dnv gl - business assurance iso 9001 …€¦ · iso 9001 uality management system,62 occupational...

16
SAFER, SMARTER, GREENER DNV GL - BUSINESS ASSURANCE ISO 9001 CERTIFICATION And how it works for your organization Powering innovation

Upload: others

Post on 09-Jul-2020

13 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

SAFER, SMARTER, GREENER

SAFER, SMARTER, GREENER

DNV GL - BUSINESS ASSURANCE

ISO 9001CERTIFICATIONAnd how it works for your organization

© Copyright 2005-2016 DNV GL Business Assurance USA, Inc.All Rights Reserved.

DNV GL - Business Assurance is a world-leading certification body. We help businesses

assure the performance of their organizations, products, people, facilities and supply

chains through certification, verification, assessment, and training services.

The DNV GL Group operates in more than 100 countries. Our 15,000 professionals are

dedicated to helping our customers make the world safer, smarter and greener.

DNV GL - BUSINESS ASSURANCE1400 Ravello Dr.

Katy, TX 77449

Phone 877-368-3530

www.dnvglcert.com

[email protected]

Powering innovation

Page 2: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

The objective of any standard, whether it relates to the

manufacture of a product or the delivery of a service, is the same.

Standards are designed to promote, facilitate and enable

consistency in a process or product; to provide assurance that

the process or product output will meet requirements; to ensure

a uniform and predictable output every time a set of procedures

and processes are executed.

Without standards, what happens within and between

organizations is a matrix of guesses. Fair trade becomes virtually

impossible. Excellence becomes the exception not the rule.

THE ROLE OF STANDARDS

Standards are the DNA of the modern economy, providing the glue that ties together supply chains with the confidence and trust needed by each entity to move forward.

ISO 27001 Information Security ManagementISO 9001 Quality Management

SystemISO 4500 Occupational

Health & Safety Management

ISO 14001 Environmental Management System

ISO 9001: How it works 3 2 ISO 9001: How it works

Page 3: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

The objective of any standard, whether it relates to the

manufacture of a product or the delivery of a service, is the same.

Standards are designed to promote, facilitate and enable

consistency in a process or product; to provide assurance that

the process or product output will meet requirements; to ensure

a uniform and predictable output every time a set of procedures

and processes are executed.

Without standards, what happens within and between

organizations is a matrix of guesses. Fair trade becomes virtually

impossible. Excellence becomes the exception not the rule.

THE ROLE OF STANDARDS

Standards are the DNA of the modern economy, providing the glue that ties together supply chains with the confidence and trust needed by each entity to move forward.

ISO 27001 Information Security ManagementISO 9001 Quality Management

SystemISO 4500 Occupational

Health & Safety Management

ISO 14001 Environmental Management System

ISO 9001: How it works 3 2 ISO 9001: How it works

Page 4: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

The ISO 9000 series currently consists of these quality system standards*:

■ ISO 9001:2015 - sets out the requirements of a quality management system

■ ISO 9000:2015 - covers the basic concepts and language

■ ISO 9004:2009 - focuses on how to make a quality management system more efficient and effective

■ ISO 19011:2011 - sets out guidance on internal and external audits of quality management systems

ISO 9001, newly revised in 2015, is the best known and most widely adopted of the standards; it is the only one in the 9000 series to which an organization can be certified.

ISO 9001 is maintained by the International Organization for Standardization, an independent non-governmental ogranizationbased in Geneva, Switzerland. This standards-setting body, generally referred to as ISO, was founded in 1947 and has a presence in nearly 200 coutnries. Across it’s spectrum, the ISO standards cover almost every industry in the manufacturing and service sectors.

The reference to ISO comes from the Greek word “isos” meaning equal or the same, used in other exacting terms such as isobars, isotherms, isosceles. The concept is one of consistency, predictability and repeatability of processes.

The ISO standards are revised through review and revision recommendations made by 162 member countries or national bodies. Each member, through its committees and subcommittees, provides input on suggested changes to the standards to ISO headquarters. The ISO Technical Committee responsible for the ISO 9001 series is TC 176. The 10 main clauses of ISO 9001:2015 are:1) Scope2) Normative References3) Terms and definitions4) Context of the organization5) Leadership6) Planning7) Support8) Operation 9) Performance evaluation10) Improvement

ISO 9001:2015 is based on a high level structure (HLS) that unifies the construction and language of all the ISO management systems standards. The HSL is defined in Appendix SL of the ISO/IEC Directives, Part 1. All new management system standards, and the revision of existing standards, will have this common 10 clause general structure.

More information on the interpretation and application of ISO 9001:2015 can be found in DNV GL’s ISO 9001:2015 Interpretive Guidelines.

ISO 9000 is a series of standards that nourish repeatable,

accountable business processes that help your organization meet

and exceed its customers’ needs. Though typically associated with

manufacturing, the ISO 9000 series is equally meaningful—and

deployable—to service organizations.

That’s because the currency of ISO standards is “process,” be it a

process for creating a widget, or providing a non-physical service to

your customer or supply chain.

Fundamentally, ISO targets process excellence, and is a potential

game-changer whether that process results in a jet engine, a

surgical procedure, or a new organic snack food.

THE ISO 9000 SERIES

ISO 9001: How it works 5 4 ISO 9001: How it works

Page 5: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

The ISO 9000 series currently consists of these quality system standards*:

■ ISO 9001:2015 - sets out the requirements of a quality management system

■ ISO 9000:2015 - covers the basic conceptsand language

■ ISO 9004:2009 - focuses on how to make aquality management system more efficientand effective

■ ISO 19011:2011 - sets out guidance oninternal and external audits of quality management systems

ISO 9001, was revised in 2015 and is the best known and most widely adopted of the standards; it is the only one in the 9000 series to which an organization can be certified.

ISO 9001 is maintained by the International Organization for Standardization, an independent non-governmental organization based in Geneva, Switzerland. This standards-setting body, generally referred to as ISO, was founded in 1947 and has a presence in over 160 countries. Across it’s spectrum, the ISO standards cover almost every industry in the manufacturing and service sectors.

The reference to ISO comes from the Greek word “isos” meaning equal or the same, used in other exacting terms such as isobars, isotherms, isosceles. The concept is one of consistency, predictability and repeatability of processes.

The ISO standards are revised through review and revision recommendations made by 162 member countries or national bodies. Each member, through its committees and subcommittees, provides input on suggested changes to the standards to ISO headquarters. The ISO Technical Committee responsible for the ISO 9001 series is TC 176. The 10 main clauses of ISO 9001:2015 are:1) Scope2) Normative References3) Terms and definitions4) Context of the organization5) Leadership6) Planning7) Support8) Operation 9) Performance evaluation10) Improvement

ISO 9001:2015 is based on a high level structure (HLS) that unifies the construction and language of all the ISO management systems standards. The HSL is defined in Appendix SL of the ISO/IEC Directives, Part 1. All new management system standards, and the revision of existing standards, will have this common 10 clause general structure.

More information on the interpretation and application of ISO 9001:2015 can be found in DNV GL’s ISO 9001:2015 Interpretive Guidelines.

ISO 9000 is a series of standards that nourish repeatable,

accountable business processes that help your organization meet

and exceed its customers’ needs. Though typically associated with

manufacturing, the ISO 9000 series is equally meaningful—and

deployable—to service organizations.

That’s because the currency of ISO standards is “process,” be it a

process for creating a widget, or providing a non-physical service to

your customer or supply chain.

Fundamentally, ISO targets process excellence, and is a potential

game-changer whether that process results in a jet engine, a

surgical procedure, or a new organic snack food.

THE ISO 9000 SERIES

ISO 9001: How it works 5 4 ISO 9001: How it works

Page 6: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

evolution of

Another periodic update, but a very important one. ISO 9001:2015, the current standard, is further shaped to the needs of non-manufacturing businesses. Additional emphasis isplaced on outcomes measures.

2000 2008 2015 THE FUTURE

GLOBALIZATION

The British government requires makers of munitions and other war supplies to document manufacturing procedures in an effort to increase reliability. The record-keeping standard is known as BS5750. Later, the US military created MIL-Q-9858 for similar reasons.

The international Organization for Standardization (ISO) adapts the military standards, and others, to create ISO 9000, 9001, 9002 and 9003 for use by commercial manufacturing companies. In 1994 the standards are updated to emphasise quality assurance via preventive actions; they continue to require evidence of compliance with documented procedures.

1987 1994DURING WORLD WAR II

INFORMATION REVOLUTION

INDUSTRIAL REVOLUTION

ISO is a bottom-up standard . . . it has mandatory requirements but it truly comes to life for each organization based on their people, their business dyanamics and the needs of their customers.

LUCA CRISCIOTTI, CEODNV GL - BUSINESS ASSURANCE

In 2000 with the Internet revolution in full swing, ISO updates the 9000 series to reflect increased demands by stakeholders for transparency. The updates also include a series of simplifications designed to make certification a more streamlined activity.

ISO 9001: How it works 7 6 ISO 9001: How it works

Page 7: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

evolution of

Another periodic update, but a very important one. ISO 9001:2015, the current standard, is further shaped to the needs of non-manufacturing businesses. Additional emphasis is placed on outcomes measures.

2000 2008 2015 THE FUTURE

GLOBALIZATION

The British government requires makers of munitions and other war supplies to document manufacturing procedures in an effort to increase reliability. The record-keeping standard is known as BS5750. Later, the US military created MIL-Q-9858 for similar reasons.

The international Organization for Standardization (ISO) adapts the military standards, and others, to create ISO 9000, 9001, 9002 and 9003 for use by commercial manufacturing companies. In 1994 the standards are updated to emphasise quality assurance via preventive actions; they continue to require evidence of compliance with documented procedures.

1987 1994DURING WORLD WAR II

INFORMATION REVOLUTION

INDUSTRIAL REVOLUTION

ISO is a bottom-up standard . . . it has mandatory requirements but it truly comes to life for each organizationbased on their people, their business dyanamics and the needs of their customers.

LUCA CRISCIOTTI, CEODNV GL - BUSINESS ASSURANCE

In 2000 with the Internet revolution in full swing, ISO updates the 9000 series to reflect increased demands by stakeholders for transparency. The updates also include a series of simplifications designed to make certification a more streamlined activity.

ISO 9001: How it works 7 6 ISO 9001: How it works

Page 8: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

ISO certification should be viewed as an investment in business success. At a basic level, that may boil down to your need to comply with a marketplace mandate, such as when the EU adopted ISO 9001 in the late 80’s.

In order for North American companies to bid on contracts within the EU, the supplier had to be able to demonstrate that they were either ISO 9001 certified or in the process of implementing an ISO 9001 system. These companies were the early adopters of ISO 9001 certification.

At a higher level—and this is increasingly the motivation for certification today—companies that embrace ISO 9001 are not doing so for international export. They are doing it to achieve market advantage and improve stakeholder relations (brand image).

Here are the three prevailing drivers of ISO 9001 certification in today’s business community:

1. Intrinsic value: To gain business efficiency and enhance the value of your products and services. A standards-based quality management system (QMS) helps you do the right things consistently across teams, facilities and geographies.

2. Competitive advantage: Being ISO certified expresses excellence and competency to your community, your employees and your customers. Whether you market to end users, or make a living as part of a supply chain, ISO 9001 certification is a bold and visible statement that sets you apart from competitors who are not certified. It is that symbol of excellence that people look for to increase their confidence in doing business with you.

3. Market share: Sometimes winning means not losing, particularly for very large companies doing business globally. Today it’s the norm to see ISO 9001 certification as a requirement to compete for contracts . . . to even have a chance at generating new revenues and strengthening your company’s market position.

For example, Ford, GM, Daimler-Crysler and other large automotive manufacturers demand that their first tier suppliers obtain ISO/TS 16949 (formerly QS-9000) certification in order to continue business with them. Similarly, most of the aerospace supply chain is operating under the mandate of attaining and maintaining AS9100 certification to be in business with aircraft manufacturers and major defense contractors.

WHY CERTIFY?

Without satisfied customers, an organization’s future is at risk. To

keep customers satisfied, an organization needs to meet and/

or exceed their customers’ requirements, ideally the first time

and every time. The ISO 9001 standard provides a universally recognized and accepted framework for a systematic approach

to managing the organization’s processes, so that they deliver on

their customers’ expectations.

ISO 9001: How it works 9 8 ISO 9001: How it works

Page 9: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

ISO certification should be viewed as an investment in business success. At a basic level, that may boil down to your need to comply with a marketplace mandate, such as when the EU adopted ISO 9001 in the late 80’s.

In order for North American companies to bid on contracts within the EU, the supplier had to be able to demonstrate that they were either ISO 9001 certified or in the process of implementing an ISO 9001 system. These companies were the early adopters of ISO 9001 certification.

At a higher level—and this is increasingly the motivation for certification today—companies that embrace ISO 9001 are not doing so for international export. They are doing it to achieve market advantage and improve stakeholder relations (brand image).

Here are the three prevailing drivers of ISO 9001 certification in today’s business community:

1. Intrinsic value: To gain business efficiency and enhance the value of your productsand services. A standards-based qualitymanagement system (QMS) helps you dothe right things consistently across teams, facilities and geographies.

2. Competitive advantage: Being ISO certified expresses excellence and competency toyour community, your employees and yourcustomers. Whether you market to endusers, or make a living as part of a supplychain, ISO 9001 certification is a bold andvisible statement that sets you apart fromcompetitors who are not certified. It is thatsymbol of excellence that people look for to increase their confidence in doing businesswith you.

3. Market share: Sometimes winning meansnot losing, particularly for very largecompanies doing business globally. Todayit’s the norm to see ISO 9001 certificationas a requirement to compete for contracts. . . to even have a chance at generatingnew revenues and strengthening yourcompany’s market position.

For example, Ford, GM, Chrysler and other large automotive manufacturers demand that their first tier suppliers obtain IATF 16949 (formerly ISO/TS 16949) certification in order to continue business with them. Similarly, most of the aerospace supply chain is operating under the mandate of attaining and maintaining AS9100 certification to be in business with aircraft manufacturers and major defense contractors.

WHY CERTIFY?

Without satisfied customers, an organization’s future is at risk. To

keep customers satisfied, an organization needs to meet and/

or exceed their customers’ requirements, ideally the first time

and every time. The ISO 9001 standard provides a universally recognized and accepted framework for a systematic approach

to managing the organization’s processes, so that they deliver on

their customers’ expectations.

ISO 9001: How it works 9 8 ISO 9001: How it works

Page 10: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

For example, if an organization does not do the design of the products they manufacture, they can claim an exclusion of the requirements contained in ISO 9001 for product design and development (8.3), and still be considered in compliance with the standard.

Relative positioning of ISO 9001Certification to ISO 9001 is not a panacea for macro economic ailments, or an instant fix for the troubles of a specific industry. It is a partner to—not a replacement for—sound business strategies and management.

It is a foundation for creating a healthy organization, one predisposed to consistent, clear and purposeful action. An ISO certified QMS is an infrastructure that facilitates continual improvement and constant forward motion. If ISO 9001 certification is in your plans, it should be viewed as an ongoing journey toward excellence, and not as a project or an end point.

Industry specific variations of ISO 9001A number of different industry sectors have taken ISO 9001 and added supplemental requirements specific to their own industry, and then amended the title of the standard accordingly. The most notable are:■ ISO/TS 16949 - Automotive■ AS9100 - Aerospace■ ISO 13485 - Medical Devices■ TL 9000 – Telecommunications

Growth of the standardsThe ISO 9001 series of standards has been accepted and adopted throughout the world.An estimated 1.5 million certificates have been issued in more than 170 countries.

Europe now exceeds 400,000 certificates and there are currently more than 50,000 certificates in the US, 8,000 in Canada and approximately 5,000 in Mexico.Reflecting global demand for more sustainable business practices, we see the emergence

of other ISO standards such as ISO 14001 which addresses environmental stewardship. Like ISO 9001, ISO 14001 is a standard to which an organization can be certified via a third-party certification body (registrar). And via the high level structure, this standard is highly compatible with ISO 9001 in terms of its implementation.

The certification processThe basic steps to certification involve a review by an external ISO 9001 certification body or registrar. The certification process generally involves a two-stage audit at your facilities. Stage one determines whether all mandatory documentation is in place; that at least one complete internal audit cycle has been conducted; and at least one management review has been completed. Stage two verifies through observable evidence that the quality management system complies with all applicable clauses of the ISO 9001:2015 standard; and that the organization’s documented processes and procedures are being followed.

The length of time necessary to implement an ISO 9001 compliant management system is a function of the size of the company (number of employees, size and number of facilities), the complexity of its business processes, the maturity of the organization, and the degree to which the company’s existing system meets the requirements of the ISO 9001:2015 standard.As a broad generalization, think in the three to six month timeframe for completing initial certification.

ISO standards are not designed to tell you how to run your

business, but rather to allow you to achieve compliance with

the standards in a manner that best supports your business.

Having said that, there are “shalls” in the standard which are

non-negotiable requirements if you wish to be certified by an

independent certification body.

Where areas of the standard do not apply to a company’s business

some exclusions are allowed in the “scope” of the certification.

The “scope” of the certification is a description of the processes,

products and services which are covered under the certification. A

typical scope statement would read “The design, manufacture and

service of….”

STANDARDS IN ACTION

ISO 9001: How it works 11 10 ISO 9001: How it works

ISO 9001 implementation is the basis for building a sustainable quality managment system. It is an infrastructure to facilitate improvements in processes and increases in the effectiveness and efficiency of the system.

Page 11: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

For example, if an organization does not do the design of the products they manufacture, they can claim an exclusion of the requirements contained in ISO 9001 for product design and development (8.3), and still be considered in compliance with the standard.

Relative positioning of ISO 9001Certification to ISO 9001 is not a panacea for macro economic ailments, or an instant fix for the troubles of a specific industry. It is a partner to—not a replacement for—sound business strategies and management.

It is a foundation for creating a healthy organization, one predisposed to consistent, clear and purposeful action. An ISO certified QMS is an infrastructure that facilitates continual improvement and constant forward motion. If ISO 9001 certification is in your plans, it should be viewed as an ongoing journey toward excellence, and not as a project or an end point.

Industry specific variations of ISO 9001A number of different industry sectors have taken ISO 9001 and added supplemental requirements specific to their own industry, and then amended the title of the standard accordingly. The most notable are:■ IATF 16949 - Automotive■ AS9100 - Aerospace■ ISO 13485 - Medical Devices■ TL 9000 – Telecommunications

Growth of the standardsThe ISO 9001 series of standards has been accepted and adopted throughout the world. Over 878,000 certificates have been issued in more than 190 countries.

Europe now exceeds 387,000 certificates and there are currently more than 25,000 certificates in the US, 5,000 in Canada and approximately 6,500 in Mexico. Reflecting global demand for more sustainable business practices, we have seen the emergence

of other ISO standards such as ISO 14001 & ISO 45001 which address environmental stewardship & health & safety. Like ISO 9001, ISO 14001 & ISO 45001 are standards to which an organization can be certified via a third-party certification body (registrar). These standards are highly compatible with ISO 9001 in terms of their implementation and their high level structure.

The certification processThe basic steps to certification involve a review by an external ISO 9001 certification body or registrar. The certification process generally involves a two-stage audit at your facilities. Stage one determines whether all mandatory documentation is in place; that at least one complete internal audit cycle has been conducted; and at least one management review has been completed. Stage two verifies through observable evidence that the quality management system complies with all applicable clauses of the ISO 9001:2015 standard; and that the organization’s documented processes and procedures are being followed.

The length of time necessary to implement an ISO 9001 compliant management system is a function of the size of the company (number of employees, size and number of facilities), the complexity of its business processes, the maturity of the organization, and the degree to which the company’s existing system meets the requirements of the ISO 9001:2015 standard. As a broad generalization, think in the three to six month timeframe for completing initial certification.

ISO standards are not designed to tell you how to run your

business, but rather to allow you to achieve compliance with

the standards in a manner that best supports your business.

Having said that, there are “shalls” in the standard which are

non-negotiable requirements if you wish to be certified by an

independent certification body.

Where areas of the standard do not apply to a company’s business

some exclusions are allowed in the “scope” of the certification.

The “scope” of the certification is a description of the processes,

products and services which are covered under the certification. A

typical scope statement would read “The design, manufacture and

service of….”

STANDARDS IN ACTION

ISO 9001: How it works 11 10 ISO 9001: How it works

ISO 9001 implementation is the basis for building a sustainable quality managment system. It is an infrastructure to facilitate improvements in processes and increases in the effectiveness and efficiency of the system.

Page 12: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

There are more than 100 registrars in North America offering ISO certification services;it is an unregulated market in the sense that no law governs who can become a registrar and who cannot. In that regard, it is a “buyer beware” market. However, there is a growing class of “accredited” registrars who voluntarily adhere to a strict set of protocols in the way they conduct audits, interpret the standards and manage the certification process.

So the first and most important step is to find an accredited registrar, not one that simply says it offers ISO certificates.

Technical competenciesThe rules under which accredited registrars operate are governed in each country by national accreditation bodies. In the US, that body is the ANSIASQ National Accreditation Board (ANAB).

In order to become accredited, a registrar has to undergo a rigorous audit and review process against the ISO/ IEC 17021 standard as well as other requirements. In order to maintain their accreditation, registrars are subject to on-going surveillance or periodic audits by the national accreditation bodies.

Though registrar accreditation creates a much more reliable pool of professional certificationbodies, there are still considerable differences in the approach and professionalism of these organizations.

Standards interpretation and approachRegistrars vary in how they interpret the ISO standards, and have unique personalities in the way they conduct audits. Some audit to the exact letter of the standard; others try to apply the “intent” believing it provides more flexibility within the standards framework.

PeopleThis is where the difference is really made, and where certain registrars really stand out. Professionalism, industry knowledge and commitment to treating you like a long-term customer are key ingredients. It is not uncommon for registrars—believing that they are a pseudo regulatory or governmental agency—to pretty much skip customer service altogether. You are not a customer, you are an “under surveillance” entity. For companies that see certification as a strategic business service not a federal investigation, you’ll want to ask prospective registrars about their track record on customer satisfaction. What experience does this registrar have in your industry sector? How many certificates have they issued to businesses like yours? These questions are best answered by talking to clients who have selected and have become certified by the registrar you are considering. Reference accounts are fine but are generally selected or pre-screened by the registrar. A more effective and potentially unbiased approach is for you to make the customer selection yourself. If a registrar is accredited they are obligated to produce and maintain a list of all companies that they have certified. The list may be in hard copy or part of their web page. Select companies that are either in similar businesses to yours, geographically close to you, or just pick companies whose brand you trust.

Call these companies and ask:■ What was your experience with them? ■ What impressed you most? ■ What did you like least about your

dealings with them? ■ Would you recommend them to others?■ How timely were they in responding to

questions/requests?■ How would you describe the ‘attitude’ of

the people you’ve dealt with?■ Do they act like they would want and work

to keep your business?

SELECTING A REGISTRAR

The selection of your certifying body (registrar) is an important

decision. Choose one that reflects your character as an

organization and your goals for certification.

Certification must be renewed at regular intervals (typically every

three years), so in choosing a registrar you are forming a long-

term relationship. Your best bet is to choose a registrar that offers

a partnership approach to certification; one that can provide you

with value-added services and not just a piece of paper.

ACCREDITED?

yes

assesscredentials

no

ISO 9001: How it works 13 12 ISO 9001: How it works

Page 13: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

There are more than 100 registrars in North America offering ISO certification services; it is an unregulated market in the sense that no law governs who can become a registrar and who cannot. In that regard, it is a “buyer beware” market. However, there is a growing class of “accredited” registrars who voluntarily adhere to a strict set of protocols in the way they conduct audits, interpret the standards and manage the certification process.

So the first and most important step is to find an accredited registrar, not one that simply says it offers ISO certificates.

Technical competenciesThe rules under which accredited registrars operate are governed in each country by national accreditation bodies. In the US, that body is the ANSI National Accreditation Board (ANAB).

In order to become accredited, a registrar has to undergo a rigorous audit and review process against the ISO/ IEC 17021 standard as well as other requirements. In order to maintain their accreditation, registrars are subject to on-going surveillance or periodic audits by the national accreditation bodies.

Though registrar accreditation creates a much more reliable pool of professional certification bodies, there are still considerable differences in the approach and professionalism of these organizations.

Standards interpretation and approach Registrars vary in how they interpret the ISO standards, and have unique personalities in the way they conduct audits. Some audit to the exact letter of the standard; others try to apply the “intent” believing it provides more flexibility within the standards framework.

PeopleThis is where the difference is really made, and where certain registrars really stand out. Professionalism, industry knowledge and commitment to treating you like a long-term customer are key ingredients. It is not uncommon for registrars—believing that they are a pseudo regulatory or governmental agency—to pretty much skip customer service altogether. You are not a customer, you are an “under surveillance” entity. For companies that see certification as a strategic business service not a federal investigation, you’ll want to ask prospective registrars about their track record on customer satisfaction. What experience does this registrar have in your industry sector? How many certificates have they issued to businesses like yours? These questions are best answered by talking to clients who have selected and have become certified by the registrar you are considering. Reference accounts are fine but are generally selected or pre-screened by the registrar. A more effective and potentially unbiased approach is for you to make the customer selection yourself. If a registrar is accredited they are obligated to produce and maintain a list of all companies that they have certified. The list may be in hard copy or part of their web page. Select companies that are either in similar businesses to yours, geographically close to you, or just pick companies whose brand you trust.

Call these companies and ask: ■ What was your experience with them?

■ What impressed you most?■ What did you like least about your

dealings with them?■ Would you recommend them to others?■ How timely were they in responding to

questions/requests?■ How would you describe the ‘attitude’ of

the people you’ve dealt with?■ Do they act like they would want and work

to keep your business?

SELECTING A REGISTRAR

The selection of your certifying body (registrar) is an important

decision. Choose one that reflects your character as an

organization and your goals for certification.

Certification must be renewed at regular intervals (typically every

three years), so in choosing a registrar you are forming a long-

term relationship. Your best bet is to choose a registrar that offers

a partnership approach to certification; one that can provide you

with value-added services and not just a piece of paper.

ACCREDITED?

yes

assesscredentials

no

ISO 9001: How it works 13 12 ISO 9001: How it works

Page 14: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

Driven by our purpose of safeguarding life, property and the

environment, DNV GL enables organizations to advance the

safety and sustainability of their business. DNV GL is a leading

provider of classification, certification, verification and training

services. With our

origins stretching back to 1864, our reach today is global.

Operating in more than 100 countries, our 15,000 professionals

are dedicated to helping our customers make the world safer,

smarter and greener.

As a world-leading certification body, DNV GL helps businesses

assure the performance of their organizations, products, people,

facilities and supply chains through certification, verification,

assessment, and training services. Partnering with our customers,

we build sustainable business performance and create

stakeholder trust.

WHY PARTNER WITH DNV GL?

PriceMost ISO registrars have similar overall cost structures. The biggest factor in their pricing formulas is the number of auditors assigned to your certification project and the number of days those auditors need to be at your facilities. Thus, for a company evaluating certification proposals, the auditor “day rate” is one useful metric for comparing costs. Keep in mind, however, that the way registrars compute day rates varies significantly; so be cautious about using day rate as the only deciding financial factor.

Registrars also have many different ways of structuring their quotations. Some registrars charge separate application, listing and administration fees, and will specify additional travel, cancellation and deferment charges. These extras can significantly impact the overall cost of the project.

Irrespective of how a quotation is structured, the important thing is to consider the overall cost-of-ownership for your organization. Most registrars issue certificates that are valid for three years. So make sure that any quotes you receive allow you to clearly see your costs over three years, not one. That way you can make an apples to-apples comparison of registrar charges.

PartnershipWhen making a registrar selection, price is important but should not be your primary selection criteria. If you make a decision based solely on price, you are probably making the decision that you may regret later. If a registrar is unaccredited, there are no rules or requirements for an auditor training, industry experience or qualifications, methodology for the certification process, etc. Compliance with accreditation requirements costs money but has value to you as a customer.

Look for registrars that offer value added services beyond the structured certification process, such as your company’s listing on their web site, electronic access to your audit reports and audit schedule.

Most estimates agree that the internal costs are at least 10 times the registrar ones. Having made the commitment and investment to implement a compliant system, make sure that you take into account all the important factors.

SummarySelecting a registrar is an important decision. It is a relationship which will ideally be in place for a long time. Taking the time to evaluate registrars based on the above criteria will be a good investment of your time.

*Risk Based Certification is a registered EU trademark of DNV GL AS.

14 ISO 9001: How it works

Page 15: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

WHY PARTNER WITH DNV GL?

Driven by our purpose of safeguarding life, property and the

environment, DNV GL enables organizations to advance the

safety and sustainability of their business. DNV GL is a leading

provider of classification, certification, verification and training

services. With our origins stretching back to 1864, our reach

today is global. Operating in more than 100 countries, our over

12,000 professionals are dedicated to helping our customers

make the world safer, smarter and greener.

As a world-leading certification body, DNV GL helps businesses

assure the performance of their organizations, products, people,

facilities and supply chains through certification, verification,

assessment, and training services. We combine technical, digital

and industry expertise to empower companies’ decisions and

actions. Partnering with our customers, we build sustainable

business performance and create stakeholder trust.

PriceMost ISO registrars have similar overall cost structures. The biggest factor in their pricing formulas is the number of auditors assigned to your certification project and the number of days those auditors need to be at your facilities. Thus, for a company evaluating certification proposals, the auditor “day rate” is one useful metric for comparing costs. Keep in mind, however, that the way registrars compute day rates varies significantly; so be cautious about using day rate as the only deciding financial factor.

Registrars also have many different ways of structuring their quotations. Some registrars charge separate application, listing and administration fees, and will specify additional travel, cancellation and deferment charges. These extras can significantly impact the overall cost of the project.

Irrespective of how a quotation is structured, the important thing is to consider the overall cost-of-ownership for your organization. Most registrars issue certificates that are valid for three years. So make sure that any quotes you receive allow you to clearly see your costs over three years, not one. That way you can make an apples to-apples comparison of registrar charges.

PartnershipWhen making a registrar selection, price is important but should not be your primary selection criteria. If you make a decision based solely on price, you are probably making the decision that you may regret later. If a registrar is unaccredited, there are no rules or requirements for an auditor training, industry experience or qualifications, methodology for the certification process, etc. Compliance with accreditation requirements costs money but has value to you as a customer.

Look for registrars that offer value added services beyond the structured certification process, such as your company’s listing on their web site, electronic access to your audit reports and audit schedule.

Most estimates agree that the internal costs are at least 10 times the registrar ones. Having made the commitment and investment to implement a compliant system, make sure that you take into account all the important factors.

SummarySelecting a registrar is an important decision. It is a relationship which will ideally be in place for a long time. Taking the time to evaluate registrars based on the above criteria will be a good investment of your time.

*Risk Based Certification is a registered EU trademark of DNV GL AS.

14 ISO 9001: How it works

Page 16: DNV GL - BUSINESS ASSURANCE ISO 9001 …€¦ · ISO 9001 uality Management System,62 Occupational ealth Safety Management ISO 14001 Environmental Management System 2 ISO 9001: How

SAFER, SMARTER, GREENER

SAFER, SMARTER, GREENER

DNV GL - BUSINESS ASSURANCE

ISO 9001CERTIFICATIONAnd how it works for your organization

DNV GL - BUSINESS ASSURANCE1400 Ravello Dr.

Katy, TX 77449

Phone 877-368-3530

www.dnvglcert.com

[email protected] t

DNV GL - Business Assurance is a world-leading certification body. We help businesses

assure the performance of their organizations, products, people, facilities and supply

chains through certification, verification, assessment, and training services.

The DNV GL Group operates in more than 100 countries. Our over 12,000 professionals

are dedicated to helping our customers make the world safer, smarter and greener.

© Copyright 2005-2020 DNV GL Business Assurance USA, Inc.All Rights Reserved.

Powering innovation