Exploding the Myths Surrounding ISO9000: A practical implementation guide
By Andy Nichols
()
About this ebook
In Exploding the Myths Surrounding ISO9000, Andrew W Nichols debunks many of the common misconceptions about ISO9001 and describes the many advantages it brings. Drawing on more than 25 years of hands-on experience, Andy gives clear, practical and up-to-date advice on how to implement a Quality Management System to maximum. Full of real-life examples, this book enables you to read and interpret the ISO9000 documentation.
Andy Nichols
Andrew W Nichols has more than 25 years of experience of management systems, in both the UK and the USA. As a trainer, he has delivered hundreds of ISO9000 related courses to audiences ranging from shop-floor personnel to CEOs of Fortune 500 companies. He has also led and contributed to the development of 'best in class' training courses for a number of international standards. Andy is a regular contributor to the well-known Elsmar Cove internet forum for management systems.
Read more from Andy Nichols
Implementing ISO 9001:2015 – A practical guide to busting myths surrounding quality management systems Rating: 0 out of 5 stars0 ratings
Related to Exploding the Myths Surrounding ISO9000
Related ebooks
ISO 9000 A Complete Guide - 2019 Edition Rating: 0 out of 5 stars0 ratingsISO 22000 The Ultimate Step-By-Step Guide Rating: 5 out of 5 stars5/5Systems Thinking and ISO 9001:2015 Rating: 4 out of 5 stars4/5Iso 9001:2015 into the Future Rating: 0 out of 5 stars0 ratingsISO 9001 A Complete Guide - 2019 Edition Rating: 0 out of 5 stars0 ratingsIso 9000 Family of Standards: With Extracts from Iso 9001 Audit Trail (First Edition) Rating: 0 out of 5 stars0 ratingsThe Magic of ISO 9001: How to Make It Fully Materialize Rating: 0 out of 5 stars0 ratingsThe ISO 9001:2015 Implementation Handbook:: Using the Process Approach to Build a Quality Management System Rating: 0 out of 5 stars0 ratingsCracking the Case of ISO 9001:2015 for Service: A Simple Guide to Implementing Quality Management in Service Organizations Rating: 0 out of 5 stars0 ratingsIso 9001 Audit Trail: A Practical Guide to Process Auditing Following an Audit Trail Rating: 5 out of 5 stars5/5ISO 9001:2015 Handbook for Small and Medium-Sized Businesses Rating: 0 out of 5 stars0 ratingsHow to Audit the Process-Based QMS Rating: 5 out of 5 stars5/5ISO 9001:2015: A Pocket Guide Rating: 4 out of 5 stars4/5ISO 9001:2015 Audit Guide and Checklist Rating: 4 out of 5 stars4/5ISO 9000 Complete Self-Assessment Guide Rating: 0 out of 5 stars0 ratingsISO 9001: A Pocket Guide Rating: 3 out of 5 stars3/5Risk Management and ISO 31000: A pocket guide Rating: 0 out of 5 stars0 ratingsISO Lesson Guide 2015: Pocket Guide to ISO 9001:2015 Rating: 0 out of 5 stars0 ratingsLean Auditing: Driving Added Value and Efficiency in Internal Audit Rating: 5 out of 5 stars5/5Manufacturing ISO 9001 A Complete Guide - 2019 Edition Rating: 0 out of 5 stars0 ratingsISO/IEC 20000: An Introduction to the global standard for service management Rating: 0 out of 5 stars0 ratingsISO 9001:2015 Internal Audits Made Easy: Tools, Techniques, and Step-by-Step Guidelines for Successful Internal Audits Rating: 0 out of 5 stars0 ratingsISO 13485 A Complete Guide - 2019 Edition Rating: 0 out of 5 stars0 ratingsISO 9000 A Complete Guide - 2020 Edition Rating: 0 out of 5 stars0 ratingsISO 31000 A Complete Guide - 2020 Edition Rating: 0 out of 5 stars0 ratingsImplementing Service Quality based on ISO/IEC 20000: A Management Guide Rating: 4 out of 5 stars4/5Application security in the ISO27001:2013 Environment Rating: 4 out of 5 stars4/5ISO 9001 A Complete Guide - 2020 Edition Rating: 0 out of 5 stars0 ratings
Business For You
Summary of J.L. Collins's The Simple Path to Wealth Rating: 5 out of 5 stars5/5Law of Connection: Lesson 10 from The 21 Irrefutable Laws of Leadership Rating: 4 out of 5 stars4/5Becoming Bulletproof: Protect Yourself, Read People, Influence Situations, and Live Fearlessly Rating: 4 out of 5 stars4/5Never Split the Difference: Negotiating As If Your Life Depended On It Rating: 4 out of 5 stars4/5Your Next Five Moves: Master the Art of Business Strategy Rating: 5 out of 5 stars5/5The Energy Bus: 10 Rules to Fuel Your Life, Work, and Team with Positive Energy Rating: 3 out of 5 stars3/5Crucial Conversations: Tools for Talking When Stakes are High, Third Edition Rating: 4 out of 5 stars4/5Collaborating with the Enemy: How to Work with People You Don't Agree with or Like or Trust Rating: 4 out of 5 stars4/5The Five Dysfunctions of a Team: A Leadership Fable, 20th Anniversary Edition Rating: 4 out of 5 stars4/5Crucial Conversations Tools for Talking When Stakes Are High, Second Edition Rating: 4 out of 5 stars4/5On Writing Well, 30th Anniversary Edition: An Informal Guide to Writing Nonfiction Rating: 4 out of 5 stars4/5The Intelligent Investor, Rev. Ed: The Definitive Book on Value Investing Rating: 4 out of 5 stars4/5How to Get Ideas Rating: 4 out of 5 stars4/5The Richest Man in Babylon: The most inspiring book on wealth ever written Rating: 5 out of 5 stars5/5Robert's Rules of Order: The Original Manual for Assembly Rules, Business Etiquette, and Conduct Rating: 4 out of 5 stars4/5Emotional Intelligence: Exploring the Most Powerful Intelligence Ever Discovered Rating: 4 out of 5 stars4/5Set for Life: An All-Out Approach to Early Financial Freedom Rating: 4 out of 5 stars4/5Confessions of an Economic Hit Man, 3rd Edition Rating: 5 out of 5 stars5/5The 12 Week Year (Review and Analysis of Moran and Lennington's Book) Rating: 5 out of 5 stars5/5Capitalism and Freedom Rating: 4 out of 5 stars4/5Buy, Rehab, Rent, Refinance, Repeat: The BRRRR Rental Property Investment Strategy Made Simple Rating: 5 out of 5 stars5/5Robert's Rules Of Order Rating: 5 out of 5 stars5/5Nickel and Dimed: On (Not) Getting By in America Rating: 4 out of 5 stars4/5Good to Great: Why Some Companies Make the Leap...And Others Don't Rating: 4 out of 5 stars4/5Company Rules: Or Everything I Know About Business I Learned from the CIA Rating: 4 out of 5 stars4/5Money. Wealth. Life Insurance. Rating: 5 out of 5 stars5/5
Reviews for Exploding the Myths Surrounding ISO9000
0 ratings0 reviews
Book preview
Exploding the Myths Surrounding ISO9000 - Andy Nichols
Resources
INTRODUCTION
In 1987, a small, quiet and almost unnoticed event caused a revolution to occur. This revolution initially affected manufacturing organizations, mainly in the UK. However, since then it has spread throughout organizations (both profit and nonprofit) of all types and sizes around the world. The event was the publication, by the International Organization for Standardization, of the International Standard ISO9000.
This International Standard, collectively known as ISO9000, now comprises the following documents:
Vocabulary (ISO9000)
Quality Management Systems Requirements (ISO9001)
Guidance on Improvement (ISO9004).
These three are to be used by an organization wishing to adopt a recognized model on which to base its quality management system.
ISO9001 is the biggest-selling document of its type in the world. Thousands of organizations, in hundreds of countries, have implemented ISO9001. Countless auditors have been trained to audit to it, and countless documents have been written in the name of complying with it. The intention of publishing these ISO documents was to provide, in an increasingly global supply chain, a set of quality assurance requirements that suppliers could implement and, thereby, give confidence that their products and services would meet customers’ needs.
Prior to the publication of ISO9000, many organizations were using quality assurance requirements in their supplier relationships. These documents were created by major purchasing organizations in the defense and automotive industries, for example. In the drug and pharmaceutical industries, regulators introduced their versions too. Suppliers to (Western) defense departments were required to comply with NATO AQAP1 or AQAP4; in the USA this was known as MIL-Q-9858A and in the UK as DEF-STAN-05/21, etc.
It is in these last documents that the first version of ISO9000 has its roots. Originally based on the British standards BS5750, parts 1, 2, and 3, which themselves were heavily modeled on the British Ministry of Defence’s procurement requirements entitled DEF-STAN-05/21 (for design- and manufacturing-capable contractors) and 05/24 (for manufacturing-only contractors), ISO9000 was published in 1987 as ISO9001 (for design-and manufacturing-capable suppliers), ISO9002 (for manufacturing-only suppliers), ISO9003 (for suppliers who performed product inspection only), and ISO9004 (guidance to the other three).
In the automotive supplier base, General Motors (North America) had a supplier quality document called Targets for Excellence,
Chrysler issued the Chrysler Supplier Quality Assurance Manual,
and Ford Motor Company developed the Q-101
specification. These Big 3
supplier quality documents were also derived from the need for the auto makers themselves to supply their government’s defense departments, and to some extent also echoed those defense contractor standards.
Major procurement organizations in other industries followed suit, including Caterpillar, John Deere, and Black and Decker, for example, passing down their requirements (often a pass through
of their customers’ quality requirements) to their suppliers.
Regulated industries also had their versions of quality assurance requirements. These were drawn up specifically for makers of medical devices and pharmaceutical drug manufacturers, particularly those in the USA with the need to comply to the Federal Drug Administration’s Title 21 Code of Federal Regulation 860 (21CFR860), for example.
Pity the manufacturing organizations who supplied multiple customers in these markets! It was not unknown for organizations to create and maintain up to 14 separate quality programs to satisfy each of these customer requirements, undergoing multiple audits by supplier quality personnel, too.
Since 1987, the adoption of ISO9001 has also led to a number of industry-specific versions being developed, including:
QS-9000 – for North American auto suppliers, which subsequently became ISO/TS 16949;
AS9100/9110/9120 – for the aerospace industry;
TL-9000 – for the telecommunications industry; and
ISO/TS 29000 – for the petrochemical and gas industries.
These requirements take the basic ISO9001 requirements and add industry-specific tools and techniques to them.
At the time of writing this book, a number of ISO standards for management systems have been created to address further industry needs, including:
ISO13485 – for the medical device industry;
ISO27001 – for information security;
ISO22000 – for the food industry; and
ISO20000 – for the IT services industry.
This book represents the collective experience of implementation of quality management systems over the course of more than 25 years. Throughout there are myth alerts
where you will find typical misconceptions relating to the requirements of ISO9001:2008, including quality management systems implementation, audits, and third-party certification.
CHAPTER 1: QUALITY – THE BASICS
Quality – just what is it?
Before we begin the dissection of the intent and content of ISO9001, it’s appropriate to understand some basics which underpin the reason for the International Standard being in existence. Since ISO9000 has in its title the word quality,
a good definition of quality
is important to understand the context of a quality management system. It is a concept which can, for some, be slippery to grasp.
There are all manner of definitions or descriptions of quality
– some conceptual, some esoteric, and some reasonably accurate. Definitions include: Doing it right first time,
or Selling products which don’t come back, to customers who do.
However, for the purposes of understanding the International Standard, we should look to the definition which is found in the normative reference
for ISO9001: that is the Vocabulary document known as ISO9000:
degree to which a set of inherent characteristics fulfils requirements.¹
This definition is a classical one, but may be less than helpful to those who are new to the concept. Therefore, for the purposes of understanding this book, and the application of ISO9001 to an organization, quality
is considered as
Doing what your customer tells you they want.
No surprises, no changes, no late or early deliveries – what they want, delivered time and time again. Simple, really!
Furthermore, it’s going to be very necessary that the organization’s management have a clear and consistent understanding of this definition, because, without it, the rest of the implementation of the ISO9001 requirements will be fundamentally flawed. The reasons will become clear later. Furthermore, it is also important that key concepts which hinge on the use of the word quality
are also fully understood as distinct and separate – as well as being somewhat interrelated.
Those key concepts are:
quality control,
quality assurance,
quality management, and
total quality.
Quality control: or "you can’t inspect quality into products!"
How quality
is achieved by an organization has been gradually changing since World War II, particularly with the trend to mass production techniques. It was traditional, in Western manufacturing organizations, for quality control personnel – sometimes dressed in white lab coats – to inspect, check, and test products to see if they met the specification. Often, the most talented people from the manufacturing line were recruited to the Quality Control (QC) department, since they knew nearly everything about the manufacturing process – they also knew the problems which were manifest in the products. They were, simply, the best at finding the faults. This approach was costly and time consuming, and frustrated the people on the manufacturing line and their supervision. In some situations, the manufacturing departments would play games with the QC people, in order to meet production schedules and delivery dates, when products had been suspected of being rejects.
Worst of all, the QC effort directed at the product wasn’t very effective in preventing defects getting to customers. A common assertion is that even 100% inspection (by people) is only 80% effective, at best.
To demonstrate this ineffectiveness, a simple test of the power of observation is used, where the reader has to count the number of times the letter f
appears in the following sentence:
Finished files are the result of years of scientific study combined with the experience of years …
(Answer: six)
Those who were alive during this era can often tell stories of their (or families’) experiences of the defects which afflicted consumer products!
Quality control is still an aspect of ISO9001, albeit not performed the way described above. All processes need control(s) which may include measurement of process parameters and/or product characteristics and prove conformity to a specification or quality.
Quality assurance: because assumptions are a poor choice!
As previously described in the Introduction, major purchasing organizations (mainly government entities such as departments of defense or food and drugs agencies) required suppliers to implement quality assurance
(QA) programs. The requirements for these QA programs were published in contractually binding documents which became the predecessors of ISO9001.
The QA program requirements emphasized that suppliers had to operate the basics for assuring the quality of the products they manufactured. These basics included having the supplier create and maintain:
a quality assurance manual,
documented procedures/work instructions,
a list of approved suppliers,
measuring equipment calibration,
controls for non-conforming product,
training for personnel,
a quality manager/representative,
inspection records,
etc.
As the use of supplier QA requirements (as they were known) became widespread, the top-level suppliers (tier 1, or primes) also started to pass them down through their supply chains. As a result, these lower-level suppliers were frequently required to implement and maintain a variety of QA programs – to meet each of their major customers’ requirements. Frustratingly, although there was substantial similarity across these customer QA requirements, the supplier organizations had to maintain separate programs and documentation! Indeed, as mentioned previously, one supplier in the UK familiar to the author created and maintained 14 distinct QA manuals to satisfy this demand – despite the fact that the product was a proprietary design!
Quality management: quality