Category Archives: Auditing

Annex SL Esplained

“Annex SL” is an ISO/IEC document that defines a framework for a generic management system. Understanding it is the key to new ISO releases, such as DIS ISO 9001:2015.

It was published by ISO’s Technical Management Board (TMB) in 2012 but since the recent release of DIS ISO 9001:2015 – and it’s strong impact on that standard, a review of the Annex should be helpful to implementors and auditors alike for several years to come.

annex sl page

You may not have heard of the TMB – but maybe you have heard of a TC, or “Technical Committee”. These are groups of experts; representatives of industry, NGOs, governments and other stakeholders within ISO. One well-known TC is TC 176 – that’s the group responsible for ISO 9001 or “Quality management and quality assurance”.

There are (or have been) at least 290 TCs (I know this because they are numbered sequentially and the latest one is TC 290).

You can see a full list HERE.

The TMB sits above the TCs within the “Organization” (ISO). Their charter is this that they

  • “… shall have responsibility for the general management of the technical committee structure…
  • approve the establishment and dissolution of technical committees, and revisions of the directives for the work of technical committees…
  • shall deal with all matters of strategic planning, coordination,
  • and monitoring of technical committee activities

– (Article 9.3 of the ISO statutes).

TMB Map

Annex SL is one attempt by the TMB to help the TCs provide a better product more easily and efficiently.

Annex SL does this by:

  1. reducing duplication efforts – many management system standards have the same basic requirements
  2. by reducing the differing interpretation of the same terms, or consolidating terms
  3. and by delivering the material in a clear and repeatable manner; making it digestible by consumers of multiple standards.

As you could imagine, all of these committees don’t always have knowledge of what the others are doing – inconsistencies occur. Then, once a standard is released, the industry; those who are certified to these standards and the auditors that interpret them – sometimes come to different conclusions.

There are mechanisms within the certification process to minimize confusion and disconnects, but a better way is a top-down approach; one that begins above the standards creation level itself. Annex SL is a large leap toward a more effective process.

What is in Annex SL?

It is a template – a framework. Scaffolding for other standards. It consists of:

  • Eight clauses
  • Core text
  • A baseline of 45 ‘shall’ statements generating 84 requirements (differing standards will have additional requirements)
  • Base terms and core definitions

This common structure will contain, in addition, the special requirements of the target standard (forgive, please, my space-saving abbreviations. Click to embiggen, then hit your browser’s back button):

ASL Main Structure

And there are common core definitions; the following words will have the same interpretations across all Annex SL conformant standards:

  • organization
  • interested party (preferred term)
  • stakeholder (admitted term)
  • requirement
  • management system
  • top management
  • effectiveness
  • policy
  • objective
  • risk
  • competence
  • documented information
  • process
  • performance
  • outsource (verb)
  • monitoring
  • measurement
  • audit
  • conformity
  • nonconformity
  • correction
  • corrective action
  • continual improvement

A given standard may have other words to be defined, naturally.

“SL”? – What Does It Stand For?

I wish it was something cooler, but…

“SL” is simply the sequential number of an Annex within numerous annexes as part of a document titled, ISO / IEC Directives, Part 1 “Consolidated ISO Supplement – Procedures specific to ISO”

The Annex before it is “SK” (though it is currently just a placeholder), and the one after it is “SM”, “Global relevance of ISO technical work and publications”.

Aren’t you glad you asked. You were going to ask, right?

For next time:

How has Annex SL impacted Publications?

 

Thank you again. Go forth – and annex something.

 

RABQSA Name Changing

The RABQSA is changing its name to “Exemplar Global”. I know, right? Why would they do such a thing?

RBQSA changing to Exemplar GlobalKerry Palejs,  General Manager of Global Operations, suggested I read the website FAQs when I asked him the question. The change, near as I can decipher, has to do with the organization’s desire to show that they can offer any solution to any market, anywhere. These solutions would be related to their experience and knowledge in the development and application competence services.

Forgive me – some of you may not know what RABQSA is, and how it fits into the ISO Registration schema. For the most part, in our world, its impact lies in providing industry recognized certifications for auditors.

The artist formerly known as RABQSA also provides, under the brand of iNARTE, certified qualified engineers and technicians in the fields of Telecommunications, Electromagnetic Compatibility/Interference (EMC/EMI), Product Safety (PS), Electrostatic Discharge control (ESD) and Wireless Systems Installation. iNARTE also administers FCC Commercial Operator License Examinations.

I suspect, and this is pure conjecture mind you, that this name change implies [RABQSA] intends to purchase other qualification schemes similar to the acquisition of iNARTE. It would seem to me that just having one such entity in conjunction with the original body wouldn’t be enough to justify the expense and risk of a name change.

Back to our world: In order to be considered a qualified auditor – we need this to help maintain credibility with customers – one would need to jump through the various hoops that folks like this provide. RABQSA, now Exemplar Global, is one of two with whom the majority of auditors interact to convey this confidence. The other is called International Register of Certificated Auditors (IRCA) – who, by the way, claim to be the largest. I personally work with RABQSA – ahem Exemplar Global.

So, with your educational experience, certificate from a recognized auditor course, and audit log under your arm, you’d go to one of these folks; Exemplar Global or IRCA and they, upon successful review, grant you the credentials needed to perform audits. You’d need these credentials primarily if you wanted to be employed by an Accredited Registrar (TUV, BSI, UL and their ilk), or if you wanted to work outside of those circles and separate yourself from the unwashed masses of other consultants. There is a cost involved and the process isn’t considered lightly by anyone – but there is a clear benefit in perceived credibility.

What is the impact of this change?

After reviewing the information on Exemplar’s site, there should be no impact on

  • Fees
  • Contact information – phone numbers remain the same, and emails and web hits will be redirected during a transition period
  • Customer numbers
  • Recognition of Certification – existing approvals are in full effect.
  • Direct debit charges

After the 4th of November, what will begin to change:

  • New certification cards
  • All web inquiries should be directed to www.exemplarglobal.org
  • Likely their Twitter, LinkedIn and Facebook feeds will be converted to the new name as well.

As of the 4th of November, RABQSA is no more, and I for one welcome our new auditor qualification overlords, Exemplar Global.

Thanks for listening – go forth, and calibrate thyself – assuming you have some kind of card showing your are qualified to do so.

Sal