Welcome ISO9001:2015 /ISO14001:2015

Welcome ISO9001:2015 /ISO14001:2015 DQS 2017 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. 1

Presenters Joe Mansour ISO9001:2015 Program Manager 760--458-3879 Jawaid.Mansour@dqsus.com Candace Orbaugh ISO14001:2015 Program Manager 856-728-5557 Candace.Orbaugh@dqsus.com DQS Inc.

ISO14001:2015 ISO9001:2015 Issued 9/15/2015 ANAB Accredited DQS Inc.

Previous Webinars 1. Scope 2. Normative reference 3. Terms and definitions 4. Context of the organization 5. Leadership March 25, 2015 6. Planning 7. Support April 29, 2015 8. Operation 9. Performance evaluation May 26, 2015 10. Improvement IS Webinar on July 29, 2015. 4

ISO9001:2015/ISO14001:2015 www.dqsus.com ISO 9001:2015 ISO14001:2015 DQS Inc.

ISO9001:2008 vs. IS09001:2015 ISO 9001:2008 ISO 9001:2015 ISO 9001:2008 ISO 9001:2015 ISO 9001:2008 ISO 9001:2015 ISO 9001:2008 ISO 9001:2015 4 4 5.5.3 7.4 7.2.3 8.2.1 7.5.4 8.5.3 4.1 4.4 5.6 9.3 7.3 8.5 7.5.5 8.5.4 4.2 7.5 5.6.1 9.3.1 7.3.1 8.3, 8.3.1, 8.3.2 7.6 7.1.5 4.2.1 7.5.1 5.6.2 9.3.1 7.3.2 8.3.3 8 9.1 4.2.2 4.3, 7.5.1, 4.4 5.6.3 9.3.2 7.3.3 8.3.5 8.1 9.1.1 4.2.3 7.5.2, 7.5.3 6 7.1 7.3.4 8.3.4 8.2 9.1 4.2.4 7.5.2, 7.5.3 6.1 7.1.1, 7.1.2 7.3.5 8.3.4 8.2.1 9.1.2 5 5 6.2 7.2 7.3.6 8.3.4 8.2.2 9.2 5.1 5.1, 5.1.1 6.2.1 7.2 7.3.7 8.3.6 8.2.3 9.1.1 5.2 5.1.2 6.2.2 7.2, 7.3 7.4 8.4 8.2.4 8.6 5.3 5.2 6.3 7.1.3 7.4.1 8.4.1,8.4.2 8.3 8.7 5.4 6 6.4 7.1.4 7.4.2 8.4.3 8.4 9.1.3 5.4.1 6.2 7 8 7.4.3 8.6 8.5 10 5.4.2 6, 6.1, 6.3 7.1 8.1 7.5 8.5 8.5.1 10.1, 10.3 5.5 5 7.2 8.2 7.5.1 8.5.1, 8.5.5 8.5.2 10.2 5.5.1 5.3 7.2.1 8.2.2 7.5.2 8.5.1 8.5.3 Clause removed 5.5.2 5.3 7.2.2 8.2.3 7.5.3 8.5.2 see 6.1 6

Notable Changes Quality Manual Preventive Action Management Representative DQS Inc.

Notable Changes DQS Inc.

Notable Changes P-D-C-A ISO9001:2008 Preventive Action INPUT PROCESS OUTPUT DQS Inc.

Notable Changes P-D-C-A ISO9001:2015 Risk Based Thinking INPUT PROCESS OUTPUT DQS Inc.

ISO 9000:2015 Terms & Definitions 3.4.1 PROCESS Set of interrelated or interacting activities which transforms inputs into outputs. 11

Section 4 - Context Of The Organization 4.1 Understanding the Organization and Its Context 4.2 Understanding The Needs And Expectations Of Interested Parties 4.3 Determining The Scope of The Quality Management System 4.4 Quality Management System And Its Processes 12

Benefits of Process Approach Benefits of the process approach are: Integration and alignment of processes to enable achievement of desired outcomes Ability to focus effort on process effectiveness and efficiency. Provision of confidence to customers, and other interested parties, about the consistent performance of the organization. Transparency of operations within the organization. Lower costs and creation of shorter cycle times, through the effective use of resources. Improved, consistent and predictable results. DQS Inc.

14 4.4 - QMS and its Processes

4.4 QMS - and its Processes - Service 15

4.4 - QMS and its Processes The organization shall identify the processes and shall determine: The risks and opportunities The inputs required and the outputs expected The assign of the responsibilities and authorities The sequence and interaction of these processes The resources needed The criteria, methods, including performance indicators 16

4.4 STAMPING Process Quality Objectives For The Stamping Process OBJECTIVE ACTUAL GOAL ACTION PPM 25 50 Continue to Monitor Machine Up Time 82 % 95% Increase PM, have spare parts available, staffing Parts Per Hour 235 215 Continue to Monitor Cost of Rework $496 <$500 per month Continue to Monitor/consider risk

4.4 STAMPING Process Map Quality Objectives For Support Process Sales HR Cal Maint Revenue/Employee % Won # of hires # of training hours # overdue # out of tolerance % On Time, MTTF Repair Time, Uptime

PDCA Cycle Act Plan INPUT PROCESS (DO) OUTPUT Check 19

RISK Effect of uncertainty on an expected result. The effect can be positive or negative consequence - Risk is characterized by potential events and consequences. 20

Section 6 Planning for QMS Risk is the effect of uncertainty on an expected result. a) Incorporated in requirements for the establishment, implementation, maintenance and continual improvement of the QMS. b) May Use ISO31000 - but not required. c) Not all processes represent the same level of risk. d) Considering Risk qualitatively to define the QMS, processes and activities. 21

6.1 Actions Risks & Opportunities Addressing Risks/Opportunities Manage QMS Change Determine Risks and Opportunities per sections 4.1 and 4.2 Establish Quality Objectives Actions to Address Risks 22

Section 6 23

Section 6 7 R s of Risk Management Recognition of Risks Ranking or Evaluation of Risks Responding to Significant Risks Resourcing Controls Reaction Planning Reporting and Monitoring Reviewing Framework 24

Responding To Significant Risks Section 6 4 T s of Risk Management Tolerate Treat Transfer Terminate 25

Section 6 Planning for QMS Identify The Risks Analyze & Prioritize Plan Actions to address Take Action Check Effectiveness Learn & Improve 26

FMEA - RPN SEVERITY 1 No relevant effect 2 Very Minor, no damage 3 Minor, low damage 4 Moderate 5 Critical (loss of primary function) 6 Catastrophic Risk Priority Number (RPN) = Severity * Occurance * Detection OCCURANCE 1 Extremely Unlikely 2 Remote 3 Occasionally 4 Reasonably Possible 5 Frequent DETECTION 1 Certain 2 Almost Certain 3 High 4 Moderate 5 Low 6 Undetectable 27

Section 6 Failure-Mode-And-Effect (FMEA) RPN= Severity * Occurrence * Detection RPN= Risk Priority Number 28

Section 6 - Risk Register 29

Candace Orbaugh ISO14001:2015 Program Manager 856-728-5557 Candace.Orbaugh@dqsus.com ISO14001:2015 DQS Inc.

ISO-14001:2015 Key Changes ISO-14001:2015 ISO-14001:2004 Key changes Introduction Introduction Background, Aim of Environmental system, Success Factors, PDCA 1 Scope 1 Scope No significant change 2 Normative References 2 Normative Reference No significant change 3 Terms and Definitions 3 Terms and Definitions Definitions of a few new terms including documented information, life cycle perspective DQS Group May 12, 2017 31

Life cycle 3.3.3 life cycle consecutive and interlinked stages of a product (or service) system, from raw material acquisition or generation from natural resources to final disposal. Note 1 to entry: The life cycle stages include acquisition of raw materials, design, production, transportation/ delivery, use, end-of-life treatment and final disposal. 12.05.2017 32

ISO 14001:2015 requires taking a life cycle perspective. In Annex A6.1.2, a life cycle perspective is explained as follows: This does not require a detailed life cycle assessment; thinking carefully about the life cycle stages that can be controlled or influenced by the organization is sufficient. The life cycle stages of a product (or service) include acquisition of raw materials, design, production, transportation/delivery, use, end-of life treatment and final disposal (3.3.3). In Clause 6.1.2, ISO 14001:2015 requires the organization to consider these life cycle stages when determining the environmental aspects that it can control or can influence. DQS Group May 12, 2017 33

ISO-14001:2015 ISO-14001:2004 Key changes 4 Context of the organization 4.1 Understanding the organization and its context 4.2 Understanding the needs & expectations of interested parties New requirement for the organization to determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcomes of its environmental management system. Interested parties is now a requirement of the new standard 4.3 Determining the scope 4.1 General Requirements Similar, but with added detail and includes interested parties DQS Group May 12, 2017 34

Context of organisaton Determining the scope of the environmental management system (4.3) The organization shall determine the boundaries and applicability of the environmental management system to establish its scope. (functional unit, boundaries, remote locations, temp. Sites..) DQS Group May 12, 2017 35

How will the organization demonstrate that they have considered life cycle when determining aspects (6.1.2) and when planning and controlling operations, including design through end of life? DQS Group May 12, 2017 36

ISO-14001:2015 ISO-14001:2004 Key changes 4.4 Environmental Management System 4.1 General Requirements In addition to previous requirements, new requirement to consider context and achieving intended outcomes DQS Group May 12, 2017 37

ISO-14001:2015 ISO-14001:2004 Key changes 5.1 Leadership and Commitment New clause with expanded requirements for top management. 5.1 Leadership and commitment Top management shall demonstrate leadership and commitment with respect to the environmental management system by: taking accountability for the effectiveness of the environmental management system; ensuring that the resources needed for the environmental management system are available; ensuring that the environmental management system achieves its intended outcomes; supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility; DQS Group May 12, 2017 38

ISO-14001:2015 ISO-14001:2004 Key changes 5.1 Leadership and Commitment New clause with expanded requirements for top management. 3.1.5 top management person or group of people who directs and controls an organization (3.1.4) at the highest level Note 1 to entry: Top management has the power to delegate authority and provide resources within theorganization. Note 2 to entry: If the scope of the management system (3.1.1) covers only part of an organization, then top management refers to those who direct and control that part of the organization. Section A51 in Annex A of guidance To demonstrate leadership and commitment, there are specific responsibilities related to the environmental management system in which top management should be personally involved or which top management should direct. Top management may delegate responsibility for these actions to others, but it retains accountability for ensuring the actions are performed. DQS Group May 12, 2017 39

ISO-14001:2015 ISO-14001:2004 Key changes 5.2 Environmental Policy 5.2 Environmental Policy Same basic requirements 5.3 Organizational roles, responsibilities, and authorities 4.4.1 Resources, Roles, responsibility, and authority New clause to split out resources. DQS Group May 12, 2017 40

risks and opportunities ISO-14001:2015 ISO-14001:2004 Key changes 6.1 Actions to address risks and opportunities 6.1 General 6.1.2 Environmental aspects New requirement relating to risk Risks and opportunities are defined as potential adverse effects (threats) or beneficial effects (opportunities), which may result from environmental aspects, compliance obligations, or from other issues and requirements identified as part of the context of the organization. The intent is for the organization to determine which risks or opportunities it considers to be important to address within its EMS, in order to achieve the intended outcomes of its EMS and support continual improvement. DQS Group May 12, 2017 41

Risks and Opportunities Actions to address risks and opportunities 4.1 external and internal issues 4.2 interested parties 6.1.3 Compliance obligations 4.3 scope of the environmental management system determine risks and opportunities 6.1.2 Environmental aspects 42

ISO-14001:2015 ISO-14001:2004 Key changes 6.1.3 Compliance obligations 4.3.2 Legal and Other Requirements Basically the same requirement, new clause number 6.1.4 Planning Action Specifically requires the organization to take action with regards to significant environmental aspects and compliance obligations. DQS Group May 12, 2017 43

ISO-14001:2015 ISO-14001:2004 Key changes 6.2 Environmental objectives and planning 4.3.3 Objectives, targets, and programs 7.1 Resources 4.4.1 Resources, Roles, responsibility, and authority 7.2 Competence 4.4.2 Competence, training, and awareness 7.3 Awareness 4.4.2 Competence, training, and awareness Requirements are the same, but additional detail added Same requirements, but a separate clause Same requirement, highlighted by separating the clauses Same requirement, highlighted by separating the clauses DQS Group May 12, 2017 44

ISO-14001:2015 ISO-14001:2004 Key changes 7.4 Communication 7.4.1 General 7.4.2 Internal communication 7.4.3 External Communication 7.5 Documented information 4.4.4 Documentation 4.4.5 Control of documents 4.5.4 Control of records 4.4.3 Communication Same basic requirements. Internal and external communications separated out to demonstrate equal importance Documents and records included in same clause. Basic requirements of both remain the same DQS Group May 12, 2017 45

ISO-14001:2015 ISO-14001:2004 Key changes 8.1 Operational planning and control 4.4.6 Operational control Includes a few additional items, including control of outsourced processes, change management, lifecycle during purchasing and design. DQS Group May 12, 2017 46

ISO 14001:2015 defines outsource as make an arrangement where an external organization performs part of an organization s function or process. A process or service obtained from an external provider is not necessarily an outsourced process. Outsourced processes can be viewed as a subset of these externally provided processes or services. Criteria that an organization can use to distinguish outsourced processes from other processes and services are described in Annex A.8.1, which states that an outsourced process is one that fulfils all of the following: it is within the scope of the environmental management system; it is integral to the organization s functioning; it is needed for the environmental management system to achieve its intended outcome; liability for conforming to requirements is retained by the organization; the organization and the external provider have a relationship where the process is perceived by interested parties as being carried out by the organization. DQS Group May 12, 2017 47

ISO-14001:2015 ISO-14001:2004 Key changes 8.2 Emergency Preparedness & response 4.4.7 Emergency Preparedness & response Same basic requirements DQS Group May 12, 2017 48

ISO-14001:2015 ISO-14001:2004 Key changes 9.1 Monitoring, measurement, analysis & evaluation 9.1.1 General 9.1.2 Evaluation of compliance 4.5.2 Evaluation of compliance 4.5.1 Includes requirements for monitoring and measurement related to aspects, compliance obligations, operational controls, etc Same requirements 9.2 Internal Audit 4.5.5 Internal Audits Same basic requirements DQS Group May 12, 2017 49

ISO-14001:2015 ISO-14001:2004 Key changes 9.3 Management Review 4.6 Management Review Same input requirements. Output must include opportunities to improve integration of the EMS with other business processes and any implications for the strategic direction of the organization. 10.1 Improvement Organization must determine opportunities for improvement 10.2 Nonconformity and Corrective action 4.5.3 Nonconformity, corrective action and preventive action Basically equivalent, the specific term preventive action was removed DQS Group May 12, 2017 50

ISO-14001:2015 ISO-14001:2004 Key changes 10.3 Continual Improvement The organization shall continually improve the suitability, adequacy and effectiveness of the environmental management system to enhance environmental performance. DQS Group May 12, 2017 51

TOP 10 #1 Context of the organization requires an understanding of the external and internal factors that could impact the organization s ability to meet its objectives. #2 Identification of Stakeholders and Interested Parties Although self-evident, the revised standards enlarge the group of stakeholders and interested parties beyond customers and owners / shareholders of the organization. DQS Inc.

TOP 10 #3 Risk-based Thinking An added dimension to decision making at all levels within the organization and encourages the consideration of risks and opportunities with achieving the desired objectives. #4 Process Approach A challenge even before the 2015 revisions. Organizations continue to address their management systems on the obsolete clause basis and are in the journey of thinking along business processes. DQS Inc.

TOP 10 #5 #6 Out-sourced Processes The applicability of these requirements has not changed and yet the type of control to be exercised over outsourced processes includes consideration of the environmental aspects and impacts over the life cycle of the product or service. Leadership and Commitment The requirement to demonstrate commitment DQS Inc.

TOP 10 #7 Multi-Site Coordination Larger organizations have an increased level of complexity with multiple locations and assuring consistent roll-out of business processes across the locations. #8 Timing In many large organizations, the timing decision on planning and implementing upgrades to the 2015 revision is made at a corporate or divisional level. While global or corporate processes are more conducive for changes with a short lead-time, DQS Inc.

TOP 10 #9 Terminology The revised standards indeed include new terminology for business concepts currently in place #10 Outcomes and Performance One of the significant changes is the focus on output matters and performance. DQS Inc.

Upgrade Audits QM08 to QM15 UM to UM15 Options

Transition Plan 2015 2016 2017 2018 September 2015: Published International Standard September 2015: Start of 3 years transition period to September 2018

Upgrade Audits Available on www.dqsus.com, under ISO9001:2015 Informational Sessions

Transition Plan An Organization may be upgraded to ISO9001:2015 or ISO14001:2015 During a scheduled Recertification Audit; with minimal additional days, if needed In a Planned Manner During A Surveillance Audit as Stage 2 Upgrade Assessment /Days same as TRI In a Planned Manner During A Surveillance Audit with additional Days as Surveillance Upgrade Assessment Through a Special Transition Audit with performing a Stage 2 Upgrade Assessment. DQS Inc.

Upgrade during a normal recert audit During a scheduled Recertification Audit; with minimal additional days, if needed Stage 2 Upgrade Assessment Stage 1 Stage 2 number of days for a recertification audit, with no reductions New Certificate Issued. New Certification cycle. Good for 3 years. DQS Inc.

Stage 2 upgrade during a surveillance In a Planned Manner During A Surveillance Audit as Stage 2 Upgrade Assessment /Days same as TRI Stage 1 Stage 2 number of days for a recertification audit, with no reductions New Certificate Issued. New Certification cycle. Good for 3 years. DQS Inc.

Surveillance Upgrade Assessment In a Planned Manner During A Surveillance Audit with additional Days as Surveillance Upgrade Assessment. Stage 1 Stage 2 number of days for Surveillance audit, with additional days (~35%) for a Surveillance Upgrade Assessment. New Certificate Issued. Does not reset the certification cycle. No change in certificate expiration date. DQS Inc.

Stage 2 upgrade audit at Special visit Through a Special Transition Audit with performing a Stage 2 Upgrade Assessment. Stage 1 Stage 2 number of days for a recertification audit, with no reductions New Certificate Issued. New Certification cycle. Good for 3 years. DQS Inc.

For Upgrades 2008 to 2015 Transition All Upgrade Options Require Stage 1. Stage 1 upgrade assessment Stage 2 upgrade assessment DQS Inc.

2008 to 2015 Transition Identification of Interested Parties and their requirements. Identification of Gaps and actions needed Identification of Risks and Opportunities Identification of Processes Context of the Organization and Leadership Requirements 66

2008 to 2015 Transition Develop the Stage 2/Upgrade Assessment agenda Review of one round of process-based Internal Audits to ISO9001:2015 At least one management review after the completion of the audits. Ensure Understanding of the Requirements Deployment of Process-based Management System Stage 1 to be done about 2-3 months prior to Stage 2. Review of QF-0900-9 / confirmation of Stage 2 Assessment days 67

DQS Inc.

ISO9001/14001:2015 Available Services ISO9001/ISO14001:2015 Transition Process and Requirements Availability of Gap Assessments 69

2008 to 2015 Transition Please let your Customer Service Representative know should be interested in these services and your Upgrade Plans. 70

Please send your questions to: ISO9001_2015_Questions@dqsus.com DQS Inc.