ISO9001 Implementation Guidelines 2012
ISO9001 Implementation Guidelines 2012
1. Introduction
2. Project Planning
3. Documentation
4. Training
5. Implementation
6. Internal Audits
7. Selection of Auditing (Certification) Agency
8. Pre-assessment by Certification Agency
9. Preparing for Final Assessment (Certification)
10. Final Assessment and Beyond.
1. INTRODUCTION
Congratulations for your decision to build a customer-centric Quality Management System for your
organisation. Best wishes for successful ISO9001: 2008 project implementation.
The purpose of this document is to give an overview of how to develop and implement an ISO9001:
2008 compliant Quality Management System (QMS) in your organisation and get it certified to
ISO9001: 2008 by an accredited certifying agency.
First of all, please believe that you can do it ! Be confident, have perseverance, learn to be patient.
ISO9001: 2008 is a management system standard published by the International Organisation for
Standardisation, which states the requirements for a quality management system. To be certified as
an ISO9001: 2008 organisation, your firm needs to comply with the applicable requirements of the
standard.
Kindly note that meeting the requirements of a standard (and getting the ISO9001: 2008 certificate)
is like securing 60% marks in an examination.
You need to score 100% to become a truly world-class organisation, which can be done in phases
over a period of time, ideally after getting the ISO9001: 2008 accreditation. (What we mean by this
is to restrict the scope of your ISO9001: 2008 implementation activities to the minimal requirements
for certification in order to achieve the results in reasonable time.)
2. PROJECT PLANNING
The following table lists out major work elements and the management level responsible.
1 Project Planning - To decide about the start date and end Top Management
date for the ISO9001 project. Usually it
takes between 3 to 6 months for QMS
development, implementation and
certification.
Now let us make a week-by-week project schedule of the above activities spanning 15 weeks.
Week Number
Sl. Activity
10
11
12
13
14
15
No.
1
2
3
4
5
6
7
8
9
1 Project Planning
2 Documentation
3 Training
4 Implementation
5 Internal Audit
6 Pre Assessment
7 Final Assessment
3. DOCUMENTATION
It is essentially a time consuming job to be done by the MR and QMS Co-ordinator. But it is very
vital for the success of your ISO9001 project.
As a first step, go from one department to the other, talk to the Head of the department and others
and …
Second step is to compare the activities and activity records of the existing system with the sample
procedures and formats given in the Documentation Kit. At this point, you MUST read the
“Document Customisation Guidelines” given in the Kit and make your organisation’s Quality
Manual in the same sequence (reading sequence) recommended in this guideline document.
Regarding formats (forms), if an existing record resembles one of that is given in the Kit, merge the
two and retain the format number of sample format. This way, implementation will be faster.
As a third step, present the applicable sections of the manual and formats to the Heads of each
department and ask for suggestions for modifications. Modify the manual and formats on the basis
of this input.
The fourth step would be to release the first version of manuals and formats for implementation.
Please read the quality system procedure for Document Control (QSP-04-02-A) in the Kit for details
of document numbering, issuing etc.
You can expect people to send many document change requests during implementation. Please
follow the system outlined in QSP-04-02-A.
4. TRAINING
Please note that ISO9001: 2008 (concept as well as the practical implications) WILL BE Greek and
Latin to most of the people in your organisation. As high calibre professionals excelling in their own
functional area, they may not want to openly request any training.
You must conduct in-house training programmes for all levels of personnel (both employees and
employers) in order to make them familiar with ISO9001: 2008 and the QMS documentation you
have just released.
You can either use the Power Point Training Slides prepared by us (GQV Consulting) or prepare
your own. Faculty may be from within the organisation or hired for the purpose.
Records of training attendance, participant feedback and class tests must be kept.
5. IMPLEMENTATION
Once the quality manuals and formats are issued, it is the time for implementation.
Please understand this point clearly: By implementation what we mean is the implementation of
system procedures and work instructions as per the issued manuals, NOT as per what people think it
should be / existing practices.
There can be many queries from various quarters about form filling. Please refer the “Filled
Formats” given in the Documentation Kit for help.
It is a good practice for the MR / QMS Co-ordinator to make weekly visits to all departments and
help the people understand the procedures and forms. Sometimes you need to help the people to
create computer files where form filling is electronic (in such cases, you need to give a softcopy of
the formats along with the hard copies).
It is helpful if the top management convenes two or three review meetings and takes implementation
feedback from Heads of Departments. Too many meetings to be avoided, as it is costly to the
organisation.
The MR is authorised to ensure smooth implementation of the QMS. Use this power judiciously.
6. INTERNAL AUDITS
Internal audits are vital in QMS implementation.
At least one internal audit (and subsequent management review) must be completed before pre-
assessment by the Certifying Agency.
There are more than 700 Certifying Agencies worldwide who are authorised to conduct assessments
and issue the ISO9001: 2008 certificate. Many are fly-by-night operators without any credibility in
the market. Be careful while selecting one.
Due to professional reasons we cannot say who is not reputed. However the following agencies are
considered to be reputed: BVQI, BSI, DNV, IRQS, LRQA, SGS, TUV, and UL. There may be
many others who are equally reputed.
First you need to fill-up a “Request For Quote” form given by the agency and send it across. Then
they will send a detailed quote.
Study the quotes of 3 to 4 agencies and decide about one. Contact the chosen one and sign the
contract.
After sign-up, the auditing agency would ask for your quality manual to review its adequacy. Also
they need your manual for preparing their audit checklist.
The basic purpose of pre-assessment is to get a feel of what the auditing agency is looking for.
Some agencies are very stringent, while others are very lenient. You need to implement almost all
the suggestions made by the auditor. Corrective actions MUST be taken on the non-conformance
notes and observations raised by the auditors.
Please note that the auditors will first check whether suitable corrective actions have been taken on
their observations during pre-assessment.
It is recommended to carry out the 2nd internal audit and complete corrective actions before the
Final Assessment.
Usually, final assessment would pass off as a peaceful day, though you may be the most anxious.
In case the auditors find only minor non-conformances, your organisation will be recommended for
certification. You need to take corrective actions which will be verified in the subsequent
surveillance audit (after six / twelve months). Actual certificate and the artwork of Auditing
Agency’s Logo (with instructions for use) will reach you after 4 to 6 weeks of successful final
assessment.
In the event of finding major non-conformances (very rare event) you need to take corrective action
and undergo further audit (follow-up audit) before eventual certification.
Important Notes:
b. After achieving the ISO9001 certification, you may plan for implementation of improvement
tools such as Statistical Process Control (SPC), Engineering Process Control (EPC), Six Sigma
Initiatives etc.