DPSS

ISO Classifications

What are the main ISO Classifications and how can they help my business ?

In summary there are many ISO (International Standards Organisation) classifications that may affect a normal business however there are three key classifications. These are as follows:

• ISO 9000 Quality Management Systems

• ISO 14000 Environmental Management Systems

• ISO 27000 Information Security - Security of Information and management systems

Of these ISO9000 has been the most common replacing the old BS5750 and shows that an organisation has a responsible approach to quality and robust quality orientated systems in place to perform their business activities right every time.

In procurement terms, Carter’s 10C model refers to “Commitment to Quality” – Attainment of the ISO9000 quality mark is a great way to determine whether a potential supplier is truly committed to Quality and hence why it is often a key requirement especially on certain public sector tenders. This accreditation also needs to be kept updated and is reviewed periodically by the ISO auditors.

Next we have ISO14000 which focuses on an organisations commitment to its environmental obligations. This again outlines the key procedures that an organisation will follow in order to conduct its business in accordance with environmental best practice, and aiming to minimise the impact it is having on the environment. Typically, Supply Chain inputs, operational process and waste outputs are key to attaining this accreditation, although any company with ISO9000 procedures in place has many of the key manuals already, to enable an update with relative ease to secure this additional accreditation which in the modern workplace is viewed very highly as a green “badge of honour”.

And finally, we have the relatively new classification of ISO27000 which looks at the security of information within an organisation. Ask yourself, who in your organisation has access to your computer data, can you track who has downloaded information onto their memory stick, or who has copied files to an iphone or even to a CD ? What risk is there to your customers, suppliers or staff if information is lost or stolen. Imagine what would happen if a government minister left a Data CD on the train !

Security of information is high on the governments agenda, and it is rumoured that it may soon be mandatory for all public sector suppliers to be moving towards or achieved ISO27000 accreditation. Obtaining this is relatively straight forward, albeit somewhat time-consuming. It may be worth asking your IT manager what facilities, checks and balances are in place, and ask what you can do to improve your data security. Start by asking if you have a company record of all memory sticks and iphones, and you will appreciate the problems.

For further details of ISO accreditation, please email info@DPSS.co.uk

ISO Classifications

News

Extract from Practical Procurement

ISO Classifications

Extract from the latest book by Barry Crocker

Strategy

Global Online Development Programme