructure* needed to achieve conformity to product
requirements.

Infrastructure includes, as applicable:

a) buildings, workspace and associated utilities,
b) process equipment (both hardware and software), and
c) support services (such as transport or communication).
 6. Resource Management (Cont’d)

6.4 Work environment

The organization shall DETERMINE and MANAGE
the work environment* needed to achieve
conformity to product requirements.
 7. Product realization
7.1 Planning of product realization

7.2 Customer-related processes

7.3 Design and development

7.4 Purchasing

7.5 Production and service provision

7.6 Control of monitoring and measuring devices

 7. Product realization (Cont’d)
7.1 Planning of product realization
The organization shall PLAN and DEVELOP the processes needed
for product realization

• Planning of product realization shall be consistent with the

requirements of the other QMS processes identified under 4.1
General requirements – QMS

• In planning product realization, the organization shall determine

the following, as appropriate:

a) quality objectives and requirements for the product, (see

5.4.1)

b) the need to establish processes, documents, and provide

resources specific to the product,
 7. Product realization (Cont’d)

7.1 Planning of product realization (Cont’d)

c) required verification, validation, monitoring, inspection and test
activities specific to the product and the criteria for product
acceptance,

d) records needed to provide evidence that the realization processes

and resulting product meet requirements (see 4.2.4).

The output of this planning must be in a form suitable for the

organization’s method of operations.
 7. Product realization (Cont’d)
7.2 Customer-related processes
7.2.1 Determination of requirements related to the product
The organization shall determine:
a) requirements specified by the customer, including the
requirements for delivery and post-delivery activities,

b) requirements not stated by the customer but necessary for

specified or intended use, where known

c) statutory and regulatory requirements related to the product,

and

d) any additional requirements determined by the organization

 7. Product realization (Cont’d)

7.2.2 Review of requirements related to the product

•The organization shall review the requirements related to the

product.

•This review shall be conducted prior to the organization’s

commitment to supply a product to the customer.
For example:
• tender submission stage or
• prior to the acceptance of a contract or order or
• change/s to a contract or order.
 7. Product realization (Cont’d)

7.2.2 Review of requirements related to the product (Cont’d)

This review shall ensure that:

a) product requirements are defined,

b) contract or order requirements differing from those previously

expressed are resolved, and

c) it has the ability to meet the defined requirements.

Records of the results of the review and actions arising form the
review must be maintained (see 4.2.4).
 7. Product realization (Cont’d)
7.2.2 Review of requirements related to the product (Cont’d)
•Customer requirements shall be confirmed by the organization before
acceptance,when the customer provides no documented statement
of requirement.

•In case of requirements’ changes, the organization shall

ensure that relevant documents are amended and that relevant
personnel are made aware of the changed requirements.

NOTE: Formal review is impractical for each order, such as internet sales. In
this case, the review can cover relevant product information like catalogues
or advertising material for instance.
 7. Product realization (Cont’d)
7.2.3 Customer communication
The organization shall DETERMINE and IMPLEMENT
effective arrangements for communicating to
customers aspects related to:
a) product information,

b) inquiries, contracts or order handling

(including amendments) and

c) customer feedback (including customer

complaints).
 Customer Communication
We must have effective arrangements/systems in place to
communicate with our customers in relation to:

• Product information (catalogues, data sheets,

safety/environment information, phone help line,
internet)

• Inquiries, order handling, contracts (including

amendments) (covered by 7.2.1 & 7.2.2 Customer
related processes)

• Customer feedback (including customer complaints)

(Link with 8.2.1 - Customer Satisfaction)
 7.3 Design and development

7.3.1 Design and development planning

The organization shall plan and control the design and
development of its product.

During the design and development planning, the organization

shall determine:
a) the various design and development stages
b) the review, verification and validation that are
appropriate to each design and development stage
identified, and
c) the responsibilities and authorities for design and
development
 7.3 Design and development
7.3.1 Design and development planning (Cont’d)

The organization shall manage the interfaces

between different groups involved in design and
development ensuring effective communication
and clear assignment of responsibilities.

Planning output shall be updated, when necessary,

as the design and development process
progresses.
 7.3 Design and development (Cont’d)
7.3.2 Design and development inputs
• Inputs relating to product requirements shall be determined
and records maintained (see 4.2.4). These inputs shall include:
a) functional and performance requirements,
b) applicable statutory and regulatory requirements,
c) information derived from previous similar designs, where
applicable, and
d) other requirements essentials for design and development

• These inputs shall be reviewed for adequacy. Requirements

shall be complete, unambiguous and not in conflict with each
other.
 7.3 Design and development (Cont’d)
7.3.3 Design and development outputs
• The outputs of design and development shall be provided
in a form that enables verification against the design and
development input and shall be approved prior to release.

• Design and development outputs shall:

a) meet the input requirements for design and
development,
b) provide appropriate information for purchasing (see 7.4),
production and for service provision (see 7.5),
c) contain or reference product acceptance criteria, and
d) specify the characteristics of the product that are
essential for its safe and proper use.
 7.3 Design and development (Cont’d)
7.3.4 Design and development review
•At suitable stages, systematic reviews of design and
development shall be performed in accordance with planned
arrangements (see 7.3.1):
a) to evaluate the ability of the results of design and
development to meet requirements, and
b) to identify any problems and propose necessary
actions.

•Participants in such reviews shall include representatives of

functions concerned with the design and development stage(s)
being reviewed.

•Records of the results of the reviews and any necessary

actions shall be maintained (see 4.2.4).
 7.3 Design and development (Cont’d)
7.3.5 Design and development verification
Verification shall be performed in accordance with
planned arrangements (see 7.3.1) to ensure that
outputs have met inputs of the design and
development requirements

Records of the results of the verification and any

necessary actions shall be maintained (see 4.2.4).
 7.3 Design and development (Cont’d)
7.3.6 Design and development validation
Design and development validation shall be performed in
accordance with planned arrangements (see 7.3.1 Design and
Development Planning) to ensure that the resulting product is
capable of meeting the requirements for the specified application or
intended use, where known.

Where applicable, validation shall be completed prior to the

delivery or implementation of the product.

Records of the results of validation and any necessary actions shall

be maintained (see 4.2.4).
 7.3 Design and development (Cont’d)
7.3.7 Control of design and development changes
•Design and development changes shall be identified and
records maintained.

•The changes shall be reviewed, verified and validated, as

appropriate, and approved before implementation.

•The review of design and development changes shall include

evaluation of the effect of the changes on constituent parts
and product already delivered.

•Records of the results of the review of changes and any

necessary actions shall be maintained (see 4.2.4).
 7.4 Purchasing
7.4.1 Purchasing process

•The organization shall ensure that purchased product

conforms to specified purchase requirements. The type and
extent of control applied to the supplier and the purchased
product shall be dependent upon the effect of the purchased
product on subsequent product realization or the final
product itself.

•The organization shall evaluate and select suppliers based

on their ability to supply product in accordance with the
organization’s requirements. Criteria for selection,
evaluation and re-evaluation shall be established. Records of
the results of evaluations and any necessary actions arising
from the evaluation shall be maintained (see 4.2.4).
 7.4 Purchasing (Cont’d)
7.4.2 Purchasing information

Purchasing information shall describe the product

to be purchased, including where appropriate:

a) requirements for approval of product, procedures, processes

and equipment,
b) requirements for qualification of personnel, and
c) quality management system requirements

The organization shall ensure the adequacy of specified purchase

requirements prior to their communication to the supplier.
 7.4 Purchasing (Cont’d)
7.4.3 Verification of purchased product

•The organization shall establish and implement the

inspection or other activities necessary for ensuring
that purchased product meets specified purchased
requirements.

•Where the organization or its customer intends to

perform verification at the supplier’s premises, the
organization shall state the intended verification
arrangements and method of product release in the
purchasing information (see 7.4.2).
 7.5 Production and service provision
7.5.1 Control of production and service provision

The organization shall plan and carry out production and service
provision under controlled conditions which shall include, as
applicable:
a) the availability of information that describes the
characteristics of the product,
b) the availability of work instructions, as necessary
c) the use of suitable equipment,
d) the availability and use of monitoring and measuring
devices,
e) the implementation of monitoring and measurement, and
f) the implementation of release, delivery and post-delivery
activities.
 7.5 Production and service provision (Cont’d)
7.5.2 Validation of processes for production and
service provision

The organization shall validate any processes for

production and service provision where the resulting
output cannot be verified by subsequent monitoring or
measurement. This includes any processes where
deficiencies become apparent only after the product is
in use or the service has been delivered.
7.5 Production and service provision (Cont’d)

7.5.2 Validation of processes for production and service

provision (Cont’d)

Validation shall demonstrate the ability of these processes to

achieve planned results.
The organization shall establish arrangements for these processes,
including, as applicable:
a) defined criteria for review and approval of the processes,
b) approval of equipment and qualification of personnel,
c) use of specific methods and procedures,
d) requirements for records (see 4.2.4), and
e) revalidation.
 7.5 Production and service provision (Cont’d)

7.5.3 Identification and traceability

• Where appropriate, the organization shall identify the

product by suitable means throughout product realization.
• The organization shall identify the product status with
respect to monitoring and measurement requirements
• Where traceability is a requirement, the organization shall
control and record the unique identification of the product
(see 4.2.4).

NOTE: In some industry sectors, configuration management is a means by which

identification and traceability are maintained.
7.5 Production and service provision (Cont’d)
7.5.4 Customer property

• The organization shall exercise care with customer property

while it is under the organization’s control or being used by
the organization.
• The organization shall identify, verify, protect and safeguard
customer property provided for use or incorporation into
the product.
• If any customer property is lost, damaged or otherwise
found to be unsuitable for use, this shall be reported to the
customer and records maintained (see 4.2.4).
 7.5 Production and service provision (Cont’d)

7.5.5 Preservation of product

•The organization shall preserve the conformity of product during

its internal processing and delivery to the intended destination.
•This preservation shall include identification, handling,
packaging, storage and protection.
•Preservation also applies to the constituent parts of a product.
Example
Protective equipment, conveyors, vessels/tanks, vehicles, human
resources, controlled humidity, expiration (shelf-life items), lot
segregation, stock rotation, packaging materials, types of
transportation, sterility (medical), dust and static control (semi-
conductors), viscosity, preservation of confidential information,
and other intellectual property during the ‘handling’, ‘packaging’
and ‘transportation’ of information and data.
7.6 Control of monitoring and measuring devices

• The organization shall determine the monitoring

and measurement to be undertaken and the
monitoring and measuring devices needed to
provide evidence of conformity of product to
determined requirements (see 7.2.1).

• The organization shall establish processes to

ensure that monitoring and measurement can be
carried out and are carried out in a manner that is
consistent with the monitoring and measurement
requirements.
 7.6 Control of monitoring and measuring devices (Cont’d)
•Where necessary to ensure valid results, measuring equipment shall
be:
a) calibrated or verified at specified intervals, or prior to use,
against measurement standards traceable to international or
national measurement standards; where no such standards exist,
the basis used for calibration or verification shall be recorded,

b) adjusted or re-adjusted as necessary,

c) identified to enable the calibration status to be determined,

d) safeguarded from adjustments that would invalidate the

measurement result,

e) protected from damage and deterioration during handling,

maintenance and storage.
 7.6 Control of monitoring and measuring devices (Cont’d)

•The organization shall also assess and record the validity of the previous
measuring results when the equipment is found not to conform to
requirements. The organization shall take appropriate action on the
equipment and any product affected. Records of the results of calibration
and verification shall be maintained (see 4.2.4).

•When computer software is used to monitor and measure specified

requirements, its capability to satisfy the intended application shall be
confirmed. This shall be done prior to initial use and reconfirmed as
necessary.
8. Measurement, Analysis and Improvement

8.1 General

8.2 Monitoring and measurement

8.3 Control of non-conforming product

8.4 Analysis of data

8.5 Improvement
 8. Measurement, Analysis and Improvement (Cont’d)

8.1 General

The organization shall plan and implement the MONITORING,

MEASUREMENT, ANALYSIS and IMPROVEMENT processes
needed to:
a) demonstrate conformity of product,
b) ensure conformity of the quality management
system, and
c) continually improve the effectiveness of the quality
management system.

This shall include determination of applicable methods

(including statistical techniques), and the extent of their use.
 8. Measurement, Analysis and Improvement (Cont’d)

8.2 Monitoring and measurement

8.2.1 Customer satisfaction

As one of the measurements of the performance of the

quality management system, the organization shall
monitor information relating to customer perception as
to whether the organization has met its requirements.

How this information is obtained shall be determined.

8. Measurement, Analysis and Improvement (Cont’d)

8.2.2 Internal audit

The organization shall conduct internal audits at

planned intervals to determine whether the quality
management system:

a. conforms to the planned arrangements (see 7.1)

b. conforms to the requirements established by the
organization, and
c. is effectively implemented and maintained.
 8. Measurement, Analysis and Improvement (Cont’d)

8.2.2 Internal audit (Cont’d)

•An audit Program shall be planned, taking into

consideration the status and importance of the processes and
areas to be audited, as well as the results of previous audits.
The audit criteria, scope, frequency and methods shall be defined.
Selection of auditors and conduct of audits shall ensure
objectivity and impartiality of the audit process.

•Auditors shall not audit their own work.

•The responsibilities and requirements for planning and
conducting audits, and for reporting results and maintaining
records (see4.2.4) shall be defined in a documented procedure.
 8. Measurement, Analysis and Improvement (Cont’d)

8.2.2 Internal audit (Cont’d)

•The management responsible for the area being audited shall

ensure that actions are taken without undue delay to eliminate
detected nonconformities and their causes.

•Follow-up activities shall include the verification of the

actions taken and the reporting of verification results (see
8.5.2 Corrective Action).
 8. Measurement, Analysis and Improvement (Cont’d)
8.2.3 Monitoring and measurement of processes

• The organization shall apply suitable methods for monitoring

and, where applicable, measurement of the quality
management system processes.

• These methods shall demonstrate the ability of the processes

to achieve planned results.

• When planned results are not achieved, correction and

corrective action shall be taken, as appropriate, to ensure
conformity of the product.
Do We Need To Measure All Our Processes?
The organization shall

4.1 (a) …. “identify the processes needed for the

Quality Management System and their
application throughout the organization.”

4.1 (e) …. “Monitor, measure and analyze these

processes”

8.2.3 …. “Apply suitable methods for monitoring

and, where applicable, measurement of the
Quality Management System processes”
 Where Can Process Monitoring & Measurement Be
Meaningfully Applied?
• Wherever we are seeking improvements (business
advantage)

• The product realization processes that are critical or

provide significant added value to the organization (e.g.
service delivery, manufacturing process, design process)

• The support processes that influence the effectiveness &

efficiency of the realization processes (e.g. management
system processes, enablers)

• We should measure those processes which relate to the

quality objectives, to customer satisfaction, and to
continual improvement.
 Examples of Quality Management System
Processes

• Management Review

• Customer Communication

• Internal Communication

• Continual Improvement Processes

• Corrective Action Processes

 8. Measurement, Analysis and Improvement (Cont’d)
8.2.4 Monitoring and measurement of product

• The organization shall monitor and measure the characteristics of

the product to verify that product requirements have been met.
This shall be carried out at appropriate stages of the product
realization process in accordance with the planned arrangements
(see 7.1).

• Evidence of conformity with the acceptance criteria shall be

maintained. Records shall indicate the person(s) authorizing
release of product (see 4.2.4)

• Product release and service delivery shall not proceed until the
planned arrangements (see 7.1) have been satisfactorily
completed, unless otherwise approved by a relevant authority and,
where applicable, by the customer.
8. Measurement, Analysis and Improvement (Cont’d)
8.3 Control of nonconforming product

•The organization shall ensure that product which does not

conform to product requirements is identified and controlled to
prevent its unintended use or delivery. The controls and related
responsibilities and authorities for dealing with nonconforming
product shall be defined in a documented procedure.

•The organization shall deal with nonconforming product by one or

more of the following ways:
a) by taking action to eliminate the detected nonconformity
b) by authorizing its use, release or acceptance under
concession by a relevant authority and, where applicable,
by the customer;
c) by taking action to preclude its original intended use or
application
 8. Measurement, Analysis and Improvement (Cont’d)
8.3 Control of nonconforming product (Cont’d)
• Records of the nature of nonconformities and any subsequent actions
taken, including concessions obtained, shall be maintained (see 4.2.4)
• When nonconforming product is corrected, it shall be subject to re-
verification to demonstrate conformity to the requirements.
• When nonconforming product is detected after delivery or use has started,
the organization shall take action appropriate to the effects, or potential
effects, of the nonconformity.
 8. Measurement, Analysis and Improvement (Cont’d)

8.4 Analysis of data

The organization shall DETERMINE, COLLECT and
ANALYSE appropriate data (including data
generated as a result of monitoring and
measurement, and from other relevant sources) to:

• demonstrate the suitability and effectiveness

of the quality management system, and
• evaluate where continual improvement of the
effectiveness of the quality management
system can be made
 8. Measurement, Analysis and Improvement
(Cont’d)

8.4 Analysis of data (Cont’d)

The analysis of data shall provide information relating to:
a) customer satisfaction (see 8.2.1)
b) conformity to product requirements (see 7.2.1)
c) characteristics and trends of processes and products
including opportunities for preventive action, and
d) suppliers
8. Measurement, Analysis and Improvement (Cont’d)
8.5 Improvement
8.5.1 Continual improvement
The organization shall continually improve the effectiveness of its quality
management system through the use of its:
• quality policy (see 5.3)
• quality objectives (see 5.4.1)
• audit results (see 8.2.2)
• analysis of data (see 8.4)
• corrective and preventive actions (see 8.5.2 & 8.5.3)
• management review (see 5.6)
The seven key requirements of the standard listed provide the
linkages and constitute the framework for continually improving the
effectiveness of the quality management system.
 8. Measurement, Analysis and
Improvement (Cont’d)
8.5.2 Corrective action

The organization shall take action to eliminate the

cause of nonconformities in order to prevent
recurrence.

Corrective actions shall be appropriate to the effects

of the nonconformities encountered.
 8. Measurement, Analysis and
Improvement (Cont’d)
8.5.2 Corrective action (Cont’d)
A documented procedure shall be established to define
requirements for:
a) reviewing nonconformities (including customer
complaints),
b) determining the causes of nonconformities,
c) evaluating the need for action to ensure that
nonconformities do not recur,
d) determining and implementing action needed
e) records of the results of action taken (see 4.2.4), and
f) reviewing the corrective action taken.
 8. Measurement, Analysis and
Improvement (Cont’d)
8.5.3 Preventive action
• The organization shall determine action needed to
eliminate the causes of potential nonconformities in
order to prevent their occurrence.

• Preventive actions shall be appropriate to the

effects of the potential problems.
 8. Measurement, Analysis and
Improvement (Cont’d)
8.5.3 Preventive action (Cont’d)
A documented procedure shall be established to define
requirements for:

a) determining potential nonconformities and their

causes,
b) evaluating the need for action to prevent occurrence
of nonconformities
c) determining and implementing action needed,
d) records of results of action taken (see 4.2.4), and
e) reviewing preventive action taken.