In the last decade we have seen the evolution of Risk Management from an administrative practice to ERM for corporate governance. But the realization that results come out of action not protection, people have started pursuing a more proactive role for risk management. Continue reading
Let’s say Pete’s company has been in business for over thirty years. Now ISO 9001:2015 comes out requiring risk-based thinking. Does that mean Pete must therefore engage in formal risk management, and that management must use a risk assessment tool to provide evidence of risk-based thinking? Continue reading
Most large companies and many smaller companies have extensive policies, procedures and processes for risk management. ISO-9001-2015 places a lot more emphasis on risk and policies and processes to deal with it. In spite of these risk requirements, poor QA and management execution accounts for a majority of project failures. Let me give you one example with the lessons learned. Continue reading
In 1987, when the ISO 9000 family was originally released, the ISO 9000 (the document) was fairly clear about the intended use of the standards. Despite this, organizations got the idea that THEY were the end users of ISO 9001. This mindset was so prevalent that it influenced later revisions of the standard, as its authors try to be responsive to customer feedback. This mindset is still prevalent today; a change in mindset would make many organizations’ experience with ISO 9001 much better. Continue reading
INTRODUCTION
I was supposed to be in Boston presenting at “The Disaster Conferences” on 28 January 2015. Well, the weather just put us out to 19 March 2015 for the now, rescheduled Boston conference. I guess that they are still feeling the effects of this week’s blizzard, now named “Juno”; that left Boston with over 24 inches of snow. Continue reading