From @VM1.NODAK.EDU:LISTSERV@VM1.NODAK.EDU Tue Aug 10 07:25:33 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA09206; Tue, 10 Aug 1993 07:25:32 -0700 Message-Id: <199308101425.AA09206@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 7414; Tue, 10 Aug 93 09:24:41 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 4720; Tue, 10 Aug 1993 09:24:41 -0500 Date: Tue, 10 Aug 1993 09:24:41 -0500 From: BITNET list server at NDSUVM1 (1.7f) Subject: Your subscription to list ISO9000 To: Richard J Botting Reply-To: ISO9000-Request@VM1.NoDak.EDU X-Lsv-Listid: ISO9000 Status: RO Dear networker, Your subscription to list ISO9000 (ISO9000 Standards Discussion) has been accepted. Note: your distribution options have been defaulted as per the "SET ISO9000 REPRO" command. You may leave the list at any time by sending a "SIGNOFF ISO9000" command to LISTSERV@NDSUVM1.BITNET (or LISTSERV@VM1.NODAK.EDU). Please note that this command must NOT be sent to the list address (ISO9000@NDSUVM1) but to the LISTSERV address (LISTSERV@NDSUVM1). The amount of acknowledgement you wish to receive from this list upon completion of a mailing operation can be changed by means of a "SET ISO9000 option" command, where "option" may be either "ACK" (mail acknowledgement), "MSGACK" (interactive messages only) or "NOACK". Contributions sent to this list are automatically archived. You can obtain a list of the available archive files by sending an "INDEX ISO9000" command to LISTSERV@NDSUVM1.BITNET (or LISTSERV@VM1.NODAK.EDU). These files can then be retrieved by means of a "GET ISO9000 filetype" command, or using the database search facilities of LISTSERV. Send an "INFO DATABASE" command for more information on the latter. Please note that it is presently possible for anybody to determine that you are signed up to the list through the use of the "REVIEW" command, which returns the network address and name of all the subscribers. If you do not wish your name to be available to others in this fashion, just issue a "SET ISO9000 CONCEAL" command. More information on LISTSERV commands can be found in the LISTSERV reference card, which you can retrieve by sending an "INFO REFCARD" command to LISTSERV@NDSUVM1.BITNET (or LISTSERV@VM1.NODAK.EDU). Virtually, The LISTSERV management From @VM1.NODAK.EDU:LISTSERV@VM1.NODAK.EDU Tue Aug 10 07:25:42 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA09212; Tue, 10 Aug 1993 07:25:40 -0700 Message-Id: <199308101425.AA09212@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 7416; Tue, 10 Aug 93 09:24:49 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 4724; Tue, 10 Aug 1993 09:24:49 -0500 Date: Tue, 10 Aug 1993 09:24:48 -0500 From: BITNET list server at NDSUVM1 (1.7f) Subject: Output of your job "rbotting" To: Richard J Botting Status: RO > SUB ISO9000 Richard J Botting You have been added to list ISO9000. Summary of resource utilization ------------------------------- CPU time: 1.452 sec Device I/O: 396 Overhead CPU: 0.114 sec Paging I/O: 4 CPU model: 9121 DASD model: 3380 From rbotting Thu Jun 23 15:51:50 1994 Received: by wiley.csusb.edu (5.67a/1.34) id AA06234; Thu, 23 Jun 1994 15:51:47 -0700 From: rbotting ("Dr. Richard Botting") Message-Id: <199406232251.AA06234@wiley.csusb.edu> Subject: SIGNOFF ISO9000 To: LISTSERV@VM1.NODAK.EDU Date: Thu, 23 Jun 1994 15:51:47 -0700 (PDT) Cc: rbotting (Dr. Richard Botting) X-Mailer: ELM [version 2.4 PL22] Content-Type: text Content-Length: 17 Status: O SIGNOFF ISO9000 From LISTSERV@VM1.NODAK.EDU Thu Jun 23 16:04:06 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA06477; Thu, 23 Jun 1994 16:04:04 -0700 Message-Id: <199406232304.AA06477@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6720; Thu, 23 Jun 94 17:58:02 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 0570; Thu, 23 Jun 1994 17:58:02 -0500 Date: Thu, 23 Jun 1994 17:58:02 -0500 From: BITNET list server at NDSUVM1 (1.8a) Subject: Output of your job "rbotting" To: Richard J Botting Status: RO > SIGNOFF ISO9000 You have been removed from the ISO9000 list. Summary of resource utilization ------------------------------- CPU time: 0.563 sec Device I/O: 139 Overhead CPU: 0.045 sec Paging I/O: 2 CPU model: 9121 DASD model: 3380 From owner-iso9000@VM1.NODAK.EDU Tue Jun 7 12:00:38 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA21830; Tue, 7 Jun 1994 12:00:34 -0700 Message-Id: <199406071900.AA21830@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8610; Tue, 07 Jun 94 13:35:16 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 6934; Tue, 7 Jun 1994 13:35:15 -0500 Date: Tue, 7 Jun 1994 13:21:56 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Software Cross Reference Matrix/Polinsky Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO From: IN%"zgvqc07@dcmdwg1.dcmdw.dla.mil" 29-MAY-1994 11:25:23.94 Karen, You requested alternative quality standards to consider. For your information, I created a cross reference matrix of audit elements for software, and mapped each element to various paragraphs in the existing Government standards. I have included a copy of the first draft below. Note one of the standards, MIL-I-45208, Inspection System, an old one, has been replaced in the new matrix found in the sw_book.hlp file by ISO 9000 and 9000-3. This may help guide you to a tailored or custom set of standards for your use. Stan ******************************************* *::::::::Stan Polinsky, GS 334-12:::::::::* *::::::::::Computer Specialist::::::::::::* *::::::::DoD/DLA/DCMC/DCMDW-GVX:::::::::::* *::::::DCMO Oxnard Technical Staff::::::::* *::::2530 Financial Square, Suite 210:::::* *::::::::::Oxnard, CA 93939-1613::::::::::* *::::PHN: 805-988-8672 (DSN 972-8672):::::* *::::FAX: 805-988-8666 (DSN 972-8666):::::* *::::BPR: 818-587-1495 (Your number #)::::* *:E-Mail: spolinsky@dcmdwg1.dcmdw.dla.mil:* ******************************************* ~a1 *** UNOFFICIAL*** Computer Software Specification Cross Reference STAN POLINSKY DCMDW-GVX 26 FEB 94 ____________________________________________________________________________ AUDIT AUDIT QUALITY QUALITY QUALITY QUALITY CODES ELEMENTS SPEC SPEC SPEC SPEC MIL-I MIL-Q MIL-S DoD-STD ALPHA 45208A 9858A 52779A 2168 ____________________________________________________________________________ CS-A Organizatonal 3.1 3.1, 5.1 3.1 4.2 Responsibility/Authority CS-B Quality 3.2, 3.4 3.2 3.1 4.4 Assurance/Initial Quality Planning CS-C Computer Program Design 3.2.4, 4.1, 3.3 3.2.2 5.2, 3.2.1 5.3. CS-D Configuration 3.2.4 4.1 3.2.7 5.3 Management CS-E Library Controls 3.2.4 4.1 3.2.5 4.6 CS-F Documentation 3.2.4, 4.1, 3.3 3.2.4 4.6, 5.2 3.2.1 CS-G Programming Standards 3.2.1 3.3 3.2.4 4.6, 5.2, 5.3 CS-H Testing 3.2.1, 6.3 3.2.8 5.3.3 3.3 CS-I Corrective Action 3.2.3 3.5 3.2.9 4.8, 5.3.5 CS-J Reviews and Audits 3.2.1 3.3 3.2.6 5.10, 5.12.6 CS-K Tools, Techniques, 3.2.1 6.2 3.2.1 4.4, Methodologies 5.3.2 CS-L Records 3.2.2 3.4 3.2.1 4.7 CS-M Subcontractor Control 3.1.2 5.1 3.3, 4.2 5.8, 5.9 CS-N Work Instructions, 3.2.1 3.3, 3.2 3.2.2, 4.3, Tasking, Authorization 3.2.3 4.4, 4.5 ____________________________________________________________________________ ~ $ AUDIT AUDIT DESIGN DESIGN DESIGN DESIGN CODES ELEMENTS SPEC SPEC SPEC SPEC MIL-STD DoD-STD DoD-STD MIL-STD 1679A 2167 2167A 498 (SDD) ALPHA (DRAFT) ____________________________________________________________________________ CS-A Organizatonal 5.9.1.1, 5.1.1.1.a 4.3.3, 5.1, Responsibility/Authority 5.9.1.9 4.4 5.15 CS-B Quality 4.4,5.9, 5.1.1.1.e 4.1.3 5.1, Assurance/Initial 5.9.1.7 5.8.1.1 5.15 Quality Planning CS-C Computer Program Design 5.2, 5.2.1.1, 4.2.1, 5.4, 5.6 5.9.1.4 5.3.1.1 4.2.8 CS-D Configuration 4.5, 5.11 5.1.1.1.d 4.5 5.16 Management 5.8.1.2 CS-E Library Controls 5.5.4 5.1.1.1.c 4.1.8 5.16 5.9.1.4 CS-F Documentation 5.11.1.2 5.7.1.1 4.1.1, 5.1, 4.2.1 5.6 CDRLs CS-G Programming Standards 5.3, 5.4.1.1 4.2.8 SDP 5.9.1.5 CS-H Testing 5.8, 5.9, 5.8.2.3, 4.3, 5.9..5.1.2 5.10 5.2.1.6 5.5, 5.8 CS-I Corrective Action 5.8.5 5.8.1.10 4.1.9, 5.17 4.1.10 CS-J Reviews and Audits 5.9.2, 5.8.1.3 4.1.2 5.18 5.9.3 CS-K Tools, Techniques, 5.5 4.3.b 4.2.1, 5.2, Methodologies 4.2.2 5.19 CS-L Records 5.9.1.8 5.8.1.8 4.4.3 5.6 CS-M Subcontractor Control 4.6 5.8.1.6 4.1.6, 5.19 4.1.7 CS-N Work Instructions, 4.1, 4.2, 5.8.1.1, 4.1.3, 5.1, Tasking, Authorization 5.2, 5.3 5.8.1.2 4.2 5.19 From owner-iso9000@VM1.NODAK.EDU Fri Jun 10 10:34:05 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA03823; Fri, 10 Jun 1994 10:34:04 -0700 Message-Id: <199406101734.AA03823@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6505; Fri, 10 Jun 94 11:48:05 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 0545; Fri, 10 Jun 1994 11:48:03 -0500 Date: Fri, 10 Jun 1994 11:46:53 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 16 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO Element 16 - Quality Records General Element Description o A company conforming to the ISO 9001 standard is required to have quality records which demonstrate achievement of required quality and prove effective operation of that company's quality system. o Element 4.16 addresses the retention of quality records and the means of retrieving such records as required. Examples of How Your people can satisfy 9001 requirements: o Your people should know which quality records are essential to the control and maintenance of their department/function. o People responsible for the development and maintenance of quality records should have procedures which address: Identification (records must be legible and identifiable to the product involved), collection (records must be readily retrievable), indexing, filing, storage (retention times must be established and maintained), maintenance and disposition. What Kinds of Questions Can an Auditor Ask Your People? o How are all quality records requiring retention identified? o Do you have documented procedures which are utilized for quality record indexing, creating, maintaining, storing, retrieving, and dispositions? o How is a retention period for all quality records identified? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Fri Jun 10 10:34:12 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA03827; Fri, 10 Jun 1994 10:34:07 -0700 Message-Id: <199406101734.AA03827@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6537; Fri, 10 Jun 94 11:59:17 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 0857; Fri, 10 Jun 1994 11:59:16 -0500 Date: Fri, 10 Jun 1994 11:57:47 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 17 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 17 - Internal Quality Audits General Element Description o A company conforming to element 17 is required to carry out a comprehensive system of planned and documented internal auality audits to verify whether quality activities comply with planned arrangements and to determine the effectiveness of the Quality System. o Audits shall be scheduled on the basis of the status and importance of the activity. o The audits and follow-up actions shall be carried out in accordance with documented procedures. Examples of How Your People Can Satisfy 9001 Requirements: o Establish and maintain an internal audit system. o Ensure internal audit non-conformance findings are promptly addressed and resolved. o Ensure all plant functions understand the objectives of, and feel total ownership for the in-house audit program. What Kinds of Questions Can an Auditor Ask Your People? o Can you show me your documentation for an internal audit program? o Is your audit documentation complete? Your company may want to address the following for an audit procedure: Scope - ISO 9000 series as the standard and which funtions are affected? Objectives - Why this aduit program? Responsibilities - Who does what to make the program successful? Schedule - Which areas will be addressed an how frequently? Escalation Process - How to resolve problems if the audit program doesn't work? o Can I see your audit schedule? o Can you provide evidence that corrective actions are assigned and completed for audit findings? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Fri Jun 10 10:34:23 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA03836; Fri, 10 Jun 1994 10:34:22 -0700 Message-Id: <199406101734.AA03836@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6561; Fri, 10 Jun 94 12:07:36 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1142; Fri, 10 Jun 1994 12:07:33 -0500 Date: Fri, 10 Jun 1994 12:06:03 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 18 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 18 - Training General Element Description o A company conforming to element 18 must establish and maintain procedures for identifying training needs, provide training, and maintain training records. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should be made aware of where and how personal training records are maintained. o Personnel performing specific assigned tasks should be qualified on the basis of appropriate education, training, and/or experience, as required. What Kinds of Questions Can an Auditor Ask Your People? o How is a training plan for personnel whose work impacts quality determined? o Do you utilize a procedure for identifying needs on an ongoing basis, including retraining schedules? o Can you show me records which demonstrate that training has been received? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Fri Jun 10 10:34:30 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA03844; Fri, 10 Jun 1994 10:34:28 -0700 Message-Id: <199406101734.AA03844@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6590; Fri, 10 Jun 94 12:15:37 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1439; Fri, 10 Jun 1994 12:15:35 -0500 Date: Fri, 10 Jun 1994 12:14:15 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 19 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 19 - Servicing General Element Description o The supplier (your company) is required, where servicing is specified in the contract, to establish and maintain procedures for performing and verifying that servicing meets the specified requirements. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should address element 19 procedures for ensuring that maintenance procedures meet the specific needs as contractually defined by a customer. What Kinds of Questions Can an Auditor Ask Your People? o Do you have procedures for performing maintenance activities? o Are items to be maintained and the period of time they will be maintained in the contract? o Do you utilize a procedure for incorporating changes in product resulting from the need to maintain performance? o Can you show me records of customer feedback regarding service? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Fri Jun 10 10:34:32 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA03848; Fri, 10 Jun 1994 10:34:30 -0700 Message-Id: <199406101734.AA03848@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6618; Fri, 10 Jun 94 12:21:56 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1703; Fri, 10 Jun 1994 12:21:54 -0500 Date: Fri, 10 Jun 1994 12:20:32 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 20 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 20 - Statistical Techniques General Element Description o Element 4.20 examines how processes are controlled using statistical techniques. Examples of How Your People Can Satisfy 9001 Requirements: o Ensure establishment of procedures for identifying adequate statistical techniques required for verifying the acceptability of process capability and product characteristics. What Kinds of Questions Can an Auditor Ask Your People? o How are processes requiring statistical control identified? o Can you show me records maintained for results derived from processes using statistical control? o What do you utilize statistical techniques for: -to verify products, -to verigy the capability of processes to produce products, -where normal verification methods do not suffice. (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Tue Aug 10 14:13:15 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11083; Tue, 10 Aug 1993 14:13:11 -0700 Message-Id: <199308102113.AA11083@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8522; Tue, 10 Aug 93 16:08:39 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 1261; Tue, 10 Aug 1993 15:24:03 -0500 Date: Tue, 10 Aug 1993 15:24:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: "OPERATING PROCEDURE" Comments: To: ISO9000@vm1.NoDak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"horsmon@starman.convex.com" 30-JUL-1993 16:22:58.23 Original Subj: Management Review Procedure >I have a general question about this. Do any of you have a documented >procedure for management reviews? If so what is in it? We have a statement >of policy in our quality manual that says we will hold management reviews >and a statement of requirements that shows who will attend and what will be >discussed. >We list results of internal and external audits, customer survey results, >customer complaints, quality performance measures, performance of the >corrective action system, quality policies, the quality manual, and process >improvement as topics. We also state that some of these items will be >reviewed more frequently than others, but all will be reviewed at least >annually. >We hold special management review meetings (2 to 3 per year) to look at >complaints, audits, corrective action, policies, and the quality manual. We >review the other items in the context of Quality Steering Team meetings. Our executive management is our quality steering team. It meets at least >twice per month. Quality performance measures are reviewed monthly. The >customer satisfaction survey results are reviewed annually. >The minutes of these meetings are the evidence of review. Beyond the >statements in the quality manual, we have no other written procedures to >describe management reviews. >How do you do this? >David Huyink >Network System Corporation ************************************************************************ Looks like you have written the "operating procedure" within your quality manual and that's fine. We have a separate operating procedure that defines the management review process and responsibilities. The content is nearly the same as what you've written. No need for additional procedures if you can avoid it! :) Looks like you have a well defined and implemented system which will make any auditor happy. The executive mgmt steering team is even icing on the cake. Don't forget to list the mgmt meeting minutes as a "Quality Record" in your quality manual (Section 16 if you follow ISO9001). Auditors want to know who keeps them and for how long. Steve Horsmon Convex Computer Corp. From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Tue Aug 10 14:33:51 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11265; Tue, 10 Aug 1993 14:33:46 -0700 Message-Id: <199308102133.AA11265@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8563; Tue, 10 Aug 93 16:18:43 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 1506; Tue, 10 Aug 1993 15:29:55 -0500 Date: Tue, 10 Aug 1993 15:31:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: Re: Auditing Questions for Managment Comments: To: ISO9000@vm1.NoDak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"eddy@sws.SINet.SLB.COM" 30-JUL-1993 18:19:13.25 To all and David Huyink, At Schlumberger's Houston Product Center, we have a documented management review procedure (Our Engineering Specification H713025-AA). This procedure is only 2 pages long but specifies - Why Management Reviews are held (Scope) - Who should participate (for us, the VP-GM and his direct reports) - Timing (at least annually; more often if needed. This year we've had two conducted in the first half of '93 in preparation for our preassessment and assessment in H2) - The structure of these Management Reviews: formally stating the topics that should be considered, making sure management doesn't think a Management Review is something stuck on the end of a regular staff meeting. - How Directives from Management will be converted into corrective action and tracked through to closure. - that Records of Management Reviews will be kept as Quality Records. Minutes of these Reviews can serve as records. Follow-up on changes made to the Quality System as a result of these reviews should be documented and attached to show your Review wasn't just an executive "bull" session and that the Review has an impact on your system. We're having fun now! Sincerely, Steve Eddy Certification Manager Schlumberger Well Services - Houston Product Center From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Tue Aug 10 14:34:01 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11270; Tue, 10 Aug 1993 14:33:54 -0700 Message-Id: <199308102133.AA11270@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8589; Tue, 10 Aug 93 16:24:06 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 1776; Tue, 10 Aug 1993 15:43:46 -0500 Date: Tue, 10 Aug 1993 15:38:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: AUDITING RESPONSE -291 Comments: To: ISO9000@VM1.NoDak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"D.J.Homan@nnsgy41.northern.co.uk" 2-AUG-1993 02:22:13.11 Dave, thanks for your comments, I am sorry if the format was a bit odd. With regard to your question concerning written procedures. All that ISO 9000 requires is that you have a procedure that addresses the issues in ISO 9000 and that you are seen to be using them. Unfortunately ISO 9000 does not ask the question, is it a good procedure or how long you have been using it. In theory you could write your quality system today and pass tomorrow. That is why it is always wise when constructing your quality to describe exactly what you do today, and then use continuous improvement techniques to revise it later as per the SEI model. In my part of NT, we have been accredited since 1987 to ISO 9000, and this year we were accredited under the UK Dti TickIT scheme which is used in the UK to assess s/w developers to ISO 9000-3. We find the discipline of a written quality system makes life easier for everyone. Engineers do not spend all their time trying to decide what format to use, how to manage change etc. Collectively the group chooses a methodology and puts it to the test. If its OK fine, if not it is reviewed and updated. We also find that acquiring recognition in the form of ISO 9000 improves the esprit de corps and personal pride. Finally, last night on BBC TV there was a very good program on quality called, "Get better or get beaten" . There is a video and book available from the BBC. I do not know how you would obtain one in the US but the number to call in the UK is 44 81 576 2361. Cheers Dave Homan From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Tue Aug 10 15:00:33 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11363; Tue, 10 Aug 1993 15:00:27 -0700 Message-Id: <199308102200.AA11363@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8792; Tue, 10 Aug 93 16:56:48 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 2787; Tue, 10 Aug 1993 16:23:30 -0500 Date: Tue, 10 Aug 1993 16:23:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: RAB INFORMATION Comments: To: ISO9000@VM1.NoDak.EDU To: Multiple recipients of list ISO9000 Status: RO This may help clarify the difference in IQA and RAB accreditations: Various bodies became certifying bodies (ex. BSI - British Standards Institution, and LRQA - Lloyd's Register Quality Assurance, LTD) to name a couple. It was necessary for there to be an organization to oversee the activities, policies, and principals of these certifying bodies and the National Accreditation Council for Certifying Bodies (NACCB) was established. IQA or Institute for Quality Assurance is a British organization of quality professionals. The IQA operates a system of certification of auditors for quality systems. This system is called the Registration Scheme for Lead Assessors and Assessors of Quality Assurance Management Systems. The IQA is currently the only organization outside of the United States that governs and controls the assessor training and certification process. A register of people who apply and meet the criteria is published by the IQA. The RAB or Registrar Accreditation Board is a national board that accredits those organizations in the United States that perform third-party auditing against the ISO9000 standards. The RAB was established as an affiliate of the American Society for Quality Control (ASQC) to develop a joint ANSI/RAB American National Accreditation Program for registrars of quality systems. The criteria used by RAB to accredit registrars are the same as those used by the EC accreditation organizations. The RAB is seeking formal recognition of its resistrar accreditation scheme in both the United States and Europe. It has negotiated with European countries to achieve mutual recognition of accredited registrars. Hope this helps! All of this information can be found in a highly valuable book "The ISO 9000 Handbook" by Robert W. Peach. It is published by CEEM Information Services. CEEM also publishes the "Quality Systems Update", a monthly Global ISO 9000 Forum and Information Service newsletter. In addition, CEEM sponsors BSI's Total ISO Training Seminar Series. I have taken the BSI courses offered and have passed the Lead Assessor examination. I have applied to the IQA for assessor registration and am awaiting word. There are credits you must gain to become registered. They are based on education, technical merit, and auditing experience. A person may qualify as a provisional auditor, assessor, or lead assessor based on the number of credits earned. As Document Control Coordinator for Dupont Electronic Materials at the Research Triangle Park, N. C. site, the experience of the BSI courses and the ISO knowledge I have gained have been worth every penny! I highly recommend an ISO training seminar for anyone who is, or will be involved in ISO registration. This knowledge has been invaluable in our steps towards registration and my position as an ISO resource. Here is the address for CEEM: (Center for Energy and Environmental Management) CEEM Information Services 10521 Braddock Road Fairfax, VA 22032-2236 (800)745-5565, (703)250-5900 fax (703)250-5313 Thanks, Sarah B. Whittington From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Aug 18 08:44:06 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA08248; Wed, 18 Aug 1993 08:44:03 -0700 Message-Id: <199308181544.AA08248@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 3404; Wed, 18 Aug 93 10:40:15 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 8320; Wed, 18 Aug 1993 10:17:58 -0500 Date: Wed, 18 Aug 1993 10:02:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: Motorola Statement Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"dling@hpcc01.corp.hp.com" "David_Ling" 17-AUG-1993 18:24:50.32 I want to hear feedback from the ISO 9000 network regarding the Motorola statement I received. I do not know the exact publication that this statement was in, but I believe it is from Global Standards. I'll let everyone know the source as soon as I find out. In any case, here's the text of the FAX that I received ... Dave Ling Hewlett Packard ................................................... A Statement Regarding ISO 9000 Richard C. Buetow Senior Vice President and Motorola Director of Quality Motorola is often asked, "Are you obtaining ISO 9000 certification ... and what is your opinion of ISO 9000 as a quality system?" The following is our reply: Motorola is in the process of certifying particular locations to ISO 9000 because a segment of our customer base is obliging us to do so. We presently have obtained ISO 9000 certification in 25 of our worldwide facilities (as of May 1993) and expect 13 more certifications throughout 1993. Our own experience shows it to be of very limited value and it is expensive. In turn, we have informed our supply base that Motorola will not require ISO 9000 as a requirement to do business with us. Motorola will make its purchases based on excellence in products and service, not on compliance to a system of standards. Motorola will neither recommend nor discourage any of its suppliers regarding ISO 9000 certification. Each supplier must make that decision based on other customer obligations. We are critical of how ISO 9000 is being used and misrepresented. The unfortunate mandating of a static, partial quality system as a requirement to do business which does not address the actual quality of product or service sends the wrong message as to the real requirements and actions necessary to serve one's customers. SOme recently certified companies, through advertisements, imply that a customer can be assured of high standards, reliable product and servie as a result of ISO 9000 certification. This is false! ISO 9000 certification has no direct connection to a product or service. There are no quality measurements or minimum standards required for certification. ISO 9000 represents the old paradigm of an internal, overlay, quality program imlying that quality costs money. Over time, qulaity programs of this type fail to provide the required improvement to maintain competitiveness. The new quality system paradigm, which Motorola has observed through worlwide benchmarking of best-in-class companies and which we have experienced over the last six years, is that quality is not a cost, it is a savings. A successful quality system is a customer focused and driven. Quality is not a assignable task, it must be rooted and institutionalized within every step of the business process. A living, dynamic quality system required for today and tomorrow involves all employees, continuous improvement, life long training, metrics, reachout goals, documented and audited results and empowerment. Empowerment moves decision making to those involved with each issue. There is little place for a static and sometimes adversarial set of procedures to be adjudicated by a non-involved third party. Trust must become implicit within the workforce. Quality is everyone's responsibility; continuous improvement is mandatory. ISO 9000 certification, for many companies, has a high probability of becoming a "tranquilizer". With ISO 9000, one can certify poor quality processes and practices and ship product or provide services that fall far short of what is required to compete effectively today and survive in the future. To maintain certification implies conformance to past practices, good and bad! Businesses world-wide would be far better served to embrace the principles and framework as articulated in the award criteria expressed within the United States Malcolm Baldrige National Quality Award (MBNQA). Other countries have used the MBNQA award particulars as a foundation for their national awards. Its non- prescriptive assessment highlights the need for a customer focused, continuous improvement, total quality system. Each firm embracing its principles, will deliver ever-improving value to its customers and, at the same time, will begin to experience internal operational excellence. It would be most unfortunate, in this writer's opinion, to displace the momentum and progress that has been engendered by the massive interest and application of the Baldrige principles over the past 6 years by the distraction and implied threat that, without ISO 9000 certification, a firm cannot do business, and with certification, you have meet the requirement. As I observe the discussions in the printed media, we are approaching that crossroad. The outcome is not clear. From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Mon Nov 1 08:27:36 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA01754; Mon, 1 Nov 1993 08:27:30 -0800 Message-Id: <199311011627.AA01754@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4423; Mon, 01 Nov 93 10:21:37 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 2447; Mon, 1 Nov 1993 10:21:12 -0600 Date: Mon, 1 Nov 1993 09:49:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: ISO Implementation Guide Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"D.J.Homan@nnsgy41.northern.co.uk" 29-OCT-1993 04:27:41.92 Subj: ISO9000 Implementation Guide Many of you have recently been requesting information concerning the implementation of a quality system to ISO 9000. The list below shows the processes my organisation require's to support and maintain a software development project. In addition to the items listed below there is a lso a departmental quality plan that explains the rational behind the proces ses and how compliance to ISO9000 is achieved. The processes are known as Pro ject Standards (PSs) and from their issue numbers you can see that some of them have been around for a very long time, issue 1 of the quality plan was issu ed in 1977. I have indicated those items which I consider essential with a *. Next week we shall be being reassessed by BSI for TickIT ISO9000-3 accredit ation. I hope the list is of some help. Dave Homan TXE Engineering Quality Manager ______________________________________________________________________ _________ PS No Issue Title INDEX 36 Project Standards Index * 0 2 Project Standards Review * 1 21 Project Standards Implementation * 2 7 Development Engineering Planning * 3 5 Documentation Plan * 4 6 Documentation Control * 5 9 Technical Reviews * 6 4 Product Development Lifecycles * 7 3 Verification and Validation Strategy * 8 14 Design Comment * 9 6 Equipment Control 10 4 Reliability 11 5 System Design 12 4 Software Life Cycle * 13 5 Hardware Life Cycle * 14 2 System Definition Documents 15 7 Concessions and Departures 16 2 Glossary of Terms 17 4 Software Design * 18 5 Integration & Validation Procedures * 19 2 OfficePower Documentation Guidelines 20 2 Product Safety * 21 3 Peer Reviews * 22 8 Organisation Plan * 23 draft Model Maintenance Procedures 24 2 Mechanical Lifecycle 25 2 ASIC Lifecycle 26 draft MCU/OPU Development Strategy 28 7 Model Laboratory and Stewardship Procedures 29 5 Component Coding Approval, and CAE/CAD cell gen eration 30 3 Preferred Vendors 31 1 Model Visitor's Protocol 34 1 Power Distribution 40 5 Development Environment Support 45 7 Software Control * 46 4 Interface to the Software Factory * and Media Identification 47 2 Software Unit & Subsystem Testing * 54 4 Project Instigation Procedure * 55 5 Engineering Binder System * 61 2 Development Libraries 62 4 Essential Document Log 64 7 Formal Inspections * 65 9 Key Date Reviews * 67 2 Product Estimation * 69 3 Product Requirement Specification * 71 5 Quality Audits and Records * 72 2 Coding Standard for "C" & "C++" 74 1 Coding Standard for PASCAL 75 2 Pseudo Code Definition 76 4 TXE Software Maintenance * 77 1 Technical Query Process From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Mon Nov 1 09:29:16 1993 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA02346; Mon, 1 Nov 1993 09:29:10 -0800 Message-Id: <199311011729.AA02346@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4743; Mon, 01 Nov 93 11:24:20 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 4015; Mon, 1 Nov 1993 11:22:40 -0600 Date: Mon, 1 Nov 1993 10:25:00 CST Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: JENNEJOHNN@UWSTOUT.EDU Subject: Press Release Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO Subj: Press Release From: IN%"sayhow@solomon.technet.sg" "Foo Say How" 29-OCT-1993 21:38:24.45 I forward here a press release from the WHITE HOUSE regarding the setting up of Customer standard. I wonder if your company has similar "customer service standards"? Would setting such standard be useful for a small organization like mine? (we have 5 staff all in customized software development.) Your input would be helpful. sayhow ----------------------------------------------- THE WHITE HOUSE Office of the Press Secretary For Immediate Release September 11, 1993 EXECUTIVE ORDER SETTING CUSTOMER SERVICE STANDARDS Putting people first means ensuring that the Federal Government provides the highest quality service possible to the American people. Public officials must embark upon a revolution within the Federal Government to change the way it does business. This will require continual reform of the executive branch's management practices and operations to provide service to the public that matches or exceeds the best service available in the private sector. NOW, THEREFORE, to establish and implement customer service standards to guide the operations of the executive branch, and by the authority vested in me as President by the Constitution and the laws of the United States, it is hereby ordered: Section 1. Customer Service Standards. In order to carry out the principles of the National Performance Review, the Federal Government must be customer-driven. The standard of quality for services provided to the public shall be: Customer service equal to the best in business. For the purposes of this order, "customer" shall mean an individual or entity who is directly served by a department or agency. "Best in business" shall mean the highest quality of service delivered to customers by private organizations providing a comparable or analogous service. All executive departments and agencies (hereinafter referred to collectively as "agency" or "agencies") that provide significant services directly to the public shall provide those services in a manner that seeks to meet the customer service standard established herein and shall take the following actions: (a) identify the customers who are, or should be, served by the agency; (b) survey customers to determine the kind and quality of services they want and their level of satisfaction with existing services; (c) post service standards and measure results against them; (d) benchmark customer service performance against the best in business; (e) survey front-line employees on barriers to, and ideas for, matching the best in business; (f) provide customers with choices in both the sources of service and the means of delivery; (g) make information, services, and complaint systems easily accessible; and (h) provide means to address customer complaints. Sec. 2. Report on Customer Service Surveys. By March 8, 1994, each agency subject to this order shall report on its customer surveys to the President. As information about customer satisfaction becomes available, each agency shall use that information in judging the performance of agency management and in making resource allocations. Sec. 3. Customer Service Plans. By September 8, 1994, each agency subject to this order shall publish a customer service plan that can be readily understood by its customers. The plan shall include customer service standards and describe future plans for customer surveys. It also shall identify the private and public sector standards that the agency used to benchmark its performance against the best in business. In connection with the plan, each agency is encouraged to provide training resources for programs needed by employees who directly serve customers and by managers making use of customer survey information to promote the principles and objectives contained herein. Sec. 4. Independent Agencies. Independent agencies are requested to adhere to this order. Sec. 5. Judicial Review. This order is for the internal management of the executive branch and does not create any right or benefit, substantive or procedural, enforceable by a party against the United States, its agencies or instrumentalities, its officers or employees, or any other person. WILLIAM J. CLINTON THE WHITE HOUSE, September 11, 1993. # # # - - - - - - - _______________________________________________________________ From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Fri Jan 7 12:21:34 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11263; Fri, 7 Jan 1994 12:21:32 -0800 Message-Id: <199401072021.AA11263@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 2036; Fri, 07 Jan 94 13:57:53 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 2355; Fri, 7 Jan 1994 13:57:52 -0600 Date: Fri, 7 Jan 1994 13:13:35 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: "CTTC@TIES.K12.MN.US Rich Kelly" Subject: SEI role within ISO 9000/Greenberg Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"mgreenberg@houston.geoquest.slb.com" 23-DEC-1993 16:48:58.00 Subj: Some basics on "The SEI role within ISO 9000" >Subj: Software Engineering Institutes "Capability Maturity Model" and >ISO-9000 > > >Perhaps someone out there knows - how do the Software Engineering Institute's >"Capability Maturity Model" complement ISO-9000 standards for the software >development processes? Copies of parts of my presentation package that discuss the basic SEI & ISO issues follow: What is the SEI CMM ? The SEI CMM (Carnegie Mellon University Software Engineering Institute Capability Maturity Model) was published in 1991 and provides guidance on: o controlling the software development process o evolving towards a culture of software engineering exellence o selecting process improvement stategies Software Process Assessments are: o conducted by an internal team and analyze the software development process o used to identify priorities for process improvement o used to plan an improvement strategy SEI covers the vast majority of ISO issues for software management (mostly level 2; some from levels 3 and 4). ISO addresses a few additional issues for the software process (software maintenance, delivery, installation, and purchasing, purchased software). ISO provides a quality framework for other departments, just as SEI does for software management. SEI works well for software, but does not provide a quality system for commercialization, marketing, customer support & training, hardware engineering, contract administration, accounting, etc. The SEI CMM role within ISO 9001 o SEI addresses the software process exclusively; ISO addresses the entire business. o ISO 9000 and the SEI Capability Maturity Model are complimentary for software. SEI plays an important role in an ISO 9001 process. o ISO 9000 requires that the process be repeatable (SEI=2). o ISO 9000-3/TickIT is about SEI Level 2.5 (in rough terms). o SEI goes way beyond ISO in the software arena (5 levels). o ISO is "looking for objective evidence of compliance" of a quality management process throughout the business. o SEI is a great way to improve the software process. o ISO addresses a number of things that SEI does not. o Prediction : SEI & ISO will merge, but not for a while. What is TickIT? TickIT is a scheme devised by information technology professionals in the U.K. and is supported by the Department of Trade and Industry and the British Computer Society. They have published: TickIT - Guide to Software Quality Management System - Construction and Certification TickIT specifies the use of ISO 9000 and results in a TickIT registration that directly addresses software issues. In using TickIT we agree to: o use ISO 9000-3 as a guideline for ISO 9001/2/3 (already done by most companies) o having a three year registration period with semi-annual visits during that period (already done by most registrars) o use TickIT assessors - they have specific software auditing experience and training (seems like a good idea) Reasons to be careful with TickIT at this time: there are a limited number of TickIT assessors in the U.S., but the number is growing rapidly. There is an effort underway to have a U.S. based software scheme, but agreement is many years away. There are 5 TickIT registrars: BSI, DnV, Lloyd's (LRQA), Bureau Veritas (BVQI), and SGS Yardsley. A number of SEI CMM / ISO 9001 mappings exist. The KPA/ISO element mapping shows that ISO 9001 requires that most of SEI level 2 be in place and adds a few things that are in higher levels. "Opinions are those of the author." "Planning is everythin **************************************************************************** Michael A. Greenberg 5858 Westheimer, Suite 800 Schlumberger GeoQuest Houston, TX 77057 U.S.A. Manager, ISO9000 Project (713)952-2100 x649 Quality Systems Management (713)952-2520 (fax) mgreenberg@houston.geoquest.slb.com SGQHOU::MGREENBERG **************************************************************************** From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Fri Jan 7 12:40:08 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11408; Fri, 7 Jan 1994 12:39:11 -0800 Message-Id: <199401072039.AA11408@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 2164; Fri, 07 Jan 94 14:27:49 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 3036; Fri, 7 Jan 1994 14:27:47 -0600 Date: Fri, 7 Jan 1994 13:30:07 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: "CTTC@TIES.K12.MN.US Rich Kelly" Subject: SEI Complement to ISO/Hazelwood Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"markeh@czar.win.net" 24-DEC-1993 07:03:37.50 Subj: RE: SEI Complement to ISO/Edgar >From: IN%"psgwe01@sdc.cs.boeing.com" 8-DEC-1993 13:27:38.26 > >Subj: Software Engineering Institutes "Capability Maturity Model" and ISO-9000 > >Perhaps someone out there knows - how do the Software Engineering Institute's >"Capability Maturity Model" complement ISO-9000 standards for the software >development processes? > >Gerald Edgar >gwe3409@atc.boeing.com Gerald, ISO 9000 does not have any standards for software development. It doesn't have any standards for any development. ISO 9000 is a series of internationally accepted standards for quality assurance management systems. It proposes an organizational structure and processes for assuring the production of goods or services that meet a consistent and agreed upon level of quality for a company's customers. It is not a product specification, but a management system standard that is concerned with how an organization provides for quality in their products consistently, all the time. The process involves all the departments and functions in the organization that can in any way affect this quality. The guiding principle behind management system standards is "do it right the first time" by imposing discipline in the execution of instructions. Standards such as you reference set a level of quality, where ISO says quality = fitness for purpose or use. ISO neither sets nor imposes a level of quality. It says to document what you say you do and perform according to those procedures. Periodic audits reveal if you're actually doing what you say you do. Hope this helps understand ISO 9000 better. Mark Mark E. Hazlewood Internet: markeh@czar.win.net Fribourg, Switzerland Telephone: +41 37 821 251 +41 37 284 742 Telefax: +41 37 248 397 +41 37 284 442 From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Mon Feb 21 15:32:10 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA03672; Mon, 21 Feb 1994 15:32:06 -0800 Message-Id: <199402212332.AA03672@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 9236; Mon, 21 Feb 94 14:43:10 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 3392; Mon, 21 Feb 1994 14:43:08 -0600 Date: Mon, 21 Feb 1994 14:45:03 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Summary/Saarelainen Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"MARKKUS@delphi.com" 18-FEB-1994 13:49:20.26 Subj: Summary of Research Markku J. Saarelainen, P.O. Box 1672, Roswell, Georgia 30077, USA, Fax: USA-(404)-998-7855 Summary of Research The ISO 9000 standards and guidelines have become very important elements of the international business. The number of ISO 9000 certifications issued in North America and Europe is growing rapidly. The ISO 9000 series has become the baseline for quality assurance and quality management in many industries; in some cases it is the requirement to stay in business or to start seriously doing business. The ISO 9000 processes are unique to each facility. However, there are some common characteristics in all development processes. Typically, the development work requires the creation of quality documentation including policies, procedures, work instructions and forms. The implementation of these documents requires changes in current practices, operational models and processes, which can cause resistance to change within the facility. In a typical organization, approximately 20 % of all personnel are involved in the development of the quality documentation. The facility most often has provided both the ISO 9000 and quality auditing training for it's personnel. The management is typically participating actively in the development process and the Steering Committee is established for coordinating and monitoring the process. Typical project management tools are milestones and project plans, and the ISO 9000 process typically lasts approximately 13 months. Generally, most facilities are able to meet their original timeline for the ISO 9000 development. The biggest problem during the ISO 9000 development processes is the lack of time, which can be minimized by providing adequate time management techniques for all development personnel. Three other main problems are the lack of knowledge, the lack of training and the lack of resources other than time. Typically, the lack of commitment, the loss of personnel and the lack of coordination are not perceived as problems during the process. The ISO 9000 development process is most often a short term project to meet those requirements that have been established in the ISO 9000 series and it is not used as a tool to change current organizational culture including fundamental values, norms and philosophies of the organizational behavior. The cultural studies are not typically performed before the ISO 9000 development process and there is often no training during the process in the following areas: cultural change, procedure writing, statistical techniques and process improvement. The future requirements for the quality assurance shall enforce changes in many industries. The ISO 9000 series or similar standards are becoming important requirements in new product regulations and legislations both in North America and Europe. The proposed Good Manufacturing Practices (GMP) is more consistent with the ISO 9000 requirements and many other regulations are being changed to meet international quality assurance standards. These change processes will enforce the ISO 9000 movement more in the future. In addition to the regulatory changes, the requirements of the ISO 9000 series are also being revised by the standardization organizations, which will enforce further changes in some elements of the quality management systems. The development process is not over after the certification is achieved, but it continues when new quality requirements are established - all facilities have to facilitate the continuous improvement. From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Feb 23 10:57:26 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA21386; Wed, 23 Feb 1994 10:57:24 -0800 Message-Id: <199402231857.AA21386@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5682; Wed, 23 Feb 94 12:45:47 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 6334; Wed, 23 Feb 1994 12:45:13 -0600 Date: Wed, 23 Feb 1994 10:08:06 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Software/Rockwell Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"0002981600@mcimail.com" "Bradley Rockwell" 17-FEB-1994 14:14:10.89 Subj: ISO9000 Documents I am new to this list and to the ISO9000 standards. We are just starting to look at ISO9000 in my organization and I am very interested in how ISO9000 handles software development. Any input on this would be appreciated. I would also like to know if there is a place on the internet that one can obtain electronic copies of the ISO9000 standards. I am especially interested in copies of ISO9000-3 and ISO9001. I understand that these standards have to do with software development. If there is a place I can get these via FTP, please let me know. Thanks, Brad Rockwell Manager, P/LM Systems MCI 400 International Parkway Richardson, TX. 75081 298-1600@mcimail.com rockwelb@mary.iia.org Welcome Brad, The LISTSERV@vm1.Nodak.EDU provides subscribers with commands that will allow you access to the archives. Many, if not all, of your questions have been answered and you'll find this information there. If any ISO9000 subscribers would like to add to this response, please do. Nancy From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Feb 23 14:36:40 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA24596; Wed, 23 Feb 1994 14:36:38 -0800 Message-Id: <199402232236.AA24596@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5790; Wed, 23 Feb 94 13:14:28 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 7446; Wed, 23 Feb 1994 13:14:08 -0600 Date: Wed, 23 Feb 1994 10:35:40 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Flowchart Standard??/Marshall Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"CH0LEMT@GE1VM.SCHDY.ge.com" 18-FEB-1994 08:07:13. I recommend ABC Flowcharter for Windows by Micrografx. Easy to use, OLE server, other applications can be launched from a shape, index info. is kept, procedures can be blown up (i.e., one can click on a procedure shape and view the procedures that make it upon another chart/file). Last but not least, there is a shape palette expressly for ISO 9000, although I don't know how Micrografx knows what shapes should be used for ISO 9000. Does anyone know if there is a standard for shapes to be used in a flowchart? Les Marshall Jr Schenectady NY From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Fri Feb 25 14:28:59 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA18159; Fri, 25 Feb 1994 14:28:57 -0800 Message-Id: <199402252228.AA18159@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 2746; Fri, 25 Feb 94 12:00:49 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 6390; Fri, 25 Feb 1994 11:47:51 -0600 Date: Fri, 25 Feb 1994 11:31:52 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Basic ISO 9000 Info/Greenberg Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"mgreenberg@houston.geoquest.slb.com" 24-FEB-1994 12:51:42.73 Subj: Basic ISO 9000 information A number of recent postings have asked for basic information on "getting started or learning the ISO 9000 basics." The following is one of the appendix pages from an internal training package. All of this has been posted at some point in the past, but it seems time to repost it for new BB members. -------------------------------------------------------------------------------- ISO Information Sources - "the Starter Pak" Suggested reading list for employees interested in ISO 9000: NISTIR 4721 Questions and Answers on Quality, the ISO 9000 Standard Series, Quality System Registration, and Related Issues NISTIR 5122 More Questions and Answers on the ISO 9000 Standard Series and Related Issues Available together in one publication from: (free) The U.S. Department of Commerce National Institute of Standards (NIST) Office of Standards Services Gaithersburg, MD 20899 (301)-975-3058 ask for the ISO 9000 packet ISO 9000 Questions and Answers CEEM Information Services 10521 Braddock road Fairfax, VA 22032 (800)669-1567 ask for the ISO 9000 packet American Society of Quality Control (ASQC) (800)248-1946 ask for the ISO 9000 packet They have a good publications catalog that includes the standards. There are numerous books on the market. One of the most comprehensive is "The ISO 9000 Handbook" by Robert Peach 2nd Edition, 1994. Available from CEEM (above). **************************************************************************** Michael A. Greenberg 5858 Westheimer, Suite 800 Schlumberger GeoQuest Houston, TX 77057 U.S.A. Manager, ISO9000 Project (713)952-2100 Quality Systems Management (713)952-9504 (fax) mgreenberg@houston.geoquest.slb.com SGQHOU::MGREENBERG **************************************************************************** From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Tue Mar 15 18:15:12 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA04638; Tue, 15 Mar 1994 18:15:07 -0800 Message-Id: <199403160215.AA04638@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5555; Tue, 15 Mar 94 19:32:06 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 1463; Tue, 15 Mar 1994 19:32:05 -0600 Date: Tue, 15 Mar 1994 16:24:40 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Generalizations/Smith Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"G.E.Smith@massey.ac.nz" "G.E. Smith" 14-MAR-1994 15:55:00.15 Subj: RE: ISO Generalizations/Benner Gerry Benner provided some useful comments on the use of ISO9001. However anyone looking at these standards for the first time should be aware that ISO9001 is only part of a set. At least two other standards in the set should be read in conjunction with ISO9001. Others apply in particular situations. ISO9000-1 is a road map to the use of the standards. In its new form it is a particularly valuable guide to the use of standards and what can be achieved by using them. This should be the starting point, before looking at 9001. ISO9004-1 is a description of a full system (although in its current form it still has a few gaps). This is the standard you should look at if you are concerned with making your system work well for you and your customers. It has a lot more detail and guidance than ISO9001 has. It is a target standard or suggested standard. Then ISO9001 (or 9002 or 9003), can be addressed sensibly. It describes the MINIMUM requirements for external quality assurance, in a form that allows for accreditation that the minimum requirements are being met. Gordon Smith -- ------------------------------------------------------------------------- | Gordon Smith , Senior Lecturer | EMail: G.Smith@massey.ac.nz | | Department of Production Technology | Phone: +64 63 69099 extn 8342 | | Massey University | FAX: +64 63 505604 | | Palmerston North, New Zealand | | ------------------------------------------------------------------------- From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Mon Mar 21 09:44:21 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA04917; Mon, 21 Mar 1994 09:44:20 -0800 Message-Id: <199403211744.AA04917@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 2254; Mon, 21 Mar 94 10:20:33 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 1645; Mon, 21 Mar 1994 10:20:32 -0600 Date: Mon, 21 Mar 1994 10:06:48 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Baker to Imgrund Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"hsw0001@hq.dla.mil" 17-MAR-1994 19:23:14.93 > > From: IN%"mci@swanson.com" "Mark Imgrund" 7-MAR-1994 17:07:26.83 > > Subj: Half-Day Overview Presentations on ISO 9000 > > Subject: Effective ISO 9000 presentations for management buy-in > > > I am looking for recommendations that others might have on individuals or > organizations that have made *effective* on-site presentations to their senior > management, covering the following topics in a < 1 day presentation, for the > principal purpose of educating the management staff in what to expect from the > certification process, and help gain their informed buy-in: > > 1. Brief overview of what ISO 9000 is about > > 2. The benefits other organizations have realized from certification > > 3. Rough ideas of what can be expected of a company in the 20 elements, especially as it applies to software > > 4. What to expect from a registrar; what not to expect. > > Since I expect this overview training to occur some time after my one hour ISO > proposal to (mostly) this same group of managers, I'm principally interested > in the content of item (3), but NOT in a lot of detail. Ideally, the training > would be software-slanted, but that is a 'want', not a 'need'. > > Has anybody out there had such a presentation, and be willing to provide me > with info on who to contact for further information? > > > ************************************************************************ > Mark C. Imgrund Phone: (412)746-3304 > mimgrund@swanson.com Fax: (412)746-9494 > Manager, Quality Assurance Dept. Mail: P.O.Box 65 > Swanson Analysis Systems, Inc. Houston, PA > 15342-0224 > "In God we trust... everyone else's Shipping: Johnson Road > software we verify." Houston, PA 15342 > ************************************************************************ > One person who may have such a presentation is Mike Smith in Upland, CA. I would suggest that you contact him. His number is (909) 981-6918. Manny Baker (310) 278-7241 From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Mar 30 12:48:30 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05784; Wed, 30 Mar 1994 12:48:29 -0800 Message-Id: <199403302048.AA05784@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8349; Wed, 30 Mar 94 11:42:38 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 6153; Wed, 30 Mar 1994 11:42:36 -0600 Date: Wed, 30 Mar 1994 11:34:13 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: ISO cd-rom/Arkin Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"ila2015@zeus.datasrv.co.il" "Asaf Arkin" 28-MAR-1994 15:54:50.66 > I am an industrial engineering student at the Rochester Institute of > Technology. I was wondering whether I can obtain ISO standards, especially > regarding the 9000 series on cd-rom format for educational purposes. All you need are the ISO 9000 guidelines, the ISO 9001 standard itself, and ISO 9004 which are the guidelines to implementing TQM. ISO 9002/3 are just subsets of ISO 9001, and the rest of the standard are guidelines for implementation (for example, ISO 9000.3 talks about the software industry). That whole lot is no more than 150 pages long. But you can get ISO 9000 on a CD. The CD as I recall contains some other information apart from the standard itself, like future directions. You can write to ISO at: International Organization for Standardization Case Postale 56 CH-1211 Geneve 20 Switzerland or, you can try ASQC -- their publications catalog is 85 pages packed with books, video tapes and other material concerning TQM and ISO 9000. Their address is: ASQC 611 East Wisconsin Avenue P.O.Box 3005 Milwaukee Wisconsin 53201-3005 Tel: 1-800-248-1946 Asaf Arkin ila2015@zeus.datasrv.co.il Fax ++972-3-695-2759 From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Mar 30 14:30:29 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA07119; Wed, 30 Mar 1994 14:30:22 -0800 Message-Id: <199403302230.AA07119@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 6623; Wed, 30 Mar 94 12:18:58 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 7756; Wed, 30 Mar 1994 12:18:57 -0600 Date: Wed, 30 Mar 1994 12:04:57 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Software Production/Stovsky Comments: To: ISO9000@VM1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"mpstovsky@aol.com" 29-MAR-1994 09:42:14.25 Subj: RE: ISO 9000 For Software Production In a recent posting, Marc Pierrat asked a number of questions regarding the application of ISO 9000 to software development. Included were queries about where to get more information, the SQSR effort, and TickIT. Your observation about the ISO universe being focused on production and manufacturing seems accurate. Technical Committee 176 (the group responsible for ISO 9000) stresses the generic nature of the standards. Nevertheless, they recognized the need for help for software development organizations. In 1991, ISO released 9000-3, "Guidelines for the Application of ISO 9001 to the Development, Supply, and Maintenance of Software." The goal of this document is to assist software development organizations seeking registration to ISO 9001. Many organizations have used 9000-3 as a quality system model for software development. However, because it is a guidance document rather than a standard, auditors for 9001 cannot write nonconformances against an organization that does not follow its suggestions. A copy of 9000-3 can be obtained from the American Society for Quality Control in Milwaukee. Their phone number is (800) 248-1946. SQSR, the Software Quality Systems Registration project, is the American effort to develop TickIT in the U.S. There have been several drafts of the SQSR manual. At this time, the Registrar Accreditation Board (RAB) has not decided if it will adopt the SQSR committee's proposal. The current timetable for a decision is April 1994, but the RAB has postponed making a decision several times in the past year. For more information about SQSR contact one of the committee members. They include the following. Jack McKissick Software Quality Consulting 4587 Stoneledge Lane Manlius, NY 13104 Jim Roberts Bellcore 6 Corporate Place 1C-231 Piscataway, NJ 08854 Taz Daughtrey Babcock & Wilcox P.O. Box 10548 Lynchburg, Virginia 24506 Bob Thien Bellcore 6 Corporate Place 1E-217 Piscataway, NJ 08854 TickIT is a sector scheme registration for software developed by the British information technology industry. It uses 9000-3 as a starting point, but adds more presecriptive elements. The "TickIT book" can be obtained from the TickIT Project Office, 68 Newman Street, London W1A 4SE. The book contains 4 parts: a copy of 9000-3, a purchaser's guide, a supplier's guide, and an auditor's guide. I hope this helps. If you have additional questions, feel free to contact me. Michael Stovsky Telephone / FAX (614) 847-0431 e-mail: mpstovsky@aol.com From owner-iso9000@VM1.NODAK.EDU Thu Apr 28 18:59:03 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA29948; Thu, 28 Apr 1994 18:58:59 -0700 Message-Id: <199404290158.AA29948@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4235; Thu, 28 Apr 94 20:44:19 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1868; Thu, 28 Apr 1994 20:44:17 -0500 Date: Thu, 28 Apr 1994 20:43:59 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: SW Book Abbreviations/Mittelmann Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO From: IN%"zgvqc07@dcmdwg1.dcmdw.dla.mil" 28-APR-1994 14:44:30.04 Rudolf, You have really hit on a great value-added suggestion! I will implement the idea before doing anything else to the SW Book. I still have to finish a database I'm developing for one of the internal groups at work (PROCAS) (Proactive Contract Administration). By the way, I'm sure you know the Department of Acronyms is responsible for generating all the acronyms we use. I don't think the government could get along without speaking in criptic language, and the prerequisite is an extensive acronym vocabulary. :-> Stan, With your perfect installation description I was successful to install the SW_BOOK on my PC under OS/2-Windows. For me as a beginner in the fields of Software-QA it was very interesting to read what could and should be considered when producing software. My first problem when reading the book was to scope with the lot of abbreviations used. I guess that more people might have this problem (-: therefore I suggest to add a section with the used abbreviations as a first step. A future extension might be to add this in a context-sensitive form, e.g. when clicking the mouse-button on an abbreviation a pop-up-window could be opened with the associated information. For your convenience I include a sorted list of abbreviations I found in your book and the long terms as they are mentioned in the book. Regards Angelika Mittelmann ------- Abbreviation Long Term ATE Automatic Test Equipment CAO Contract Administration Office CAR Corrective Action Request CAS Contract Administration Services CDRL Contract Data Requirements List CIO Continuous Improvement Opportunity CLIN Contract Line Item Number CRLCMP Computer Resources Life Cycle Management Plan CSCI System/Computer Software Configuration Item DCMC Defense Contract Management Command DD Inspection and Acceptance (I&A) at destination DID Data Item Description ECP Engineering Change Proposal FAT Formal Acceptance Testing FCA Functional Configuration Testing FQT Formal Qualification Testing GFE Government Furnished Equipment IV&V Independent Validation and Verification KMP Key Measurement Point LT Letter of Transmittal MCCR Mission Critical Computer Resources MOA Memorandum of Agreement NDS Non Developmental Software (from DoD-STD-2167) PAS Pre-Award Survey PCA Physical Configuration Audit PCO Procurement Contracting Officer PI Program Integrator PMO Program Management Office PQDR Product Quality Deficiency Report PROCAS Process Oriented Contract Administration Services PST Program Support Team SCE Software Capability Evaluations SCMP Software Configuration Management Plan SD Inspection at source, Acceptance at destination SDP Software Development Plan SIL Software Integration Lab SP Software Professional SPI Subcontractor Program Integrator SPO System Program Office SQPP Software Quality Program Plan STR Software Trouble Report WBS Work Breakdown Structure ================= rudolf mittelmann systems theory Johannes Kepler University Linz Austria Europe From owner-iso9000@VM1.NODAK.EDU Mon May 2 12:43:41 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA02946; Mon, 2 May 1994 12:43:39 -0700 Message-Id: <199405021943.AA02946@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 2815; Mon, 02 May 94 14:32:39 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1148; Mon, 2 May 1994 14:32:37 -0500 Date: Mon, 2 May 1994 14:31:32 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Corrections to Acronym List/Polinsky Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO From: IN%"zgvqc07@dcmdwg1.dcmdw.dla.mil" 30-APR-1994 16:26:58.77 In my response to the implementation of an Acronym list in the SW_BOOK, I went too quickly in defining the blanks. Please note the correction: CAO Cognizant Administration Office is the correct term, as defined in the FAR (Federal Acquisition Regulations). As soon as I read it back after mailing it to the listserver I noticed the mistake. Sorry 'bout that. Stan Polinsky From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Mar 9 08:32:53 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA04118; Wed, 9 Mar 1994 08:32:49 -0800 Message-Id: <199403091632.AA04118@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4767; Wed, 09 Mar 94 10:12:30 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 0363; Wed, 9 Mar 1994 10:12:28 -0600 Date: Wed, 9 Mar 1994 10:11:41 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Roadmap/Bytheway Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO The following message arrived in my mail because I subscribe to bpr.... Nancy Daniel Ritsma writes (to MARKKUS@delphi.com, about "ISO 9000 Development Roadmap", with a copy to bpr@mailbase.ac.uk): * *A while ago you mailed into bpr a message with the title above. Do you *know that there is a newsgroup on ISO9000? If you want I mail you the *adress. * *Do you have a some good references explaining ISO9000? I would like to *become more knowledgable on it. * In case Daniel has not yet bought a copy of ISO9000, and for those who are interested, I have the following information and comments: 1 BASICS If you have not got 9000, it's in three parts and none of them is more than a few pages long. They are 9001, 9002 and 9003 (surprise!); there are other parts (actual or intended) which deal with configuration management and other specialised topics in the general area. If you buy even just ISO9001 and read it (it will take about 17 minutes to do so) that will put you ahead of 95% of the people who talk about it. You can get it from any national standards body - ANSI, BSI, DIN, AFNOR, etc etc 2 APPLICATION TO SOFTWARE ENGINEERING Its application to software engineering is discussed in ISO9000-3. I know of no other special interpretation of it for specialised application. 3 UPDATES AND REVISIONS There is a minor revision due this summer. Any one has the opportunity (and obligation?) to contribute to the updating process through their national standards body. There is a major re-write beginning which (I believe) will have a very strong process orientation. Expected publication nearer the end of the millenium (?!). 4 UK ACTIVITY IN THE "DEVELOPMENT" SENSE There has been a study in the UK called the QUANTUM study which takes the SEI (Carnegie Mellon) SE Maturity Model and maps 9000 into it. This study shows that 9000 is only useful for organisations in the middle of their maturity cycle. Earlier (entrepreneurial) organisations have no easy way of using it. Equally, later (ageing?) organisations need something much more. (If you don't know the SEI model you need to get input about it - it's good - I'm sure lots of its content is applicable to BPR). 5 RELATED ISO STANDARDS DEVELOPMENT ACTIVITY There is an ISO project to develop standards for SOFTWARE PROCESS IMPROVEMENT - the popular handle for the project is the "SPICE" project. This is also working with 9000 and the SEI Maturity Model and will produce a whole portfolio of new standards for the assessment and improvement of software engineering processes. The convenor for this work is Alec Dorling accessible via brameur@a.sss.co.uk I am sure that he would be interested to hear from anyone with an interest, and time to contribute to this work. 6 GENERAL COMMENT ON MATURITY ISSUES This maturity stuff is fascinating. Professor Michael Earl (London Business School) has done some great work on different approaches to (IS) strategy in business, depending on the maturity of the strategic processes within the business. I think there are major issues for BPR initiatives depending upon maturity of: - the organisation that's doing it - the processes that they use to do it - the industry within which they are working Does anyone agree that maturity is an interesting BPR issue? Sounds like the beginning of a good doctoral thesis to me ... Andy Bytheway Information Systems Research Centre Cranfield School of Management Cranfield BEDFORD MK43 0AL United Kingdom Tel: +44 234 751122 Fax: +44 234 751806 email: a.j.bytheway@cranfield.ac.uk or: 100014.3274@compuserve.com From @VM1.NODAK.EDU:owner-iso9000@VM1.NODAK.EDU Wed Mar 9 10:05:40 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05675; Wed, 9 Mar 1994 10:05:36 -0800 Message-Id: <199403091805.AA05675@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4925; Wed, 09 Mar 94 10:42:11 CST Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.1d/1.7f) with BSMTP id 1582; Wed, 9 Mar 1994 10:42:09 -0600 Date: Wed, 9 Mar 1994 10:37:18 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Industry Relevance Comments: To: ISO9000@vm1.Nodak.EDU To: Multiple recipients of list ISO9000 Status: RO From: IN%"johnd@lts.sel.alcatel.de" There are papers produced in the UK by the Department of Trade and Industry which overview TQM and the relevance of the ISO9000 series to industry. I suspect in other countries, the equivalent bodies also produce such overviews in the local language. Worth checking out, particularly if your need is to `sell' such approaches to senior management. > [...] > 2 APPLICATION TO SOFTWARE ENGINEERING > > Its application to software engineering is discussed in > ISO9000-3. I know of no other special interpretation of it > for specialised application. For software process improvement/ISO9000 take a look at the TickIT Guide from the UK DTI (lots of controversy in the US at the moment though!). Also take a look at Bootstrap, a pan-European process improvement approach (sponsored by the EC) which directly facilitates ISO 9000 certification programmes. On the other side of the Atlantic, there is Trillium, a Canadian software process improvement approach (telecomms industry), which also takes into account ISO9000. > > 5 RELATED ISO STANDARDS DEVELOPMENT ACTIVITY > > There is an ISO project to develop standards for SOFTWARE > PROCESS IMPROVEMENT - the popular handle for the project > is the "SPICE" project. Some early drafts can already be obtained. Contact you national standards body or the ISO (above) for further info. Best Regards, John. -- John Donaghy Email: johnd@lts.sel.alcatel.de Alcatel-SEL Dept. US/END Phone: +49-711-821-6465 Lorenzstrasse 10 Software Engineering Fax: +49-711-821-71168 D-70435 Stuttgart <<< opinions are my own >>> From owner-iso9000@VM1.NODAK.EDU Fri May 13 15:54:31 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA17323; Fri, 13 May 1994 15:54:30 -0700 Message-Id: <199405132254.AA17323@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4063; Fri, 13 May 94 16:38:40 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1250; Fri, 13 May 1994 16:37:29 -0500 Date: Fri, 13 May 1994 16:22:40 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: ISO 9000 Changes/Arter Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO From: IN%"0004448462@mcimail.com" "Dennis Arter" 11-MAY-1994 16:03:39.24 ISO 9000 Series Revisions The phase one (minor) revisions to ISO 9000-1, 9001, 9002, 9003, and 9004-1 have hit the street in their final and typeset draft. This extra Draft International Standard (DIS) confirmation ballot is per subclause 5.1 of the Vienna Agreement and no changes are allowed. It is either up or down. The ballot ends on 7 June 1994. Here is a summary of the changes to 9001, 2, and 3, which are the ones used for quality system registration. This info was provided by Messrs. Durand, Marquardt, Pyle, and Peach in a paper called "Phase 1 revisions of ISO 9000 series." This came out as an undated and copyright free ISO 9000 Forum special report. By the way, you can contact the ISO folks directly on the internet at central@isocs.iso.ch +++++++beginning of quotation+++++++ One improvement priority was to make the clause structures of the three quality assurance standards identical. Here is what has and has not changed: - The structure of ISO/DIS 9001 remains unchanged. - The ISO/DIS 9002 structure has been changed by adding a heading for Subclause 4.4, Design control, followed by the statement: "The scope of this International Standard does not include quality system requirements for design control." - Requirements for servicing have been added in ISO/DIS 9002 as Subclause 4.19. - The ISO/DIS 9003 structure has been changed by adding headings that act as "place keepers" for four subclauses that do not contain requirements (subclause 4.4, 4.6, 4.9, and 4.19). ISO/DIS 9003, however, now includes additional quality system elements for contract review (subclause 4.3), control of customer-supplied product (subclause 4.7), corrective action (subclause 4.14), and internal quality audits (subclause 4.17). The additional requirements ensure that all three quality assurance models embrace a core set of quality system elements (within their defined scopes) that address customer requirement evaluation and adequate demonstration of product conformity. The following additional changes have been incorporated as appropriate, given the respective scopes of the standards: - Ensuring continuity with the 1987 versions of the standards; - Modifying some subclause titles to make them consistent among standards; - Ensuring consistency of subclause content among the standards; - Clarifying the requirement text; and - Enhancing the scope of some existing quality system requirements. The specific changes to the quality system requirements are given below. In Clause 0, Introduction, the reference to quality systems being "suitable for two-party contractual purposes" has been replaced by the phrase "quality systems suitable for... demonstrating... capability, and for the assessment of such... capability by external parties." Subclause 4.1.1, Quality policy, has been enhanced with respect to its relevance to customer's expectations and needs, and the supplier's internal organizational goals for meeting policy requirements. Subclause 4.1.2.2, Resources, has been expanded to include management, work performance, and verification activities. Subclause 4.2.1, Quality system - General, now includes a requirement for a quality manual that defines the documentation structure of the quality system. Subclause 4.2.2, Quality system procedures, has been enhanced to clarify the degree of documentation required for the quality system. The subclause now states that the extent of documented procedures required for work activities shall depend on the skills needed, the methods used, and the training acquired by personnel involved in performing the activity. Subclause 4.2.3, Quality planning, has been added. It covers quality system planning and product quality plans. The requirement states that the quality plan for a producer, project, or contract may be in the form of a detailed reference to those documented procedures of the quality system that are appropriate to providing complete assurance of product quality. Subclause 4.3, Contract review, now includes precontract tender arrangements as well as contract and ordering requirements. Subclause 4.4, Design control, has been expanded to include design validation, and separate requirements for design review and design verification. Subclause 4.9, Process control, includes additional requirements for maintaining process equipment to ensure continuing process capability. Subclause 4.14, Corrective and preventive action, now includes separate requirements for corrective and preventive action. Corrective action is directed towards eliminating the causes of actual nonconformities, and preventive action is directed towards eliminating the causes of potential nonconformities. +++++++end of quotation+++++++ Well, there you have the changes to the big three. I don't know the hidden meanings and interpretations for these revisions and each organization will be affected differently. I do know that the above changes are kinda minor, when you look at the bigger picture. If you truly conform to the 1987 version, then these revisions will be but a ripple. ------------------------------------------------------------ Dennis R. Arter, "The Audit Guy" Columbia Audit Resources, 116 N. Fifth, Pasco, WA 99301, USA 509/547-1243, fax/547-6307, internet: 0004448462@mcimail.com From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:42:52 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05486; Wed, 18 May 1994 17:42:50 -0700 Message-Id: <199405190042.AA05486@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8188; Wed, 18 May 94 18:45:50 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2610; Wed, 18 May 1994 18:45:49 -0500 Date: Wed, 18 May 1994 18:41:27 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Design and Coding Process/Mukundan Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO Our organization work on system software projects for the domestic and international market. We had an external auditor to audit our software process for adequacy and conformance to ISO 9000. The auditor said that we ought elaborate our design and coding processes. What we had written and were practising for both is as follows: 1. Design: The project leader is responsible to work out the number of levels of design that are required for that project. The design is documented in a default format when the customer has not given one. The design is reviewed by a team of atleast 3 persons in a related area of expertise. This is the gist. We had not recommended any tool or particular methodology as the projects were in different areas. The auditor's objection was this: The design phase is normally between 25 and 40% of the SDLC. In your process the review is at the end. Hence you might find that something had gone wrong after considerable time. This has to be corrected to ensure that defects if any, are found earlier. Do you think, by reviewing the preliminary design and every further level of design as it comes out this objection can be overcome. 2. Coding: The project leader assigns tasks to the project engineers who code and do the unit test. The code follows the standards and conventions mentioned in the quality plan. Logging unit test is not mandatory. Unit tests are logged only if made mandatory for the project or at the discretion of the project leader. Code review is also not mandatory but is decided by the project leader based on the criticality of the software. This is the gist. Module testing is also optional. System testing is a must as per ISO 9000. We use C, Assembly, TAL etc. The auditor's objection was this: The coding phase is normally around 20 to 30%. You have to split this into further pieces, for closer monitoring. Do you think, assigning a task, reviewing it and documenting the status as soon as it is done would satisfy the auditor. You can assume that the task unit is between 2 and 4 weeks effort for a project with an elapsed time of 3 months or more. Sorry for the longish one ;) Thanks in advance. Mukundan -------------------------------------------------------------------------------- | C.V.Mukundan | e-mail : cvm@wipinfo.soft.net | | Tel: 91 - (080) 558 8422 x 545 | s-mail : S/W Engg. Group, R&D, 88, M G Road| | Fax: 91 - (080) 558 6970 | Wipro Infotech Ltd | | | Bangalore - 560 001, India | -------------------------------------------------------------------------------- From owner-iso9000@VM1.NODAK.EDU Fri Jun 17 11:43:50 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA23870; Fri, 17 Jun 1994 11:43:48 -0700 Message-Id: <199406171843.AA23870@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 3217; Fri, 17 Jun 94 13:36:17 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2428; Fri, 17 Jun 1994 13:36:16 -0500 Date: Fri, 17 Jun 1994 13:33:48 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Another Address for Mil. Handbook/Shani Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O From: IN%"Naftali_Shani-LNS001@email.mot.com" 15-JUN-1994 07:34:07.40 Lee, The address is: Department of the Navy Defense Printing Service Detachment Office 700 Robbins Avenue Philadelphia, PA 19111-5094 They have also a computerized phone system (215-697-1187), but you will need your customer number for that, which you will get after the first request for standards. Regards, Naftali Shani Motorola/Codex (Canada) Voice 905-507-7267 Fax 905-507-7384 or -7235 lns001@email.mot.com From owner-iso9000@VM1.NODAK.EDU Fri Jun 17 13:51:14 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA25603; Fri, 17 Jun 1994 13:51:12 -0700 Message-Id: <199406172051.AA25603@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 3069; Fri, 17 Jun 94 15:26:37 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 6206; Fri, 17 Jun 1994 15:26:36 -0500 Date: Fri, 17 Jun 1994 13:27:58 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Military Handbook/ Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO From: IN%"asqc0511@vector.casti.com" "ASQC Section 0511" 14-JUN-1994 17:29:42.18 > > Contact Naval Publications, Philadelphia, PA for copies of all military > specifications, standards and handbooks. I don't have their address here but > someone on the net should be able to give you that information. Naval Publications Center 5801 Tabor Avenue Philadelphia, PA 19120-5099 (215) 697-1187 or -1188: Automatic Ordering System (215) 697-2179: Human Person Customer Service (8-5 EST) From owner-iso9000@VM1.NODAK.EDU Wed Jun 22 09:35:50 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA14267; Wed, 22 Jun 1994 09:35:48 -0700 Message-Id: <199406221635.AA14267@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 3887; Wed, 22 Jun 94 11:07:21 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 6942; Wed, 22 Jun 1994 11:07:18 -0500 Date: Wed, 22 Jun 1994 11:06:49 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Does America Need ISO/Barclay Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO From: IN%"barclay@busadm1.cba.hawaii.edu" Wu abstracts Brown's article "Does America need ISO 9000?" in Machine Design, June 6, 1994. Wu posts the article's premises and asks for comments. Mine follow: > - ISO 9000 is a fad FAD, means For A Day. ISO 9000 has been kicking around since 1987. As a FAD it's lasted for 8*365 days. That makes it an enduring FAD. > - If a company delivers quality goods consistently, > then customers will buy them, don't need ISO. Example is > the Matsushisha Japanese washing machines. Author is guilty of the fallacy of composition. Washing machines are a consumer product. ISO certifcation is useful and intended for product suppliers of components and finished industrial products. Consumers are currently unaware of and not concerned with ISO certification. > - ISO will cost too much amount > time and money to implement and the payback is not worth it Plausible argument depending on the firm's strategy, target customers, state of existing quality and manufacturing capapbility. Doesn't attack the real value of ISO for firms that will, through due diligence, determine ISO registration is financially feasible. > - creats a regulatory and financial problem for those who are in it Yup. Causes benefits too. If management is diligent they will weigh the benefits vs the problems and costs. Perhaps Brown was talking solely for that rare MBF (Management By Fad) executive. > - Will not solve qulity problems Architecture occaisonally solves business problems. If you look to ISO certification as a panacea you'll be disappointed. For specific problems, like access to European markets and institutionalizing quality ISO cert. are viable implementation strategies. > > - Will not create access to foreign markets > Correct. It allows greater access at lower cost to Euro markets. > - Certification does not mean quality since certified buldings collaps, > certified financial planners runs away with your money... etc Correct. It gives the consumer more information though and means that your firm is legally responsible for meeting its stated obligations. Fraud can occur anywhere anytime. Few people implementing or buying ISO companies products should be surprised at a failure to attain 100% error- free products. Big difference between 98% and 99.99% error free products. > - Cost of implementation is too much and it is growing. Cost too much compared to what? Cost comparisons must be made agaisnt a benchmark. What about measuring NPV for implementation? > - Eliminates small businesses from worldwide competition If you are medium sized or large this is good. Nonetheless a well managed small company (less than 500 employees) can attain certification without undue expense. > > - ISO9000 is a sinkhole. Compared to what? If appropriate financial analysis is done such as NPV for the ISO investment and appropriate decision critieria are applied this is incorrect. Simply and utterly incorrect. Brown's comments parallel a few of J. M. Juran's warnings about ISO at the AQC conference a few weeks ago. Without reading the article, but from your abstract of his positions, he has failed to adequately prepare the arguments for the article. Charles Barclay 2404 Maile Way Dept. of MIR Honolulu, HI 96822 U. of Hawaii Fax: 808 956-2774 Phone: 808 956-8545 E-mail: barclay@busadm1.cba.hawaii.edu Bring Integrity, Valor, Loyalty, and Commitment back in Vogue: hire Colin Powell in '96! From owner-iso9000@VM1.NODAK.EDU Fri May 13 15:29:04 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11121; Fri, 13 May 1994 15:29:03 -0700 Message-Id: <199405132229.AA11121@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4193; Fri, 13 May 94 16:46:53 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1724; Fri, 13 May 1994 16:46:52 -0500 Date: Fri, 13 May 1994 16:37:18 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 1 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO Hello, Numerous requests have been received for the element descriptions. I will begin sending five a day until all twenty are sent. Tony Element 1 - Management Responsibility General Element Description (Paraphrase of ISO 9001 Std) o A Quality Policy is necessary for an effective quality system. o An Organizational Structure that supports the quality policy is also required for an effective quality system. o A company's organizational system should define the responsibility, authority, and the interrelation of all people who manage, perform, and verify work affecting quality. o Management is responsible for implementing the Quality Policy and making it available to all employees. o A company's management is required to review the qality system used to meet the requirements of the ISO 9001 Standard at established intervals. Examples of How Your People Can Satisfy 9001 Requirements: o Make the company Quality Policy known and accessible (hard copy or soft copy) to all people. o Verify that all people know who their quality management repre- sentatives are. o Make a defined and documented organizational structure available to all people. What Kinds of Questions Can an Auditor Ask You and Your People? o What is your quality policy? o Can you show me your quality policy? o Who is your site quality representative? o Where is it documented that a review of your quality system has/or will occur? From owner-iso9000@VM1.NODAK.EDU Fri May 13 15:29:06 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11162; Fri, 13 May 1994 15:29:05 -0700 Message-Id: <199405132229.AA11162@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4218; Fri, 13 May 94 16:51:39 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1901; Fri, 13 May 1994 16:51:33 -0500 Date: Fri, 13 May 1994 16:39:31 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 4 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 4 - Design Control General Element Description (Paraphrase of ISO 9001 Std) o The supplier is to establish and maintain procedures to control and verify product design in order to ensure that customer specified requirements are satisfied. o This element includes design and development planning, design input, design output, design verification and design changes. Examples of How Your People Can Satisfy 9001 Requirements: o Maintain plans for describing or referencing the responsibility for each design and development activity. o Ensure that appropriate personnel identify and document design input requirements relating to the product. o Ensure that the selected requirements are reviewed for adequacy. o Hold and document design reviews to verify that requirements have been satisfied and for ensuring the continuation of an effective quality operation. What Kinds of Questions Can an Auditor Ask Your People? o How do you control design? o Are there procedures in place to verify product design and control? o How do you verify that design criteria is met? o Who is responsbible for resolving incomplete, ambiguous, or confilicting design requirements? o What design control measures do you utilize to verify that design output meets design input? From owner-iso9000@VM1.NODAK.EDU Fri May 13 15:29:09 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA11209; Fri, 13 May 1994 15:29:07 -0700 Message-Id: <199405132229.AA11209@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4222; Fri, 13 May 94 16:52:14 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1926; Fri, 13 May 1994 16:51:40 -0500 Date: Fri, 13 May 1994 16:40:09 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 5 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 5 - Document Control Note: Most companies realize a greater opportunity for improvement with this element during an audit than any other element. General Element Description (Paraphrase of ISO 9001 Std) o The supplier is to have written procedures for controlling all documents and data relating to the ISO 9001 standard requirements. o Documents are to be available at the point of use where operations essential to the effective quality system functioning are performed. o Obsolete documents must be removed from all points of issue or use. o Any changes to documents are reviewed and approved by the function/ organization that originally reviewed and approved the documents. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should know how to recognize obsolete documents. o Remove obsolete documents out of system or working area and archive as appropriate. o Be able to verify that documentation is under distribution control (i.e. -access, notification, distribution list). o All people/functions responsible for specific documentation should verify that documents are complete (i.e. -document name, approval signatures, approval dates, change summary with current level of revision). What Kinds Of Questions Can an Auditor Ask Your People? o Do you have a procedure for controlling documents that your department owns? o How do document users know that documents are complete and up to date? o Do you have a procedure for removing obsolete documents? From owner-iso9000@VM1.NODAK.EDU Fri May 13 15:54:44 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA17574; Fri, 13 May 1994 15:54:41 -0700 Message-Id: <199405132254.AA17574@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4145; Fri, 13 May 94 16:48:01 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1781; Fri, 13 May 1994 16:48:00 -0500 Date: Fri, 13 May 1994 16:37:59 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 2 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 2 - Quality System General Element Description o As stated in ANSI/ASQC Standard Q-94, "A Quality System is the organizational structure, respobsibilities, procedures, processes, and resources for implementing Quality Management." o To ensure that product conforms to specified requirements, your company should establish and maintain a documented Quality System. o This Quality System requires preparation and implementation of documented quality system procedures and instructions. Examples of How Your People Can Satisfy 9001 Requirements: o All personnel should verify that their respobsibilities are thoroughly defined and documented. o The means of accessing the Quality Manual should be known by the people within your organization. o Ensure that all activities are covered by documentation and procedures. What Kinds of Questions Can an Auditor Ask You and Your People? o What do you do? o How do you affect the quality system? NOTE: The auditor utilizes these types of questions to verify that your people know how to access appropriate documentation/information which discusses procedures, processes, measurements, and activities. Remember: Say what you do. Do what you say. From owner-iso9000@VM1.NODAK.EDU Fri May 13 15:54:47 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA17692; Fri, 13 May 1994 15:54:46 -0700 Message-Id: <199405132254.AA17692@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4154; Fri, 13 May 94 16:50:45 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 1860; Fri, 13 May 1994 16:50:43 -0500 Date: Fri, 13 May 1994 16:38:38 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 3 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 3 - Contract Review General Element Description (paraphrase of ISO 9001 Std) o The supplier (your company) is required to review contracts established with the customer to verify that what was ordered agrees with what the contract formally states. o The supplier is required to establish and maintain procedures for contract reviews and for coordinating contract reviews. o When requirements are found to be different from the requirements formally stated in the contract, the supplier should ensure that these differences are resolved. o The supplier should utilize the contract review to determine its capability of meeting customer requirements. Examples of How Your People Can Satisfy 9001 Requirements: o Appropriate personnel should know where and how to access maintained records of contract review. o Know how to access contract review procedures. What Kinds of Questions Can an Auditor Ask Your People? o Do you have procedures for reviewing contracts? o Can you show me how your contract requirements are adequately defined and documented? o How do you determine your capability in meeting contractual requirements? o Can you show me contract review records? From owner-iso9000@VM1.NODAK.EDU Tue May 17 13:59:11 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA12612; Tue, 17 May 1994 13:59:08 -0700 Message-Id: <199405172059.AA12612@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 4698; Tue, 17 May 94 15:16:55 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 4178; Tue, 17 May 1994 15:16:53 -0500 Date: Tue, 17 May 1994 15:15:48 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: send element6.txt Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO Element 6 - Purchasing General Element Description o Your company (the supplier) is required to ensure that purchased product conforms to specified requirements. o Your company can ensure conformance by: -performing supplier (sub-contractor) assessments, -maintaining clear and accurate purchasing documents, -establishing and maintaining records of acceptable suppliers, -verifying purchased product conformance at the source or upon receipt where specified in a contract. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should ensure that documents that contain information specifying requirements for purchasing product are reviewed and approved for adequacy of specified requirements prior to release. o Verify that records of acceptable suppliers are accurate and up-to- date. (Do you maintain lists of acceptable suppliers?) What Kinds of Questions Can an Auditor Ask Your People? o How do you review and approve puchasing documents for adequacy of specified requirements prior to release? o How do you identify product ordered on purchasing documents? o What methods do you use to select your suppliers? From owner-iso9000@VM1.NODAK.EDU Tue May 17 15:02:12 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA13882; Tue, 17 May 1994 15:02:09 -0700 Message-Id: <199405172202.AA13882@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5046; Tue, 17 May 94 16:55:06 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 7532; Tue, 17 May 1994 16:54:52 -0500 Date: Tue, 17 May 1994 16:54:08 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 9 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: RO Element 9 - Process Control General Element Description (Paraphrase of ISO 9001 Std) o The supplier (your company) is to identify and plan the processing steps utilized for producing product. o Your company is to ensure that the processes are carried out under controlled conditions. o Controlled conditions include: -documenting work instructions for processes affecting quality, -monitoring and controlling processes and product characteristics, -approving processes and equipment, -stating criteria for workmanship requirements in written standards or by means of representative samples. o Where inspection and testing cannot fully verify process results, and where processing deficiences become obvious only after the product is in use (i.e. a weld's corrorsion resistance or the taste of a potato chip), processes are to be qualified and monitored to ensure that requirements are met. Examples of How Your People Can Satisfy 9001 Requirements: o Verify, as appropriate, that processes and equipment have been approved/certified. o Verify that process controls are traceable from the input to output of the processes and demonstrate that a means for monitoring/measuring feedback and corrective actions are in place. o Ensure the completeness of all work instrucitons. What Kinds of Questions Can an Auditor Ask Your People? o How do you monitor and ensure special process quality? o What work instructions is your department responsible for? o What are the processes utilized for this product? Do you utilize flow charts? From owner-iso9000@VM1.NODAK.EDU Tue May 17 15:02:15 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA13887; Tue, 17 May 1994 15:02:13 -0700 Message-Id: <199405172202.AA13887@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5052; Tue, 17 May 94 16:56:49 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 7557; Tue, 17 May 1994 16:55:20 -0500 Date: Tue, 17 May 1994 16:54:28 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 10 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 10 - Inspeciton and Testing General Element Description (Paraphrase of ISO 9001 Std) o This element addresses inspection and testing requirements (receiving, in-process, and final). o This element requires the supplier to keep records that prove the product satisfies the inspection and/or test. o The supplier (your company) is required to have a quality plan or documented procedures that are utilized to ensure: -Incoming product is inspected or verified as conforming to specified requirements before being used or processed (if this product is released for urgent production purposes before being inspected, it is to be identified and recorded). -In-Process product is inspected and tested to identify nonconforming product through quality control measures. -Final inspection and testing is performed to ensure that incoming and in-process inspection and testing is completed to obtain a product that conforms to specified requirements. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should examine how inspection and testing is performed to ensure the quality of products, processes, and services. What Kinds of Questions Can an Auditor Ask Your People? o How are unverified parts prevented from use? o Do you utilize a verification system for all incoming parts? o Are goods released to production without verification marked, labeled, stamped, or otherwise clearly identified before release? o Can you show me documentation for all activities that involve inspection, test, and identification within the process that is required to ensure that product meets the requirements? o Have production process controls been established? o Does a "hold management" process exist? o Can you show me evidence that demonstrates that final inspection and testing have been completed successfully? From owner-iso9000@VM1.NODAK.EDU Tue May 17 15:24:38 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA14434; Tue, 17 May 1994 15:24:37 -0700 Message-Id: <199405172224.AA14434@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5028; Tue, 17 May 94 16:54:08 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 7465; Tue, 17 May 1994 16:54:07 -0500 Date: Tue, 17 May 1994 16:53:32 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 7 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 7 - Purchaser Supplied Product General Element Description (Paraphrase of ISO 9001 Std) o Your company (the supplier) is required to establish and maintain procedures for verification, storage, and maintenance of purchaser (customer) supplied product. o Any purchaser supplied product that is lost, damaged, or found deficient by the supplier must be recorded and reported to the purchaser. Examples of How Your People Can Satisfy 9001 Requirements: o Ensure that procedures, as appropriate, are established for notifying the purchaser when their supplied pproduct is lost, damaged, or deficient. What Kinds of Questions Can an Auditor Ask Your People? o What actions are taken when a purchaser supplied product is found unsuitable for use? o Do you maintain a list of purchaser supplied products requiring control? Can I see it? o Show me procedures for the verification, storage, and maintenance of purchaser supplied product. From owner-iso9000@VM1.NODAK.EDU Tue May 17 15:24:40 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA14439; Tue, 17 May 1994 15:24:39 -0700 Message-Id: <199405172224.AA14439@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 5033; Tue, 17 May 94 16:55:35 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 7513; Tue, 17 May 1994 16:54:44 -0500 Date: Tue, 17 May 1994 16:53:51 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 8 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 8 - Product Identification and Traceability General Element Description (Paraphrase of ISO 9001 Std) o Your company (the supplier) is required to establish and maintain procedures, as appropriate, for identifying product during all stages of production, delivery, and installation. o Product can be identified from applicable drawings, specifications, or other documents. (i.e. bar code labels, supplier lot number) o Individual product or batches (lots) are to have a unique and recorded identification where traceability is a specified requirement. Examples of How Your People Can Satisfy 9001 Requirements: o Ensure traceability of engineering change implementation at your suppliers. o Verify that product is appropriately identified during all stages of production, delivery, and installation. What Kinds of Questions Can an Auditor Ask Your People? o How are incoming materials and components assigned a means for identification? o How is work in process identified? o Do you have procedures for identifying finished product? Please show me. From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:27:34 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05307; Wed, 18 May 1994 17:27:31 -0700 Message-Id: <199405190027.AA05307@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8160; Wed, 18 May 94 18:31:27 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2231; Wed, 18 May 1994 18:30:20 -0500 Date: Wed, 18 May 1994 18:29:23 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Post about elements 1-5/Gates Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O From: IN%"BOBGATES@delphi.com" 15-MAY-1994 07:47:24.16 Some comments on the 5 good element descriptions: 1) The auditors will interview the CEO to assertain their knowledge and committment to the ISO management system. 2) "Do what you say and say what you do" requires the following qualifier : as long as it satisfies the standard requirements. 3) 2 basic types of contract reviews : Standards and specials. Off the shelf or catalog type has only 2 requirements, the right product provided at the time specified by the customer. The auditors will look for customer returns and on-time delivery data to verify this. Specials require a definition of the interface activities between various disiplines to assure the contract requirements can be met. The auditors will look for this definition and verification. 4) INPUT --MAJOR MILESTONES-- OUTPUT. Define the milestones and what must be documented. Design process must be flexible enough to allow for the creativity required while maintaining focus. No tire swings ! 5) Simple element definition : The correct revision is at the point of use. Easy to say, often hard to do. One of the big 3 of audit failures, and needs special attention of internal audit program. From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:27:57 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05332; Wed, 18 May 1994 17:27:55 -0700 Message-Id: <199405190027.AA05332@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8232; Wed, 18 May 94 18:51:59 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2888; Wed, 18 May 1994 18:51:57 -0500 Date: Wed, 18 May 1994 18:51:21 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 11 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 11 - Inspection, Measuring, and Test Equipment General Element Description o Your company (the supplier) is required to control, calibrate, and maintain inspection, measuring, and test equipment owned by your company, loaned out or provided by the customer. o Element 4.11 is utilized to ensure that inspeciton, measuring, and test equipment is controlled and accurate to demonstrate the conformance of product to the specified requirements. o Element 4.11 identifies methods to ensure this control and accuracy. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should ensure that procedures and supporting documentation (i.e. records) appropriately address the following areas in regards to inspection, measuring, and test equimpent: Control and calibration, use/test/calibration, accuracy and precision, calibration records, handling/security/test hardware. What Kinds of Questions Can an Auditor Ask Your People? o Do you have a managment control system for all equipment used to verify or measure product? o Show me how your calibration of calibration equipment is traceable to standard measures. o Can I see a maintained record of equipment calibration? o How is your calibration equipment stored? (Is your calibration equipment in a controlled environment?) (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:28:01 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05336; Wed, 18 May 1994 17:27:58 -0700 Message-Id: <199405190027.AA05336@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8240; Wed, 18 May 94 18:55:03 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2926; Wed, 18 May 1994 18:52:42 -0500 Date: Wed, 18 May 1994 18:51:55 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 12 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 12 - Inspection and Test Status General Element Description o Your company is required to identify product as conforming or non-conforming based on inspections and tests. o Inspection and test status is identified by tags, labels, stickers, or other means which indicate product conformance or non-conformance. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should establish processes for maintaining records, markings, and controls that identify the results of inspection and tests. What Kinds of Questions Can An Auditor Ask Your People? o Can you show me how product inspection and test status is identified at all relevant stages in the process? o How do you ensure that only products that have passed the required inspections and tests are shipped, used, or installed? o Can you present an inspection and test record example that identifies the person authorized to release product? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:42:55 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05490; Wed, 18 May 1994 17:42:53 -0700 Message-Id: <199405190042.AA05490@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8222; Wed, 18 May 94 18:54:44 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2954; Wed, 18 May 1994 18:53:05 -0500 Date: Wed, 18 May 1994 18:52:22 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 13 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 13 - Control of Non-Conforming Product General Element Description o Element 4.13 is utilized to ensure that non-conforming product is prevented from inadvertent use or installation. o Non-conforming product can be reworked to meet specifications, accepted with or without repair by concession, or rejected, or scrapped. Examples of How Your People Can Satisfy 9001 Requirements: o Your people can verify that non-conforming product is appropriately tracked and not mixed with conforming product. o Your people can address the following topics relating to control of non-conforming product: Procedures, non-conformity review and disposition responsibility, contract provisions, records, and repair and rework. What Kinds of Questions Can an Auditor Ask Your People? o How is non-conforming product recalled? o Who has the authority to stop product shipment when non-conformance to requirements is established? o Can I see the system for root-cause analysis for non-conforming product? o How is non-conforming product clearly identified? o Is non-conforming material segregated from good material? o Where is your procedure for describing the process for non-conforming material review? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:42:57 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05494; Wed, 18 May 1994 17:42:55 -0700 Message-Id: <199405190042.AA05494@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8227; Wed, 18 May 94 18:57:17 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 2977; Wed, 18 May 1994 18:53:36 -0500 Date: Wed, 18 May 1994 18:52:49 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 14 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 14 - Corrective Action General Element Description o Your company is responsible for establishing, documenting, and maintaining procedures for initiating problem preventitive actions by analyzing all processes, work operations, concessions, quality records, service reports, and customer complaints to detect and eliminate potential causes of non-conforming material. o Section 4.14 also identifies that controls and corrective actions are incorporated. Examples of How Your People Can Satisfy 9001 Requirements: o Your people should ensure appropriate processes/procedures and supporting documentation are in place and accessible and relative to: 1. investigating cause 2. analyzing processes 3. ensuring corrective actions 4. implementing rework. What Kinds of Questions Can an Auditor Ask Your People? o How does your documented corrective action process clearly outline who has ownership for investigating causes and corrective action that will prevent recurrence? o Can I see a maintained record in regards to discovery and corrective action taken? o Do you have a process for ensuring that corrective actions are implemented in an effective manner? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality) From owner-iso9000@VM1.NODAK.EDU Wed May 18 17:43:00 1994 Received: from vm1.NoDak.edu by wiley.csusb.edu (5.67a/1.34) id AA05498; Wed, 18 May 1994 17:42:58 -0700 Message-Id: <199405190042.AA05498@wiley.csusb.edu> Received: from VM1.NODAK.EDU by VM1.NoDak.EDU (IBM VM SMTP V2R2) with BSMTP id 8232; Wed, 18 May 94 18:59:02 CDT Received: from VM1.NODAK.EDU (NJE origin LISTSERV@NDSUVM1) by VM1.NODAK.EDU (LMail V1.2a/1.8a) with BSMTP id 3010; Wed, 18 May 1994 18:53:54 -0500 Date: Wed, 18 May 1994 18:53:15 -0600 Reply-To: JENNEJOHNN@UWSTOUT.EDU Sender: ISO9000 Standards Discussion From: Nancy Jennejohn Subject: Description of Element 15 Comments: To: iso9000@vm1.nodak.edu To: Multiple recipients of list ISO9000 Status: O Element 15 - Handling, Storage, Packaging, and Delivery General Element Description o Your company should establish and maintain processes and procedures for handling, storing, packaging, and delivering finished product, such that product is delivered to the customer undamaged. Examples of How Your People Can Satisfy 9001 Requirements: o Ensure that procedures have been established and are being maintained for handling, storing, packaging, and delivery of finished product. o Operators should be able to locate work instructions relative to their position. What Kinds of Questions Can an Auditor Ask Your People? o Can you give evidence of a documented in-use method or means for preventing product damage or deterioration? o How is rejected material segregated, stored, and labeled? Define your process for disposition of rejected material. o How is packaging determined apporpriate for protecting goods from deterioration? o Do you have methods of delivery for protecting goods to the point where responsibility ceases? (Materials paraphrased from the ISO 9001 Standard and from the Standardized Supplier Quality Assessment Workbook developed by Sematech - Partnering for Total Quality)