Finally, an external registrar—an independent certification body—comes in to pass judgment. It is a rigorous process that can take anywhere from six months to two years.
| Concept | Description | |---------|-------------| | | Managing activities as interconnected processes that function as a coherent system. | | PDCA cycle (Plan-Do-Check-Act) | The engine of the QMS: Plan objectives/processes, Do as planned, Check against policy/objectives, Act to improve. | | Risk-based thinking | Proactively determine what could go wrong (or right) and plan controls. Replaces "preventive action" as a mindset. | | Documented information | Any information that must be controlled (documents = "how we do it"; records = "what we did"). No mandatory manual or procedure names. | normas iso 9001
The current iteration, ISO 9001:2015, moved the needle even further. It abandoned the rigid, checklist mentality of the past in favor of a "risk-based thinking" approach. Companies are no longer just filling out forms; they are required to anticipate what could go wrong—be it a cyberattack, a supplier bankruptcy, or a sudden shift in raw material costs—and build preventative measures into their DNA. | | PDCA cycle (Plan-Do-Check-Act) | The engine
"In a pre-ISO environment, if a worker makes a mistake, they hide it," Dr. Vance notes. "In a mature ISO 9001 environment, reporting a mistake is rewarded because it highlights a flaw in the process. It shifts the culture from blame to improvement." | | Documented information | Any information that