Probably depends on the size of your org and probably what 900x spec your doing. In a previous job, our company of about 150 went through ISO 9001. I was a one man IT dept.
The big thing to remember is if an IT procedure is outlined in your quality docs, then it needs to be followed.
We took a minimalist approach and covered procedures for tape backup, general network security outline, and specific security for the online Quality Manuals.
Many years ago I was in a shop that went for ISO 9001.
It was NOT fun at all.
ISO 9001 is basicly document what you do and after that do what you have documented.
Go for the "minimalist approach"
Most people I have seen write procedures and instructions that make life hard for everyone and the company doesn't get anything out of the ISO 9001 later on.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.