Archive for August, 2007

How to live with ISO9001:2000 when customer requirements are poorly defined?

Monday, August 27th, 2007

ISO9001:2000 section 7.2 states that your organization must determine product requirements specified by the customer, requirements not stated by the customer but necessary for the intended use of the product, any legal, statutory or regulatory requirements, and any other requirements as determined by your organization.

In a machine shop type of organization, frequently you get poorly defined product requirements from the customer. I’ve seen customers draw an item on a napkin…literally. Dimensions are crude. Customers often don’t know what kind of tolerances are able to be held during manufacture.

Asking your customer to fix their tolerances can be tricky business, as customers are often entreprenurial types and not engineers.

How can you take on new work, with poorly defined product requirements, and still meet the requirements of your ISO9001:2000 quality management system?

It is often a matter of educating the customer, and requires a bit of patience. ISO demands that you have product characteristics nailed down in advance, and when you think about it, this makes perfect sense. Even if it seems like a bit of an annoyance right now, taking a little time now could save you and your customer both time and money down the road.

If you’re in a position like this, it is imperative that you get your customer to agree to specifications before you start production. If your customer unwittingly specifies some outrageously small tolerances for a product that doesn’t really require them, tell the customer that he can save money by specifying larger tolerances as these will require less manufacturing time. This is, of course, assuming the part does not really require the tight tolerances. If you’re manufacturing spars for the F-22 Raptor, well, you probably need the tight tolerances, and you’re undoubtedly charging a lot. However if you’re making motorcycle exhaust hanger brackets, the tolerances don’t need to be quite so small.

Thinking of “buying” your ISO9001:2000 quality manual and procedures?

Tuesday, August 21st, 2007

Numerous websites are out there claiming you can fork over your hard earned cash….or credit card number….and receive a ready-to-roll, plug-and-play ISO9001:2000 quality management system. Nothing could be further from the truth.

With about 20 years of quality management experience, and 13 of those years working with ISO9000 and ISO9001, I’ve looked at a bunch of off-the-shelf products that seem to claim you can have your quality management system up and running in a day or 2. AAAARRRRGGGGHHHH!!! these products drive me crazy!!!!!!!!!!!!!!!!!!!!! Anyone who believes this bullcrap is either ignorant of ISO quality systems, or just plain stupid. Yes, I know I shouldn’t be so hard on those who don’t know any better…I’ll try to calm down…really…I will….OK, there..that’s better.

Let me state this clearly: There is no way that you can purchase your quality system documentation and implement it into your company without a lot of work on your part. There’s no free lunch. If it’s too good to be true, it probably is. You know the drill. Why do you think ISO quality system consultants get paid so much? BECAUSE THEY’RE WORTH IT! Well, usually.

If you go the consultant route, which most people do, you’ll likely spend $5000 to $10,000 on consultant’s fees. And this is before ever having an audit. Depending on the size of your company, you might have to spend much more than that.

Spending a few hundred bucks on quality system documents may seem like a bargain, but be aware that your work has only begun.

Now I’m not saying that you should not purchase quality system documentation from a website. In fact, if you’re intent on creating your own ISO9001:2000 quality management system, I’d go so far as to say you should purchase sample documents from somewhere, to give you a guide to follow. But don’t spend a lot of money. You can find sample quality system documentation online for less than $50.00. There’s no need to spend more than that.

You can save a tremendous amount of money by doing it yourself. However the process will take a lot longer. If you have a customer deadline to get certified within, say, 60 days, then you have no option other than to hire a consultant, or hire an ISO experienced employee dedicated to the project. If you have more time, tho, you can save a bundle and do it yourself.

I have no doubt that most ISO9001:2000 documents you buy online are well intentioned and will be of great value to you. But think of these documents as samples of what you’re going to write yourself. There’s no such thing as plugging your company name into a few places and letting it rip. Sorry.

No two organizations are exactly alike, therefore no two quality systems can be exactly alike. You’ll want to tailor your manual, procedures and forms to your company, not the other way around. Remember, you’ll be audited by an independent ISO auditor. Whatever your manual, procedures and forms state, you’ll have to be doing. And how on Earth is someone at a website going to know what procedures are appropriate for your company? They’re not.

By taking on ISO9001:2000, of course you’ll probably have to make a few changes in your organization, and probably have to implement some new procedures, keep some new records, etc. But ISO gives you tremendous flexibility in how you achieve those requirements. You need to decide yourself how you will go about meeting the requirements of ISO. No way can some document bought online be exactly right for your company.

If you want to create your own ISO9001:2000 quality management system, here’s what you need to do:.
1. Buy a couple of good books on the subject, and actually read them. Take your time until you understand what’s going on here. It’s slightly complicated, but it ain’t brain surgery.
2. Go ahead and buy some sample quality system documents online, but don’t spend more than 50 bucks.
3. Use your newfound knowledge to write your own manual, procedures, forms, and work instructions. Use the manual you’ve bought as a kind of template, but realize you’re going to write your own manual. Use the purchased document as a guide for formatting, wording, etc. But don’t use it word for word.

Using a purchased set of documents without extensive modification is asking for trouble. It is extremely unlikely the purchased documents will have any correlation to what your company is actually doing. It will be very difficult for you and your employees to follow along. This will lead to people forgetting to follow those purchased procedures, which will further ensure the quick demise of your quality management system.

By using a purchased set of documents word-for-word, you’re ensuring a disastrous audit for yourself. Your auditor, who’s been around the block a few times, will quickly discover that you are claiming to conform to a set of documents written by someone who has never set foot in your building. Believe me, it will be painfully obvious to the auditor.

Good luck!

More on Document Control for an ISO9001:2000 Quality Management System

Tuesday, August 21st, 2007

Documents required by your ISO9001:2000 quality management system must be controlled. This is a requirement of ISO9001. See Section 4 of the quality standard. No ifs, ands or buts about it. But like most elements of ISO9001:2000, you have tremendous leeway in how you accomplish it.

By quality system documents, I mean your quality manual, quality procedures, and any work orders and forms you may have that are part of your quality system.

As you can tell from my previous posts, I’m a big fan of electronic document control where possible. With computers so reliable and prevalent, most companies should be able to control their documents electronically. This will save you lots of paper and avoid some headaches too.

Some old-school companies are still around, not fully computerized. Paper hard-copy quality documents might be the only option for such companies.

There must be a method of approving documents prior to issue. And, of course, you have to be able to prove that your documents were approved by the appropriate person in your organization.

There must be a method of updating your documents and re-approving them. Yes, you have to have a way to prove they were re-approved.

You must have a way to ensure that any document changes are identified, and a way to know the current revision status.

Your controlled, updated, current quality documents must be available to people who need them. You must have a way to ensure that obsolete documents are not used. If you have some reason to retain obsolete documents, they must be identified as such to prevent accidental use.

Your quality system documents must be legible, and easily identifiable.

Any documents from external origin (drawings from a customer, for example) must be identified and their distribution controlled.

An electronic document control system has several advantages. You can easily protect an electronic document with a password known only to authorized personnel. As long as the password is secure, it would be quite difficult for an unauthorized person to change a document.
And as long as you can prove you have a secure password system, you can prove that only authorized people have made any changes. And if changes were made only by an authorized person, you’ve also accomplished “approval for adequacy” at the same time.

In an electronic system there are no controlled paper copies of documents. I recommend you state “uncontrolled if printed” on every document, informing any reader that if they’re looking at a paper copy, it may not be the current revision. Every user has immediate access to the latest revision within seconds of the revision being made. No having to wait for copies to be made and distributed. No more going through reams of copy paper every time a small revision is made. No more trying to track down a binder that’s supposed to be in a particular place in your factory, but always gets lost. No more trying to read documents through coffee and jelly-doughnut stains.

You must also have a written procedure for occasional review of your documentation. I suggest you include this during your periodic management review. On your management review agenda (one of your controlled forms) include on your checklist “review quality system documentation and re-approve for adequacy, or identify changes that must be made”. Something to that effect.

Should you buy an ISO9001:2000 quality manual on the internet?

Monday, August 13th, 2007

If you’ve looked into an ISO9001:2000 quality management system, you’ve probably found dozens of online companies offering to sell you your ISO documentation. What do you think about that? Ever wonder what you get for your money? Would “bought” documents work for you?

I’m going to answer this with a definite “it depends”. I strongly do not believe that you can purchase your quality manual, procedures and forms and implement your quality system quite so easily. It may sound nice, but only to people who are not terribly familiar with the ISO registration process.

However some so called “do-it-yourself” ISO quality systems might be worth looking into.

Here’s the deal: Don’t spend a lot of money on do-it-yourself documentation. You can find perfectly good documentation for less than 50 bucks online. This is far, far cheaper than even one hour of a consultant’s time, and might be worth your time. Keep in mind, tho, that just like a free lunch, there is no such thing as a turn-key ISO quality management system.

You can purchase ISO documentation online for several hundred dollars, and the sellers may lead you to believe that all you have to do is plug in your company name and you’re good to go. This is highly unlikely. No matter how much you spend on documentation, in order to get a quality system that works for your company, you’re going to have to do a lot of modifications yourself. No two companies are exactly alike, therefore no two ISO quality systems will be exactly alike.

If you’ve decided you want to have a go at creating your own ISO quality management system, I applaud your decision. For a small to medium sized company, you can definitely do it yourself. Keep in mind this is going to take some time, and quite a bit of effort. And buying some sample ISO documentation for under $50.00 might be a good investment. I wouldn’t spend any more than that, though.

Go ahead and buy the 50.00 documentation, and also buy one or 2 books on the subject of ISO9001:2000 quality systems. With a little reading and writing, and some sample documentation to give you some guidance, you can definitely do this.

But please don’t spend hundreds of dollars “buying” your quality manual. You can get the same information for less than $50.00, and you’ll save enough to buy some books. I also recommend you purchase a copy of the actual ISO9001:2000 quality standard, either from www.iso.ch, or www.ansi.org.

What is Product Realization in an ISO9001:2000 quality system?

Tuesday, August 7th, 2007

One of the somewhat nebulous and confusing terms in ISO is “product realization”. It took me a while to understand this concept, and I know I’m not alone. The reality is that it is an extremely simple concept.

Product Realization is simply realizing your product. OK, maybe that’s a little too simple.

Here is Webster’s definition:

realization: 1) the action of realizing; the state of being realized

realize: 1a) to bring into concrete existence: ACCOMPLISH – as in “they finally realized their goal”

Product realization means making your product – the activities and processes necessary for you to bring your product into existence.

OK, so let’s say you are a Home Inspector who wants to get ISO certification…hey, it could happen. Your “product” is not a tangible object, it is a service. That’s OK, in the eyes of ISO9001:2000 a service can be considered as your “product”. Whatever processes you use to accomplish your final product or service is your process of product realization.

Chances are your product realization process is actually a series of several processes. I’ve never seen one business that has only one process needed to achieve product realization.

Product realization is simply doing whatever it takes to get your product (or service) to your customer.

Root analysis for someone who makes repeated mistakes

Wednesday, August 1st, 2007

One question that I’ve struggled with over the years…and still struggle with…is how to properly address the problem of an employee who makes the same mistake over and over. Sure, in the magical fairy tale land of ISO9001:2000, it’s easy to blame it on “insufficient training” and be done with it. But there are times when you can “train” someone until you’re blue in the face and it doesn’t make any difference. The person may appear to be competent and seems to understand your words. And for a day or two after training everything is OK. But then the same problem pops up.

Cultural differences between management and employees complicates the situation. I, being your typical college-educated white male, have a hard time understanding the motivation…or lack of it…among members of the Hispanic community that pervade workplaces here in Southern California. You can repeatedly ask an employee to do something, or not do something, and the employee will repeatedly tell you “OK, I understand”. Then the next day the same problem occurs. I just want to tear my hair out sometimes, but that obviously is not the solution.

I do believe that disciplinary measures are an effective last resort to resolving chronic misbehavior. This is assuming that top company management goes along with your assessment. If not, well then you may be screwed in your attempt to address a Corrective Action Request.

If there is an employee who appears competent, but continually repeats the same mistake, you might want to look at other factors.

There might be a medical condition, which you can’t really ask about, and most people won’t readily tell you about even if you do ask. Does the employee have dyslexia or another learning disability? This is a tough area to deal with, due to the aforementioned privacy issues. But if you suspect there may be medical factors to blame, you’ll either have to deal with it or move the employee to another area, if that’s an option.

There might be some other factor other than general employee disinterest. Does the mistake always happen at the same time? On the same day? Are there any other events that occur at that time? Does the mistake happen at the same time the cute UPS delivery lady arrives? You might look at a bigger picture of events surrounding the mistake to see if other factors are at work here, and take appropriate action.

Later we will discuss other possible ways to address repeat mistake makers.

When is the next revision to the ISO 9001 quality standard?

Wednesday, August 1st, 2007

According to reliable sources, it looks like ISO9001:2009 will be the next revision. The ISO Quality Standard has been undergoing much debate over how much to change it, and what kind of changes to make. There was a lot of speculation that 2008 would be the year, but it has been delayed until, most likely, 2009.