4

Quality management system

4.2

Documentation requirements

4.2.1

General

The QMS documentation must include:

1. Organization’s Quality Policy and Quality Objective

2. Quality Manual

3. Documented Procedures and records required by ISO 9001 QMS

4. Documents and records, determined by the organization to ensure the effective planning, operation and control of its processes.

Confluence allows users to store documentation in pages and attachments.

Confluence tracks the history of changes to each page, keeping all versions.

The organization must provide the proper documentation.

4.2.3

Control of documents

The organization must establish a documented procedure to define the controls to:

1. approve documents before being released,

2. ensure that new version of documents are reviewed and approved before being released,

3. ensure that changes and revisions are identified,

4. ensure that versions of documents can be recovered when necessary,

5. ensure that documents remain legible and identifiable,

6. ensure that external documents determined by the organization keep the same process, and

7. prevent the unintended use of obsolete documents and identify them.

Confluence unambiguously identify and stores changes, which can be recovered, compared or roll backed in any moment.

Confluence wiki capabilities promote collaboration and peer-review processes, together with automatic notifications of changes ensure prompt content review.

Comala Document Control provides capabilities to ensure reviewing and approval of documents.

The organization must ensure that external documents keep the same process.

The organization must define an appropriate workflow, specifying where approvals are required.

4.2.4

Control of records

Records provide the evidence of conformity with ISO 9001 requirements, so the process must be controlled. The organization must establish a documented procedure to define the controls for the identification, storage, protection, retrieval, retention and disposition of records.

Confluence ensures only authenticated user have access to system content, the definition of users and groups ensures the access to content based on those groups. In addition, records are safe because all versions are saved automatically.

Comala Document Control maintains control of the approved version of each document, and can control which version of the document is available to each user, based on their role.

The customer must control the access to the physical storage devices.

5

Management responsibility

5.1

Management commitment

Top management must show evidence of its commitment to this process by:

1. Communicating to the organization the importance of meeting customer, statutory and regulatory requirements,

2. ensuring that the quality policy is established,

3. ensuring that the quality objectives are established,

4. ensuring that the management reviews are conducted, and

5. ensuring that the resources needed are available. 

Confluence can notify with emails to whoever needs to know the changes, communicating immediately to the proper roles.

The company's top management staff must ensure the fulfilment of the quality in objectives and policies.

5.3

Quality policy

Top management is responsible to establish a quality policy, which must:

1. be aligned with the organization's goal and quality direction,

2. commit to comply QMS requirements,

3. provides a framework to set and review quality objectives,

4. be communicated and understood by the organization, and

5. be reviewed in management review.

Confluence allows the communication of the documents to the members of the organization, allowing its revision and continuous improvement.

Comala Document Control enables the approval of documents.

The company's top management staff must create the quality policy.

5.4.2

Quality management system planning

Top management must ensure:

1. the planning of the QMS meets the ISO 9001 requirements and the quality objectives,

2. the integrity of the QMS when there are changes in the QMS.

Confluence keeps the integrity of the data. Links and page titles are automatically updated when there are changes.

Top management must review the QMS planning.

5.5.1

Responsibility and authority

Top management must ensure that responsibilities and authorities are defined and communicated to the organization e.g., job description and organizational charts

Confluence provides a people directory and each person has a personal profile. This profile shows the position, department and personal data. Besides that, each user can maintain a personal space. Thus, all responsibilities can be communicated.

Top management must ensure that staff have an updated job description and can provide an organizational chart.

5.5.2

Management representative

Top management must appoint a member of the organization to be "Management representative", who has to:

1. ensure that the processes needed for the QMS are established, implemented and maintained,

2. report to top management on the performance of the QMS and improvements,

3. promote the awareness of customer requirements in the organization, and

4. communicate with external parties regarding ISO 9001.

Comala Share It provides a unique public link that can be shared outside Confluence to communicate with external parties.

Top management must choose a capable management representative.

5.5.3

Internal communication

Top management must ensure that the communication processes are established, also regarding the effectiveness of the QMS. E.g., meeting reports are an evidence.

Confluence is a social tool used for internal communication, allowing content creation, comments and likes on the content, personal blogs, etc.

5.6

Management review

5.6.1

General

Top management must review the QMS, at planned intervals, to ensure:

1. its continuing suitability,

2. its adequacy and effectiveness,

3. opportunities for improvement.

Records of this review must be kept (4.2.4)

Confluence simplifies content reviewing by the use of recent changes, page history, subscription to content changes in your favourite spaces or network.

Comala Document Control provides a 'Content Expiry Workflow' where approved content automatically enters an expired state after a set period of time.

Top management must ensure the revision of the QMS.

5.6.2

Review input

This review must include:

1. results of audits,

2. customer feedback,

3. process performance and product conformity,

4. status of preventive and corrective actions,

5. follow-up actions from previous management reviews,

6. changes that could affect the QMS, and

7. recommendations for improvement. 

Confluence provides different kind of pages to publish the inputs: meeting notes with control of attendants, how-to articles, product requirements, reports, pages, retrospectives, decisions, task lists, links, etc.

Comala Boards provides different kind of pages to publish the inputs: task boards or strategy canvas.

5.6.3

Review output

The output must include decisions and actions related to

1. improvement of the effectiveness of the QMS and its processes,

2. improvement of product related customer requirements, and

3. resource needs.

Confluence provides different kind of pages to publish the outputs: meeting notes with control of attendants, how-to articles, product requirements, reports, pages, retrospectives, decisions, task lists, links, etc.

Comala Boards provides different kind of pages to publish the outputs: task boards or strategy boards.

Alternatively, Comala Publishing provides a solution to separate approved from draft content in distinct spaces.

8

Measurement, analysis and improvement

8.2

Monitoring and measurement

8.2.2

Internal audit

The organization must carry out, at planned intervals, internal audits to determine if the QMS:

1. conforms to the ISO 9001 and the QMS requirements,

2. is effectively implemented and maintained.

Considering:

1. the status and importance of the processes,

2. the areas to be audited,

3. the results of previous audits,

4. the results from external auditors

Internal auditors must be trained and competent and cannot audit their own work.

Confluence allow users to create visual roadmaps for planning audits, add-ons exist to create forms, everything can be printed and signed in case it needs to be send physically.

The Comala Document Control QMS workflow requires that approvers are specified 

Comala Share It allow users to externally send pages once the internal audit is finished.

The organization must ensure the training of the internal auditors.

8.3

Control of nonconforming product

The organization must ensure that product which does not conform to product requirements is identified and controlled to prevent its unintended use or delivery. 

The organization must establish a documented procedure to define the controls and responsibilities and authorities for dealing with nonconforming products, which includes:

1. eliminating the product,

2. authorizing its use, release or acceptance by the customer,

3. excluding its original use,

4. taking appropriate actions to the effects when the product is already delivered.

Confluence provides a product requirement, decision and meeting notes kind of pages to keep track of the customer product requirements, meetings and decisions derived from them. Thus, nonconforming products can be identified.

Comala Document Control allow users to set a workflow to control the state of the different pages involved on the documented procedure.

The organization must ensure the proper workflow setting and roles involved on the documented procedure.

8.5.2

Corrective action

The organization must establish a procedure to define:

1. reviewing nonconformities, including customer complaints,

2. determining the causes,

3. evaluating the need to ensure that nonconformities don't occur,

4. determining and implementing the actions needed,

5. records of the results,

6. reviewing the effectiveness of the corrective actions.

Confluence tasks can be used to indicate actions and areas to be improved by team members. Confluence capabilities could be improved if used together with Atlassian JIRA for doing so.

Comala Document Control consolidates document creation and modifications with the approval and signing audit records.

A time-stamped log of workflow operation actions is also maintained, and associated with each document.

The organization must ensure the proper workflow setting and roles involved on the documented procedure.

8.5.3

Preventive action

The organization must establish a procedure for:

1. determining potential nonconformities and their causes,

2. evaluating the need to prevent nonconformities,

3. determining and implementing the actions needed,

4. records of the results,

5. reviewing the effectiveness of the preventive actions.

Confluence tasks can be used to indicate actions and areas to be improved by team members. Confluence capabilities could be improved if used together with Atlassian JIRA for doing so.

Comala Document Control consolidates document creation and modifications with the approval and signing audit records.

A time-stamped log of workflow operation actions is also maintained, and associated with each document.

The organization must ensure the proper workflow setting and roles involved on the documented procedure.