SAFER, SMARTER, GREENER

GUIDANCE FOR THE TRANSITIONING FROMISO 9001:2008 TO ISO 9001:2015

BUSINESS ASSURANCE

2 ISO 9001

ABOUT THISDOCUMENTThe purpose of this document is to provide you with some useful insights on the transitioning to ISO 9001:2015. It provides info related to the contents and clause structure of the revised standard, the transition timeline and key dates and the requirements for the transition, as well as explaining how DNV GL can support your process to ensure a smooth transition.

3ISO 9001

ISO 9001:2015 incorporates elements such as a strong focus on stakeholders and the wider context of an organization to fit the evolving needs of modern business. ISO 9001 can be used by any organization, large or small, regardless of its field of activity. It is by far the most recognized and used international standard for quality management systems. More than one million companies and organizations in over 170 countries are certified to ISO 9001.

First published in 1987, ISO 9001 has been around for many years, but has been regularly reviewed and updated to ensure it is adapted to the current business environment. However, this is the first major revision since 2000, as the 2008-edition only entailed minor changes. A change was needed to bring it up to date in response to vast changes in technology and digitalization, business diversity and global commerce.

ISO 9001 - Background

4 ISO 9001

Transition timeline

2015

15 Sept2015 Publication of ISO

9001:2015.

3 YEARS PERIOD

Perform an ISO 9001:2015 transition

audit to ensure your certificate is

renewed before 15 September 2018.

15 Sept2018

Transition period ends.

ISO 9001:2008 certificates

cease to be valid.

2018

5ISO 9001

periodic or recertification audit, as this is better and more cost-effective. However, the transition may also be done during a special "off-cycle" audit, in agreement with your organization.

DNV GL is ready to perform the transition audit and holds the needed accreditations.

The transition audit will normally entail a need for additional time to evaluate compliance with the new or revised requirements in the new edition, but will typically not exceed 1 extra man-day.

REQUIREMENTS FOR THE TRANSITIONThe International Accreditation Forum (IAF) decided early on that there was to be a three-year transition period from the ISO 9001:2015 publication date, which was 15 September 2015.

To transfer your ISO 9001:2008 certificate to the new edition, DNV GL needs to perform a transi-tion audit as the basis for recommending certifi-cation to the new standard. The transition audit should preferably be done during a scheduled

WHAT YOU SHOULD DOFor any organizsation, the degree of necessary changes will be dependentdepend upon the maturity and effectiveness of the current manage-ment system and on the organizsational structure and practices.

Organizations using ISO 9001:2008 are recom-mended to do the following:

Transition to ISO 9001:2015

12345

Familiarize yourself with ISO 9001:2015.

Perform a gap analysis to identify the differences that need to be addressed to ensure your QMS meet all new and revised requirements.

Based on the results of the gap analysis, develop an implementation plan.

Provide appropriate training for all individuals involved in implementing ISO 9001.

Modify the existing QMS to meet the new require-ments and ensure proper implementation in your organization. It is recommended that you conduct an internal audit to check effective implementa-tion.

For the proper planning and scheduling of a transition audit, it is beneficial that this is agreed on as early as possible between the organiszation and DNV GL.

6 ISO 9001

■ AWARENESS SESSIONS: seminars, webinars and e-learnings where you typically learn about the revisions and obtain a basic overview of the content and key changes in the standards, the transition process, etc.

■ TUTORED TRAINING COURSES, IN-COMPANY OR PUBLIC: these are interactive courses where the objective is to provide deeper insight into the changes and the required steps for a transition. These are modular courses where the level of detail can be tailored to your needs.

■ WORKSHOP WITH YOUR MANAGEMENT TEAM AND/OR OTHER KEY RESOURCES: to build knowledge and understanding of the changes and how they impact the existing management systems. The focus can be tailored to your needs.

■ GAP-ANALYSIS: assessment of your management system against the requirements of the new standard to identify the gaps that need to be addressed. This will provide useful input both on your readiness to comply with the new standard and to your process for ensuring such compliance. The level of detail of such an assessment can be tailored to your needs.

How can DNV GL support your transition?

During the transition period, we can help by providing a number of services delivered to you by the local staff you already know:

If you have questions, please do not hesitate to get in touch with your normal DNV GL contact or the local DNV GL - Business Assurance unit.

7ISO 9001

1. Scope2. Normative references3. Terms and definitions4. Context of the organization

4.1. Understanding the organization and its context4.2. Understanding the needs and expectations of interested parties4.3. Determining the scope of the quality management system 4.4. Quality management system and its processes

5. Leadership

5.1. Leadership and commitment5.1.1. General5.1.2. Customer focus5.2. Policy5.2.1. Establishing the quality policy5.2.2. Communicating the quality policy5.3. Organizational roles, responsibilities and authorities

6. Planning for the quality management system

6.1. Actions to address risks and opportunities6.2. Quality objectives and planning to achieve them6.3. Planning of changes

7. Support

7.1. Resources7.1.1. General7.1.2. People7.1.3. Infrastructure7.1.4. Environment for the operation of processes7.1.5. Monitoring and measuring resources7.1.5.1. General7.1.5.2. Measurement traceability7.1.6. Organizational knowledge

ISO 9001:2015 was developed using ISO’s common framework for management system standards, containing a unified High Level Structure (HLS) and common text and terminology. This to ensure better alignment and compatibility with other ISO standards such as ISO 14001:2015, ISO/IEC 27001:2013 and many others. The clause structure of ISO 9001:2015 is shown below. Clauses in black text are those induced through the common HLS, while clauses in blue are additional clauses specific for ISO 9001:

The structure and contents of ISO 9001:2015

8 ISO 9001

7.2. Competence7.3. Awareness7.4. Communication7.5. Documented information7.5.1. General7.5.2. Creating and updating7.5.3. Control of documented information

8. Operation

8.1. Operational planning and control8.2. Requirements for products and services8.2.1. Customer communication8.2.2. Determining the requirements for products and services8.2.3. Review of requirements for products and services8.2.4. Changes to requirements for products and services8.3. Design and development of products and services8.3.1. General8.3.2. Design and development planning8.3.3. Design and development inputs8.3.4. Design and development controls8.3.5. Design and development outputs8.3.6. Design and development changes8.4. Control of externally provided processes, products and services8.4.1. General8.4.2. Type and extent of control8.4.3. Information for external providers8.5. Production and service provision8.5.1. Control of production and service provision8.5.2. Identification and traceability8.5.3. Property belonging to customers or external providers8.5.4. Preservation8.5.5. Post-delivery activities8.5.6. Control of changes8.6. Release of products and services8.7. Control of nonconforming outputs

9. Performance evaluation

9.1. Monitoring, measurement, analysis and evaluation9.1.1. General9.1.2. Customer satisfaction9.1.3. Analysis and evaluation9.2. Internal audit9.3. Management review9.3.1. General9.3.2. Management review inputs9.3.3. Management review outputs

10. Improvement

10.1. General10.2. Nonconformity and corrective action10.3. Continual improvement

9ISO 9001

This clause structure is quite different to that of ISO 9001:2008. An organization is of course not required to copy this structure for its management system. The purpose of the new structure is to provide a clear presentation of the requirements, not to be a model for documenting your management system.

ISO 9001 incorporates the Plan-Do-Check-Act approach as shown below

For information on the key changes in ISO 9001:2015 compared with the 2008 edition, please refer to the separate presentation prepared by DNV GL.

QUALITY MANAGEMENT SYSTEM(4)

CUSTOMER REQUIREMENTS

RESULTS OF THE QMS

ORGANISATION AND ITS CONTEXT

(4)

LEADERSHIP(5)

P

D

C

A Improvement(10)

Planning(6)

Support & operation

(7,8)

Performance evaluation

(9)

NEEDS AND EXPECTATIONS OF RELEVANT

INTERESTED PARTIES (4)

PRODUCT AND SERVICES

CUSTOMER SATISFACTION

The trademarks DNV GL and the Horizon Graphic are the property of DNV GL AS. © DNV GL AS 2017. All rights reserved.

SAFER, SMARTER, GREENER

DNV GLAs a world-leading certification body, DNV GL helps businesses assure the performance of their organizations, products, people, facilities and supply chains through certification, verification, assessment, and training services. Partnering with our customers, we build sustainable business performance and create stakeholder trust.

assurance.dnvgl.combusiness.assurance@dnvgl.com

DNV GL - Business Assurance