ISO 9000-3 quality management system: guiding principles
23.2.1 ISO 9000-3 quality management system: guiding principles
Eight principles guide the new ISO 9000-3 standard; these were originally set down in the ISO 9000:2000 standard (ISO, 2000b), as follows:
(1) Customer focus. Organizations depend on their customers and therefore should understand current and future customer needs.
(2) Leadership. Leaders establish the organization’s vision. They should cre- ate and maintain an internal environment in which people can become fully involved in achieving the organization’s objectives via the designat-
ed route. (3) Involvement of people. People are the essence of an organization; their
full involvement, at all levels of the organization, enables their abilities to be applied for the organization’s benefit.
(4) Process approach. A desired result is achieved more efficiently when activities and resources are managed as a process.
(5) System approach to management. Identifying, understanding and man- aging processes, if viewed as a system, contributes to the organization’s effectiveness and efficiency.
(6) Continual improvement. Ongoing improvement of overall performance should be high on the organization’s agenda.
23.2.2 ISO 9000-3: requirements 479 The current standard edition of ISO, 9000-3 (ISO 1997) includes 20 require-
23.2 ISO 9001 and ISO 9000-3
ments that relate to the various aspects of software quality management systems. The new ISO 9000-3 (ISO/IEC, 2001) offers a new structure, with its 22 requirements classified into the following five groups:
Quality management system
Management responsibilities
Resource management
Product realization
Management, analysis and improvement. The new structure is presented in Table 23.1. The new structure realizes a
change in emphasis among the various subjects that make up the require- ments, a totally new classification of SQA topics into standard sections and revision of requirement section titles. These changes reflect a gradual rather than a radical change of concepts as presented in the updated guiding prin- ciples (see Section 23.2.1). Table 23.2 compares ISO 9000-3:1997 edition with those of the upcoming edition for a sample of requirement subjects, one for each requirement class.
Table 23.1: ISO 9000-3 new edition – Requirements and their classification Requirement class
Requirement subjects
4. Quality management system
4.1 General requirements 4.2 Documentation requirements
5. Management responsibilities
5.1 Management commitments 5.2 Customer focus 5.3 Quality policy
5,4 Planning
5.5 Responsibility, authority and communication 5.6 Management review
6. Resource management
6.1 Provision of resources 6.2 Human resources 6.3 Infrastructure 6.4 Work environment
7. Product realization
7.1 Planning of product realization 7.2 Customer-related processes 7.3 Design and development 7.4 Purchasing 7.5 Production and service provision 7.6 Control of monitoring and measuring devices
8. Measurement, analysis
8.1 General
and improvement
8.2 Monitoring and measurement
Table 23.2: Current ISO 9000-3:1997 vs. new edition – requirements comparison (sample)
23 ISO 9000-3: new edition
ISO 9000-3:1997 edition Requirement class and subject
Requirement subjects
Quality
Requirement class 4 (Quality management system ) 4.2 Quality system Subject 4.2 Documentation requirements
4.5 Document and data control 4.16 Control of quality records
a 4.1 Management responsibility n
Requirement class 5 (Management responsibilities)
a 4.2 Quality system
Subject 5.4 Planning
gement 4.9 Process control
Requirement class 6 (Resource management)
Subject 6.3 Infrastructure Requirement class 7 (Product realization)
andard st
Subject 7.5 Production and service provision 4.7 Control of customer-supplied product
4.8 Product identification and traceability 4.9 Process control
4.10 Inspection and testing 4.12 Inspection and test status
4.15 Handling, storage, packaging, preservation and delivery 4.19 Servicing
Requirement class 8 (Measurement, analysis 4.13 Control of non-conforming product and improvement) Subject 8.3 Control of non-conforming product
Source: Adapted from ISO (2000a)