Q4 2021
How to Get the Most Out of a Management Review
ISO 9001:2015 requires an organization to conduct management review at planned intervals. Too often we've seen that organization perform such Management review simply to fulfill the requirement of ISO 9001:2015 but did not truly get the most out of the Management Review itself. 

Let's go back to the basic and understand the purpose of a Management Review meeting. The purpose of such a review is to evaluate if the management system is performing as intended and if it's producing the desired results as efficiently as possible. An inefficient management system leads to a lack of engagement, uncertainty, and lack of clarity throughout the business. The idea behind the review process is to take a regular and systematic step back from the day to day running of a business to review the performance of the management system by asking "Are the current processes still suitable, adequate, and effective?"

Another important point to remember is there is a difference between routine Management meetings and Management Reviews. The routine Management meetings address the day-to-day working practices, sales, production, resources and staffing matters. However, Management Review focuses solely on the requirements of the Management System, as specified within your Manual or documented information.
 
The following are some tips to get the most out of a Management Reviews:

Have a good preparation
Set a schedule and consider the following items:
Does your organization do Management Reviews more than once a year?
o   If so, you can dedicate each Management Review meeting to a specific area of you Management System.

Are all the top management who are decision makers able to attend the meeting?
o   It is always recommended to try to schedule the Management Reviews well in advance to get the most participation.
o   Make sure that you invite the right people in attendance to discuss the issues in the agenda.
o   Aside from the senior management team, consider to invite others (as appropriate) to discuss any particular issue in the agenda where more detail is required.

Does your organization operates more than one Management System or certified to more than one ISO Standard?
o  You may consider to conduct a joint Management Reviews to save time and avoid unnecessary duplication.
o  Write an agenda that covers all topic required by the ISO standard and any additional relevant topics.

Take good meeting minutes
o  Have a designated person to take the minutes throughout the meeting.
o  When taking minutes, it's helpful to use the meeting agenda as reference.
o  If there are action items or changes agreed during the meeting, it is important to document who will be responsible to carry out the task and assigned deadline. 
o  It is always important to document the date and time of the meeting as well as who was in attendance.
o  It is important to write the minutes as soon as the meeting concludes while all information is still fresh in mind.             

Follow up
o  Be sure that all appropriate staff assigned with tasks resulted from Management Reviews are informed immediately.
o  Set schedule interval to follow up on the progress of such tasks.
o  It is important to keep staff informed of any changes affecting them as this will ensure that your Management System is operating effectively.

Management Reviews is set as a requirement in ISO 9001:2015 for a good reason. Instead of doing the Management Reviews simply to satisfy the requirement of the standards, let's do it right and reap the true benefit of it! 
DoD Upgrades CMMC 1.0 to CMMC 2.0
The Cybersecurity Maturity Model Certification (CMMC) program enhances cyber protection standards for companies in the Defense Industrial Base (DIB). It is designed to protect sensitive unclassified information that is shared by the Department with its contractors and subcontractors. The program incorporates a set of cybersecurity requirements into acquisition programs and provides the Department increased assurance that contractors and subcontractors are meeting these requirements.

On Nov. 4, the Department of Defense (DoD) announced the launch of CMMC 2.0, a comprehensive framework to protect the defense industrial base from increasingly frequent and complex cyberattacks.

A brief summary of the history of the program and the upcoming changes were reviewed by www.lexology.com. Click the link below to read more.
ISO 9001:2015 Corner – Auditing Guidance for "Design and Development Process"
The objective of auditing the design and development process is to determine whether it is managed and controlled to enable products and services to meet their intended use and specified requirements.

It is necessary to note that for service organizations, the approach to design and development may be different from "traditional" manufacturing organizations (see the ISO 9001 Auditing Practices Group guidance document on "Service Organizations").

Before discussing in detail the way in which the design and development process should be audited it is vital for the auditor to understand what is meant by the phrase "Design and development". By misunderstanding this concept, many organizations have wrongly excluded this process from their quality management system.

ISO 9001clause 8.3 refers only to design and development of products and services. In some organizations it can be beneficial, but not required, to apply the same methodology to design and development of processes. 
AS 9100D Corner – OASIS V3 Launch Update
Online Aerospace Supplier Information System® (OASIS) will soon be updated to the much-anticipated OASIS v3. If you miss the preview webinars for OASIS v3, you may access the recording via the following link https://iaqg.org/tools/oasis-v3/.

If you have questions about OASIS and how to navigate through OASIS, please do not hesitate to contact us at isoinfo@iapmort.org or 1-877-4-MY-ISO-1. 
IAPMO Group was established in 1926 and has offices in the USA, Canada, Australia, China, Indonesia, India, Mexico, Germany and Argentine. To learn more for the IAPMO Group complete services, please visit our website at www.iapmo.org.