SlideShare ist ein Scribd-Unternehmen logo
1 von 37
ISO 9001:2015
How to Become A Consultant
SMEC Engineering Company
Management and Business Consulting & Training Services
1
Shahriyar Majlesein
Job Positions
Bio description example: Lorem Ipsum is simply dummy text of the printing and typesetting industry.
Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown
printer took a galley of type and scrambled it to make a type specimen book. It has survived not only
five centuries, but also the leap into electronic typesetting, remaining essentially unchanged.
123 456 789
name.surname@domain.com
www.domain.com
linkedin.com/name.surname
twitter.com/name.surname
fb.com/name.surname
Welcome
&
Introductions
3
“I am a Project, Quality and Risk Management specialist. During the past 10
years, I was responsible for over 80 Major Projects in several countries in areas
of Oil and Gas, Energy, Telecommunications, IT and Engineering.
I am currently COO of SMEC Engineering Group and CEO of Citadel
Engineering Company
Education:
Ph.D. Student of Business Administration DBA ISM ( Operation Management )
Master of Business Administration (MBA) Project Risk Management Trend
Bachelor Degree of Information Technology Engineering
Bachelor Degree of Business Administration ( Business Marketing )
Education Degree Information Technology (IT) Of American Virtual University (
Colorado Technical University )
Shahriyar Majlesein
BRIEF INTRODUCTION
www.iso.org
5
Who is IOS and What Is ISO?
• The International Organization for Standardization (IOS) is
a worldwide federation of national standards bodies.
• Working through Technical Committees, it has developed
and published over 18,000 different ISO standards that are
used internationally for subjects ranging from film speeds
to wine glasses to quality management systems.
• The official purpose for the issuance of ISO Standards is to
facilitate world trade through standardization.
6
Understanding the Standards
Documents
Most standards have at least two supporting documents;
• Requirements – these are the “Shall” and are required to be
implemented unless exclusions can be taken. The auditor can
only audit against the “Shall”.
• Code of Practice – these are the “Should” and are guidance to
assist you in implementation.
• Guidance – a fully implementable standard that does not have
a “certification scheme”. You can be compliant, but not certified.
7
Understanding the Standards
PDCA
8
Do
Plan
Check
Act
Understanding, Knowledge, and
Awareness of ISO 9001:2015
CONTEXT OF THE ORGANIZATION
4.1 UNDERSTANDING THE ORGANIZATION AND ITS CONTEXT
4.2 UNDERSTANDING THE NEEDS AND EXPECTATIONS OF INTERESTED
PARTIES
4.3 DETERMINING THE SCOPE OF THE QUALITY MANAGEMENT SYSTEM
4.4 QUALITY MANAGEMENT SYSTEM AND ITS PROCESSES
Understanding, Knowledge, and
Awareness of ISO 9001:2015
LEADERSHIP
5.1 LEADERSHIP AND COMMITMENT
5.1.1 GENERAL
5.1.2 CUSTOMER FOCUS
5.2 POLICY
5.2.1 ESTABLISHING THE QUALITY POLICY
5.2.2 COMMUNICATING THE QUALITY POLICY
5.3 ORGANIZATIONAL ROLES, RESPONSIBILITIES AND AUTHORITIES
Understanding, Knowledge, and
Awareness of ISO 9001:2015
PLANNING
6.1 ACTIONS TO ADDRESS RISKS AND OPPORTUNITIES
6.2 QUALITY OBJECTIVES AND PLANNING TO ACHIEVE THEM
6.3 PLANNING OF CHANGES
Understanding, Knowledge, and
Awareness of ISO 9001:2015
7.1 Resources
7.1.1 General
7.1.2 People
7.1.3 Infrastructure
7.1.4 Environment for the operation of processes
7.1.5 Monitoring and measuring resources
7.1.6 Organizational knowledge
7.2 Competence
7.3 Awareness
7.4 Communication
7.5 Documented information
7.5.1 General
7.5.2 Creating and updating
7.5.3 Control of documented information
Understanding, Knowledge, and
Awareness of ISO 9001:2015
Operation
8.1 Operational planning and control
8.2 Requirements for products and services
8.2.1 Customer communication
8.2.2 Determining the requirements for products and services
8.2.3 Review of the requirements for products and services
8.2.4 Changes to requirements for products and services
8.3 Design and development of products and services
8.3.1 General
8.3.2 Design and development planning
8.3.3 Design and development inputs
8.3.4 Design and development controls
8.3.5 Design and development outputs
8.3.6 Design and development changes
Understanding, Knowledge, and
Awareness of ISO 9001:2015
Control of externally provided processes, products and services
8.4.1 General
8.4.2 Type and extent of control
8.4.3 Information for external providers
8.5 Production and service provision
8.5.1 Control of production and service provision
8.5.2 Identification and traceability
8.5.3 Property belonging to customers or external providers
8.5.4 Preservation
8.5.5 Post-delivery activities
8.5.6 Control of changes
8.6 Release of products and services
8.7 Control of nonconforming outputs
Understanding, Knowledge, and
Awareness of ISO 9001:2015
Performance evaluation
9.1 Monitoring, measurement, analysis and evaluation
9.1.1 General
9.1.2 Customer satisfaction
9.1.3 Analysis and evaluation
9.2 Internal audit
9.3 Management review
9.3.1 General
9.3.2 Management review inputs
9.3.3 Management review outputs
Understanding, Knowledge, and
Awareness of ISO 9001:2015
Improvement
10.1 General
10.2 Nonconformity and corrective action
10.3 Continual improvement
How To Be a Consultant: 10
Steps to Self Employment
Step 1: Identify the Niche in Which You Have Knowledge and
Experience
You may have an interest in computers. However, this does not
mean you can become an independent computer consultant
(though it can give you a head-start in this field). Knowledge and
experience coupled with interest is the only way to begin.
If you have knowledge about computers (hardware or software),
have worked with these for a considerable period of time and
have the latest detailed, information about them, you can plan to
start a computer consulting business.
How To Be a Consultant: 10
Steps to Self Employment
Step 2: Acquire the Certifications and Licenses
Some consulting businesses do not require formal training and
certifications (e.g., gardening consulting). However, if you are
planning to work as an accounting consultant, you need to get
professional certifications from recognized accounting institutions.
Also, consider the licensing requirements to start a consulting
business. The local or state legal guidelines may require you to
get a particular license to work as an independent consultant in
certain specialties.
How To Be a Consultant: 10
Steps to Self Employment
Step 3: Decide Your Short and Long Term Goals
If you excel in a niche that has a good prospect, such as
business consulting, computer consulting, career consulting
and so on, you may paint a rosy picture of clients waiting for
your advice within a week of starting your consulting
business.
It’s not magic. If you have such unrealistic expectations, you
are sure to be disappointed. Every business takes time to
grow and become known and established. If you lack the time
and effort to start and establish a business, you may end up
headed towards failure.
How To Be a Consultant: 10
Steps to Self Employment
Step 4: Choose Your Target Market
If no one pays for your ideas and advice, your business will
face failure. It will also face the same result if the recipients
of your ideas do not have the money to pay you. The first
thing you need to do is to decide whether you will advise
individuals or companies.
Every niche in the consulting business provides these
options. For example, if you are working as a career
consultant, you may help individuals plan their careers. You
may also work with a large corporation to help the
employees excel in their chosen fields.
How To Be a Consultant: 10
Steps to Self Employment
Step 5: Research Your Target Market
Individuals and organizations need consultants for a number of
reasons. A tax consultant can help a millionaire plan his/her taxes.
A computer consultant can help the employees of a large
company learn software basics. A human resource consultant can
help a big business implement a change in a policy.
After you determine the target market that will hire you for your
expertise, you need to find out the various ways in which you may
help them. This will help you market your consulting business. You
need to tell your clients why they need you.
How To Be a Consultant: 10
Steps to Self Employment
Step 6: Consider a Home Office
If your local laws permit this, it can work to your advantage in
more ways than one. You don’t spend any money to buy or
rent an office space to start your business as a self-employed
consultant. You don’t need to pay for utilities separately. You
don’t need to pay for a regular commute.
Along with the money, you also save time and energy when
you work out of your home. You may acquire new premises
after you have established your business and employed
associates; but more on this later.
How To Be a Consultant: 10
Steps to Self Employment
Step 7: Build Your Network
If no one knows you and you know no one in your field, you
may find yourself in the midst of a disaster soon. It is
important to start building your network as soon as you have
decided to be a consultant. A strong contact base ensures
that you have the sources to find work.
A professional network, coupled with a social network, can
help you market and advertise your business. References are
also important ways to find work in the niche. Rely on your
initial contact base to build your network.
Step 8: Fix Your Fees and the Way to Bill Clients
As a beginner, you may not receive high fees as a
consultant. Your charges increase as you become known as
a consultant. Keep in mind your credentials and experience
as well as market conditions, your target group and your
competitors when you fix your fees.
Also, decide how you will bill clients. Hourly billing may
seem to be a convenient method; the problem is many
clients think that you charge too much for your time. It is
best to use the project-based billing method when you start
your consulting business.
How To Be a Consultant: 10
Steps to Self Employment
Step 9: Arrange for Advertising and Marketing
You are not selling a house which, by the way, is much easier
than selling your advice. Many of your clients may not be
even aware that they need your ideas and advice. How do
you market and advertise something so difficult? Believe it or
not, you have a lot of choices – print media, cold-calls, online
ads and many others.
Before you choose any avenue to advertise, decide your
budget. If the costs go out of hand, the chance of success of
your business plummets. Newsletters and brochures,
advertisements in niche-specific journals, websites and blogs
offer the best options.
How To Be a Consultant: 10
Steps to Self Employment
How To Be a Consultant: 10
Steps to Self Employment
Step 10:Determine Whether You Need to Outsource Certain Tasks
You may find it easier to handle all tasks of your business on your own
when you start. But after your consulting business is up and running,
you may need the help of others and you may decide to employ
people. Check both legal and tax details before you do this.
You may also outsource some tasks that do not require your
immediate attention. Make sure that the tasks are not connected to
your consulting business. For example, you can outsource auditing for
a career consulting business but not when it is your niche.
Understanding the Standards - Scope
• Determine your Scope of Registration
• How many people within your organization support this
Management System?
• How many processes are included?
• How many locations?
27
Stages for Registration
• Submit application to registrar
• Stage 1: Assessment of readiness
• Stage 2: Assessment for registration audit
• Registration/certification awarded for 3 years
• Surveillance audits (at least annually)
• Recertification audit at the end of 3rd year
28
Registration
• Usually takes 1 or possibly 2 auditors 1 to 3 days
– depending on scope, size, locations and personnel
• You will be told whether or not you will be recommended
for registration at the completion of the Stage 2 audit
• Certificate usually arrives a 3 – 8 weeks later
• Maintaining your ISO Certification(s) is the first step in
continuous improvement
29
Registrar/Auditor Selection Criteria
• Accreditation and scope of accreditation
• Reputation and customer acceptance
• Availability, cost, and location
• Knowledge of your business
• Culture fit with your organization
• Ability to audit all of your future standards
Note: The external auditor is hired by the Registrar and
presented with qualifications to you upon agreement of
audits. You cannot go out and hire your own external
auditor.
30
Getting Ready for the Audit
• Determine team, set budget
• Internal auditor(s)training if using in-house resources
• Hire consulting firm if applicable
• Gap Assessment
• Implement requirements of standard to meet your business needs
against the gap assessment
• Go-Live
• Hold Management Review Meeting
• Conduct Internal Audit
• Refine documentation
• Employee involvement training
• System adjustment
• Registration audit - Stage 1
• System adjustment
• Registration audit - Stage 2
31
Ongoing Commitment
• Getting certification is only the beginning
• Management Representative must keep up
weekly/monthly/quarterly with tasks
• Internal audits are required at least annually
• Management review is required at least annually
• Timely completion and updates to
CARs/PARs/OFIs
• Annual Surveillance audit by external registrar
32
Customer Benefits
ISO 9001 Certified Companies Queried
• 75% Improved Their Levels of Customer Satisfaction And Loyalty
• 75% Booster Their Operational Performance
• 71% Acquired New Customers And Retained Existing Ones.
• 55% Achieved Cost Savings
• Source: BSI Accelerator Research 2011
33
Organizational Benefits
• 64% Attribute Direct Cost Saving To ISO 14001
• 74% Report Improvements To Their Corporate Reputation
• 76% Improve Their Compliance
• 61% Report Higher Morale Among Staff
• Source: BSI Accelerator Research 2011
34
Questions
35
?
QUESTIONS
123 456 789
name.surname@domain.com
www.domain.com
linkedin.com/name.surname
twitter.com/name.surname
fb.com/name.surname
THANK YOU
Contact us
Shahriyar Majlesein
Shahriyar-M@managerconsulting.org

Weitere ähnliche Inhalte

Was ist angesagt?

Quality Management System - Objectives
Quality Management System - ObjectivesQuality Management System - Objectives
Quality Management System - Objectives
Keven Aglae
 

Was ist angesagt? (20)

Iso 9001 2000
Iso 9001 2000Iso 9001 2000
Iso 9001 2000
 
Quality management systems (QMS)
Quality management systems (QMS)Quality management systems (QMS)
Quality management systems (QMS)
 
ISO 9001:2015 Overview: Revisions & Impact - Part 1
ISO 9001:2015 Overview: Revisions & Impact - Part 1ISO 9001:2015 Overview: Revisions & Impact - Part 1
ISO 9001:2015 Overview: Revisions & Impact - Part 1
 
INTERNATIONAL ORGANIZATION FOR STANDARDIZATION
INTERNATIONAL ORGANIZATION  FOR STANDARDIZATIONINTERNATIONAL ORGANIZATION  FOR STANDARDIZATION
INTERNATIONAL ORGANIZATION FOR STANDARDIZATION
 
ISO 9001:2015 Introduction & Awareness Training
ISO  9001:2015 Introduction & Awareness Training ISO  9001:2015 Introduction & Awareness Training
ISO 9001:2015 Introduction & Awareness Training
 
Overview of iso 9001
Overview of iso 9001Overview of iso 9001
Overview of iso 9001
 
Introduction to iso 9001
Introduction to iso 9001 Introduction to iso 9001
Introduction to iso 9001
 
ISO9001:2015
ISO9001:2015ISO9001:2015
ISO9001:2015
 
ISO 9001-2015 Revision Training Presentation
ISO 9001-2015 Revision Training PresentationISO 9001-2015 Revision Training Presentation
ISO 9001-2015 Revision Training Presentation
 
Iso
IsoIso
Iso
 
ISO 9001:2015 General Briefing
ISO 9001:2015 General BriefingISO 9001:2015 General Briefing
ISO 9001:2015 General Briefing
 
Quality Management System - ISO 9001-2015
Quality Management System - ISO 9001-2015Quality Management System - ISO 9001-2015
Quality Management System - ISO 9001-2015
 
Iso 9001.2015 full module
Iso 9001.2015 full moduleIso 9001.2015 full module
Iso 9001.2015 full module
 
Iso standards
Iso standardsIso standards
Iso standards
 
ISO 9001 2015 Overview presentation
ISO 9001 2015 Overview presentation ISO 9001 2015 Overview presentation
ISO 9001 2015 Overview presentation
 
ISO 9001:2015 Overview. Presentation for Training (Preview)
ISO 9001:2015 Overview. Presentation for Training (Preview) ISO 9001:2015 Overview. Presentation for Training (Preview)
ISO 9001:2015 Overview. Presentation for Training (Preview)
 
Iso 9001 2015
Iso 9001 2015 Iso 9001 2015
Iso 9001 2015
 
Quality Management System - Objectives
Quality Management System - ObjectivesQuality Management System - Objectives
Quality Management System - Objectives
 
PPT Presentation on ISO 9001 Requirements
PPT Presentation on ISO 9001 RequirementsPPT Presentation on ISO 9001 Requirements
PPT Presentation on ISO 9001 Requirements
 
Key changes of ISO 9001:2015
Key changes of ISO 9001:2015Key changes of ISO 9001:2015
Key changes of ISO 9001:2015
 

Ähnlich wie ISO 9001:2015 – How to Become A Consultant

IMA Interim Management Induction
IMA Interim Management InductionIMA Interim Management Induction
IMA Interim Management Induction
Adam Park
 
business-plan-example-template.doc
business-plan-example-template.docbusiness-plan-example-template.doc
business-plan-example-template.doc
TegoF57
 
Business plan for startup business
Business plan for startup businessBusiness plan for startup business
Business plan for startup business
Guru Prasad
 
Professional dynamics
Professional dynamicsProfessional dynamics
Professional dynamics
Edwin Clerval
 
Commission crowd the top ten factors a self-employed sales agent considers wh...
Commission crowd the top ten factors a self-employed sales agent considers wh...Commission crowd the top ten factors a self-employed sales agent considers wh...
Commission crowd the top ten factors a self-employed sales agent considers wh...
CommissionCrowd
 
Business plan guide
Business plan guideBusiness plan guide
Business plan guide
myql
 

Ähnlich wie ISO 9001:2015 – How to Become A Consultant (20)

IMA Interim Management Induction
IMA Interim Management InductionIMA Interim Management Induction
IMA Interim Management Induction
 
7Tips
7Tips7Tips
7Tips
 
business-plan-example-template.doc
business-plan-example-template.docbusiness-plan-example-template.doc
business-plan-example-template.doc
 
business-plan-example-template.doc
business-plan-example-template.docbusiness-plan-example-template.doc
business-plan-example-template.doc
 
4 fe144 project-plan
4 fe144 project-plan4 fe144 project-plan
4 fe144 project-plan
 
Business plan for startup business
Business plan for startup businessBusiness plan for startup business
Business plan for startup business
 
Craig's little book of iso's
Craig's little book of iso'sCraig's little book of iso's
Craig's little book of iso's
 
Craig's little book of iso's
Craig's little book of iso'sCraig's little book of iso's
Craig's little book of iso's
 
I want to build a 10 million dollar business !
I want to build a 10 million dollar business !I want to build a 10 million dollar business !
I want to build a 10 million dollar business !
 
Sample of business plan
Sample of business planSample of business plan
Sample of business plan
 
How To Build A High Profit Business
How To Build A High Profit BusinessHow To Build A High Profit Business
How To Build A High Profit Business
 
How To Build A High Profit Business
How To Build A High Profit BusinessHow To Build A High Profit Business
How To Build A High Profit Business
 
Professional dynamics
Professional dynamicsProfessional dynamics
Professional dynamics
 
GRAND STRATEGY
GRAND STRATEGYGRAND STRATEGY
GRAND STRATEGY
 
Commission crowd the top ten factors a self-employed sales agent considers wh...
Commission crowd the top ten factors a self-employed sales agent considers wh...Commission crowd the top ten factors a self-employed sales agent considers wh...
Commission crowd the top ten factors a self-employed sales agent considers wh...
 
ITM business barriers.pptx
ITM  business barriers.pptxITM  business barriers.pptx
ITM business barriers.pptx
 
Business plan guide
Business plan guideBusiness plan guide
Business plan guide
 
12 Months of Content Marketing Ideas for SlideShare
12 Months of Content Marketing Ideas for SlideShare12 Months of Content Marketing Ideas for SlideShare
12 Months of Content Marketing Ideas for SlideShare
 
IT consulting business plan example..pdf
IT consulting business plan example..pdfIT consulting business plan example..pdf
IT consulting business plan example..pdf
 
Business Plan Pitches
Business Plan PitchesBusiness Plan Pitches
Business Plan Pitches
 

Mehr von PECB

Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
PECB
 
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of CybersecurityDORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
PECB
 
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI GovernanceSecuring the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
PECB
 
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
PECB
 
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
PECB
 
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks EffectivelyISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
PECB
 
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
PECB
 
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital TransformationISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
PECB
 
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulationsManaging ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
PECB
 
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
PECB
 
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
PECB
 
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
PECB
 
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
PECB
 
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
PECB
 
IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?
PECB
 
Student Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptxStudent Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptx
PECB
 
Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023
PECB
 

Mehr von PECB (20)

Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
 
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of CybersecurityDORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
 
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI GovernanceSecuring the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
 
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
 
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
 
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks EffectivelyISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
 
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
 
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital TransformationISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
 
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulationsManaging ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
 
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
 
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
 
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
 
Student Information Session University KTMC
Student Information Session University KTMC Student Information Session University KTMC
Student Information Session University KTMC
 
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
 
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
 
Student Information Session University CREST ADVISORY AFRICA
Student Information Session University CREST ADVISORY AFRICA Student Information Session University CREST ADVISORY AFRICA
Student Information Session University CREST ADVISORY AFRICA
 
IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?
 
Information Session University Egybyte.pptx
Information Session University Egybyte.pptxInformation Session University Egybyte.pptx
Information Session University Egybyte.pptx
 
Student Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptxStudent Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptx
 
Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023
 

Kürzlich hochgeladen

Activity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdfActivity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdf
ciinovamais
 
Russian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in Delhi
Russian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in DelhiRussian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in Delhi
Russian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in Delhi
kauryashika82
 

Kürzlich hochgeladen (20)

Key note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdfKey note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdf
 
How to Create and Manage Wizard in Odoo 17
How to Create and Manage Wizard in Odoo 17How to Create and Manage Wizard in Odoo 17
How to Create and Manage Wizard in Odoo 17
 
On National Teacher Day, meet the 2024-25 Kenan Fellows
On National Teacher Day, meet the 2024-25 Kenan FellowsOn National Teacher Day, meet the 2024-25 Kenan Fellows
On National Teacher Day, meet the 2024-25 Kenan Fellows
 
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
 
General Principles of Intellectual Property: Concepts of Intellectual Proper...
General Principles of Intellectual Property: Concepts of Intellectual  Proper...General Principles of Intellectual Property: Concepts of Intellectual  Proper...
General Principles of Intellectual Property: Concepts of Intellectual Proper...
 
PROCESS RECORDING FORMAT.docx
PROCESS      RECORDING        FORMAT.docxPROCESS      RECORDING        FORMAT.docx
PROCESS RECORDING FORMAT.docx
 
Explore beautiful and ugly buildings. Mathematics helps us create beautiful d...
Explore beautiful and ugly buildings. Mathematics helps us create beautiful d...Explore beautiful and ugly buildings. Mathematics helps us create beautiful d...
Explore beautiful and ugly buildings. Mathematics helps us create beautiful d...
 
This PowerPoint helps students to consider the concept of infinity.
This PowerPoint helps students to consider the concept of infinity.This PowerPoint helps students to consider the concept of infinity.
This PowerPoint helps students to consider the concept of infinity.
 
Dyslexia AI Workshop for Slideshare.pptx
Dyslexia AI Workshop for Slideshare.pptxDyslexia AI Workshop for Slideshare.pptx
Dyslexia AI Workshop for Slideshare.pptx
 
Understanding Accommodations and Modifications
Understanding  Accommodations and ModificationsUnderstanding  Accommodations and Modifications
Understanding Accommodations and Modifications
 
Magic bus Group work1and 2 (Team 3).pptx
Magic bus Group work1and 2 (Team 3).pptxMagic bus Group work1and 2 (Team 3).pptx
Magic bus Group work1and 2 (Team 3).pptx
 
Third Battle of Panipat detailed notes.pptx
Third Battle of Panipat detailed notes.pptxThird Battle of Panipat detailed notes.pptx
Third Battle of Panipat detailed notes.pptx
 
How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17
 
Spatium Project Simulation student brief
Spatium Project Simulation student briefSpatium Project Simulation student brief
Spatium Project Simulation student brief
 
Grant Readiness 101 TechSoup and Remy Consulting
Grant Readiness 101 TechSoup and Remy ConsultingGrant Readiness 101 TechSoup and Remy Consulting
Grant Readiness 101 TechSoup and Remy Consulting
 
Activity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdfActivity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdf
 
Russian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in Delhi
Russian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in DelhiRussian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in Delhi
Russian Escort Service in Delhi 11k Hotel Foreigner Russian Call Girls in Delhi
 
Application orientated numerical on hev.ppt
Application orientated numerical on hev.pptApplication orientated numerical on hev.ppt
Application orientated numerical on hev.ppt
 
microwave assisted reaction. General introduction
microwave assisted reaction. General introductionmicrowave assisted reaction. General introduction
microwave assisted reaction. General introduction
 
Sociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning ExhibitSociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning Exhibit
 

ISO 9001:2015 – How to Become A Consultant

  • 1. ISO 9001:2015 How to Become A Consultant SMEC Engineering Company Management and Business Consulting & Training Services 1
  • 2. Shahriyar Majlesein Job Positions Bio description example: Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled it to make a type specimen book. It has survived not only five centuries, but also the leap into electronic typesetting, remaining essentially unchanged. 123 456 789 name.surname@domain.com www.domain.com linkedin.com/name.surname twitter.com/name.surname fb.com/name.surname
  • 4. “I am a Project, Quality and Risk Management specialist. During the past 10 years, I was responsible for over 80 Major Projects in several countries in areas of Oil and Gas, Energy, Telecommunications, IT and Engineering. I am currently COO of SMEC Engineering Group and CEO of Citadel Engineering Company Education: Ph.D. Student of Business Administration DBA ISM ( Operation Management ) Master of Business Administration (MBA) Project Risk Management Trend Bachelor Degree of Information Technology Engineering Bachelor Degree of Business Administration ( Business Marketing ) Education Degree Information Technology (IT) Of American Virtual University ( Colorado Technical University ) Shahriyar Majlesein
  • 6. Who is IOS and What Is ISO? • The International Organization for Standardization (IOS) is a worldwide federation of national standards bodies. • Working through Technical Committees, it has developed and published over 18,000 different ISO standards that are used internationally for subjects ranging from film speeds to wine glasses to quality management systems. • The official purpose for the issuance of ISO Standards is to facilitate world trade through standardization. 6
  • 7. Understanding the Standards Documents Most standards have at least two supporting documents; • Requirements – these are the “Shall” and are required to be implemented unless exclusions can be taken. The auditor can only audit against the “Shall”. • Code of Practice – these are the “Should” and are guidance to assist you in implementation. • Guidance – a fully implementable standard that does not have a “certification scheme”. You can be compliant, but not certified. 7
  • 9. Understanding, Knowledge, and Awareness of ISO 9001:2015 CONTEXT OF THE ORGANIZATION 4.1 UNDERSTANDING THE ORGANIZATION AND ITS CONTEXT 4.2 UNDERSTANDING THE NEEDS AND EXPECTATIONS OF INTERESTED PARTIES 4.3 DETERMINING THE SCOPE OF THE QUALITY MANAGEMENT SYSTEM 4.4 QUALITY MANAGEMENT SYSTEM AND ITS PROCESSES
  • 10. Understanding, Knowledge, and Awareness of ISO 9001:2015 LEADERSHIP 5.1 LEADERSHIP AND COMMITMENT 5.1.1 GENERAL 5.1.2 CUSTOMER FOCUS 5.2 POLICY 5.2.1 ESTABLISHING THE QUALITY POLICY 5.2.2 COMMUNICATING THE QUALITY POLICY 5.3 ORGANIZATIONAL ROLES, RESPONSIBILITIES AND AUTHORITIES
  • 11. Understanding, Knowledge, and Awareness of ISO 9001:2015 PLANNING 6.1 ACTIONS TO ADDRESS RISKS AND OPPORTUNITIES 6.2 QUALITY OBJECTIVES AND PLANNING TO ACHIEVE THEM 6.3 PLANNING OF CHANGES
  • 12. Understanding, Knowledge, and Awareness of ISO 9001:2015 7.1 Resources 7.1.1 General 7.1.2 People 7.1.3 Infrastructure 7.1.4 Environment for the operation of processes 7.1.5 Monitoring and measuring resources 7.1.6 Organizational knowledge 7.2 Competence 7.3 Awareness 7.4 Communication 7.5 Documented information 7.5.1 General 7.5.2 Creating and updating 7.5.3 Control of documented information
  • 13. Understanding, Knowledge, and Awareness of ISO 9001:2015 Operation 8.1 Operational planning and control 8.2 Requirements for products and services 8.2.1 Customer communication 8.2.2 Determining the requirements for products and services 8.2.3 Review of the requirements for products and services 8.2.4 Changes to requirements for products and services 8.3 Design and development of products and services 8.3.1 General 8.3.2 Design and development planning 8.3.3 Design and development inputs 8.3.4 Design and development controls 8.3.5 Design and development outputs 8.3.6 Design and development changes
  • 14. Understanding, Knowledge, and Awareness of ISO 9001:2015 Control of externally provided processes, products and services 8.4.1 General 8.4.2 Type and extent of control 8.4.3 Information for external providers 8.5 Production and service provision 8.5.1 Control of production and service provision 8.5.2 Identification and traceability 8.5.3 Property belonging to customers or external providers 8.5.4 Preservation 8.5.5 Post-delivery activities 8.5.6 Control of changes 8.6 Release of products and services 8.7 Control of nonconforming outputs
  • 15. Understanding, Knowledge, and Awareness of ISO 9001:2015 Performance evaluation 9.1 Monitoring, measurement, analysis and evaluation 9.1.1 General 9.1.2 Customer satisfaction 9.1.3 Analysis and evaluation 9.2 Internal audit 9.3 Management review 9.3.1 General 9.3.2 Management review inputs 9.3.3 Management review outputs
  • 16. Understanding, Knowledge, and Awareness of ISO 9001:2015 Improvement 10.1 General 10.2 Nonconformity and corrective action 10.3 Continual improvement
  • 17. How To Be a Consultant: 10 Steps to Self Employment Step 1: Identify the Niche in Which You Have Knowledge and Experience You may have an interest in computers. However, this does not mean you can become an independent computer consultant (though it can give you a head-start in this field). Knowledge and experience coupled with interest is the only way to begin. If you have knowledge about computers (hardware or software), have worked with these for a considerable period of time and have the latest detailed, information about them, you can plan to start a computer consulting business.
  • 18. How To Be a Consultant: 10 Steps to Self Employment Step 2: Acquire the Certifications and Licenses Some consulting businesses do not require formal training and certifications (e.g., gardening consulting). However, if you are planning to work as an accounting consultant, you need to get professional certifications from recognized accounting institutions. Also, consider the licensing requirements to start a consulting business. The local or state legal guidelines may require you to get a particular license to work as an independent consultant in certain specialties.
  • 19. How To Be a Consultant: 10 Steps to Self Employment Step 3: Decide Your Short and Long Term Goals If you excel in a niche that has a good prospect, such as business consulting, computer consulting, career consulting and so on, you may paint a rosy picture of clients waiting for your advice within a week of starting your consulting business. It’s not magic. If you have such unrealistic expectations, you are sure to be disappointed. Every business takes time to grow and become known and established. If you lack the time and effort to start and establish a business, you may end up headed towards failure.
  • 20. How To Be a Consultant: 10 Steps to Self Employment Step 4: Choose Your Target Market If no one pays for your ideas and advice, your business will face failure. It will also face the same result if the recipients of your ideas do not have the money to pay you. The first thing you need to do is to decide whether you will advise individuals or companies. Every niche in the consulting business provides these options. For example, if you are working as a career consultant, you may help individuals plan their careers. You may also work with a large corporation to help the employees excel in their chosen fields.
  • 21. How To Be a Consultant: 10 Steps to Self Employment Step 5: Research Your Target Market Individuals and organizations need consultants for a number of reasons. A tax consultant can help a millionaire plan his/her taxes. A computer consultant can help the employees of a large company learn software basics. A human resource consultant can help a big business implement a change in a policy. After you determine the target market that will hire you for your expertise, you need to find out the various ways in which you may help them. This will help you market your consulting business. You need to tell your clients why they need you.
  • 22. How To Be a Consultant: 10 Steps to Self Employment Step 6: Consider a Home Office If your local laws permit this, it can work to your advantage in more ways than one. You don’t spend any money to buy or rent an office space to start your business as a self-employed consultant. You don’t need to pay for utilities separately. You don’t need to pay for a regular commute. Along with the money, you also save time and energy when you work out of your home. You may acquire new premises after you have established your business and employed associates; but more on this later.
  • 23. How To Be a Consultant: 10 Steps to Self Employment Step 7: Build Your Network If no one knows you and you know no one in your field, you may find yourself in the midst of a disaster soon. It is important to start building your network as soon as you have decided to be a consultant. A strong contact base ensures that you have the sources to find work. A professional network, coupled with a social network, can help you market and advertise your business. References are also important ways to find work in the niche. Rely on your initial contact base to build your network.
  • 24. Step 8: Fix Your Fees and the Way to Bill Clients As a beginner, you may not receive high fees as a consultant. Your charges increase as you become known as a consultant. Keep in mind your credentials and experience as well as market conditions, your target group and your competitors when you fix your fees. Also, decide how you will bill clients. Hourly billing may seem to be a convenient method; the problem is many clients think that you charge too much for your time. It is best to use the project-based billing method when you start your consulting business. How To Be a Consultant: 10 Steps to Self Employment
  • 25. Step 9: Arrange for Advertising and Marketing You are not selling a house which, by the way, is much easier than selling your advice. Many of your clients may not be even aware that they need your ideas and advice. How do you market and advertise something so difficult? Believe it or not, you have a lot of choices – print media, cold-calls, online ads and many others. Before you choose any avenue to advertise, decide your budget. If the costs go out of hand, the chance of success of your business plummets. Newsletters and brochures, advertisements in niche-specific journals, websites and blogs offer the best options. How To Be a Consultant: 10 Steps to Self Employment
  • 26. How To Be a Consultant: 10 Steps to Self Employment Step 10:Determine Whether You Need to Outsource Certain Tasks You may find it easier to handle all tasks of your business on your own when you start. But after your consulting business is up and running, you may need the help of others and you may decide to employ people. Check both legal and tax details before you do this. You may also outsource some tasks that do not require your immediate attention. Make sure that the tasks are not connected to your consulting business. For example, you can outsource auditing for a career consulting business but not when it is your niche.
  • 27. Understanding the Standards - Scope • Determine your Scope of Registration • How many people within your organization support this Management System? • How many processes are included? • How many locations? 27
  • 28. Stages for Registration • Submit application to registrar • Stage 1: Assessment of readiness • Stage 2: Assessment for registration audit • Registration/certification awarded for 3 years • Surveillance audits (at least annually) • Recertification audit at the end of 3rd year 28
  • 29. Registration • Usually takes 1 or possibly 2 auditors 1 to 3 days – depending on scope, size, locations and personnel • You will be told whether or not you will be recommended for registration at the completion of the Stage 2 audit • Certificate usually arrives a 3 – 8 weeks later • Maintaining your ISO Certification(s) is the first step in continuous improvement 29
  • 30. Registrar/Auditor Selection Criteria • Accreditation and scope of accreditation • Reputation and customer acceptance • Availability, cost, and location • Knowledge of your business • Culture fit with your organization • Ability to audit all of your future standards Note: The external auditor is hired by the Registrar and presented with qualifications to you upon agreement of audits. You cannot go out and hire your own external auditor. 30
  • 31. Getting Ready for the Audit • Determine team, set budget • Internal auditor(s)training if using in-house resources • Hire consulting firm if applicable • Gap Assessment • Implement requirements of standard to meet your business needs against the gap assessment • Go-Live • Hold Management Review Meeting • Conduct Internal Audit • Refine documentation • Employee involvement training • System adjustment • Registration audit - Stage 1 • System adjustment • Registration audit - Stage 2 31
  • 32. Ongoing Commitment • Getting certification is only the beginning • Management Representative must keep up weekly/monthly/quarterly with tasks • Internal audits are required at least annually • Management review is required at least annually • Timely completion and updates to CARs/PARs/OFIs • Annual Surveillance audit by external registrar 32
  • 33. Customer Benefits ISO 9001 Certified Companies Queried • 75% Improved Their Levels of Customer Satisfaction And Loyalty • 75% Booster Their Operational Performance • 71% Acquired New Customers And Retained Existing Ones. • 55% Achieved Cost Savings • Source: BSI Accelerator Research 2011 33
  • 34. Organizational Benefits • 64% Attribute Direct Cost Saving To ISO 14001 • 74% Report Improvements To Their Corporate Reputation • 76% Improve Their Compliance • 61% Report Higher Morale Among Staff • Source: BSI Accelerator Research 2011 34