FREQUENTLY ASKED QUESTIONS
... RELATED TO ISO MANAGEMENT SYSTEMS
What does “management system” mean?
According to ISO standards the definitions of management system is: “Set of interrelated or interacting elements of an organization to establish policies and objectives, and processes to achieve those objectives.”
In a few words, it refers to the systemic management of the processes of an organization with the purpose of fulfilling its objectives and policies.”
Why do I need an ISO management system?
Generally speaking, having a management system that is based on an ISO standard, for example ISO 9001 helps the organization meet the requirements of their relevant interested parties in a systematic and effective manner.
For example, with an ISO 9001 Quality Management System the expected benefits include the ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements, facilitate opportunities to enhance customer satisfaction, address risks and opportunities associated with its context and objectives and the ability to demonstrate conformity to specified quality management system requirements.
With an occupational health and safety (OHS) management system based on ISO 45001 the expectation is to provide safe and healthy workplaces, prevent work-related injury and ill health, and continually improve OHS performance.
An anti-bribery management system based on ISO 37001 helps organizations implement reasonable and proportionate measures to prevent, detect and address bribery.
All ISO management systems address the following: Context of the organization, Leadership, Planning, Support, Operation, Performance evaluation, Improvement.
My organization is small. Can I implement a management system based on an ISO standard?
Management system standards, for example ISO 9001, ISO 45001, ISO 37001, etc. can be applied in any organization of any size and within any sector.
Do I need help to implement a management system?
Yes. Even though the concepts included within ISO standards appear to be clear and there is plenty of material to support your implementation efforts, in our experience it is highly recommended to ask an expert for help, mainly for the following two reasons:
Can I implement several ISO standards at the same time? For example, ISO 9001 and ISO 45001?
Yes. When several types of management systems are combined it is called a “combined” or “integrated” management system.
How do I choose a consultant?
There are several characteristics that you should look for in a consultant:
AVOID:
Consultants that:
WHAT YOU NEED TO LOOK FOR:
A consulting team that teaches you how to apply the standard in your organization and that takes you by your hand during implementation.
How much time does it take to implement a management system?
In depends on many variables, for example, the size of the organization, the number of sites within the scope of the management system, complexity and level of risks of their operations.
For a small company it is realistic to consider approximately 6 months for implementation. For a large company y can take much longer.
When it is “urgent” because some interested party mandates the implementation or certification within an established time frame, then the implementation process can be accelerated under the condition that top management and all relevant personnel engage in the process and are willing to work overtime.
Is certification a requirement?
No, unless it is required by any of the interested parties, for example, some client or potential client may require it. The implementation of a management system is a strategic decision of the organization.
How do I select a certification body?
It is highly recommended to choose a certification body that is accredited by a national accreditation body that is linked to the “International Accreditation Forum” (IAF). This way you can be sure that the certification processes follow international ISO guidelines.
Each accreditation body has a public searchable database on their website where you may find a certification body that is convenient for you.
WARNING:
Read the contractual conditions well. Avoid contracts that cannot be canceled or can be canceled only after paying a fine. Do not pay for the concept of “nonconformities encountered” or “review of corrective actions”, these should be included in the overall price. Request evidence of the audit team competence. Consider additional charges for travel time, application fee, certification fee.
And finally, compare several proposals.
According to ISO standards the definitions of management system is: “Set of interrelated or interacting elements of an organization to establish policies and objectives, and processes to achieve those objectives.”
In a few words, it refers to the systemic management of the processes of an organization with the purpose of fulfilling its objectives and policies.”
Why do I need an ISO management system?
Generally speaking, having a management system that is based on an ISO standard, for example ISO 9001 helps the organization meet the requirements of their relevant interested parties in a systematic and effective manner.
For example, with an ISO 9001 Quality Management System the expected benefits include the ability to consistently provide products and services that meet customer and applicable statutory and regulatory requirements, facilitate opportunities to enhance customer satisfaction, address risks and opportunities associated with its context and objectives and the ability to demonstrate conformity to specified quality management system requirements.
With an occupational health and safety (OHS) management system based on ISO 45001 the expectation is to provide safe and healthy workplaces, prevent work-related injury and ill health, and continually improve OHS performance.
An anti-bribery management system based on ISO 37001 helps organizations implement reasonable and proportionate measures to prevent, detect and address bribery.
All ISO management systems address the following: Context of the organization, Leadership, Planning, Support, Operation, Performance evaluation, Improvement.
My organization is small. Can I implement a management system based on an ISO standard?
Management system standards, for example ISO 9001, ISO 45001, ISO 37001, etc. can be applied in any organization of any size and within any sector.
Do I need help to implement a management system?
Yes. Even though the concepts included within ISO standards appear to be clear and there is plenty of material to support your implementation efforts, in our experience it is highly recommended to ask an expert for help, mainly for the following two reasons:
- An expert has profound knowledge of the intent and purpose of each of the requirements of the standard and how these apply to your organization.
- The persons who work permanently in the organization are usually busy in their day-to-day activities and will have little to now time to dedicate to additional activities related to the implementation of a management system.
Can I implement several ISO standards at the same time? For example, ISO 9001 and ISO 45001?
Yes. When several types of management systems are combined it is called a “combined” or “integrated” management system.
How do I choose a consultant?
There are several characteristics that you should look for in a consultant:
- Experience implementing management systems.
- Profound knowledge of the standard to be implemented.
- Integrity.
AVOID:
Consultants that:
- Say that involvement of top management is not necessary.
- Give you a package with templates and pre-made documents in a “one-fits-all” style.
- Limit their participation to periodic visits only to leave work assignments and review advances, without getting involved in the process.
WHAT YOU NEED TO LOOK FOR:
A consulting team that teaches you how to apply the standard in your organization and that takes you by your hand during implementation.
How much time does it take to implement a management system?
In depends on many variables, for example, the size of the organization, the number of sites within the scope of the management system, complexity and level of risks of their operations.
For a small company it is realistic to consider approximately 6 months for implementation. For a large company y can take much longer.
When it is “urgent” because some interested party mandates the implementation or certification within an established time frame, then the implementation process can be accelerated under the condition that top management and all relevant personnel engage in the process and are willing to work overtime.
Is certification a requirement?
No, unless it is required by any of the interested parties, for example, some client or potential client may require it. The implementation of a management system is a strategic decision of the organization.
How do I select a certification body?
It is highly recommended to choose a certification body that is accredited by a national accreditation body that is linked to the “International Accreditation Forum” (IAF). This way you can be sure that the certification processes follow international ISO guidelines.
Each accreditation body has a public searchable database on their website where you may find a certification body that is convenient for you.
WARNING:
Read the contractual conditions well. Avoid contracts that cannot be canceled or can be canceled only after paying a fine. Do not pay for the concept of “nonconformities encountered” or “review of corrective actions”, these should be included in the overall price. Request evidence of the audit team competence. Consider additional charges for travel time, application fee, certification fee.
And finally, compare several proposals.
FREQUENTLY ASKED QUESTIONS
... RELATED TO INTERNAL AUDITOR OR LEAD AUDITOR COURSES
Which are the criteria for choosing a training provider?
Sometimes we get impressed by known company names. Beyond the name of the company, you should review the curriculum of the instructor team and the teaching methods they are using. Taking an auditor course represents a significant investment of time and money, therefore be sure that the course will meet your needs.
What is better: An instructor-led course? ¿A virtual course? Or an online course?
Under our point of view an instructor-led course is always better because learning will be enhanced through the interaction of the participants with the instructor team.
Nowadays there is appropriate technology available that facilitates instructor-led courses in a virtual classroom.
Online course, so to say ‘pre-recorded’ courses can be a good option for those whose work or personal commitments make it difficult to participate in an instructor-led course. Nevertheless, before committing to an on-line course be aware that an important part of an auditor’s competence are soft skills, for example being able to effectively communicate with the auditee during the recollection of evidence and the presentation of results and conclusions. These are skills that cannot be acquired through theory.
Sometimes we get impressed by known company names. Beyond the name of the company, you should review the curriculum of the instructor team and the teaching methods they are using. Taking an auditor course represents a significant investment of time and money, therefore be sure that the course will meet your needs.
What is better: An instructor-led course? ¿A virtual course? Or an online course?
Under our point of view an instructor-led course is always better because learning will be enhanced through the interaction of the participants with the instructor team.
Nowadays there is appropriate technology available that facilitates instructor-led courses in a virtual classroom.
Online course, so to say ‘pre-recorded’ courses can be a good option for those whose work or personal commitments make it difficult to participate in an instructor-led course. Nevertheless, before committing to an on-line course be aware that an important part of an auditor’s competence are soft skills, for example being able to effectively communicate with the auditee during the recollection of evidence and the presentation of results and conclusions. These are skills that cannot be acquired through theory.