ISO 9001

The latest edition of ISO 9001, ISO's flagship quality management systems standard, has just been published. This concludes over three years of revision work by experts from nearly 95 participating and observing countries to bring the standard up to date with modern needs.

​

ISO 9001 is the international standard that specifies requirements for a quality management system (QMS). Organizations use the standard to demonstrate the ability to consistently provide products and services that meet customer and regulatory requirements. It is the most popular standard in the ISO 9000 series and the only standard in the series to which organizations can certify.

ISO 9001 was first published in 1987 by the International Organization for Standardization (ISO), an international agency composed of the national standards bodies of more than 160 countries. The current version of ISO 9001 was released in September 2015.

Who should use the ISO 9001:2015 – quality management systems revision?

ISO 9001:2015 applies to any organization, regardless of size or industry. More than one million organizations from more than 160 countries have applied the ISO 9001 standard requirements to their quality management systems. 

​

Organizations of all types and sizes find that using the ISO 9001 standard helps them: 

• Organize processes

• Improve the efficiency of processes

• Continually improve

All organizations that use ISO 9001 are encouraged to transition to ISO 9001:2015 as soon as possible. This includes not only organizations that are certified to ISO 9001:2008, but also any organizations involved in training or certifying others.

​

What topics does ISO 9001:2015 cover?

 ISO 9001 is based on the plan-do-check-act methodology and provides a process-oriented approach to documenting and reviewing the structure, responsibilities, and procedures required to achieve effective quality management in an organization. Specific sections of the standard contain information on topics such as:

• Requirements for a quality management system, including documentation of a quality manual, document control, and determining process interactions

• Responsibilities of management

• Management of resources, including human resources and an organization’s work environment  

• Product realization, including the steps from design to delivery.

• Measurement, analysis, and improvement of the QMS through activities like internal audits and corrective and preventive action.

ISO 18001(OHSAS)

OHSAS 18001 is the latest certification specification for Occupational Health and Safety Management Systems. It is based on already published criteria such as BS 8800 and the Management Regulations 1992. OHSAS 18001 is an audit/certification specification, not a legislative requirement or a guide to implementation.

​

Registration to OHSAS 18001 by an independent, third party, certification body demonstrates a commitment to implement, maintain and improve the way in which you manage your Health and Safety system.

​

Organisations registered to OHSAS 18001 can be more confident about meeting the requirements of Health and Safety legislation. The setting of targets through the Health and Safety policy, together with the ongoing measurement against it ensures a process of continual improvement.

ISO 14001:2004

ISO 14001  (EMS) is the internationally recognized standard for the environmental management of businesses. It prescribes controls for those activities that have an effect on the environment. These include the use of natural resources, handling and treatment of waste and energy consumption

The  International Standard of EMS  does not include requirements specific to other management systems, such as those for quality  , occupational health and safety, financial or risk management, though its elements can be aligned or integrated with those of other management systems. It is possible for an organization to adapt its existing management system(s) in order to establish an environmental management system that conforms to the requirements of this International Standard. It is pointed out, however, that the application of various elements of the management system might differ depending on the intended purpose and the interested parties involved.

The level of detail and complexity of the environmental management system, the extent of documentation and the resources devoted to it depend on a number of factors, such as the scope of the system, the size of an organization and the nature of its activities, products and services. This may be the case in particular for small and medium-sized enterprises. The benefits of using ISO 14001:2004 can include:

• Reduced cost of waste management.

• Savings in consumption of energy and materials.

• Lower distribution costs.

• Improved corporate image among regulators, customers and the public.

The benefits of Implementing an Environmental Management System is a systematic way to discover and control the effects your company has on the environment. Cost savings can be made through improved efficiency and productivity. These are achieved by detecting ways to minimise waste and dispose of it more effectively and by learning how to use energy more efficiently. It verifies compliance with current legislation and makes insurance cover more accessible.

ISO/IEC 27001 :2005

ISO 27001 ( ISMS) is specifies the management of Information Security. Applicable to all sectors of industry and commerce, it is not confined just to information held on electronic systems, but addresses the security of information in whatever form it is held. ISO 27001 is one of the standards in the ISO 27000.

This  series  of ISO/IEC 27001 is deliberately broad in scope, covering more than just privacy, confidentiality and IT or technical security issues. It is applicable to organizations of all shapes and sizes. All organizations are encouraged to assess their information security risks, and then implement appropriate information security controls according to their needs, using the guidance and suggestions where relevant. Given the dynamic nature of information security, the ISMS concept incorporates continuous feedback and improvement activities, summarized by Deming's "plan-do-check-act" approach, that seek to address changes in the threats, vulnerabilities or impacts of information security incidents.

Why do you need ISO/IEC 27001?

Information is now globally accepted as being a vital asset for most organisations and businesses. As such, the confidentiality, integrity, and availability of vital corporate and customer information may be essential to maintain competitive edge, cash-flow, profitability, legal compliance and commercial image. ISO 27001 is intended to assist with this task. It is easy to imagine the consequences for an organisation if its information was lost, destroyed, corrupted, burnt, flooded, sabotaged or misused. In many cases it can (and has) led to the collapse of companies.

Advantages:

Gaining certification from a AA-ISO  ,demonstrates that the security of your information has been addressed, implemented and properly controlled. But the benefits don’t stop there:

Customers, employees, trading partners and stakeholders are comforted in the knowledge that your management information and systems are secure.

Demonstrates credibility and trust.

Cost savings - even a single information security breach can involve significant expense.

Establishes that relevant laws and regulations are being adhered to, Shows that a commitment to Information Security exists at all levels throughout an organisation.

ISO 28000:2007(SCS)

ISO 28000:2007(SCS) specifies the requirements for a security management system, including those aspects critical to security assurance of the supply chain. Security management is linked to many other aspects of business management. Aspects include all activities controlled or influenced by organizations that impact on supply chain security. These other aspects should be considered directly, where and when they have an impact on security management, including transporting these goods along the supply chain.

ISO 28000:2007 is suitable for all sizes and types of organizations that are: involved in the production of goods, manufacturing, services, storage or transportation at any stage of the products’ development or movement in the supply chain.

• Benefits of ISO 28000:2007:

• Increased ability to effectively implement security mechanisms.

• Assurance of regular assessment of security measures.

• Compliance with international regulatory requirements.

• Establish, implement, maintain and improve a security management system.

ISO/IEC 17025:2005

ISO/IEC 17025:2005 specifies the general requirements for the competence to carry out tests and/or calibrations, including sampling. It covers testing and calibration performed using standard methods, non-standard methods, and laboratory-developed methods.

​

It is applicable to all organizations performing tests and/or calibrations. These include, for example, first-second and third-party laboratories, and laboratories where testing and/or calibration forms part of inspection and product certification.

ISO/IEC 17025:2005 is for use by laboratories in developing their management system for quality, administrative and technical operations. Laboratory customers, regulatory authorities and accreditation bodies may also use it in confirming or recognizing the competence of laboratories. ISO/IEC17025:2005 is not intended to be used as the basis for certification of laboratories.

ISO 15189:2007

ISO 15189 quality standards spell out both quality management requirements (based on ISO 9001) and technical competence standards (based on ISO/IEC 17205) for medical laboratories. ISO 15189 is a global initiative that aims at creating a standard measure of quality in medical laboratories.

The standard has developed initiatives to promote competence and responsibility in medical laboratory processes, equipment and outcomes. ISO 15189 was developed by the International Standards Organizations Technical Committee and has been implemented in over 200 countries. The process involves testing of the effectiveness of laboratory equipment and the impact those particular equipment have on the processes in the labs and their outcomes. The ISO 15189 certification has a set of very unique advantages and the main objective of certification is quality assurance.

Benefits of ISO 15189:2007:

• Fundamentally, critical in promoting laboratory efficiency and responsibility for better results and service delivery.

• Ultimately promoted the growth of customer satisfaction in organizations involved in medical laboratory testing.

• Recognized as competent laboratory worldwide.

• More focus on patient safety & report results.

Basic requirements to get ISO 15189:2007:

• ISO 15189 requires an effective detailed analysis of medical laboratory procedures in a bid to make sure that all weaknesses have been identified.

• Detailed evaluation reports of the existing quality management system as well as other monitoring and evaluation reports.

• A detail audit of management reviews.

• ISO 15189 is intended as an accreditation standard, improvement the medical processes and execution the system not for only certificate.

ISO 20000

ISO 20000 IT service management system is the international standard for IT service management. The standard actually comprises two parts: ISO/IEC 20000-1 and ISO/IEC 20000-2 .ISO 20000-1 is the 'Specification for service management and it is this which is certifiable against. ISO 20000-2 is the ' Code of practice for service management', and describe practices.

Benefits of ISO 20000:

• Supports 'interchanging' of service providers and staff by virtue of the creation of inter-enterprise operational processes.

• Alignment of information technology services and business strategy.

• Creation of a stable framework for both resource training and service management automation.

• Improved relationship between different departments via better definitions and more clarity in terms of responsibility and goals.

• Creation of a formal framework for current service improvement projects.

ISO 22000:2005(HACCP)

ISO 22000:2005 is the International Food Safety Management Standard. It combines and supplements the core elements of ISO 9001 and HACCP to provide an effective framework for the development, implementation and continual improvement of a Food Safety Management System (FSMS).

That standard standers for  specifies requirements for a food safety management system where an organization in the food chain needs to demonstrate its ability to control food safety hazards in order to ensure that food is safe at the time of human consumption. It can be used by any organization directly or indirectly involved in the food chain and the food service providers such as restaurants, fast food chains, hospitals and hotels.

Benefits of ISO 22000:2005(HACCP):

• A preventative approach to food safety.

• Can help identify process improvements & reduced customer complaints.

• Reduces the need for, and the cost of end product testing.

• Aligns with other management systems (ISO 9001, ISO 14001).

ISO/TS 10004:2010

ISO/TS 10004:2010 QM& Customer Satisfaction Guidelines for monitoring and Measuring, this standard provides guidance in defining and implementing processes to monitor and measure customer satisfaction. This standard will help organization to take a holistic approach for customer satisfaction management.

ISO/TS 10003:2007

ISO 10003:2007, this standard to plan, design, develop, operate, maintain and improve an effective and efficient dispute-resolution process. For complaints that have not been resolved by the organization. This standard will help organization to take a holistic approach for customer satisfaction management.

ISO /TS 10002:2004

ISO 10002:2004, this standard provides guidance on the process of complaints handling related to products within an organization, including planning, design, operation, maintenance and continuous improvement. This standard will help organization to take a holistic approach for customer satisfaction management.

ISO 10001:2007

One of the foremost challenges that any organization faces in this day and age is giving customers a high level of satisfaction and to ensure this they have to setup a system that makes customer service efficient. The ISO 10001 is a code of conduct that addresses issues like, product delivery, handling of personal information, warranty claims, advertising of the product and all other matters that relate to customer services.

This system divided to two parts that’s parts are:

ISO 10002 contains guidance on the internal handling of product-related complaints. By fulfilling the promises given in a customer satisfaction code of conduct, organizations decrease the likelihood of problems arising because there is less potential for confusion regarding customer expectations concerning the organization audits products.

ISO 10003 contains guidance on the resolution of disputes regarding product-related complaints that could not be satisfactorily resolved internally. When disputes do arise, the existence of a customer satisfaction code of conduct can assist the parties in understanding customer expectations and the organization’s attempts to meet those expectations.

AS 9100

This standard AS9100 includes ISO 9001:2000 quality management system requirements and specifies additional requirements for a quality management system for the aerospace industry.

 AS9100 defines additional areas within an aerospace quality management system that must be addressed when implementing an ISO 9001:2000-based quality system. Typically, these requirements are included within robust aerospace quality systems. The industry experts who wrote the standard and the representatives who approved it all agree that these additions are essential to ensure product, process and service safety and quality.

​

Benefits of ISO AS9100:

• Guidelines provided by this specification, filter the entire production system.

• The process will be becomes more cost effective and refined procedures ultimately reduce product waste and rejection rates.

• The registration ensures a safe and reliable business opportunity for customers.

• An effective quality management system improves the entire operating system.

• Increased market opportunities for aircraft companies.

AS 8000

SA8000 is an international standard for improving working conditions. Based on the principles of thirteen international human rights conventions, it is a tool to help apply these norms to practical work-life situations. Sufficiently specific to be used to audit companies and contractors alike in multiple industries and countries, SA8000 represents a major breakthrough: it was the first auditable social standard and creates a process that is truly independent (it is neither a government project, nor dominated by any single interest group).

SA8000 is promoted as a voluntary, universal standard for companies interested in auditing and certifying labor practices in their facilities and those of their suppliers and vendors. It is designed for independent third party certification.

ISO/EN 16001

ISO\ EN 16001:2009 "Energy Management Systems Standard" was developed to ensure that energy management becomes integrated into organizational business structures, so that, organizations save energy, save costs and improve energy and business performance. However, in itself, the standard does not establish absolute requirements for energy performance nor does it guarantee optimal energy outcomes.

The target of the standard is to put practices in place that are effective, and result in measurable energy savings. In practice, an effective energy management system should result in:

• Organizations taking action to improve energy efficiency.

• Continual improvement year-by-year and an improved performance in energy usage.

• More thorough analysis of areas with potential for energy saving being carried out, if no action on energy efficiency is being taken.

ISO 50001:2001 (EN16001:2009)

ISO 50001:2011 is the "International Standard for Energy Management", released in June 2011 that replaces the British and European Standard BS EN 16001:2009.

It provides the most robust framework for optimizing energy efficiency in public and private sector organizations. ISO 50001 will help you implement the processes necessary to understand your baseline energy usage, put in place action plans, targets and energy performance indicators for reducing consumption and identify, priorities, and record opportunities for improving energy performance.

ISO (BS 25999)

BS 25999 is suitable for any organization, large or small, from any sector. It is particularly relevant for organizations which operate in high risk environments such as finance, telecommunications, transport and the public sector, where the ability to continue operating is paramount for the organization itself and its customers and stakeholders.

That system it for a Business Continuity Standard, is of real importance to everyone from Board directors, corporate executives and IT managers through to facilities managers and business continuity professionals. Service disruptions, delays in responding to customer requests, inability to process transactions in a timely manner or being unable to resume business in the face of a disaster can all have significant impacts on an organization’s effective operation. Recent natural disasters as well as terrorist activities have shown that an organization’s resilience to a disaster and its being able to resume business quickly and efficiently were directly related to its preparedness to respond to unforeseen events.

ISO 22301(BS25999)

ISO 22301, the international standard for business continuity management is your formal business continuity framework. It will help you to develop a business continuity plan that will keep your business running during and following a disruption. Follow it and you will minimize the impact so you can resume normal service quickly, ensuring key services and products are still delivered.

​

Created in response to strong international interest in the original British Standard BS 25999 and other regional standards, aligning and achieving certification to ISO 22301 delivers real business benefits. 

ISO 22301 identifies the fundamentals of a business continuity management system, establishing the process, principles and terminology of business continuity management.

​

The standard is particularly relevant for organizations operating in high risk environments where the ability to continue operating is paramount for business, customers and stakeholders – this includes utilities, finance, telecommunications, transport and the public sector.  
It will enable you to:

• Establish, implement, maintain and improve your BCMS

• Meet the requirements of your business continuity policy.

• Give key stakeholders confidence in your conformity and commitment to internationally recognized best practice.

• Achieve BSI certification/registration of your BCMS.

ISO 14064

ISO 14064 specifies principles and requirements at the organization level for quantification and reporting of greenhouse gas (GHG) emissions and removals was developed over several years by the International Organization for Standardization (ISO). It was launched in the spring 2006.

​

Benefits of ISO 14064:

• Facilitates the certification and trade of GHG emission reductions or removal enhancements.

• Facilitates the development and implementation of organization GHG management strategies and plans.

• Allows entities to track performance and progress in the reduction of GHG emissions and/or increase in GHG removals.