ISO 9001 News ISO 9001:2025 - What should be changed in the next Edition of ISO 9001? - REVISION PROCEEDING- August 2023

AuditReadyAnyTime

Registered
Are 7.5.2, 7.5.3 not adequate?

Are 7.5.2, 7.5.3 not adequate?
For someone who is well experienced within a solid QMS, yes. They would be able to interpret exactly how each requirement can be met. But for new people to ISO, or a QMS, or new to a regulated industry, No. I do not think 7.5.2 and 7.5.3 provides the level of clarity and respect raw data demands.
 

AuditReadyAnyTime

Registered
It really is about more than what ISO covers. It’s not just about ‘fraud’. The two areas I tend to focus on are the torturous paths of data transfer across multiple systems (been bit by that!) and the transparency and availability of data (huge area of risk).

Most of you know that what I dislike about the standards is that they are a minimal standard and too many organizations try to contract lawyer their way out of good quality as well as the abusive punitive and ignorant auditors that overstep ( no one here of course:)). So like everything, ISO is more likely to get it wrong and vaguely over reach on this too….
Bev D, you get it!
 

qualitymanagerTT

Involved In Discussions
For someone who is well experienced within a solid QMS, yes. They would be able to interpret exactly how each requirement can be met. But for new people to ISO, or a QMS, or new to a regulated industry, No. I do not think 7.5.2 and 7.5.3 provides the level of clarity and respect raw data demands.
Well, if you want to totally ignore ISO 9001 7.2 then sure you can throw new people into addressing 7.5.2 and 7.5.3 without support.
 

Bev D

Heretical Statistician
Leader
Super Moderator
Well, if you want to totally ignore ISO 9001 7.2 then sure you can throw new people into addressing 7.5.2 and 7.5.3 without support.
Not sure what your point is? Often we interpret things thru our own experiential lense. For clarity my lense is that 7.2 covers competence which is rarely well assessed, assured or controlled in salaried personnel. 7.5.2 and 7.5.3 concern ‘information’ document control - basically and generally used to apply to words. In fact I’ve had many auditors and quality people (who should be competent in interperpreting the standard) tell me that 7.5.2 and 7.53 only apply to the information contained in SOPs, work instructions and Drawings (which have numbers representing the specification limits and few words). What Data integrity refers to is numbers. Numbers generated by experiments V&V studies and control/inspection measurements stored in quality records and resulting from direct measurements and calculations. These things don’t have revision control as changes to data are not allowed except under certain circumstances. The origination of data integrity is with pharma.

So perhaps you can clarify your point?
 

Big Jim

Admin
Not sure what your point is? Often we interpret things thru our own experiential lense. For clarity my lense is that 7.2 covers competence which is rarely well assessed, assured or controlled in salaried personnel. 7.5.2 and 7.5.3 concern ‘information’ document control - basically and generally used to apply to words. In fact I’ve had many auditors and quality people (who should be competent in interperpreting the standard) tell me that 7.5.2 and 7.53 only apply to the information contained in SOPs, work instructions and Drawings (which have numbers representing the specification limits and few words). What Data integrity refers to is numbers. Numbers generated by experiments V&V studies and control/inspection measurements stored in quality records and resulting from direct measurements and calculations. These things don’t have revision control as changes to data are not allowed except under certain circumstances. The origination of data integrity is with pharma.

So perhaps you can clarify your point?

His point was clear enough. Competent experienced people may understand 7.5.2 and 7.5.3 well enough, but incompetent people, those that don't have competence as required by 7.2, will struggle.

Be careful how deep you go down that rabbit hole though, or you will find that no one is truly competent.
 

Olec Kovalevsky

Registered
IMHO 7.2 and 7.1.6 requirements should be detailed in the new version of ISO 9001 in order to get a better linkage with business processes and activities. For example, a risk-based approach specific to required knowledge and competence (related to business process activities) could be usefull to define enhancement and improvement priorities on this subjects. This could be added to usual and quite global requirements "determine the necessary competence / knowledge for the operations and QMS effectiveness ..." which is often understood as a "soft" requirement in ISO 9001. Some thoughts on this ?
 
Top Bottom