Auditing policies

A management system will include policies relevant to the system being managed. For example, an ISMS will have a policy for Risk Management, and a QMS will have a Quality Policy. Collectively, the policies in a management system go a long way to defining that system. They are the bones of its control. If they …

Realistic claims and objectives please

I was on holiday last week. Over in Robin Hoods Bay, so not far from home. We stayed in our usual hotel, the Victoria.  An orangery is being added to the front of the hotel. We’ve had it booked for a long time. So, shortly before going, I got an email that included this statement. …

Auditing and evidencing leadership

For ISO 9001 evidencing sufficient leadership and management involvement can be difficult. Sure, you can usually demonstrate inputs to Management Review. But, sometimes, the outputs can seem sparse. In my Confluence QMS, I’ve created a Management Review schedule supported by templates for the reports based on the inputs required by the standard. The leadership get …