Process
Process
Our ref
(1) This module was developed jointly with ISO/TC 176/SC1/WG2. ISO/TC 176/SC1 was responsible
for the development of ISO 9000:2000 Quality management systems - Fundamentals and vocabulary)
Together these are being made available as the ISO/TC 176/SC 2 'ISO 9000 Introduction
and Support Package.
Feedback from users of the standards will be used to determine whether additional modules
should be developed, or if these published modules should be revised.
The modules, and further information on the year 2000 ISO 9000 standards, may be
downloaded from web site:
http://www.bsi.org.uk/iso-tc176-sc2
C Corrie
for BSI Secretariat
ISO/TC 176/SC 2
1
BSI Standards, 389 Chiswick High Road, London W4 4AL Telephone: + +44 208 996 9000 Fax: + +44 208 996 7400
ISO 9000 Introduction and Support Package:
Guidance on the Process Approach to quality management systems
1) Introduction
This guidance document is intended to help users of the ISO 9000:2000 series of standards to
understand the concepts and intent of the “process approach” to quality management systems. It is not
limited to the requirements of ISO 9001:2008, and is not intended to provide guidance for conformity
assessment purposes. It should not be interpreted as a source of additional requirements to those
contained in ISO 9001:2008.
The new ISO 9000:2000 standards promote the adoption of a process approach when developing,
implementing and improving a quality management system (QMS). The process approach is reflected
in the structure of ISO 9004:2000 (“Quality Management Systems – Guidelines for performance
improvement”), and also in ISO 9001:2008 (“Quality management systems – Requirements”). The “20
element” structure of ISO 9001:1994 has been replaced by this process-based quality management
system, which is shown schematically in Figure 1, below.
Measurement, Satisfaction
Resource
analysis,
management
improvement
Requirements
Inpu Product Outpu
t Product t
realization
Figure 1 – Model of a process-based quality management system (Taken from ISO 9000:2000)
This guidance document seeks to explain, in simple language, what is meant by a process, how
processes can interact within a system, and how the Plan-Do-Check-Act (PDCA) cycle can be used to
manage those processes. Examples of quality management system processes are given, as well as
guidance on the implementation of the process approach in relation to ISO 9001:2008 requirements.
Process Approach: a desired result is achieved more efficiently when activities and related resources
are managed as a process.
NOTE 2 Processes in an organization (3.3.1) are generally planned and carried out under controlled conditions
to add value.”
Inputs and outputs are generally products that may be tangible and/or intangible. Examples of inputs
and outputs may include equipment, materials, components, energy, information and financial
resources, among others. To perform activities within the process appropriate resources have to be
allocated. A measurement system can be used to gather information and data to analyse process
performance and/or input and output characteristics.
EFFECTIVENESS
EFFECTIVENESS
PROCEDURE* OF
OFPROCESS
PROCESS==
Ability
Abilitytotoachieve
(“Specified way to carry out an activity or a desired
achieve
desiredresults
results
process” - may be documented or not) (Focus
(FocusofofISOISO
9001:2000)
9001:2000)
EFFICIENCY
EFFICIENCYOF OF
MONITORING AND PROCESS
PROCESS==
MEASUREMENT OPPORTUNITIES Results achieved
Results achieved
vs
vsresources
resourcesused
used
(Before, during and after the process) (Focus
(FocusofofISO
ISO
9004:2000)
9004:2000)
* Note – This is the definition of “procedure” given in ISO 9000:2000.
This does not necessarily mean one of the 6
“documented procedures” required by ISO 9001:2000
ISO 9001:2008 stresses the importance for an organization to identify, implement, manage and
continually improve the effectiveness of the processes that are necessary for the quality management
system, and to manage the interactions of these processes in order to achieve the organization’s
objectives. ISO 9004:2000 guides the organization beyond the requirements of ISO 9001:2008 by
focussing on performance improvements. ISO 9004:2000 recommends an evaluation of the efficiency,
as well as the effectiveness of the processes.
Process effectiveness and efficiency can be assessed through internal or external review processes
and be evaluated on a maturity scale. These scales typically range in degrees of maturity from “no
formal system” to “best-in-class performance”. An advantage to this approach is that results can be
documented and monitored over time to reach improvement goals. Numerous maturity tables have
been developed for different applications. One such model is contained in ISO 9004:2000 Annex A,
Guidelines for Self-Assessment.
The “Plan-Do-Check-Act” cycle was first developed in the 1920’s by Walter Shewhart, and was
popularised later by W. Edwards Deming. For that reason it is often referred to as “The Deming Cycle”.
Extensive literature exists about the PDCA cycle in numerous languages, and users of the ISO
9000:2000 family of standards are encouraged to consult this for a deeper understanding of the
concept.
The PDCA concept is something that is present in all areas of our professional and personal lives, and
is used continually, either formally of informally, consciously or sub-consciously in everything we do.
Every activity, no matter how simple or how complex, falls into this never-ending pattern:
Act Plan
•How to improve •What to do?
next time? •How to do it?
Check Do
• Did things happen •Do what was
according to plan? planned
Within the context of a quality management system, the PDCA is a dynamic cycle that can be
deployed within each of the organization’s processes, and to the system of processes as a whole. It is
intimately associated with the planning, implementation, control and continual improvement of both
product realization and other quality management system processes.
ACT PLAN
CHECK DO
Maintaining and continually improving the process capability can be achieved by applying the PDCA
concept at all levels within the organization. This applies equally to high-level strategic processes, such
as quality management system planning, or management review, and to simple operational activities
carried out as a part of product realization processes.
The Note in Clause 0.2 of ISO 9001:2008 explains that the PDCA cycle applies to processes as
follows:
Include Interested parties and make clear we are not just talking IS
•Communication
•Setting quality policy and
objectives
•Management review
•Availability of resources
•Use of data
M e jo ra continua de l
s is te ma de ges tión de la c alid ad
Re sp onsab ilida d
L eyenda
4) Understanding
the system approach to management
A second important quality management principle that is intimately linked with the Process Approach is
the System Approach to Management, which states that “Identifying, understanding and managing
interrelated processes as a system contributes to the organization’s effectiveness and efficiency in
achieving its objectives.” Within this context, the quality management system comprises a number of
interrelated processes. The processes needed for the quality management system include not only the
product realization processes (those that directly contribute to making the product or delivering the
service), but also numerous management, monitoring and measurement processes, such as resource
management, communication, internal auditing, management review, and other processes. This can be
seen schematically in Figure 3, which provides greater detail of the kind of processes that typically
comprise the quality management system, divided among clauses 4 – 8 of ISO 9001:2008 and ISO
9004:2000.
Examples Examples
• Determination and • Processes to
provision of demonstrate:
resources • Conformity of product
• Human resources • Conformity of
• Infrastructure management system
definition • Continual
• Work environment improvement
Examples
• Planning
• Customer related processes
• Design & development
process
• Purchasing process
• Production & service
provision
• Control of monitoring and
Figure 4: Schematic representation of typical quality management system processes, related to Figure 1
Individual processes rarely occur in isolation. Outputs from one process typically form part of the inputs
into subsequent processes, as shown in Figure 4.
The interactions between an organization’s processes can often be complex, resulting in a network of
interdependent processes. Inputs and outputs of these processes can often be related to both external
and internal customers. An example of a network with interacting processes is shown in Figure 6. The
model of the network of processes illustrates that customers play a significant role in defining
requirements as inputs. Customer’s feedback on satisfaction or dissatisfaction of process output is an
essential input to the continual improvement process of the QMS.
A P
C D
Input E Ouput E
PROCESS E
AA PP
CC DD
Input A Output A
PROCESS A
AA PP
Input C Input D
CC DD Ouput D
PROCESS C PROCESS D
Output C
AA PP AA PP
CC DD CC DD
Input B Output B
PROCESS B
AA PP
Input F Output F
CC DD Internal Internal
PROCESS F
Customer Customer
AA PP
CC DD Feedback
Note that the PDCA cycle can be applied to each individual process, as well as to the network of
processes as a whole. Some important quality management system processes may have no direct
interaction with the external customer. Process “F” in Figure 6, for example, may be an internal audit, a
management review, maintenance, or a training process.
Clause 0.2 in the introduction of ISO 9001:2008 states, referring to the process approach:
“When used within a quality management system process, such an approach emphasizes the
importance of:
a) the understanding and meeting of requirements,
b) the need to consider processes in terms of added value,
c) obtaining results of process performance and effectiveness, and
d) continual improvement of processes based on objective measurement.”
Within the context of ISO 9001:2008, the process approach includes the processes needed for product
realization, and the other processes needed for the effective implementation of the quality
management system, such as the internal audit process, the management review process, the data
analysis process, and the resource management process, among others. All processes can be
managed by using the “PDCA” concept.
Requirements for these processes are stated in the following clauses of ISO 9001:2008:
The general requirements for a quality management system are defined in clause 4.1 of ISO
9001:2008. Some guidance is given below on what questions an organization may choose to ask itself
in order to address these requirements. It is stressed that these questions are only examples, and
should not be interpreted as the only way to meet the requirements:
a) Identify the processes needed for the quality management system, and their application
throughout the organization.
- What are the processes needed for our quality management system?
- Who are the customers of each process (internal and/or external customers)?
- What are the requirements of these customers?
- Who is the “owner” of the process?
- Are any of these processes outsourced?
- What are the inputs and outputs for each process?
c) Determine criteria and methods required to ensure that both the operation and control of
these processes are effective
- What are the characteristics of intended and unintended results of the process?
- What are the criteria for monitoring, measurement and analysis?
- How can we incorporate this into the planning of our QMS and product realization processes?
- What are the economic issues (cost, time, waste, etc.)?
- What methods are appropriate for data gathering?
d) Ensure the availability of resources and information necessary to support the operation and
monitoring of these processes
f) Implement action necessary to achieve planned results and continual improvement of these
processes
6) Documentation of processes
Processes exist within the organization and the initial approach should be limited to identifying and
managing them in the most appropriate way. ISO 9001:2008 requires that all processes “needed for
the quality management system” be managed according to clause 4.1 General requirements. There is
no “catalogue”, or list of processes that has to be documented. Each organization should determine
which processes are to be documented on the basis of its customer and applicable regulatory or
statutory requirements, the nature of its activities, and its overall corporate strategy.
In determining which processes should be documented the organization may wish to consider factors
such as:
• effect on quality;
• risk of customer dissatisfaction
• statutory and/or regulatory requirements
• economic risk
• effectiveness and efficiency
• competence of personnel
• complexity of processes
Where it is found necessary to document processes, a number of different methods can be used, such
as graphical representations, written instructions, checklists, flow charts, visual media, or electronic
methods.