SharePoint ISO Management System

Question

Hi everyone, we are thinking to build (Using SharePoint online ) a site or a Documents library for keeping our company’s’ ISO 9000 Documents, policies etc.… The initial idea is to have all Documents relevant to ISO system for each department. To have templates for each ISO related operation, so the person responsible for keeping the ISO to be able to review and update the documents as necessary and make them available to every department. Also, we want the auditing procedure that periodically is done by external consultants, to by done by this system...

Has any of you any experience is such a case ? Can anyone help me with key points that we need to take into consideration?

Thanks

kirsty600 · Answer

Hi Dennis-Scherrer, Did you use the ISO 9001 Purview Compliance template as part of your solution? I would be interested to hear how that went for you, I have a client with the same requirements.

Thanks Kirsty

dennis-scherrer · Answer

Hi&nbsp;Kirsty600,&nbsp;year´s ago I wrote an technical article and&nbsp;gave several lectures, including at the University of Klagenfurt and about Windows Rights Management Service (RMS), known today as Purview.Protecting company information is req 7.5.3.1 b) ISO 9001:2015 described as "..adequately protected (e.g. from loss of&nbsp;confidentiality, improper use..".&nbsp;For the target audience of my solution, this is (still) not interesting, so I did not include Purview as part of this solution.&nbsp;I am very familiar with the benefits of Purview and have had also inquiries about it, but ultimately it is always a matter of risk management for the respective company.I am convinced that atagios&nbsp;original case above can be solved without Purview and that version control with draft item security is sufficient.&nbsp;DennisPS:&nbsp;You may have a look at my video about document control in SharePoint&nbsp;

dennis-scherrer · Answer

Hi&nbsp;atagios,&nbsp;I had decided on a structure with three libraries for the SharePoint QMS: one library for processes, one for work instructions, guidelines and procedures - the "production" library and one to store analyses, reports and evaluations. Everything else for ISO 9001, such as actions, requirements, risks, and quality objectives, is stored in SharePoint lists.You can find the detailed configuration steps in my guide.Maybe that will help,Dennis

kirsty600 · Answer

Hi DennisThanks for answering. I face similar challenges with Purview and the companies I consult for, even though they genuinely need it, from a data loss perspective. Many of them have legislative and regulative requirements for their content and are not even close to meeting them. They can meet most of the requirements with Purview and some solutions like yours if they slow down for a minute and think about the risk properly.Thank you for the clause that is actually what I was looking for. I don't have the full standard, anymore and the company I am working with is very vauge on what they have to do. I used to have a copy of the standard and the requirements but I think I have it stored on a randam external drive.I really liked your solution when I had a look at your article. I had some thoughts around centralisation and then reporting and sharing metadata but that can be managed in multiple ways. I think I will use it and add Purview as the company requires defense level content marking and sharing retrictions on top of the ISO9001.ThanksKirsty

Forum Discussion

SharePoint ISO Management System

Share

Resources