ISO Management system standards Annex SL explained March 2015

Transcription

1 ISO Management system standards Annex SL explained March 2015 Presentation to the Standards Makers Forum, Cardiff 27/03/2015

2 Introducing the common structure and core text What is it? Why has been introduced? All ISO management system standards will now have the same clause headings and core text This increases alignment and makes it easier to implement multiple management systems It recognises the complex world we do business in and that no two organizations are exactly alike ISO 9001, ISO 14001, ISO 27001, ISO 55001, ISO 45001, ISO all use (or will soon use) this structure 2

3 Why else are these standards being revised? The world we do business in has changed Industry is now global even the smallest business can be multinational Information is instantly available Customers and other interested parties have higher expectations 3

4 Key changes - emphasis on the context of the organization - risk-based thinking throughout - increased involvement and accountability of top management - integration of the management system into overall business strategy - greater emphasis on the customer and communications - less bureaucracy 4

5 The common structure All of the forthcoming revisions will follow the same structure 1. Scope 2. Normative references 3. Terms and definitions 4. Context of the organization 5. Leadership 6. Planning 7. Support 8. Operation 9. Performance evaluation 10. Improvement 5

6 Clause 4. Context of the organization What is the context of an organization? Who are the interested parties? - context refers to the situation an organization operates in and anything which affects its operations - interested parties are those individuals or entities which are affected by the organization and its products or services Organizations need to be proactive in assessing their situation and determining the risks and opportunities it presents. 6

7 Clause 5. Leadership Other than the title what has changed? - increased emphasis on top management being accountable for the effectiveness of management systems - a requirement that management systems are aligned to top level business objectives and integrated into business processes - it is no longer possible to make the quality/environment/health and safety manager solely responsible for establishing, implementing and maintaining the management system 7

8 Clause 6. Planning Risk-based thinking - risk has always been considered in these management system standards - risks and opportunities are required to be identified and addressed - formal risk management is NOT required - risk-based thinking makes the management system a preventative tool - requirements have been introduced to manage change and the associated risks and opportunities 8

9 Documented information What happened to documentation and records? - documented information replaces terms such as documents and records, reflecting current ways of working in different media - less prescriptive requirements for what needs to be documented the processes need to be effective: how you do that is up to you - retain refers to what we understand to be records - maintain implies documented information which is kept up to date (procedures, plans, etc) 9

10 Specific needs If there s a common structure and core text where do the differences come in? - every management system standard will include specific requirements related to the subject - the common structure and core text provides a generic framework: it is expected and desirable that for some sectors very prescriptive requirements will be added to ensure safety, etc - in some sectors basic terminology may not be felt to be appropriate and therefore the drafters may seek a change - clause emphasis will vary from sector to sector 10

11 ISO 9001 Key changes - no requirement for a management representative - the term product no longer includes service as part of its definition instead there is explicit reference to products and services throughout - exclusions are no longer directly referred to: you must apply all requirements unless the context of the organization clearly identifies that they cannot by applied - there is now a requirement to determine and manage organizational knowledge - more explicit design and development requirements making it clearer when exclusions are acceptable - explicit requirements relating to external providers, reflecting increasingly complex supply chains 11

12 ISO Specific key changes - considers environment as a whole, not just pollution - does not define protect the environment - considers effect of the environment on the organization and organization s effect on the environment - longer-term challenge vs short-term internal resource constraints - life-cycle perspective and value-chain - striking a balance on material environmental issues: control vs influence - increased emphasis on knowledge and understanding of compliance status 12

13 ISO What to expect publication is due October 2016 the key changes from OHSAS to ISO are through the common structure and core text issues still being debated include the use of the term worker and the definition of workplace as in ISO the clause on planning is key and includes focus on legal and other requirements as well as general consideration of risks emphasis on both risks and opportunities related to health and well-being and to the management system itself 13

14 Conclusions - organizations with existing proactive management systems are probably already meeting most of the requirements of the new standards - organizations will not be able to treat quality, environment or health and safety as tick-box exercises - increased alignment of the management system standards will make implementation easier and more effective - organizations can use Annex SL to begin identifying where the gaps are - organizations should plan for necessary changes and implement those changes as soon as possible 14

15 Timelines and transition ISO 9001:2015 & ISO 14001: publication of the final drafts of ISO and ISO 9001 expected in July 2015 no technical changes will be made after this time - publication of the new standards likely to be September organizations which are certified have up to three years to transition to the new standards - organizations are advised not to delay transition until the end of the three year period 15

16 Useful links - The ISO website has a lot of free information: - Free guidance documents to ISO 9001:2015 can be found at: and - The ISO Online Browsing Platform is a useful resource for checking the terms and definitions used in the revisions: - The rules which standards developers must abide by are contained in the ISO Directives: o_supplement.htm (The common structure and core text are in the ISO Directives Part 1, Annex SL, Appendix 2) 16

17 Get involved. If you would like to ensure your industry helps shape the standards it needs to use, please apply to join one of the relevant committees. For management system standards please contact For more specific industry committees please contact When applying please include: 1. A brief paragraph about yourself, your experience and expertise and what you can bring to the table 2. Full contact details including a UK postal address 3. The name of the trade body or organization you will represent* 4. An endorsement from that body authorising you to speak on their behalf *In exceptional circumstances it may be possible to join a committee without representing a formal trade body: please ask Simon or Sally if this situation applies to you Members of the Cast Metal Federation which wish to purchase a copy of ISO 9001:2015 or ISO 14001:2015 may do so directly through CMF. Alternatively, both standards are available on the BSI Shop ( Advanced access will be available through BSI on publication of the final drafts (estimated early July), giving users the opportunity to view the final text prior to publication September