Welcome to Pinnacle Enterprise Group's organizational excellence blog. This blog is intended as a forum for helping companies of all sizes and in all industries develop high performance business systems. We will focus on ISO 9001, ISO 14001, TS 16949, TL 9000, AS9100, ISO 13485, OHSAS 18001, Lean, and Six Sigma. All related topics will be discusses as well. I hope you will enjoy our coverage and I look forward to your contributions.

Kirill Liberman, President

Integrated Management System

On the “Integrated Management System - Lean BOS” page of our website I discuss the emerging trend in and demand for integrating quality, environmental, health & safety, regulatory, and business improvement objectives into a single business operating system (BOS).  On this page I state that “today’s integration objectives are generally clear: companies want a management system that seamlessly addresses the requirements of multiple management system standards while serving as the foundation for continual improvement and organizational excellence.” In other words,  modern integrated management systems blend ISO 9001, TS 16949, AS9100, TL 9000, ISO 13485, ISO 14001, OHSAS 18001 with regulatory requirements and improvement initiatives like TQM, Lean, and Six Sigma.

As always, large and more progressive companies are the vanguard in this effort.  Some succeed better than others (see Improvement Initiatives Are Like Diets and ISO 9001 Q&A).  What troubles me, however, is that small and mid-sized companies are reluctant to even entertain the idea of an integrated management system (or Lean BOS) because they assume that it is too complex, too time consuming, and too expensive for them.  In my experience this is typically an uninformed opinion.  When one considers that small and mid-sized companies also deal with:

  • finding and keeping customers,
  • understanding and managing customer requirements and audits,
  • resolving customer complaints,
  • employee safety, training, competence, satisfaction, and retention,
  • process and/or product improvement and optimization,
  • corrective and preventive action,
  • selecting and managing vendors and purchased items,
  • key performance indicators and key metrics,
  • environmental impact, and
  • regulatory compliance,

then the effort and cost of an integrated management system become a sound business investment.   I understand that investing in organizational development during uncertain economic times is difficult.  But when considering increasing global competition and rising costs, can small and mid sized companies really afford not to invest? If a company does not invest in its own development when times are good or when time are bad, then the prognosis for the company’s future is far more grim than the current economic climate.

Kirill Liberman, President

Predicting and Preventing Instead of Reacting

My firm, Integral Concepts, Inc., and I provide consulting and training in quantitative statistical methods for optimizing product designs and manufacturing processes.  It is sad that almost all of our projects involve REACTING to major problems that have surfaced which are jeopardizing production, customer satisfaction, and profitability.

We much prefer to work with our clients PROACTIVELY by using methods during product and process design and development that will ensure that the product will perform adequately both initially and over time.  Methods such as Design of Experiments and Reliability Analysis are especially useful since they are based on models from physical measurements from production or prototype parts.

Even when a good, robust design is achieved, changes in the manufacturing process (raw materials or manufacturing conditions) often go undetected until a field concern arises.  Thus, a potentially very small problem that is easy to correct becomes a major and very expensive issue.  Basic Statistical Process Control (SPC) methods are invaluable to detect potentially harmful process changes – but they are often not utilized.  When SPC is implemented, it is usually misapplied so that the benefits are often not realized.

Furthermore, the time spent dealing with preventable problems is a huge distraction to management and technical personnel.  As a result, it seems that fire-fighting consumes an inordinate amount of time and prevents strategic efforts that is truly value-added work for the company.   Some questions I wonder about….

What will it take for companies to pay more attention to PREVENTION rather than REACTION to problems?

Why is there so little effort on statistical/quantitative aspects of quality and reliability?

Why were the Japanese so much more receptive than Americans to Deming’s teachings about reducing variability so that our products perform consistently?

When will U.S. manufacturers realize that the highest levels of quality and reliability are necessary to compete in the global economy and that honest and serious efforts are needed (instead of flavor of the decade watered down quality programs?).

Steve Wachs

Cost of Consulting & Certification

We have been getting a lot of inquiries from companies that are trying to budget for consulting and implementation of an ISO 9001 based quality management system (QMS).  These inquires include every QMS standard:  TS 16949, AS9100, TL 9000, ISO 13485, and even ISO 14001 and OHSAS 18001.  The last inquiry went like this:  “I would like to have a ball park figure on what getting certified to ISO 9001:2000 would cost. . . . I am attempting to put together a slide show on the benefits of being ISO 9001 certified.”

While this subject deserves a detailed discussion, I finally decided to summarize and  generalize my response to this very popular subject.

QMS (and EMS) implementation and consulting costs for any company can vary greatly.  You tend to find this out shortly after starting the research.  The range of prices that you are likely to hear is approximately $500 to $40,000+.  The actual price depends on the size and complexity of your company and on what you are trying to achieve.  It also depends on the level and type of service you are looking for.

On the low end of the scale, you can purchase an “ISO in a can” documentation package for around $500 (some run even less).  This approach will provide you with a set of generic text-based documents that you will then have to edit (fill in the blank) to make them somewhat representative of your company’s operations.  You will still need to have some training for your general staff, management, and internal auditors.  This training can be obtained over the web for a cost that will be measured in the hundreds of dollars.  Like the “ISO in a can” packages this kind of training is usually very generic and therefore limited in its business value, especially for a company that does not make a physical product.  Generally, most mass market, low cost, do-it-yourself ISO product are designed for companies that manufacture/produce some kind of product.

In the lower-middle of the range are providers of “hybrid” services that merge the generic “canned” documentation approach with some hands-on (on-site) training and some coaching.  In general, these approaches do not differ much from the “canned” products.  The resulting QMS or EMS is typically compliance oriented and of limited (if any) business value, but the results are generally better and faster than with a purely “canned” product.

On the upper-middle of the range are actual consultants that work directly with companies to implement ISO 9001, TS 16949, AS9100, TL 9000, ISO 13485, or ISO 14001 and OHSAS 18001 in a way that is specific to your company.  The objective and expertise of these consultants is to achieve registration by developing a custom system that meets the minimum requirements of the applicable standard(s).  Using ISO 9001, TS 16949, AS9100, TL 9000, or ISO 13485 as a platform for a high performance business operating system and the application of advanced techniques (e.g. process identification, process mapping, process measurement & monitoring, problem solving & root cause analysis, Lean, Six Sigma, etc.) are typically NOT the objective or part of the service/price.  Furthermore, the approach is usually in the form of a coaching and mentoring relationship.

On the upper range of the scale are management system consultants that help companies engineer or re-engineer a business management system that achieves ISO 9001, TS 16949, AS9100, TL 9000, or ISO 13485 registration as a byproduct.  These consultants are fewer in number and offer both coaching and turn-key support options.  Their skill sets and experience typically extends beyond ISO 9001, TS 16949, AS9100, TL 9000, ISO 13485, ISO 14001 and OHSAS 18001 to include advanced techniques (e.g. process identification, process mapping, process measurement & monitoring, problem solving & root cause analysis, Lean, Six Sigma, etc.).  Furthermore, their service deliverables typically include the seamless integration of advanced methods and rapid deployment & implementation techniques.

The latter two categories most closely describe the range of service and capabilities that my firm and I provide.

Kirill Liberman, President

ISO 9001 Q & A

The Director of Operations of a perspective client asked me to address some of the concerns, questions, and reservations that his executive leadership has about implementing ISO 9001. He has been trying, unsuccessfully, to convince his executive leadership that developing a formal quality management system based on ISO 9001 was critical to the organization’s growth and development. He was kind enough to share their concerns, questions, and reservations in the form of a “top 10″ list. I thought my response to him may be useful to others in a similar predicament.

1. “It’s not my job - call the ‘official’ person in charge of this”

I assume that this refers to a perception of ISO 9001 as a separate thing that exists outside of the company’s and an individual’s daily activities and is the responsibility of some dedicated individual or group within the company. This is a common concern that is not unfounded. Many companies (especially in the early days of ISO 9001) implemented ISO 9001 with the objective of obtaining a certificate that would allow them access to certain customers or markets. In these cases the management system framework stipulated by ISO 9001 was never understood or considered. The focus was on compliance by creating a bunch of documents that would only pass a third party audit. The general staff of the company was never involved in developing the management system and senior management never intended ISO 9001 to be a management system platform.

To overcome this problem my practice focuses on developing a management system that provides value to the organization. ISO 9001 registration should be a byproduct that validates the system, but not the objective. Individuals at all levels of the organization must be engaged in the implementation process. They must participate in developing and improving the processes that they own or participate in. Process ownership is critical. Process owners must be empowered to take control and responsibility for their process. Achieving this is the responsibility of senior management and a core element of my methodology. Clause 5.5.1 Responsibility and authority requires “Top management” to “ensure that the responsibilities and authorities are defined and communicated within the organization.”

The fact is that most profitable companies are doing nearly everything that ISO 9001 requires. They are simply not doing them effectively, consistently, and/or efficiently. Many companies rely on and succeed by the abilities and hard work of its people. These companies focus on managing people. But the focus must be on managing processes. ISO 9001, TQM, Lean, Six Sigma, etc. are all process management and improvement methodologies. None of them focus on managing people, but all address a senior management driven culture of continual improvement.

2. We need this prototype done faster than your quality program inspection will allow

Prototypes are not part of the general production process and should not be subject to the same process and type of controls. Prototypes are typically developed as part the design and development process. The design and development process must be developed as part of the ISO 9001 implementation (Clause 7.3). Prototyping can be part of this process or a separate process, as needed. It is important that the ISO 9001 based management system address the unique nature and requirements of your business and customer requirements, while ensuring consistency and control.

3. We need this piece done faster than your quality program documentation will allow

At no point does ISO 9001 stipulate how fast your system can or cannot produce a product. It is the processes that you design and the way processes are managed that will allow you to make a product at the speed needed by the customer. With this said, ISO 9001 does require that you determine and review product requirements from them customer, including delivery requirements, before you commit “to supply a product to the customer (e.g. submission of tenders, acceptance of contracts or orders acceptance of changes to contracts or orders).” Appropriate processes should be designed to allow for the identification, prioritization, and processing of “rush” orders. Examples of such processes are Sales & Contract Review, Order Processing, Engineering, Production Planning/Scheduling, and various production processes. A well designed management system will address how “rush” jobs are handled through all of the processes that should support a “rush” job. This will ensure that “rush” jobs are handled consistently. In turn, this will ensure that the impact of “rush” jobs on internal resources (e.g. manpower, material, methods, machines, money, etc.) can be measured and assessed.

4. Your outside contractor follows a different system/process than you do - or doesn’t have a system/process at all

From the customer perspective, outsourced processes do not absolve your company of the responsibility of ensuring that the outsourced process meets the stated and implied customer requirements. In clause 7.4 Purchasing, ISO 9001 recognizes this and stipulates that your company must ensure that “purchased product (includes outsourced process) conforms to specified purchase requirements. The type and extent of control applied to the supplier and the purchased product shall be dependent upon the effect of the purchased product on subsequent product realization or the final product.” This means that you must select suppliers that are capable of living up to the same standards that customers expect of you. If they cannot, then you must seek a new supplier or work to develop/improve the existing supplier or develop internal process controls to ensure that the supplied product/service meets requirements. This is a rather complex issue that deserves a separate detailed discussion.

5. We spend 10% of our labor time documenting quality inspections and processes - and creates higher turnover by employees as a result

6. Same as above and our costs go up 10%….

If 10% is true, then the management system is simply poorly engineered. There is significant room for improvement. The system is simply a bad bureaucracy and has little, if any, business value. With this said, there is some overhead associated with maintaining a well designed formal management system. In my experience, even a mediocre formal management system is able to generate a net gain by offsetting its overhead with improvements in consistency, efficiency, training, quality, problem solving, employee satisfaction, and in reductions in errors, rework, customer complaints, returns, and waste.

7. Our quality doesn’t improve but we can identify where the quality error occurred.

ISO 9001 does not and will not ensure quality improvement. ISO 9001 simply provides a framework/platform for a management system. It describes the minimal elements of a world class management system, but it does not provide guidance on how these elements are to be developed and implemented. Execution is completely up to the individual company and its leadership.

Being able to identify where quality problems occur is the first step to improvement. The next (after containment) is identifying the root cause of the problem and developing a corrective action that will eliminate the root cause and will ensure that the same problem does not occur again.

Corrective and preventive actions are a key element of continual improvement. However, the skills and methods used to effectively identify root cause and to develop robust corrective and preventive actions are not stipulated by ISO 9001. ISO 9001 simply requires that you have a formally defined corrective and preventive action system/process. The root cause analysis and corrective action skill sets and methodologies must be developed or acquired and incorporated into the management system. Process Mapping, Value Stream Mapping, SPC, DOE, Regression Analysis, and 8D are just some examples of the many tools and methods available.

8. Who owns ISO 9000 and how much time will they take each year to become certified?

As I discusses in some of the previous comments, ISO 9001 should not be the focus of any management system design and implementation effort. The objective should be to design and implement a value added management system that will meet ISO 9001 requirements by default. So if the first part of the question is “who owns the management system?” then the real answer is senior management because management is the ultimate process owner.

But to achieve management’s objective of a true management system platform, “individuals at all levels of the organization must be engaged in the implementation process. They must participate in developing and improving the processes that they own or participate in. Process ownership is critical. Process owners must be empowered to take control and responsibility for their process. Achieving this is the responsibility of management and a core element of my methodology.”

If the ISO 9001 based management system was developed for its inherent benefits, then there should be no significant time attributed to maintaining certification. Certainly there is a need to invest time, resources, and money in designing and implementing the initial system. But the only time that should be directly attributed to maintaining certification is the time that the Management Representative spends facilitating the registration and surveillance audit visits.

9. We spend all this time documenting quality issues and not enough time fixing them

ISO 9001 clause 5.1 Management commitment states that:

“Top management shall provide evidence of its commitment to the development and improvement of the quality management system and continually improving its effectiveness by:
a. communicating to the organization the importance of meeting customer as well as statutory and regulatory requirements;
b. establishing the quality policy,
c. ensuring that quality objectives are established
d. conducting management reviews, and
e. ensuring the availability of necessary resources.”

Furthermore clause 8.5.1 Continual improvement states that:

“The organization shall continually improve the effectiveness of the quality management system through the use of the quality policy, quality objectives, audit results, analysis of data, corrective and preventive actions and management review.”

I quote these clauses to emphasize the 2 points:

  1. improvement can only happen if the management system incorporates improvement processes and elements at the appropriate points and levels, and more importantly
  2. only senior management can foster a culture and environment of continual improvement.

ISO 9001 certification does not ensure that your company will continually improvement, but it can validate that it is or is not. Furthermore, at best, consultants can only coach, mentor, encourage, support, educate, transfer skills and knowledge, and introduce tools and techniques. Ultimately it is senior management that must provide the vision, leadership, and resources to continually improve the company and its management system.

10. I can’t get anything done on time because everyone is documenting process - or I can’t get what I want done because it’s outside of the process.

As I commented in 5 and 6 above, an overly bureaucratic system that significantly hampers the flow of material and information is simply a poorly designed system. This problem is not the fault of ISO 9001, but rather its execution. Nevertheless, some level of a well organized bureaucracy is a good thing. It provides benefits in the form of “improvements in consistency, efficiency, training, quality, problem solving, employee satisfaction, and in reductions in errors, rework, customer complaints, returns, and waste”.

Regarding operating “outside of the process,” it is not realistic to develop a management system that can clearly account for every possible contingency. This is not the goal of ISO 9001 or of any management system initiative. The goal of a management system is to define, measure, analyze, improve, and control the vast majority that you do on a daily basis. If customer requirements regularly create scenarios that require deviation from the “norm,” then by definition these are not deviations form the “norm.” In this case the management system must be revised or designed to address how you consistently handle unique scenarios.

Kirill Liberman, Presidnet

The Modern Quality Manual

It is hard to believe that 8 years after the release of ISO 9001:2000 there are still a lot of “old school” perspectives and misconceptions about the role, form, and function of the “quality manual” (ISO 9001:2000 sub-clause 4.2.2).  I developed the Lean QMS® Map (a 2-page graphical version of a quality manual) in 1999 and have registered countless companies to ISO 9001, TS 16949, TL 9000, AS9100, and ISO 13485 with it.  Nevertheless, the use of a very small quality manual is still a hotly contested topic, even among my processional colleagues.

Perhaps one of the reasons that many of us are still divided on the concept of a small quality manual is that we have not truly considered and understood the actual requirements.  ISO 9001 requirements for a quality manual are: 

  1. It must describe/define the scope of the quality management system,
  2. It must explain any excluded elements/clauses,
  3. It must define or reference the “documented procedures” that make up your quality management system, and
  4. It must describe/show the interaction of the quality management system processes

At no point does ISO 9001 stipulate how long the quality manual should be.  It does not even say that it should be a singe document.  Nor does it suggest that it should even be in text format.

Another possible source of confusion and diverging opinions is the use of the terms “procedure” and “processes”.  We can all agree that the intent of ISO 9001 is to serve as a process management platform.  However, it only applies the word “documented” to procedures.  This begs the question: should we not document our processes?  For those of us that practice more that just ISO compliance, the answer is: of course we should.  If you agree, then replace the word “procedure” with “process” and think about the requirements again.  Now the QMS must: 

  1. Define or reference the “documented processes” that make up your quality management system, and
  2. Describe/show the interaction of quality management system processes.

Why not draw a picture of this on one or two pieces of paper?  Why use paper? In my practice I do this all the time.  Hundreds of clients have embraced this approach and never has this been an issue with any registrar.  Granted, customers may want to see the details of the actual “documented process” which is fine.  Show then the process(es) and show them how that process fits into the overall process based quality management system with your new short quality manual or Lean QMS® Map.

Kirill Liberman, President

Improvement Initiatives Are Like Diets

All diets work while one is dieting.  However, once the desired weight loss is achieved the vast majority of dieters go back to their normal eating habits and lifestyle.  The result is that all diets are statistically long term failures because the fundamental issue of a lifestyle changes was never addressed.  But we never hear about the failure, only the near term success.

Improvement methods/initiatives like Lean, Six Sigma, TQM, Theory of Constraints, ISO, etc. are very much like diets.  When a company is committed to and focused on applying the flavor or diet of the month, it inevitably achieves the improvements it sought.  However, most companies shift the focus to another area, problem, or initiative once the initial gains have been achieved.  The result is that the initial improvements spring back over time.  No one ever publicizes this fact so we only hear about the initial success.  In fact, many success stories are improvements on improvement initiatives that did not take hold from years before.

The problem is that most improvement initiative and tools do not address the need for a management system platform and culture that must sustain the improvement over time.  They just assume that it is there.  In fact, most organizations do not have a management system platform that was engineered and evolved to absorb the improvements and to make them permanent.  In these cases most improvement initiatives are ultimately doomed to long term failure.

So what must we do to avoid this trap?  Like Stephen Covey said: “seek first to understand, then to be understood.”  Start by focusing on understanding your organization’s processes and their interaction.  Then standardize and stabilize these processes.  Involve people at all levels of the organization in this effort to ensure process ownership, responsibility, and consistency.  You will be surprised by how much “low hanging fruit” you will find.  Use process mapping to capture and document the resulting current state.  Then develop appropriate process measurables to measure and monitor the processes.  The result will be a management system platform and infrastructure that will allow you to much more rationally, practically, and effectively apply improvement tools and methods.

Sorry folks, there is no silver bullet.  Improvement and organizational excellence are a journey, not an event.

Kirill Liberman, President