Monday, November 17, 2008

The Right Time

Every day there’s a new challenge, a new problem, another issue. We spend so much time trying to “hold the line”, that we forget to look after the improvement needs of our business. To remain competitive in today’s rapidly evolving marketplace, it’s essential that a business not only performs well at the outset, but also continues to develop its products, processes and infrastructure on an ongoing basis. In this scenario, improvement isn’t an option; it’s the choice between long term success and ultimate failure.

As we’ve witnessed recently in so many different industries, today’s market leader can easily become tomorrow’s market loser. All clichés aside, a business that fails to progress forward isn’t merely standing still, it is moving backwards. If you don’t improve, you’re allowing your competition the opportunity to figure out a way to do things better. When this occurs, you’ve lost your distinction in the marketplace and likely, a fair amount of your customer base, assuming they haven’t been acquired already. Distinction in the marketplace is what makes market leaders, and this distinction only lasts until the competition catches up, or comes up with a better way to do things.

It’s easy to say that the timing may be better later; that the issue isn’t important enough right now. Between fighting the fires of the day and dealing with whatever the crisis of the moment may be, it can be hard to distinguish between what really is important, urgent, what is both or what is neither. Waiting for the “right time” to address improvement is about the same as trying to improve your revenues by buying lottery tickets; the probability is there, but your chances are somewhere between unlikely and non-existent. There are two times we can safely bet on however; there is a time when improvement is beneficial (now), and there will be a time when improvement is too late. Unfortunately, the latter is risky gamble for planning purposes, as it’s usually a date you won’t see coming.

We mistakenly attempt to prioritize our need for improvement relative to internal factors (budgets, resources, scheduling, reject rates, etc.), as these influences are known to us and are within our control, hence the “right time” mentality. We ignore the myriad of external factors that exist, those that we have no control over. This allows us to view improvement as an activity that can be segregated from other core business processes, and that can be addressed on the basis of convenience and opportunity, rather than necessity. By focusing solely on these internal factors, we are often driven or forced to improve by the marketplace, rather than addressing improvement on our own terms.

The “right time” for improvement isn’t something that can be planned or marked on a calendar, as the need for improvement is perpetual. While you are checking your calendar for the right time to focus on improvement, your customers are actively looking for better ways to do business and your competition is always looking to take away your customers.

Waiting for the “right time” may be waiting for an opportunity that never comes.

http://www.masquality.com

Monday, October 27, 2008

The Right Approach

There are volumes of work that have been published detailing the success of quality management systems based on ISO 9001, AS9100, TS 29001 and other similar standards; the same goes for the documented success of problem-solving and improvement approaches, such as Six Sigma, Lean, TQM, RCA etc. If you research any of these on-line, your results will show hundreds of success stories, illustrating how such approaches can be successfully applied in virtually any industry or profession.

When we consider the documented success of such approaches, it’s amazing that any organization which has not adopted such sophisticated measures remains in business at all. Surely they can’t be as competitive as their peers in the marketplace with such superior capability. The progressive organization has learned to execute their operations with the precision of a laser scalpel; the dinosaur relies on outdates processes with the exactitude of trying to eat peas with flimsy, plastic cooking spatula. The organization who has the lowest DPMO, the most procedures, great process maps and the most black belts must always win.

With such overwhelming success, I’m surprised that I continue to regularly encounter folks who are steadfast in their belief that these approaches are nonsense; that they don’t work. To these individuals, such approaches are nothing but “flavor-of-the-day” initiatives, a combination of buzzwords and over-hyped methods, gestures or tricks with no end result other than to line the pockets of consultants at the expense of the well-meaning organization. This later opinion is inconsistent with the documented results - surely there is something missing. With so many documented success stories, there can’t be anything wrong with these approaches, can there…?

Unfortunately, many of these later opinions are based upon valid reasoning; they are the views of individuals who have seen the failures personally; they have suffered through poorly managed projects, tutelage under the guidance of less-than-capable consultants, and have experienced the disastrous results of ill-conceived initiatives. Huge costs have been incurred by the organization, countless hours have been wasted, personnel have been reassigned and morale has been left shattered. What began as an optimistic attempt to improve the condition of the business has either made no impact, or has left the organization in a worse state than ever before.

Which side is right here? Are these approaches successful or just hype?

We need to quit trying to address with this subject in absolutes. There is no “one-size-fits-all” solution; there is no global solution that can be applied in all cases. Each business has their own unique needs, circumstances and business objectives. Such approaches can be wildly successful; they can also be absolute failures. You can’t just say the “ISO 9001 doesn’t work", “Six Sigma doesn’t work”, or “Lean doesn’t work”. It just may not work for you. The same goes for saying that any of these approaches does work, without exception.

We incorrectly attribute the success (or failure) of an approach almost exclusively to the methodology itself, without taking into consideration the context in which it was applied, or the need which it was intended to address. Each of the aforementioned approaches (ISO 9001, Lean, Six Sigma, etc.) has some degree of merit, and each has been successful in their own right. Each has its own unique strengths and weaknesses. The "right" approach however, is the one that fits best with your organization.

http://www.masquality.com

Monday, October 20, 2008

ISO 9001 - Customer Property

In clause 7.5.4 of the ISO 9001 standard, we find requirements for the control of customer property. As established in this clause, an organization is required to establish measures for the control of customer property, while it is under the organization’s control or being used by the organization. This clause also addresses the organization’s responsibility to identify, verify, protect and maintain customer property, as well as reporting to the customer any problems or issues that are identified.

What Is Customer Property?

Customer property is any property that is owned (or provided) by the customer. In simple terms, customer property can be considered anything that you don’t own, that has been supplied by the customer for your use. Such product may be owned directly by the supplier, or owned by another interested party.

Examples of customer property can be found in ISO 9004:2000*, which includes the following:
  • Ingredients or components supplied for inclusion in a product;
  • Product supplied for repair, maintenance or upgrading;
  • Packaging materials supplied directly by the customer;
  • Customer materials handled by service organizations such as storage;
  • Services supplied on behalf of a customer, such as transportation of customer product to a third party; and
  • Customer intellectual property, such as specifications, drawings and proprietary information.

*Excerpt from ISO 9004:2000, Quality management systems – Guidelines for performance improvements

From the guidance above, we can therefore consider customer property to include any materials, parts, components, etc. that are provided by the customer to be incorporated into the organization’s product. We can also include any property that is used by the organization, such as customer-provided equipment, tools, hardware and software.

Intellectual property may also fall under this requirement, if its return is required upon completion of a project. If it is given freely however (e.g., public information) it would not fall under this requirement.

Identifying Customer Property

The identification of customer property is a critical part of not only identifying ownership, but is also a necessary step in preventing the unauthorized use or inadvertent disposal of customer property. Identification should be in the method appropriate to the organization, the product, the processing to be performed, any usage requirements and/or customer specified instructions. Identification methods may include labels, tags, containers, physical markings or other methods as appropriate.

Verifying Customer Property

Verification of customer property should be performed to establish the condition of customer supplied property, including conformance to all specified requirements. These verification checks may include quantity, physical condition, and other characteristics, as well as the identification or measurement of chemical, physical or other properties. Typically, this verification process would be performed upon receipt, and is usually performed in a manner consistent with the organization’s established process for the verification of purchased product.

Records of such verification activities should be maintained in accordance with the organization’s record control procedures, and notification made to the customer in the event that nonconforming product is identified (see below).

Protecting Customer Property

While under the control of the organization, appropriate measures need to be established to protect customer product from loss, damage and/or degradation. Typically, such measures would follow the organization’s process for the protection of its own property; with any additional customer requirements that may apply (various international standards are also available to address this subject). As part of such measures, a schedule for periodic assessment should be established for property that is maintained for extended periods of time. The specific interval of this assessment, and evaluation method(s) used, should be based on the specific type of product and various other factors, including shelf -life of the product, storage environment, specific customer instructions, etc.

Maintaining Customer Property

In cases where maintenance may be required (e.g., equipment, tools and/or hardware), the organization should, prior to the acceptance of customer property, ensure that there is a clear agreement and definition of responsibility with regarding to both on-going maintenance and repair. Specific terms and conditions should be established between the customer and the organization to address the types (and schedule) of maintenance required, including who will be responsible for such maintenance, as well as to establish guidelines to address extraordinary events, such as repairs due to equipment failure.

As with maintenance and repair activities performed by the organization on its own equipment, records should be maintained in accordance with the organization’s record control procedures.

Reporting of Issues

The requirements established in 7.5.4 not only address the control of customer property, but also notification to the customer should any problems be identified. Any problems or issues, such as loss, damage or failure concerning customer property should be promptly reported back to the customer in accordance with the organization’s procedures for the control of nonconforming product, as modified by any specific customer instructions. As this is customer property, subsequent processing activities should be suspended, until disposition by the customer has occurred.

Records of such nonconforming product should be maintained in accordance with the organization’s record control procedures


http://www.masquality.com

Friday, September 26, 2008

ISO 9001 in Education and Training

While usually associated with manufacturing and service activities, ISO 9001 should be considered equally as effective as a management system for education and training programs. If we consider the desired outcome (learning), education and training is just another form of service; the product is the knowledge, skill and/or ability that is achieved by the program attendees. As with other services, the delivery of education and training incorporates the processes of design, development, verification, validation, delivery, subsequent correction and ongoing improvement. Therefore, when we try to apply the requirements of ISO 9001 to education and training activities, we find that it aligns exceptionally well with generally accepted practices.

A fundamental objective of any quality management system is to ensure that customer needs are met. In order to define these needs as they relate to education and training, we must first define the primary customer of this service - the program attendee. I’ve used the term “primary customer” in this discussion, as numerous ancillary customers may also be involved, including the parents of the attendee, the state which provides funding to the institution, and possibly even the country in which the activity is performed (as skill development contributes to the national economy). In the case of corporate training, we must also consider the needs of the individual’s employer, the industry they serve, as well as regulatory bodies or other interested parties. The list of potential customers can be as varied as the number of offerings that are available; identification of both primary and ancillary customers is a critical part of the initial needs assessment process, and is essential to the overall success of any education or training effort.

Once the above customers have been defined, their needs must be translated into terms that can be understood by the organization, and that can be further developed to serve as a measurement of an individual’s competency. Typically, these needs are reflected through the establishment of learning outcome statements, commonly referred to as learning objectives. Upon completion of specific portion of a program (or upon the completion of the program as a whole), the participant should be able to demonstrate a defined level of mastery of the course content, or be able to demonstrate the ability to perform a specific task or activity. To determine if these needs are satisfied, the participants performance throughout this entire process is monitored, and at defined intervals, the individual’s ability to meet a defined learning objective is measured against an established set of criteria (be it quizzes, examinations, demonstrations or other evaluation methods). Once the criteria established for competency is met, the objective is considered to be achieved. This process then continues until all established objectives have been met for the program, at which point a certificate or other form of recognition is awarded.

When considering what would be required to properly design, develop and document such a system to meet the requirements of ISO 9001, we find that there is very little difference between the approach needed to develop a system for this application, in comparison to approaches commonly used to develop systems which address manufacturing activities and other services. Proper design should begin with a review of the key processes used by the institution or organization, their ability to meet the customer needs established above and their overall degree of compliance with the requirements of the ISO 9001 standard.

System documentation required by the ISO 9001 standard, including a quality manual, and the six “system” procedures required by the ISO 9001 standard - the control of documents, the control of records, internal audits, the control of nonconformances, corrective action and preventative action all have a place in this system (as do the 19 types of records addressed in the ISO 9001 standard); they are just as relevant in this application as they are with their counterparts in other industries. Additional documentation, addressing the various activities performed by the organization will also be needed, as necessary to address the critical nature of the activities performed, as well as to ensure the customer needs defined above are met.

While the ISO 9001 standard does allow for an organization to take exclusion to the requirements found in Clause 7, there are relatively few instances where such exclusion would be justified. Typical education and training activities encompass Design and Development (instructional design), Purchasing (materials and services) Validation of Processes (pilot programs and peer reviews), Customer property (information) and even the Control of Measurement and Monitoring Devices (quizzes and examinations). While the specific processes used may vary between different organizations and offerings, almost every clause of ISO 9001 could conceivably apply.

http://www.masquality.com

Wednesday, September 17, 2008

A Lot of Improvement - A Bit of Sense

It seems that every business owner I’ve met lately is at least willing to acknowledge that, to remain competitive in today’s marketplace, they must look for ways to continuously improve their programs, processes, products and/or services. As we begin to establish a dialogue on this subject however, the discussion rapidly turns to sales, profit margins and market share; little more is said on how such improvements would occur, or in the longer term, on how such a system of on-going improvements would be sustainable.

Saying that, “we’ll do better”, “we’ll pay more attention”, or “we won’t do that again” are all noble intentions. If repeated enough times from the “C-Level” (executive management), we can create a level of awareness in our organization that hadn’t existed previously. We can continue promoting this cause further using banners, plaques, newsletters and other fan-fare (free food always draws a crowd), and watch as the awareness of this issue within our organization skyrockets, at least momentarily. We’ll make it a bullet-point for discussion as part of every meeting we have. If we print our intent on the back of enough business cards, we might even get our customers to believe it.

When we use such terms as “better”, “less”, and “more” however, it only serves to illustrate the fact that we really don’t have a measurement or indicator of how we’re actually performing in this area. Our initiatives subsequently fail, not because of our level of commitment or our promotion, but because do not know where we’re going; worse yet, we don’t even know where we’re starting from. At this point, it’s not about our sincerity or resolve, but rather the ability to define an ideal future state, and then figuring out how to get there.

Organizations don’t budget based around simply wanting to make “lots” of money or incurring a “small” expense or perform strategic planning around gaining a “bit” of market share. These activities focus on objectives, goals and targets that are important to the shareholders of the company. At our finger-tips, we are then able to pull up information that shows us our progress towards meeting these desired outcomes. We can see if our business is operating at a profit or loss and what our margins are. On an on-going basis, we monitor and report our sales performance in terms of sales volume, our ability to reach quotas, our customer relations, expense account usage, time management and other measures.

Successful organizations thrive financially not solely because of commitment and promotion, but because they plan, they budget, they develop infrastructure, they assign responsibilities, they monitor and they adjust and/or correct on a continuous basis. Relatively few organizations however, can make a similar claim, as it relates to the management of their improvement initiatives.

Commitment and promotion are all fine in their own right, and are essential pieces to completing the improvement puzzle; however, none of these gestures do anything however to actually address the organization’s present condition. While awareness can be an important catalyst for change, it’s not enough for an organization to simply want to improve.

Why again then, are we managing our improvement efforts differently than the other areas of our business…?

http://www.masquality.com

Wednesday, September 10, 2008

The Value of Complaints

While no organization wants to hear, particularly from its customers, that its products or services aren’t up-to-par, remember this going forward - a complaint isn’t simply a negative event; it’s an opportunity for an organization to identify and develop those areas of their business that need improvement. From this perspective, a complaint just may be one of the most valuable things that your customers can actually do for you.

It’s not unusual for organizations to pay large sums of money to outside consultants, for advice and guidance in determining where their business is failing. While there are countless approaches, methodologies and programs designed to promote such improvement, most have a tendency to gravitate inwards, focusing on internal issues such as the processes involved and their level of efficiency, while under performing in terms of positively affecting outcomes. Paradoxically, from a customer perspective, it’s only the outcome that really matters. How the end result is achieved isn’t a concern to them.

In contrast to the above, customer feedback, however negative it may be, is free of charge and relates directly to the primary concern of the customer – the outcome. It relates to their degree of customer satisfaction. I’ll save my full commentary on this subject for a later article, but needless to say, a satisfied customer is a happy customer, a happy customer is a repeat customer, and a delighted customer is a rich vein for referrals to be mined in the acquisition of new business. While process efficiency is important, it won’t be for long if you don’t have any customers.

When a customer complains, what they’re telling you is that there has been a departure from their requirements; they aren’t happy with the products or services provided by your organization. The fact that your customer is communicating this to you, rather than seeking a new supplier, indicates that the customer is interested in continuing their relationship with you, pending resolution of the issues identified. This is surely better than the customer who quietly walks away and simply “spreads the word” that your products and/or services are substandard.

Best-in-class organizations have realized that complaints form an essential part of their relationship with their customers and understand the importance of this information in the improvement of their products and/or services. They understand that, for the complaint process to be effective there must be a “loop” – a process of communicating-receiving-action. If there is no action when a complaint is received, then the communication you share with your customer is ultimately ineffective. Many organizations have found that by successfully working through an issue with a customer, they can actually grow and nurture their relationship, as such collaboration and partnership leads to greater levels of shared trust and the fulfillment of mutual goals.

I’ve always been amazed at how lesser-performing organizations fail to realize the true importance of customer complaints. I’ve seen organizations refuse to respond to complaints, rather insisting that the customer has expectations that are out-of-line, unreasonable, and/or impractical. Even worse, I’ve seen complaints ignored because the size of the account doesn’t justify the time or action required to address the issue. Sure, it’s up to the discretion of the organization on how to deal with complaints, but remember it’s also up to the customer to determine who to do business with. Customers are looking for suppliers that are responsive to their unique needs and situation. If you’re not actively working to address the needs and concerns of your customers, then you can be assured that your customer is actively looking for an alternative supplier.


http://www.masquality.com

Thursday, August 14, 2008

Flying Soon? - Part II

After writing Flying Soon? I hadn't planned to mention air travel again, but only a day later, here's another news report, this time regarding American Airlines:

http://news.yahoo.com/s/ap/20080814/ap_on_go_ca_st_pe/american_airlines_fine;_ylt=Ary.EEMacU6.BP872xuuoykDW7oF

Mark

http://www.masquality.com

Wednesday, August 13, 2008

Flying Soon?

I don't think I have much to add here regarding the relationship between economics and maintenance practices - the articles below speak for themselves.

http://www.chicagobusiness.com/cgi-bin/news.pl?rssFeed=news&id=30535

http://www.odt.co.nz/news/world/17644/quantas-grounds-six-planes-check-maintenance


Mark

http://www.masquality.com

Saturday, July 26, 2008

The 33 Strategies of War

I had mentioned previously that I wasn't going to start of "Book of the Month Club", but here's my recommendation for July. I'm still not planning on doing this on a regular basis, but The 33 Strategies of War, by Rober Greene is good enough to make note of.

It's an excellent read for anyone interested in tatics and strategy, and applies to not only war, but business, life, relationships, etc.

Here's the link to this book, as found on Amazon.com:

http://www.amazon.com/33-Strategies-War-Robert-Greene/dp/0670034576


Mark
http://www.masquality.com

Saturday, July 19, 2008

Was Bogus Equipment Sold To Oil Patch?

I'd be remiss in my blogging if I didn't make note of an issue that happened recently here in Houston. Federal charges were brought against individuals who had sold equipment with counterfeit API monograms.

I caught this on the local news, on KPRC 2: http://www.click2houston.com/news/16885342/detail.html


Mark
http://www.masquality.com

Wednesday, July 16, 2008

ISO 9001 - You Might Be In Trouble If...

There are some questions, the answers to which I am unsure...what exactly happened at the end of the TV-series The Sopranos? “Who let the dogs out”? If “it’s not about winning or losing, but how you play the game” - then why bother showing up?

On ISO 9001-related issues, there are answers I am sure of. Several of these relate to ways to tell if there’s going to be a problem during your next ISO 9001 audit.

I’ve decided to make a list of the first 10 of issues that I could think of - not a “Top 10” list, but just the first that come to mind. Since this is being written primarily for companies that have already achieved ISO 9001 certification, I’m leaving out some of the more obvious issues (e.g. missing the six procedures required by the ISO 9001 standard), however, most of these could still apply to an organization attempting certification for the first time.

The first 10 issues I could think of are shown below, presented in the order of the standard (their related clause is shown in parenthesis):

Document Control (4.2.3) - You have multiple versions (revisions) of the same document in use in the work area, or “stray” documents in use without the proper approvals and that haven’t been recorded in the system.

Control of Records (4.2.4) - You can’t find the records you’re looking for, or records that you need when requested. Someone has taken your records and you don’t know who and/or when. If you’re lucky enough to find the records you’re looking for, they’re covered in coffee stains, cigarette burns, and/or food.

Customer Focus (5.2) – You have no customer feedback collected on how you’re performing. If you receive a complaint, it’s taken care of on-the-spot and not documented. You may send out customer surveys or questionnaires, but nobody ever responds.

Quality Policy (5.3) - You don’t have a quality policy posted. It may have fallen off the wall, been taken down, or you may have moved to a new location and forgotten to put it back up.

Quality Objectives (5.4.1) - You have no quality objectives established for the current period, or you have partially developed objectives that use words like “more”, “less, “fewer”, “better”, instead of using quantitative terms. You may have failed to meet your last objectives and didn’t take any subsequent corrective action.


Management Representative (5.5.2) - You don’t have a management representative. Your management representative may have quit, been fired or re-assigned. Worse yet, you may have a management representative that doesn’t know they are the management representative.

Management Review (5.6) - You haven’t performed a management review in over a year. You may have had meetings, but you’re unable to demonstrate anything that comes close to meeting the criteria of the standard.

Competence, Awareness and Training (6.2.2) - You can’t prove the competency of the personnel performing tasks that affect product (or service) quality. You have no established job requirements, and/or you have personnel working and you can’t demonstrate how they’re qualified to do so.

Determination of Requirements related to the product (7.2.1) - You can’t prove any evidence of contract review. Orders may be taken verbally without being documented, or even if taken in writing and there’s no evidence of review.

Design Control (7.3) - Your design controls have lapsed, and now your engineers are free to indulge in their creative pursuits without constraint. Design output isn’t defined, reviews are nonexistent, validation isn’t performed and/or you have no working process to control design changes.


Needless to say, the above is just a sample of the problems that may exist with your Quality Management System (QMS), and it isn’t intended to be an all inclusive list by any means. Since the above list only covers up to clause 7.3 of the ISO 9001 standard, there’s still a lot more that will need to be addressed. You’ll need to perform your own internal assessment prior to your next ISO 9001 certification audit, to identify any other concerns that may exist.

I still don’t know “who let the dogs out?”, but hopefully these answers will help you with your next ISO 9001 audit.


http://www.masquality.com

Monday, July 14, 2008

And Finally...

Two Six Sigma Black Belts (SSBB's) walk into a board room...

They've been asked by company management to review customer feedback data that's been collected over the past year. Based on a scale of 1 thru 10 (10 is highest), each item scored an average of about 7.5, with the exception of one category: "On-Time Delivery".

The SSBB's reviewed this data, and reported their findings at a follow-up meeting. The first Black Belt explained that, based on statistical testing, he "could not reject the null hypothesis". The second Black Belt chimed in "based on the data, this issue is statistically insignificant".

The company went bankrupt six months later. Their dissatisfied customers had all taken their business to another supplier.

This point of this story isn't about whether "On-Time Delivery" was significant or not. The SSBB's where so absorbed by their methodology that they missed the obvious - the customers were unhappy. The actual issue was that the company averaged only a mere 7.5 out of 10 overall.

Bah-dum-bum.


No actual company was harmed in the writing of this example.


Mark
http://www.masquality.com

Saturday, July 12, 2008

ISO 9001:2000 - The Myths (part 1)

As I was researching topics to write about, I realized that I had several quality manuals (and related procedures) on my desk that I had been asked to review. The systems that these documents described were failures; their development had been contracted out to various individuals by management, with less-than-usable results.

While a few of these systems did initially achieve ISO 9001:2000 certification, they weren't sustainable over the long term. For the most part, what I found were "templates"; the same documents obviously had been used over and over, with just a global name change to match each company they had been sold to (in some cases, even the name change wasn't done very well). These were poorly written; their content ranged from banal to clueless and back to obtuse.

While the content of these documents didn't impress me (at times, I was actually concerned), it did give me an idea for a new topic. With so much misconception and misinformation regarding ISO 9001:2000, I figured I'd take this opportunity address a few common "myths" surrounding the ISO 9001:2000 standard and its requirements:

1. ISO 9001:2000 is for Manufacturing - Any type of organization can benefit from the process-based approach that's defined in the ISO 9001:2000 standard. Equally suited to services as it is to manufacturing, ISO 9001 can be applied to a wide variety of industries and firms, from education to architects, to medical practices, law offices and more.

2. Document Everything - The "Do What You Document, Document What You Do" approach was a cornerstone of ISO 9001:1994, which was all about following procedures. This has since been replaced by a process-based approach in ISO 9001:2000, which emphasizes effectiveness and focusing on the output - the result. The 1994 version of the standard required that 20 elements had to be addressed; the 2000 version requires a minimum of six documented procedures. Anything beyond these six is left to the discretion of the organization, as necessary for the effective control of the organization's processes.

3. Write Exhaustive Procedures - There really are no rules on how to write a procedure. Your procedures don't need to have a section for definitions, normative references, responsibilities, process maps, blah, blah, blah. What they need to do is to be appropriate to the organization and its operational needs. Don't write your procedures solely to satisfy an auditor, but rather consider how to achieve consistency and uniformity of the process under consideration.

4. Record Everything - There are a total of 19 different types of records that are specifically addressed within the ISO 9001 standard. Needless to say, these aren't all of the records that could be generated during the operation of a quality management system, however these particular records are considered essential to its effective operation. If the record of a result or activity isn't required to manage the organization effectively and/or satisfy interested parties, it doesn't need to be maintained.

5. Make a Form for Everything - We've seen forms used in the review other forms, forms that document the fact that a form is needed and even forms used to log and/or track other forms. While certain forms are common to almost every system (calibration forms, audit checklists, NCRs, CARs, etc.), it's important to limit the number of forms used to those that actually add value. Just a hint: there's a direct correlation here with records you need to maintain (see above).

6. Memorize your Quality Policy - This is another example of what I'll call 1994 thinking. Employees need to be trained, to ensure they aware and familiar with the organization's quality policy, and they should be able to locate where it is posted. One of the main reasons it's a written policy that's posted, is so it can referred to as needed.

7. You Need a Quality Manager - ISO 9001:2000 requires the appointment of a Management Representative by management of the organization; it doesn't mention anywhere the need for the position of Quality Manager. There's no reason that the responsibilities for your program can't be delegated between various functions within your organization.

8. A Web-Based QMS is better - I've seen companies that can benefit from such systems, but usually they're large and/or have business units that are geographically separated. Smaller organizations can usually do without such systems. Software solutions can be quite complex, and come with a variety of issues including extensive training requirements, costly hardware updates, constant IT support, and changes to existing work practices. The downside of this approach often negates the benefits of the technology.

9. We can get certified in one month (or even a week!) - The whole purpose of keeping records is to provide evidence of conformity to requirements and the effective operation of the quality management system. Without this history, there's no way that you can demonstrate that your system meets the requirements of the ISO 9001 standard. Regardless of how long your system takes to write, you will need several months of records; walk away from anyone that tells you otherwise.

10. Keep Statistics on Everything - Many organizations go overboard on the data they collect, or think they have to collect. Data is only important if it's actually relevant to the organization, and the effective operation of the quality management system. Don't collect data solely to satisfy an auditor; the organization needs to determine what's important, and measure and collect data accordingly. We've seen extensive SPC programs utilizing the latest computer software, when all the organization really needed was a checklist and a histogram.

The first step in properly documenting a management system is separating myth from fact, with regards to the requirements and the intent of the ISO 9001:2000 standard. There are a lot more myths around than I've been able to list above, but that's an article for another day. Now it's back to my review...


http://www.masquality.com

Thursday, June 26, 2008

The Best Choice

Earlier this month, in Are You the Cheapest or the Best?, I discussed the choice between the cheapest or being the best. Just to briefly continue this thought - given the choice, which would you rather choose (cheapest or best) for each the following?


1. Pediatrician
2. Lawyer
3. CEO
4. Brain Surgeon
5. Accountant
6. Financial Adivsor
7. Oncologist
8. Pilot


When something's important, "best" always wins over cheapest.


Mark
http://www.masquality.com

Tuesday, June 24, 2008

ISO 9001:2000 - Control of Records

In order to comply with the ISO 9001:2000 standard, an organization is required to establish a minimum of six documented “system” procedures. The second of these procedures, by order of appearance, covers the Control of Records, and is identified in clause 4.2.4 of the standard as follows:

"Records shall be established and maintained to provide evidence of conformity to requirements and the effective operation of the quality management system. Records shall remain legible, readily identifiable and retrievable. A documented procedure shall be established to define the controls needed for the identification, storage, protection, retrieval, retention time and disposition of records".*

* ISO 9001:2000, Quality management systems – Requirements, Clause 4.2.4., p. 11


What’s a Record?

In order to understand what a record is, we must begin with another standard in the family, ISO 9000:2000, Quality management systems – Fundamentals and vocabulary. In this standard, we find the definition of a record. Simply put, a record is a document, and can be used as an input from one process to another, but in contrast to documents that are purely informative, a record is generated to state results achieved or to provide evidence of activities performed.

It is because of this difference that different rules apply to the control of records than for the control of documents (clause 4.2.3). Records are not issued, revised or tracked by revision. While a record could be amended to reflect new or updated information, the original record would not be affected.


Types of Records

There are a total of 19 different types of records that are specifically addressed within the ISO 9001 standard. Needless to say, this isn’t all of the records that could be generated during the operation of a quality management system, however these particular records are considered essential to its effective operation.

The records that are identified within the ISO 9001 standard are listed below, along with their corresponding clause number (shown in parenthesis):

- Management review records (5.6.1)
- Records of Education, training, skills and experience (6.2.2)
- Records needed to provide evidence that the realization process and resulting product meet requirements (7.1)
- Records related to the review of customer requirements (7.2.2)
- Design and development inputs (7.3.2)
- Design and development review records (7.3.4)
- Design verification records (7.3.5)
- Design validation records (7.3.6)
- Design and development change review records (7.3.7)
- Supplier evaluation records (7.4.1)
- Validation arrangements for processes (7.5.2)
- Product identification records (7.5.3)
- Records related to customer property (7.5.4)
- Calibration and verification records (7.6)
- Internal audit records (8.2.2)
- Product conformity records (8.2.4)
- Records of the nature of nonconformities and any subsequent action taken (8.3)
- Results of Corrective Actions taken (8.5.2)
- Results of Preventative actions taken (8.5.3)


Controls Required

Creating a procedure to meet the requirements established in clause 4.2.4 is a fairly straightforward task. In clause 4.2.4, the ISO 9001 standard provides us with a clear purpose statement, by requiring that the organization ensure that records remain legible, readily identifiable and retrievable. In addition, clause 4.2.4 also identifies what types of controls should be addressed, giving us a basic outline of what needs to be covered in our procedure - record identification, storage, protection, retrieval, retention time and disposition (disposal).

Being given a purpose statement and an outline, the only information we’re missing are the specific controls used by the organization. In this case, the ISO 9001 standard is neither prescriptive nor specific; it leaves the specific controls up to the implementing organization, to define methods that are consistent with its business needs, quality objectives and customer and/or regulatory requirements.


http://www.masquality.com

Tuesday, June 17, 2008

ISO 9001:2000 - Management Review Q&A

Earlier this year, when I wrote an article titled ISO 9001:2000 – Your Management Review, I hadn’t realized how much interest there was on the subject. As a result, I’m following up on this earlier article with a simple Question and Answer (Q&A) session, which is based on the questions I’m most frequently asked:


Q1: Is a Management Review a formal meeting?

A1: A management review is appropriately named, as it’s an opportunity for top management of an organization to review the performance of their organization’s management system. It’s more than just a meeting however, as a management review includes the collection, analysis and review of performance data, and any decisions and actions related to the results.


Q2: Can a management review be held remotely?

A2: With the technology that is currently available, there’s no reason that telephone and web conferencing shouldn’t be considered. Portions of the review can be performed remotely when it is not possible or cost effective to meet in person. Data can be collected and analyzed electronically, and the results communicated by email or other means.


Q3: Our organization is quite large and geographically dispersed. How can we perform a single management review?

A3: There’s actually nothing in the standard that requires only one management review be performed. For a large organization, this review can be performed at individual levels (or locations) and then consolidated into a final review that is performed by executive management of the organization.


Q4: This is our first management review and we don’t have much information to report. Can we still hold a management review?

A4: You have information to report; the problem is that you just don’t have much data. This in itself is noteworthy, and should also be considered as an opportunity for improving the effectiveness of your quality management system under section 5.6.3 of the ISO 9001:2000 standard (Review Output).


Q5: What is the required interval for management reviews?

A5: The ISO 9001 standard doesn’t specify any specific time frame, other than requiring these reviews to be performed at planned intervals. For a “new” program, I would recommend at least quarterly, and then adjusting the duration to possibly six months or even on an annual basis if this meets the needs of the organization. Personally, I would never go longer than a 12 mo. interval between reviews.


Q6: Prior to implementing ISO 9001:2000, our organization held monthly meetings to review the performance of our organization. While these meetings wouldn’t meet the requirements of the ISO 9001 standard, they were of considerable value to us. Will this need to be changed?

A6: The answer is no. There’s no reason to change what you’re already doing, particularly if it works well for you. I would keep minutes for these meetings however, and use these as a source of review input for when the organization does hold a formal management review.


Q7: Section 5.4.1. of the ISO 9001:2000 standard requires that Quality Objectives are established at relevant functions and levels within the organization. Is the Management Review an appropriate time to address this?

A7: I personally recommend this. The management review is an ideal time to address your organization’s performance towards meeting existing objectives, and for determining new or revised objectives for the upcoming review period.


Q8: What types of records do we need to maintain?

A8: You’ll need to retain records that demonstrate the requirements of the ISO 9001 standard have been met. This should include, as applicable, meeting minutes (dates, attendees, location, agenda, etc.), objective evidence used as part of this review, and any decisions and actions that result (including responsibilities and timelines).


http://www.masquality.com

Monday, June 16, 2008

Purple Cow

I'm not trying to start a Book-of-the-Month club, but I do have a book recommendation. I recently finished this book, and found it not only informational, but also very enjoyable.

Written by Seth Godin, Purple Cow is a great book on how to achieve spectacular growth and distiction for your business.

http://www.sethgodin.com/purple/buy.html

Mark


http://www.masquality.com

Friday, June 13, 2008

Failure by Choice

I'm absolutely convinced that nobody ever goes to work in the morning planning to do the worst job possible. Usually if there's quality issues, there's a greater reason at hand, be it a result of weak systems, poorly conceived processes and/or a dysfunctional corporate culture.

While placing blame on an individual may be the easiest way to address an issue, it is also the least effective, as it does not correct the underlying issues that are to blame. Think nature vs. nurture; there are extreme cases of poor performance that can be attributed on an individual basis, but these are exceptional instances. The majority of the quality issues we face are directly related to how we've chosen to do business.


http://www.masquality.com/

Thursday, June 12, 2008

The Solution Isn't New Software

I see a lot of companies turn to software solutions (ERP, MRP, CIM, CRM, whatever...), in a vain attempt to resolve the day-to-day issues they face during the operations. Unfortunately, the problems they are intended to resolve often don't disappear, and in many cases, they are now accompanied by new ones.

There is a whole laundry list on why this isn't a good idea: complex systems, "buggy" software, costly hardware upgrades, on-going IT support, changes to existing work practices, extensive training requirements and more. For a small business, these issues make the decision to implement such a system questionable at best. I personally believe that the larger an organization is the greater the need for such a system, but for a small company, this strategy often is a losing bet.

Like a ruler, a hammer, a level or a saw, a computer system is just another tool; it's an aid to reaching your business objectives. We're easily sold on these systems however, because we just want our business to be "better", and what could be "better" than an all-in-one solution that comes in a box? We've never really considered the specific areas where our business could be improved, and what solutions therefore would make the most sense.

One thing is for certain - making your business more complex isn't the answer, and computers don't always make life easier.


http://www.masquality.com

Tuesday, June 10, 2008

Improvement Isn't Just A Business Term

I was recently speaking with an individual that considered himself to be an 18-year improvement "expert". My immediate thought was that 18 years is a long time, and with such expertise, this individual should have a really, really successful practice. In reality, they weren't even close. They were content with the long hours and the modest success they had achieved.

For an improvement expert, this seemed awfully inconsistent with their self-proclaimed specialty. If I was looking for an individual to help my business be more successful, I would want to work with someone that was successful themselves. In fact, the more successful they were, the better I would feel about engaging their services.

Almost every business, in every business sector, is concerned with the continuous improvement of the products and/or services they offer. Shouldn't personal improvement be as important, if not more? Many of us get "stuck in a rut" so to speak; we focus on the performance of our jobs and on the success of our employer, but we forget to apply the same emphasis to bettering our personal lives. Like a business, such improvement requires initiative, planning, action and subsequent follow-up. In business, the success or failure of such improvement initiatives is directly attributed to management; in this case, it's all up to you.


http://www.masquality.com

Wednesday, June 4, 2008

Your Actual Mileage May Vary

In the glove box of my SUV, I came across the original window sticker from the dealer. It said that I should be getting about 18 miles per gallon. I don't know what form of math was used to calculate this average, however I don't think I've ever come close to this goal. Even driving downhill in neutral with a strong gust of wind at my back, it would be a stretch.

With all the recent emphasis on "going green", I have to admit I've considered buying a new car on at least one occasion. Personally, I like SUV's because of their size; with several new hybrids becoming available, the number of options I have to choose from are improving.

There is a fundamental disagreement however between "going green" and buying new car, regardless of how eco-friendly this new vehicle may be. Think about the resources needed to build a new car, and the disposal issues created by your existing vehicle. The trade-off may not be as "green" as you intended.


http://www.masquality.com

Tuesday, June 3, 2008

Are You The Cheapest or The Best?

Within a few miles of our office, there used to be two restaurants that served Thai food. Both served the same clientele and had similar menus, although one was more expensive. I use the phrase "used to be", as the cheaper of the two recently closed. This wasn't a result of poor a poor pricing strategy or because of inadequate marketing, but because of quality. The second restaurant, which is still in business and thriving, simply served better food.

The lesson here is, when speaking in terms of commodities (be it products and/or services), competitive pricing isn't always the best way to achieve distinction in the marketplace. Would you rather be known as the cheapest, or would you rather be known as the best?


http://www.masquality.com

Monday, June 2, 2008

Flying Cars and a Box of Cereal

When I was much younger, I was certain that we'd have flying cars by now. We'd be able to fly to work, to school, to our favorite vacation spot. Traffic would no longer be an issue. Considering the recent gas prices, I guess maybe it's not such a bad thing that we don't.

I'm sure that the technology exists, but I'm assuming that it hasn't been refined to a cost-effective method of transportation at this point.

When I was much younger, I always had problems opening the inner bag contained inside my box of favorite cereal. In this case, Frosted Flakes. Even trying other brands, I always found a cheaply-made bag inside the main box, that would never open correctly, and almost always, would tear in a manner other than what I intended. As a result, either the cereal spilled inside the box, or in the best-case scenario, the bag was so badly ripped it refused to close properly afterwards. Since the bag wouldn't close properly, I always had stale cereal just a few short days later.

I can understand why we don't have flying cars at this point. I can't understand why no one has addressed the cereal issue yet. Nearly thirty years later and the cereal bag is still cheap. With all of the emphasis modern business puts on continuous improvement and increased customer satisfaction (TQM, Six Sigma, Lean/Kaizen, etc.), why hasn't anyone ever thought to put a zip-loc type bag in a box of cereal?

We get so focused on the methodology and the technical aspects of our approach that we completely miss the obvious opportunities for improvement.


http://www.masquality.com

Thursday, May 22, 2008

Why Six Sigma Doesn't Work (Part 1)

I’ve been promising for several months now that I’d get around to writing on this topic. While I initially intended to write only one article, this has now evolved into a series - there was just too much to say on the subject. We’ve all heard and read about the successes at GE, Motorola, Honeywell (Allied Signal), etc. that have been attributed to the great methodology that is Six Sigma; I wanted to take a look at the down-side of Six Sigma, as I don’t think its failings receive nearly as much attention.

In consideration of this topic, I took some time to discuss the failings of this methodology with a number of Six Sigma professionals, and my commentary that follows is partially based on these discussions. For the Six Sigma practitioners reading this, I want to point out at the outset that I’m not going to attempt to present my results with any sort of statistical terms; I’m not trying to address Six Sigma using Six Sigma. I’m presenting my own personal opinion, based on my own professional experience, supplemented with any common themes that emerged.

Since this is the first of several articles on “Why Six Sigma Doesn’t Work”, I think it’s only fitting to begin with the fundamental step of selecting (or in the context of this discussion, erroneously selecting), Six Sigma as our problem solving method. I’m not saying that this is the primary reason why Six Sigma fails, however it definitely is towards the top of the list. It just happens to be that, when we look at the “big picture”, this issue is first in sequence.

The great American playwright Mark Twain once said “if all you have is a hammer, every problem looks like a nail”. While nearly every Six Sigma practitioner is quick to parrot this sentiment (apparently their “Six Sigma toolkit” also came with a book of quotes), there is an overwhelming irony here, as it’s these same individuals that often go on to validate this statement in their application of the methodology. Rather than considering Six Sigma as a business tool, which should be used to compliment other business problem-solving approaches, Six Sigma is promoted in a dogmatic fashion, as a panacea for all of the problems a business may encounter.

Your business may not need Six Sigma. Before you launch an organization-wide Six Sigma initiative, consider what you’re trying accomplish. For example, I have a pool at my house and a two-year-old toddler. For my son’s safety, I don’t need a Six Sigma initiative; I need a fence around my pool. We select Six Sigma as part of our solution before we’ve considered the problem to the extent that we’ve exhausted all other possible solutions. Other companies have been successful with Six Sigma, so we feel that we should be able to replicate the same successes. There may, in fact, be other options more appropriate to our specific situation.

I was once told, by a successful and respected Six Sigma professional, that the best approach to problem solving was to “begin with MSA, followed by DOE, then finished with SPC”. There are only a few things I could disagree with more (several of these with follow in later articles). If we apply the analogy of driving a car from point “A” to point “B”, wouldn’t we need a different set of directions based on each unique starting point? You wouldn’t use the same directions to drive from Houston to Chicago that you would if you started in San Francisco or New York. What if you were to fly instead of drive, or even take a train? In this case, we’re detailing our problem-solving approach before we’ve really considered what the actual problem is.

Improperly selecting Six Sigma as our problem solving approach is first on my list of why Six Sigma fails. We didn’t need it to begin with, and as a result we’ve committed to using an approach that isn’t relevant to our situation. Six Sigma doesn’t work because we’ve tried to solve our business problems with a buzzword.


http://www.masquality.com

Superior Quality

My wife and I recently decided to have the interior of our house painted, so we contacted a painting contractor that had performed similar work for us before. When we received his quote, it was considerably higher than we had planned, however we did not hesitate to immediately give him a check for a down-payment. We wanted him to get started right away. We’ve used this contractor before, and even under extraordinary scrutiny, we’ve always found the results to be exceptional.

I have to emphasize at this point, that the purpose of this story isn’t to point out that I like to spend money. In fact, as I get older, I’m becoming quite cheap - each penny becomes much harder to part with (I must admit at this point, that I did manage to “haggle” down the price slightly, but this was done more as a matter of principle than by any other motivation). The fact that the quality of this contractor’s work has always been so high merited the additional cost, from our perspective.

I’m sure that at least one person reading this article will, by now, have noticed that I didn’t mention getting any additional quotes from any other painting contractors. I didn’t shop for the “best price” around. This is absolutely correct - I wasn’t as concerned about competitive pricing as I was about superior service. This is our home, where we spend most of our free time, and we wanted it painted by the best painter we could find. We weren’t looking for a commodity service; we were looking for a craftsman. When the work was completed, I didn’t want to see (and wouldn’t accept) paint spatters on my floors, over-run on the ceilings, or streaks on the walls.

I’m presenting this story as I think it serves as a good example of the business advantages associated with providing the highest quality goods and services. If you consider your business, which category does your company fall into? Do you focus on providing commodity services/products at cost-competitive prices, or do you focus on providing superior results?

While almost every organization commits to the latter (superior products and/or services), many organizations have great difficulty making inroads to realizing this objective. We continue to search for new ways to improve our competitive position in the marketplace; however we tend to focus more on competitive pricing and increased sales volume than on the results of our performance, often considering our quality failures as “part of doing business”. In many cases, these failures are even considered as part of our budgeting process.

While the connection should be obvious, many organizations fail to realize the true impact of product and process performance on the overall performance of the organization. Quality problems destroy customer trust, which in turn reduces our sales volume and/or causes us to lower our prices. Quality problems erode our profit margins as a consequence of rework, warranty repairs and customer back-charges.

In contrast, superior performance creates a stronger brand image, builds customer loyalty, allows us to charge a fair price, and our profit margins become more robust, due to lower costs as a result of fewer quality problems. Increased sales are generated through referrals and word-of-mouth, instead of aggressive sales tactics and discounts. Instead of planning for poor quality, shouldn’t we be focusing our resources on providing superior performance?

Just as a final note, as of this writing, the painting of our house has been completed. The results are wonderful, and have well exceeded our expectations. We both got what we wanted: the painter got paid what they believed they were worth and we got the results we wanted, when we wanted them. In my mind, this worked out as a bargain, and it was money well spent. Not only would I refer them to others, I will use them again.


http://www.masquality.com

Wednesday, May 7, 2008

Selecting the Right Improvement Project

Once an organization has come to understand how goods, products or services flow through each step of their value stream, they can then look to apply measurement techniques at various stages, to help identify where improvement opportunities exist. Identification however, is only an initial step in the improvement process, as prioritization of these opportunities must then follow to ensure that any improvement activities focus on the right projects, for the right reasons, at the right time for the organization.

As organizations begin to truly “learn” the activities they are performing, they will almost immediately realize that the numbers of improvement opportunities are far greater than anyone originally anticipated. This realization often comes as the result of applying quantitative (or even qualitative) measurement techniques, as stated above, and the analysis of the resulting data which often yields surprising, if not alarming, results. At this point, it’s not unusual for an organization to see improvement opportunities almost everywhere they look.

While this may be an exiting time for individuals that are involved in the improvement initiative, this is also a critical stage in the initiative’s evolution. For most organizations, resources are extremely scarce and managers are inherently skeptical; they are concerned with the potential impact to their production schedules and in many cases, to their bottom lines. Applying a system of prioritization to these newly discovered opportunities helps to prevent any misallocation of resources (i.e., for the right project at the wrong time) which could work to validate this sense of skepticism and may severely impact the creditability of a fledgling improvement effort.

Perceptions of urgency and importance should therefore be balanced in line with business needs and objectives, as well as financial and other considerations. Personal “pet projects” should be considered cautiously, to ensure that projects are selected based on their overall value to the organization. Such consideration should also extend to the project’s probability for success, as initial gains are vital to creating a sense of momentum around the initiative. In many organizations, projects that meet these criteria are referred to as “low hanging fruit”, because of their relative importance and ease of completion.

Continuous improvement is so-called because it is an iterative process; improvement activities are on-going, evolving and adapting. Process variance is identified, reduced, reduced further, and in the ideal case, ultimately eliminated. In order to effectively manage this process however, prioritization of improvement opportunities is necessary to ensure that improvement activities target the right projects in a sequence and manner that is consistent with the overall goals of the organization.


http://www.masquality.com

ISO 9001 - Design in Education

I decided several articles ago that, instead of trying to address issues that I thought were important, I would focus on questions posed to me during the course of my consulting activities. Of these, one of my favorite questions to date is:

Can ISO 9001:2000 design and development criteria be applied to training and educational programs?

The answer is a definite yes. While the ISO 9001 design and development model is usually associated with manufacturing activities, it’s important to realize that the intent of this criterion has much wider application. These requirements not only relate to the design of product, but the design of processes and services as well.

If we consider the design of training or educational programs, we find that the basic requirements specified in the ISO 9001 standard are by no means unique or foreign. In fact, these requirements can be applied quite easily to training and educational design, and are generally consistent with accepted design methodologies:

• Design Planning - includes project timelines, scope documents, and other information that defines the stages of design and development, design review, verification and validation activities, and design responsibilities.

• Interface Management - includes interested parties, such as the student, the learning institution, their instructors/teachers, representatives of industry, and even parents.

• Design Inputs - includes needs or requirements defined by the student, parents, institution, industry, state and other interested parties; technological developments, and feedback from past experiences could also be considered.

• Design Outputs - includes the resulting specifications that define the learning program. This covers learning objectives, course charts, instruction and/or lessons plans. Specifications for learning aids, equipment and/or materials needed, room requirements (e.g., room size, table size, number of chairs, etc.), and instructor qualification requirements would also fall into this category.

• Design Reviews - includes initial/kick-off meetings to review the design inputs, progress meetings to review the progression of the design to the design plan and final reviews to evaluate the completed program design for approval.

• Design Verification - includes the design reviews stated above, evaluation against similar programs and other activities.

• Design Validation - includes consideration of data obtained from pilot courses, course quizzes and exams, feedback from students (course critiques), feedback from employers and other interested parties including employers and industry.

• Change Control - includes control methods for reviewing and approving proposed changes to existing designs, as well as methods of interface management (such as involvement and notification of affected parties) and configuration control.

Needless to say, the examples above are not intended to be all-inclusive. The specific configuration and attributes of a design program should be based on the training or educational event being developed. Regardless of the specifics of the design program however, the basic framework laid out in the ISO 9001:2000 standard can be applied, and it can be used as an effective means of controlling the design and development process.

The answer is a definite yes.


http://www.masquality.com/

ISO 9001 - Preparing for ISO 9001:2008

As our firm specializes in providing ISO 9001 consulting services, we try to keep up with the latest news regarding ISO 9001 and related industry-specific standards. One of the most notable developments recently is the proposed release of ISO 9001:2008, which is scheduled for later this year.

In June of 2007, ISO’s Technical Committee TC-176, which is the committee responsible for ISO 9001, concluded that the document was now sufficiently mature to move from a Committee Draft (CD) to the Draft International Standard (DIS) and Final Draft International Standard (FDIS) phases. Upon balloting by ISO members during these phases, the official publication would then be released as an International Standard (IS).

The DIS version of ISO 9001 was released in January of 2008, and out of the changes proposed, it appear that the majority of proposed changes are clarifications or additional examples relating to existing requirements, and should not have any major impact on an established system that was properly implemented.

An overview of the Clauses within ISO 9001 affected by these proposed changes includes:

• Clause 0.2 (Process approach)
• Clause 1.1 (Scope)
• Clause 4.1 (General requirements)
• Clause 4.2.1 (Documentation)
• Clause 4.2.3 (Document control)
• Clause 4.2.4 (Records control)
• Clause 5.5.2 (Management rep)
• Clause 6.2.1 (Human resources)
• Clause 6.3 (Infrastructure)
• Clause 6.4 (Work environment)
• Clause 7.2.1 (Customer related processes)
• Clause 7.3.1 (Design & development planning)
• Clause 7.3.3(Design & development outputs)
• Clause 7.5.4 (Customer property)
• Clause 7.6 (Control of Monitoring and Measuring Equipment)
• Clause 8.2.1 (Customer satisfaction)
• Clause 8.2.3 (Monitoring / Measurement of process)


As I mentioned earlier, it doesn’t appear that the majority of these changes would have a major impact on an established system. While minimal change is expected during the next comment period, the contents of the DIS are subject to change however.

As for ISO 9004, significant changes are expected, and as a result, 9004 will not be updated at the same time as ISO 9001. The proposed title of this revision is "Managing for sustainable success – a quality management approach." Until its revision, the 9004 standard will remain a companion document to ISO 9001.


http://www.masquality.com

ISO 9001 - Purchasing Basics

In section 7.4 of the ISO 9001:2000 standard, Purchasing, we find the requirement that “the organization shall ensure that purchased product conforms to specified purchase requirements”. While this requirement in itself is fairly straightforward, a fair degree of latitude is allowed here regarding the type and extent of the controls necessary, as these are simply stating as being “dependent upon the effect of the purchased product on subsequent product realization or the final product”.

While the basics for supplier control may seem fairly rudimentary for those organizations with an established Quality Management System (QMS), I’m providing a basic control scheme below for those organizations that may still need a little help:

1. Identify your suppliers – As simple as this may sound, many organizations have never made a point to establish a comprehensive list of their existing (or potential) suppliers, and those that have often haven’t distributed this list to all affected parties within the organization. As most purchasing systems are computerized to some point, this first step should be quite easily to perform. You must define who you’re using.

2. Identify what’s being provided – Once your suppliers have been identified, it’s then necessary to define their scope (what are they providing?). Some organizations use simple supplier classifications such as “distributor”, “processor”, “manufacturer”, etc., while other organizations go to great detail using product-specific descriptions such as “bolts”, “flanges”, “plate/pipe/sheet”, etc. The particular classification used should be defined by organization, and should be appropriate to the organization’s specific needs. You must define what you’re purchasing.

3. Determine the appropriate controls – Controls should be based on both the item(s) being provided and the historical performance of the supplier that’s providing them. Critical items that directly affect the end-product (your product) should be candidates for increased control, as should suppliers that have performed poorly in the past (in some cases, this may include a “ban” or other restrictions placed on some or all items from a particular supplier). In contrast, controls for purchases that are not critical, or for suppliers that have a long history of excellence, may be relaxed to some degree. In all cases however, you must make sure to specify what your purchasing requirements are (grade, class, composition, QMS, etc.), and perform some degree of receiving inspection prior to placing any purchased product into inventory. You must what controls are necessary.

4. Monitor and correct as necessary - Adequate records should maintained to demonstrate the effectiveness of the above controls, and for use in periodically evaluating supplier performance as part of an on-going supplier management program. If nonconforming product or services are identified, they must be addressed directly with the supplier, or the supplier will never be aware there has been a problem. Should problems consistently occur, go back to #3 above, and re-adjust your controls accordingly. You must actively manage your suppliers.

Additional considerations can be used, such as if the supplier has a documented quality program, and if the supplier has ISO registration or similar pedigrees. Such certifications are appropriate to consider, however they are based on periodic assessments of a supplier’s quality program, and do not reflect the real-time quality performance of the supplier’s organization.


http://www.masquality.com

ISO 9001 - Your Management Review

Just as every organization undertakes an annual ritual of financial review, forecasting, planning and budgeting, a similar approach is specified in the ISO 9001:2000 standard for quality management. In the ISO 9001 standard, this process is referred to as a Management Review. Typically, such reviews are held as regularly scheduled events within an organization, with top management convening to review the performance of its quality management system against organizational goals and objectives, and other criteria as specified within the standard.

Specifically, as stated within the ISO 9001 standard, the purpose of a management review is to review the Quality Management System to ensure its continuing adequacy, suitability and effectiveness. This should include an evaluation of the performance of the system based on existing data (review inputs), and should also address any decisions or actions necessary to improve the program and its related processes (review outputs).

To further define the concepts of adequacy, suitability and effectiveness:

1. Adequacy – Sufficient to satisfy a requirement or meet a need*. A quality management system should be capable of satisfying applicable requirements including those specified by the organization, the customer, and any applicable standards and/or regulations.

2. Suitability – The quality of having properties that are right for the specific purpose*. A quality management system should be able to sustain the current performance levels of the organization utilizing an acceptable amount of organizational resources.

3. Effectiveness – Adequate to accomplish a purpose; producing the intended or expected result*. A quality management system should enable the organization to meet its own needs, those of the customer and those of other interested parties.

*Random House Unabridged Dictionary, © Random House, Inc. 2006.

As a minimum, such reviews should be performed annually, although they may be performed on a more frequent basis, including quarterly or even monthly. I personally recommend that oganizations with “newer” systems perform this function on a more frequent basis, at least for the first 18-24 months.

Records of these reviews should be maintained in accordance with documented record control procedures. These records should include, as a minimum, the date of the review, participants in the review, criteria by which the system is measured, strengths and weaknesses of the system, and any decisions or actions that are required.

To assist the organization that is new to this process, I’ve attached the following management review template below. These topics should be considered as the “bare minimum” necessary, and this template should be further modified or expanded, as necessary, to address any additional issues or considerations that the organization may have.


Sample Management Review Agenda


1. ASSESSMENT OF QMS PERFORMANCE

1.1. Management System

1.2. QMS Policy

1.3. QMS Objectives and Targets


2. REVIEW INPUTS

2.1. Results of Audits

2.2. Communication from External Parties, Including Complaints

2.3. Process Performance / Conformance

2.4. Status of Preventive and Corrective Actions

2.5. Follow-up actions from Earlier Management Reviews

2.6. Personnel Status

2.7. Changes That Could Affect this Management System


3. REVIEW OUTPUTS

3.1. Opportunities for Improvement of this Management System:

3.2. Resource Needs:

3.3. QMS Objectives for fiscal year:


http://www.masquality.com

ISO 9001 - When Are We Ready?

An effective Quality Management System (QMS) is never really “complete”, as there should always be emphasis on continuously improving the performance of the processes that make up the QMS and the products that are provided the organization. While a properly designed QMS isn’t ever going to be truly finished, it can be “ready” in terms of being an adequate, suitable and effective tool capable of having a positive impact on the operations being performed by the implementing organization.

For many organizations, this “readiness” is validated by obtaining third-party registration from an accredited ISO 9001 registrar. For organizations that new to the registration process, as the name implies, this is an activity performed by an accredited outside organization to verify that the organization has adequately documented and effectively implemented their QMS in accordance with the requirements of the ISO 9001:2000 standard.

Prior to attempting ISO 9001:2000 registration, an organization should assess their level of preparedness and degree of compliance with the ISO 9001:2000 standard. Primarily, this assessment is made through the performance of a formal, documented “internal audit” of the QMS and its related processes, performed by either qualified internal personnel or by utilizing the services of an outside contractor. The performance of an internal audit is specifically required by the ISO 9001 standard, so it must precede the registration process regardless.

For a program that is “new” – one that was recently designed, developed and implemented, I personally recommend that an additional, informal review be performed preceding the more formal internal audit, just as a means of assuring that the organization has “covered all of its bases”, so to speak (think design review). This way, an informal review determines if an organization is ready for a formal internal audit, a formal internal audit determines if an organization is ready for a third-party registration audit, and a third-party registration audit determines if an organization meets the requirements for ISO 9001:2000 registration. Whew.

The purpose of this review is not to collect objective evidence of program compliance (such as in an internal audit), but rather to ensure that the program is ready for more formal assessment. As part of such review, I would initially consider at least 10 key items:

• An adequately communicated Quality Policy
• A designated Management Representative
• A documented Quality Manual
• Documented procedures required by the standard
• Additional procedure and/or Work instructions as appropriate to the complexity of the processes being performed
• Internal training of personnel on the QMS and on the activities they are performing
• A documented Management Review
• At least one Internal audit
• Adequate historical data relating to the performance of the QMS
• Adequate analysis of process performance

There’s one more key item, while not directly addressed, is implied in each above - Implementation, Implementation and Implementation. Implementation is KEY. And remember, it never happened if there’s no record that it was performed.

The degree of documentation generated as a result of this activity should be left to discretion of the organization, but as this is an informal review, this could be considered technically as outside of the organization’s internal audit program. Being for “informational use only”, this activity wouldn’t be subject to the same documentation requirements as an audit, unless this was a requirement specified within the organization’s procedures. Again, this is an informal review, not a formal internal audit.

Documentation should however be generated regarding any issues that were identified during this informal assessment, through the Corrective Action or Preventative Action process established with the organization’s QMS. This activity will ensure that any deficiencies are adequately addressed and also serve to demonstrate the effectiveness of these two key processes. This also provides information that can be used as part of the organization’s management review.


http://www.masquality.com

ISO 9001 - How Fast Can We Get Certified?

As a consultant that specializes in helping small businesses to achieve ISO 9001:2000 certification, I’m frequently asked by potential clients “how fast can we get certified?”. The typical reason behind this question is a business opportunity that’s recently arisen, meaning that the answer the client hopes to hear is “right away…if not sooner”.

Obtaining ISO 9001:2000 certification is a significant achievement and it’s going to take a considerable amount of work. There are certain variables however, that will facilitate the certification process, just as there are others that will extend the duration, relatively speaking.

When asked by a client how long it will take to get certified, I typically base my estimate on their answers to the following questions:

• How much time can be allocated to this project based on your busy schedules?
• What is the proposed scope of your certification?
• How large is your organization and/or how complex are your processes?
• How well-defined and documented are your existing processes?
• How much knowledge does your organization posses relative to the ISO 9001 standard?
• What is the planned degree of consultant involvement?
• Once a registrar has been selected, what’s their availability?

From the list above, it is likely that preparation time will increase with the size of your organization, the complexity of its operations and the scope of the proposed certification. In contrast, preparation time will be inversely related to the knowledge level of your personnel, the degree of compliance that already exists within established systems and the resources made available to get the job done.

There is one final note however, and this is in addition to whatever preparation time is necessary to implement your Quality Management System (QMS); your ISO registrar will require several month’s worth of objective evidence to review as part of your certification audit. This evidence is necessary to verify that your QMS is meeting the requirements of the standard.

Now, back to the initial question of “how fast can we get certified?” - we’ve helped organizations achieve certification in as little as 4 months and we’ve also had projects take up to a year or more. It really is up to the organization, and their level of commitment to obtain certification.

There’s no question about it however, obtaining ISO 9001:2000 certification is a significant achievement, and it is going to take a considerable amount of work.


http://www.masquality.com

What is ISO 9001?

What is ISO?

The International Organization for Standardization (ISO) is a worldwide federation of national standards bodies from some 100 countries, one from each country. ISO's mission is to promote the development of standardization and related activities in the world with a view to facilitating the international exchange of goods and services, and to developing cooperation in the spheres of intellectual, scientific, technological and economic activity. ISO's work results in international agreements which are published as International Standards.

ISO 9001:2000

The 9001 standard was developed by ISO to serve as an international standard for Quality Management Systems. Revised in the year 2000 (hence ISO 9001:2000), the intent of this standard is to give quality assurance of product and to enhance customer satisfaction. ISO 9001 is part of the ISO 9000 series of standards, which includes:

• ISO 9000:2000 - Fundamentals and Vocabulary
• ISO 9001:2000 - Requirements
• ISO 9004:2000 - Guidelines for Performance Improvements

Quality Management Principles

While earlier editions of the ISO 9001 standard are primarily focused on compliance, “say what you do and do what you say”, the more recent 2000 edition is a process-based standard which places significant emphasis on customer satisfaction. At the core of the 2000 edition are the following eight Quality Management Principles:

• Customer focus
• Leadership
• Involvement of people
• Process approach
• System approach to management
• Continual improvement
• Factual approach to decision making
• Mutually beneficial supplier relationships

Benefits of ISO 9001

Organizations that have successfully implemented an ISO 9001 Quality Management System typically report that, by adopting the requirements of this standard, their business has improved significantly over past performance levels. A recent survey of 100 ISO registered firms suggests the average improvement in operating margin is approximately 5% of sales.

The total list of benefits realized by these organizations is assorted and diverse. These benefits often include, but are not limited to:

• Improved performance of affected processes;
• Increased customer satisfaction levels;
• Enhanced decision-making capability through emphasis on data-driven management;
• Reduced operating costs related to waste, rework and non-value added activities;
• Demonstrated compliance with customer, regulatory and/or other requirements; and
• Eligibility for contracts stipulating third-party (e.g., ISO 9001) certification

Getting Started

For most organizations new to ISO 9001, resources and experience are limited. As a result, outside consulting services are used to support the development and implementation of their Quality Management System.

Typically, the amount of time necessary to achieve ISO compliance will be based on the size of the organization, the complexity of its operations and the scope of the proposed certification. In contrast, preparation time will be inversely related to the knowledge level of personnel, the degree of compliance that already exists within established systems and the resources made available to get the job done.

Most organizations will require between 4 to 12 months for the development and implementation of an effective system. This is a general guideline however, as it is really up to the organization, and their level of commitment to becoming ISO 9001 compliant.

ISO 9001 Certification

While many organizations pursue ISO compliance to improve their general business condition, a significant percentage of organizations pursue compliance due to market requirements and/or the market advantages that come with ISO 9001 certification.

ISO certification (also known as “registration”), is a third-party activity, performed by an ISO registrar (or certification body) who, upon verification that an organization is in compliance with the requirements of ISO 9001, will issue an ISO 9001 certificate. This certification is then maintained through regularly scheduled surveillance audits (bi-annual or annual) by the registrar, with re-certification of the program performed on a tri-annual basis.


http://www.masquality.com