How long does it take to implement ISO 9001?

It depends on you and your company. The very fastest is 2-3 months because most ISO 9001 registrars require at least 2 months ISO 9001 track record before the certification audit.
More realistically: if you have a relatively small company (say, less than 20 employees), if your employees are motivated and if they don’t oppose change, if you have the backing of all senior executives, if you and other managers are ready to put some significant time and efforts into this endeavor, and if you use a really good ISO 9001 quality manual template (a sample ISO 9000 quality manual that you can modify to make it your own ISO 9000 quality manual), then you may be able to get certified in as short as 3-4 months; templates for ISO 9000 forms are an additional time-saver. Some companies are significantly slower, with 6-12 months not being unusual.
However, companies that write their ISO 9001 quality manual and their ISO 9001 quality procedures from scratch, rather than base them on a proven sample ISO 9001 quality manual, often take up to 2 years or longer.

Quality management and quality assurance (ISO 9000

ISO 9000 is primarily concerned with quality management. The definition of "quality" in ISO 9000 refers to all those features of a product or a service which are required by the customer. Quality management means what the organization does to ensure that its products conform to the customer's requirements.
ISO Guide 34:1996 Quality system guidelines for the production of reference materials
ISO 8402:1994 Quality management and quality assurance -- Vocabulary
ISO 9000-1:1994 Quality management and quality assurance standards -- Part 1: Guidelines for selection and use
ISO 9000-2:1997 Quality management and quality assurance standards -- Part 2: Generic guidelines for the application of ISO 9001, ISO 9002 and ISO 9003
ISO 9000-3:1997 Quality management and quality assurance standards -- Part 3: Guidelines for the application of ISO 9001:1994 to the development, supply, installation and maintenance of computer software
ISO 9000-4:1993 Quality management and quality assurance standards -- Part 4: Guide to dependability program management
ISO 9001:1994 Quality systems -- Model for quality assurance in design, development, production, installation and servicing
ISO 9002:1994 Quality systems -- Model for quality assurance in production, installation and servicing
ISO 9003:1994 Quality systems -- Model for quality assurance in final inspection and test
ISO 9004-1:1994 Quality management and quality system elements -- Part 1: Guidelines
ISO 9004-2:1991 Quality management and quality system elements -- Part 2: Guidelines for services
ISO 9004-3:1993 Quality management and quality system elements -- Part 3: Guidelines for processed materials
ISO 9004-4:1993 Quality management and quality system elements -- Part 4: Guidelines for quality Improvement

ISO 9000 - Benefits and Problems

ISO 9000 has received much publicity. Some managers see it as a prerequisite for conducting business. For others, it substitutes for the difficulties and vagaries of Total Quality Management (TQM). Some see only a needless bureaucratic boondoggle. Depending on the situation, any of these views might be correct.
Sensibly applied, ISO 9000 is a qualifier for international markets or specific domestic customers. Certification can be a valuable marketing tool. The standards are a sound blueprint for a quality system. They can lead the way to the more difficult and sophisticated approaches of Total Quality Management. ISO 9000 can improve a company's cost structure by 5%-20%.
Approached unwisely, ISO 9000 can be costly and unproductive. It may create a quality bureaucracy which adds to the cost structure and slows product development. It can focus people on paperwork instead of customers. It can divert management concentration and energy from more vital issues.

Understanding the ISO 14001 Standard

ISO 14001 is an international voluntary standard that specifies the minimum elements for an environmental management system. It was published in 1996 by the International Organization for Standardization and is being taken up by organizations throughout the world at varying speeds.
The above is accepted as true by most people who are aware of the standard. Beyond these simple facts, however, there are many misconceptions about ISO 14001. For instance:
ISO 14001 will be a requirement for all companies.As with ISO 9000, conformance to ISO 14001 may become a condition of doing business in certain countries, regions or markets. This process already has begun in some industrial sectors, such as the automotive and electronics markets. However, there are still a tremendous number of companies in business today that do not conform to ISO 9000, even though that standard is now 13 years old. Thus it is too early to tell how widely ISO 14001 will be required in the future.
Implementing ISO 14001 means getting a registration.Many suppliers choose to demonstrate conformance to ISO 14001 through third-party certification. Some customers may require this. However, the standard itself considers a company's self-declaration of conformance as an acceptable alternative. Further, some companies simply use the ISO 14001 model for internal purposes as a means to enhance their environmental performance.
ISO 14001 is just paperwork and won't really help my company.ISO 14001 is like many things in life - you get out of it what you put into it. The way a company implements the standard determines what benefits it receives. Many companies that have implemented ISO 14001 report a variety of benefits, including improved environmental performance, greater operating efficiency, cost reduction, improved employee awareness and enhanced public image, among others.
Implementing ISO 14001 means throwing out our current environmental programs.ISO 14001 criteria specify "what to do," not "how to do it." Implementation approaches vary widely. There is no reason to think that your existing approach to environmental management must be put aside to satisfy ISO 14001.

Quality Characteristic in ISO 9000

Any feature or characteristic of a product or service that is needed to satisfy
customer needs or achieve fitness for use is a quality characteristic. When
dealing with products the characteristics are almost always technical character-
istics, whereas service quality characteristics have a human dimension. Some
typical quality characteristics are given below.

Product characteristics
1. Accessibility Functionality Size
2. Availability Interchangeability Susceptibility
3. Appearance Maintainability Storability
4. Adaptability Odour – Strength
5. Cleanliness Operability -Taste
6. Consumption Portability – Testability
7. Durability Producibility Traceability
8. Disposability Reliability – Toxicity
9. Emittance Reparability Transportability
10. Flammability Safety – Vulnerability
11. Flexibility Security – Weight

Service quality characteristics
1. Accessibility Credibility – Honesty
2. Accuracy Dependability Promptness
3. Courtesy Efficiency – Responsiveness
4. Comfort Effectiveness Reliability
5. Competence Flexibility – Security

These are the characteristics that need to be specified and their achievement
controlled, assured, improved, managed and demonstrated. These are the
characteristics that form the subject matter of the product requirements
referred to in ISO 9000. When the value of these characteristics is quantified or
qualified they are termed product requirements. We used to use the term quality
requirements but this caused a division in thinking that resulted in people
regarding quality requirements as the domain of the quality personnel and
technical requirements being the domain of the technical personnel. All
requirements are quality requirements – they express needs or expectations that
are intended to be fulfilled by a process output that possesses inherent
characteristics. We can therefore drop the word quality. If a modifying word is
needed in front of the word requirements it should be a word that signifies the
subject of the requirements. Transportation system requirements would be
requirements for a transportation system, Audio speaker design requirements
would be requirements for the design of an audio speaker, component test
requirements would be requirements for testing components, and management
training requirements would be requirements for training managers. ISO 9000
requirements are often referred to as quality requirements as distinct from other
types of requirements but this is misleading. ISO 9000 is no more a quality
requirement than is ISO 1000 on SI units, ISO 2365 for Ammonium nitrate or
ISO 246 for Rolling Bearings. The requirements of ISO 9000 are quality
management system requirements – requirements for a quality management
system.

ISO 9001:2008 Documentation Requirements

ISO 9001:2008 Documentation Requirements
ISO 9001:2008 clause 4.1 General requirements requires an organization to “establish, document, implement, and maintain a quality management system and continually improve its effectiveness in accordance with the requirements of this International Standard”
ISO 9001:2008 Clause 4.2.1 General explains that the quality management system documentation shall include:
documented statements of a quality policy and quality objectives;
a quality manual
documented procedures required by this International Standard
documents needed by the organization to ensure the effective planning, operation and control of its processes, and
records required by this International Standard;
The notes after Clause 4.2 make it clear that where the standard specifically requires a “documented procedure”, the procedure has to be established, documented, implemented and maintained. It also emphasizes that the extent of the QMS documentation may differ from one organization to another due to:
the size of organization and type of activities;
the complexity of processes and their interactions, and
the competence of personnel.
All the documents that form part of the QMS have to be controlled in accordance with clause 4.2.3 of ISO 9001:2008, or, for the particular case of records, according to clause 4.2.4.
Guidance on Clause 4.2 of ISO 9001:2008
The following comments are intended to assist users of ISO 9001:2008 in understanding the intent of the general documentation requirements of the International Standard.
a) Documented statements of a quality policy and objectives:
Requirements for the quality policy are defined in clause 5.3 of ISO 9001:2008. The documented quality policy has to be controlled according to the requirements of clause 4.2.3.Note: Organizations that are revising their quality policy for the first time, or in order to meet the amended requirements in ISO 9001:2008, should pay particular attention to clause 4.2.3 (c), (d) and (g).
Requirements for quality objectives are defined in clause 5.4.1 of ISO 9001:2008. These documented quality objectives are also subject to the document control requirements of clause 4.2.3.
b) Quality Manual:
Clause 4.2.2 of ISO 9001:2008 specifies the minimum content for a quality manual. The format and structure of the manual is a decision for each organization, and will depend on the organization’s size, culture and complexity. Some organizations may choose to use the quality manual for other purposes besides that of simply documenting the QMS
A small organization may find it appropriate to include the description of its entire QMS within a single manual, including all the documented procedures required by the standard.
Large, multi-national organizations may need several manuals at the global, national or regional level, and a more complex hierarchy of documentation.
The quality manual is a document that has to be controlled in accordance with the requirements of clause 4.2.3.
c) Documented procedures:
ISO 9001:2008 specifically requires the organization to have “documented procedures” for the following six activities:4.2.3 Control of documents4.2.4 Control of records8.2.2 Internal audit8.3 Control of nonconforming product8.5.2 Corrective action8.5.3 Preventive action
These documented procedures have to be controlled in accordance with the requirements of clause 4.2.3
Some organizations may find it convenient to combine the procedure for several activities into a single documented procedure (for example, corrective action and preventive action). Others may choose to document a given activity by using more than one documented procedure (for example, internal audits). Both are acceptable.
Some organizations (particularly larger organizations, or those with more complex processes) may require additional documented procedures (particularly those relating to product realization processes) to implement an effective QMS.
Other organizations may require additional procedures, but the size and/or culture of the organization could enable these to be effectively implemented without necessarily being documented. However, in order to demonstrate compliance with ISO 9001:2008, the organization has to be able to provide objective evidence (not necessarily documented) that its QMS has been effectively implemented.
d) Documents needed by the organization to ensure the effective planning, operation and control of its processes:
In order for an organization to demonstrate the effective implementation of its QMS, it may be necessary to develop documents other than documented procedures. However, the only documents specifically mentioned in ISO 9001:2008 are:- Quality policy (clause 4.2.1.a)- Quality objectives (clause 4.2.1.a)- Quality manual (clause 4.2.1.b)
There are several requirements of ISO 9001:2008 where an organization could add value to its QMS and demonstrate conformity by the preparation of other documents, even though the standard does not specifically require them. Examples may include:- Process maps, process flow charts and/or process descriptions- Organization charts- Specifications- Work and/or test instructions- Documents containing internal communications- Production schedules- Approved supplier lists- Test and inspection plans- Quality plans
All such documents have to be controlled in accordance with the requirements of clause 4.2.3 and/or 4.2.4, as applicable
e) Records:
Examples of records specifically required by ISO 9001:2008 are presented in Annex B.
Organizations are free to develop other records that may be needed to demonstrate conformity of their processes, products and quality management system.
Requirements for the control of records are different from those for other documents, and all records have to be controlled according to those of clause 4.2.4 of ISO 9001:2008.

Establishing a ISO 9001 records procedure

Establishing ISO 9001 Records Procedure

The ISO 9001 standard requires records to remain legible, readily identifiable and retrievable and that a procedure defines the controls needed for the identification, storage, protec- tion, retrieval, retention time and disposition of records. Records have a life cycle. They are generated during
which time they acquire an identity and are then assigned for storage for a prescribed period. During use and storage they need to be protected from inadvertent or malicious destruction and as they may be required to support current activities or investigations, they need to be brought out of storage quickly. When their usefulness has lapsed, a decision is made as to whether to
retain them further or to destroy them.
Readily retrievable means that records can be obtained on demand within a reasonable period (hours not days or weeks) Readily identifiable means that the identity can be discerned at a glance.

Although the requirement implies a single procedure, several may be necessary because there are several unconnected tasks to perform. A procedure cannot in fact ensure a result. It may prescribe a course of action which if followed may lead to the correct result, but it is the process that ensures the result not the procedure.

The revised requirement omits several aspects covered in clause 4.16 of the
1994 version. Collection of records is now addressed by Analysis of data (clause 8.4) Indexing of records is a specific form of identification and is therefore already addressed Access is now addressed by the requirement for record retrieval Filing is a specific form of storage and is therefore already addressed You may only need one procedure which covers all the requirements but this is not always practical. The provisions you make for specific records should be included in the documentation for controlling the activity being recorded. For example, provisions for inspection records should be included in the inspection procedures; provisions for design review records should be included in the design review procedure. Within such procedures you should provide the forms (or content requirement for the records), the dentification, collection/submission provisions, the indexing and filing provisions. It may be more
practical to cover the storage, disposal and retention provisions in separate procedures because they may not be type-dependent. Where each department retains their own records, these provisions may vary and therefore warrant separate procedures.

Unlike prescriptive documents, records may contain handwritten elements and therefore it is important that the handwriting is legible. If this becomes a problem, you either improve discipline or consider electronic data capture.

Records also become soiled in a workshop environment so may need to be protected to remain legible. With electronically captured data, legibility is often not a problem. However, photographs and other scanned images may not transfer as well as the original and lose detail so care has to be taken in selecting appropriate equipment for this task.

Whatever the records, they should carry some identification in order that you can determine what they are, what kind of information they record and what they relate to. A simple way of doing this is to give each record a reference number and a name or title in a prominent location on the record.

1994 –2000 Differences

Previously the standard covered retrieval in four ways. It required:
(a) that quality records be made available for evaluation by the customer or his representative for an agreed period, where agreed contractually Records can take various forms – reports containing narrative, computer data, and forms containing data in boxes, graphs, tables, lists and many others. Where forms are used to collect data, they should carry a form number and name as their identifica-
tion. When completed they should carry a serial number to give each a separate identity. Records should also be traceable to the product or service they represent and this can be achieved either within the reference number or separately, provided that the chance of mistaken identity is eliminated. The standard does not require records to be identifiable to the product involved but unless you do make such provision you will not be able to access the pertinent
records or demonstrate conformance to specified requirements.