ISO 9001 Compliance
4.2.4 Control of Records
Maintaining objective evidence of compliance
WHY KEEP RECORDS?
The discipline of maintaining your QMS records ensures that you will
have an objective means of assessing QMS effectiveness. With this
historical evidence you can:
- Understand how well your QMS is performing
- Trace back to the source of problems
- Demonstrate compliance to requirements
- Evaluate trends in QMS performance
- Monitor improvements
"The energy, effort and expense of keeping up your quality records are
ongoing investments in building a reference-base for analysis,
compliance and improvement."
Additionally, your quality records are a primary reference for your internal and external auditors to assess your compliance to requirements. As each record is filed, keep in mind that an auditor may want to retrieve it in order to evaluate the effectiveness of the QMS.
WHAT RECORDS SHOULD BE KEPT?
The ISO 9001 standard has a built-in reference to all required records
wherever the phrase "see 4.2.4" is found (4.2.4 is the paragraph dealing
with Control of Records). The 20 mandated ISO 9001 records are:
|
|
WHAT ARE THE ISO 9001 REQUIREMENTS?
All 20 required quality records that are applicable to your
organization's processes, and any additional records you decide are
important to maintain, must be kept according to the "Control of
Records" requirements in the ISO 9001 standard:
Records established to provide evidence of conformity to requirements
and of the effective operation of the quality management system shall be
controlled. The organization shall establish a documented procedure to
define the controls needed for the identification, storage, protection,
retrieval, retention and disposition of records. Records shall remain
legible, readily identifiable and retrievable.
(ref. 4.2.4)
Let’s briefly clarify each requirement:
Legible – You must ensure handwritten records can be easily read and that you protect paper records from deterioration that might affect their readability.
Readily Identifiable – Each record should be uniquely identified through a number, code, title, date, storage location or other appropriate method. Anyone looking at the records should be able to easily tell what they are looking at.
Retrievable – Every record should be filed and stored in such as way as to be easy to find and access when needed.
In addition, you must have a documented procedure for controlling records. In the procedure you must address how your organization handles the following:
Identification – What minimum information must be added to every record for identification (see "Readily Identifiable" above).
Storage – How hardcopy and electronic records are stored to protect them.
Protection – What methods must be used to preserve records from loss or deterioration. For hardcopy records, you may want to include where files are kept, in what types of storage containers and any environmental concerns (moisture, temperature, etc.). For electronic records, be sure to include how the data is backed-up regularly.
Retrieval – Describe how records are indexed or otherwise organized to facilitate easy access (see "Retrievable" above).
Retention Time – Specify minimum and/or maximum retention requirements for each type of record. Be sure to establish a schedule to review your records according to your requirements.
Disposition – Determine how you will dispose of records when scheduled. For confidential records, be sure you are explicit about how you intend to destroy the records.
HOW CAN WE KEEP IT SIMPLE?
With at least 20 types of quality records to maintain according to the
ISO 9001 requirements, organizations are often seeking to simplify their
approach to record keeping. Here are some suggestions:
- Assign clear responsibility for filing, maintaining and disposing of each record.
- Provide adequate storage capacity so filing can be maintained.
- Keep your records only as long as necessary, then dispose of them.
- evelop a records retention matrix that shows who is responsible, storage locations, protections, security, retention requirements and disposal methods.
- Move as many records as possible to a searchable, electronic format to keep storage costs down and make them easy to retrieve when needed.
No comments:
Post a Comment