ISO 9001, the queen mother of all ISO standards, lays out what your business needs to be compliant. It requires you to have, at a minimum:
- 6 documented procedures;
- 21 records;
- A quality policy;
- Quality objectives; and
- A quality manual.
Let’s talk about the procedures. The quality standard requires that your company have a documented procedure for:
- Document control;
- Record control;
- Conducting quality audits;
- Controlling nonconforming products;
- Corrective actions; and
- Preventive actions.
However, ISO 9001 does not require that you document any other procedure in your Quality Management System. The standard refers in general terms to the processes needed for the Quality Management System — whatever they might be — as well as their sequence and interaction. It leaves the door wide open.
You could pretty much decide what’s important to your organization. Isn’t that how it ought to be? You know better than anyone — save for your customers — what functions are essential to your company’s well-being.
Believe it or not, that’s the point of writing ISO 9001 so generally. If you want quality in your products and processes, you use the quality standard as a guide. You tailor the standard to your particular requirements and goals.
So…what is most important to your organization?