Showing posts with label ISO 9001. Show all posts
Showing posts with label ISO 9001. Show all posts

Apr 1, 2013

Social Media - Cloud Tools - blessing or curse for the Quality Field - Quality in Unusual Places

Quality Management needs and Social Media Tools in the Cloud often seem totally unconnected. So is finding a long term quality tool in the social media cloudy universe probably asking too much or not ? I chose this as my theme when ASQ's Paul Borawski asked the ASQ Influential Bloggers to explore finding Quality Tools in Unusual Places as their theme for March 2013.

Both Quality and Social Media share a focus on improvement and innovation. However Quality Management requires procedures with documents and records to be kept for extended periods - whereas the Social Media in the Cloud paradigm is more rooted in ephemera and the ever ephemeral - also seemingly all too trivial to some.

Nearly 5 years ago, as the Global Financial Crisis exploded onto the world stage, I found my Quality Manager role totally shaken up. For the previous two years it had mainly required a "steady hand on the tiller". But as my company wanted to expand its export efforts it faced an ever increasing number of non-tariff barriers aka Technical Barriers to Trade aka TBT's. As Quality Manager I was tasked with working through the maze and getting the certifications in place.

The amount of information I had to sift through to understand the global trade and standards system of each country or region that I was dealing with seemed insurmountable - as various countries fled increasingly into the use of the TBT's to protect their domestic economy. The US Trade Representative's report of 2010 showed how the number of TBT's experienced exponential growth. So a lot of work for me, but when you consider each boatload of steel sent to Europe was worth 15 million Euro's - it became quite compelling to get on top of those evergrowing mountains of information.

Coincidentally in late 2008 I had attended a National Knowledge Management Conference in Canberra Australia where newly emerging social media tools were being enthusiastically shared. Initially hesitant, but by March 2009 I had decided to dive in head first into the social media tools pool to help deal with the TBT information overload :
  • storing & sharing favourite websites aka bookmarks - (thenYahoo's) Delicious
  • scanning for information - Twitter & Hootsuite microblogging tools plus Google Alerts, groups in LinkedIn and powerpoints in Slideshare
  • blogs - although back then the number of Quality related blogs was still quite low - initially I used Google's Blogger but then moved over to Posterous which was a little friendlier to use
  • RSS feeds & RSS reader - when great sources of information were located I could feed them into Google Reader where I could read them in one place without doing Google searches or going to individual websites - a great time saver - and the articles could be tagged eg Quality, Records, Audits, TBT's etc. And it was all searchable and shareable. Over the following years I evolved to become one of Google Reader's Power Users.
  • and I managed to get them inter-connected and talking to each other - my own beautiful little Quality ecosytem.
  • I then shared the information in a Company Sharepoint site via a wiki - a great tool for on-boarding a new team member. And to also minimise a whole lot of people going off and doing the same Google searches over and over again. My new team member soaked up the knowledge and information on that wiki like a sponge.
Togther these tools all made up my electronic Quality Personal Knowledge Management System Toolkit.
My company achieved certifications for several Asian countries and for the European CE Mark Construction Products Directive & Regulation. Using the Social Media tools helped save my sanity back then. And over the following couple of years, more folks in the Quality space began using these tools too, as well as ASQ, ISO, SAI Global etc - so it was all a great resource as my Quality Manager role expanded.

Then a few ripples and ructions.

I was headed to an ISO TC 176 SC2 Working Group meeting in Sydney Australia looking at the future of ISO 9001, when I heard that Yahoo decided to drop Delicious in December 2010. I had so many Quality related websites favourited in Delicious so I was definitely shaken by the news. A few days later I moved to Diigo along with quite a few others. Delicious was subsequently reincarnated - so I decided to use both - a sort of back up plan if either should fall over again.

Twitter bought Posterous Blogging and there were whispers that the end might then be nigh for Posterous - although this was denied - so I started moving copies of my blog articles over to Blogger as a backup just in case. I also began using Wordpress in late 2012 when I set up the social media tools for a local resident community group, but I hesitated to copy all of my own Posterous articles to the Wordpress Blog site - wouldn't copies of the same article in three places have been overkill ?

And then in February 2013, on the day I was heading out to South America for 6 weeks vacation, Posterous's demise was announced by Twitter's CEO - with no access available from May 2013. I was relieved that I would have time on my return to make sure all my article posts had gone to Blogger. And I began to re-think posting them all into Wordpress after all.

Finally in mid March 2013 when I was still vacationing in South America, Google announced it was retiring aka axing Google Reader as part of its "spring clean" - now that had me worried. So much of my Quality related information was in there. Previously I had put aside niggling thoughts of what to do if this ever happened.

By the time I was back home in Australia, possible solutions were emerging - 500,000 people had moved to Feedly - which looked prettier, but didn't have all the functionality of Google Reader although it is promised. Will it make the July 1 2013 deadline ? Who knows ? However it seemed the best of what was on offer.

Two other big guns, Digg and Wordpress have promised to develop solutions - and there is an alphabet soup of other products out there - but many were anchored in Google Reader so how they will go once it is axed - then again, who knows ?

Google advised of a tool to download your stored data from Google Reader, cutely entitled "Takeout" - unfortunately for some of the power users like me, we had to wait for even more tinkering to get our information downloaded.

Various folks began to remonstrate - can you trust Google - can you really trust social media tools in the cloud? Is it wise to develop such a reliance on them ? (Harold Jarche and John T Spencer). Others were like ... just get over it and move on - Beth Kanter - with references to Spencer Churchill's 1988 "Who moved my Cheese?"

Indeed the pace of change in this field of Social Media Tools in the Cloud is so great - such a very short half life. But for some of us, we need a much longer information half life - eg for Quality certification requirements or operation of physical infrastructure like power stations, highways and dams etc. Finally, I read, a couple of days ago, that some folks were beginning to recognize these differing half life paradigms.

I liked the comments on educationalist John T Spencer's blog post  on Google Reader's demise. He ended up agreeing it's worth using these tools - but make sure you have educated the students to understand change - and be sure you have a back up plan in case the plug gets pulled on the tool.

I would still advocate the use of these tools for the finding and sharing of supporting information in the Quality Management field - and definitely agree you need a back up plan to ensure continuity of this information. But for that key information, documents and records needed for Quality Certification, I would contend that they be kept in a place where you control their destiny - and not the boards of companies like Google, Yahoo and Twitter.


Dec 15, 2010

Speaking up for Baldrige from a DownUnder Aussie ASQ Global Influential Voice for Quality

Baldridge funding to be axed ? What ? Why should someone from DownUnder Australia even care ?
It seemed only hours after the latest award winners were announced, that the Baldridge itself was under threat. Today in Sydney Australia at ISO TC 176 SC2, I shared with Lorrie Hunt & Denise Robitaille how important my ASQ membership has been for me. Likewise for me the Baldridge has been an inspiration, like the Olympics of Quality.
To be honest I found Denis Arter’s views very provocative but definitely worth a read : sort of like ... that winners of awards like Baldridge are too often what we in Australia call “oncers”. They put in a big effort to get the award, only to slowly undergo “quality fade”. But my thoughts were more in tune with Paul Borawski’s and I too am part of the ASQ Influential Voices program. (Note - While I receive a variety of quality resources as honorarium from ASQ in exchange for my commitment, the thoughts and opinions expressed on my blog are my own.)
I have been associated with three organizations who won the Australian Quality Awards, before the awards disappeared. After a while, they were eventually replaced by the Business Excellence Awards run by SAI Global.
1.0 My employer, a manufacturing organization, won the award 20 years ago, after initiating a TQC program. We’ve maintained our ISO 9001 certification since 1991. There’s a photograph of the trophy on the shelf in my office. I often glance at it and ponder on the cultural transformation involved in winning the award. Which was the greater achievement I wondered ? That award ? Or the organizational transformation ? And quite simply put : if the organization hadn’t maintained its certification, it would lose huge market share – many customers simply demand at least ISO 9001.
Now in our organization’s quality management team, we use Web 2.0/Enterprise 2.0 IT tools to stay current with emerging trends in quality and certifications. That includes ISO & ASQ’s RSS feeds& Twitter streams, Sharepoint wiki’s etc. I shared some of these experiences at a Knowledge Management conference, ACTKM10 in Canberra Australia last October. Back In the office, we’ve had robust debates on future directions to keep improving. We cannot afford to stand still – currently we’re looking to a maturity matrix tool as part of our internal quality audit program.
2.0 The Library Manager of the University where I served on the governing Council was totally committed to the quality paradigm. The Library won the Australian Quality Award and later the University Administration department was certified to ISO 9001. No doubt exposure to the Library’s National Quality Award raised the quality paradigm within the university campus.
3.0 Sadly the third organization, a local City Council did not maintain the commitment – it had been regarded as a leader in the field in Australia not only in winning the Australian Quality Award but in other innovative operational ways as well. As an elected Local Government Councillor I was very proud that the City won the Australian Quality Award. Unfortunately the quality vision was lost with the departure of the Lord Mayor to State Government. So winning the award ended up being only a project – it needs to be a process without a sunset.
No, we shouldn’t immediately dismiss the value of quality awards like Baldridge, nor tag all award winners as “oncers”. We have awards in so many fields of endeavour such as sport –so why not quality? Over the last year or so we’ve seen the effect of large organizations dropping the quality ball. Unimaginable human consequences and more, rippling through economies and the environment. We need organizations to aspire to quality performance and recognition helps. We need Quality role models to be the “light on the hill” for others.
Of course awards such as Baldridge may need to evolve, just as we found with the Australian Quality Awards becoming the Business Excellence Awards.
Over the last week I have been very privileged to work with experts from the international quality family. They have travelled from across the globe to Sydney Australia to participate in ISO TC 176 SC2’s activities. We’ve been led by Nigel Croft, assisted by Charles Corrie & Jose Dominguez in imagining possibilities for a future ISO 9001. My team from India, Indonesia, Colombia, UK, Denmark, USA, South Africa, UK & Australia, has been led by a Spaniard. It has been inspiring to meet people like Lorrie Hunt & Denise Robitaille, women of quality who had until now been names on articles in quality magazines to me. Our times see ethics and corporate social responsibility (ISO 26000) emerging, not to mention exploding social media/mobile web IT in quality. So lots of ideas considered this week - some may actually turn into reality and others may not. But it is important to reflect & consider if there is to be innovation.
So let’s not let Baldridge go – maybe change - but not extinction !

Nov 22, 2008

Cloud Computing - Heads in Sand - Governance Issues

It started as trickle, but like a dripping tap, the flow kept up ... for the last few weeks Cloud Computing keeps dropping into my email inbox ... something to do with Microsoft's Blue Sky Horizon, Windows Azure. Like the dripping tap, I tried to ignore it as just more IT geek jargon. Realisation dawned .. I'd been a fledgling Cloud Computing user for a few years without realising ... as I paid my EBay bills using PayPal, used Amazon Books payment system, Google maps, Blogger, Google Reader for RSS feeds, LinkedIn, Yahoo Groups, Web based email, etc etc.

In the end I found Robin Hastings' (Missouri River Regional Library) slideshare presentation on "Cloud Computing" & the Cloud Computing Glossary the most non-geek friendly.

But like the rest of Web 2.0 applications, rather than head in the sand, avoiding Cloud Computing issues, those with governance roles, need to be asking questions of those with their heads in the clouds, looking to blue sky horizon possibilities. Those questions need to be fully answered, and not treated dismissively.Starting with ... Will Cloud Computing storage providers guarantee access to your information & records for as long as statutory regulations require, regardless of whether done in house or outsourced ... sometimes decades ? Then would Private Clouds & Virtual Private Clouds be better approaches ? Gartner predicts a future in this approach for large organizations. If IT departments were worried about managing security concerns with Web 2.0's Microsoft Sharepoint, they must be agonising over Governance and the full ramifications of Cloud Computing applications, eg Chieftech.blogspot. Perhaps, looking at it from Web 2.0 experiences, if companies & quality management professionals have their heads in the sand, then the horses will bolt.

MORE

Cloud Computing - detail Heads in the Sand on Governance

It started as trickle, but like a dripping tap, the flow kept up ... for the last few weeks Cloud Computing keeps dropping into my email inbox. Probably something to do with Microsoft's Blue Sky Horizon, recently announced, venture into the field, with Windows Azure.

Like the dripping tap, I tried to ignore it as just more IT geek jargon. Finally curious enough, I clicked on one of the email hyperlinks ... a new unintelligible taxonomy aka jargon emerged. It meant turning to Wikipedia, to get a plain English understanding of "Cloud Computing"....and a bit more at "How Stuff Works". Funny how many Orgs frown on using Wikipedia, just like my old uni professor frowned on the Plain English style metallurgy textbook, used at the TAFE across the road, despite its friendlier "Gunning Fog" readibility ranking. In the end I found Robin Hastings' (Missouri River Regional Library) slideshare presentation & the Cloud Computing Glossary the most non-geek friendly.

Realisation dawned .. I'd been a fledgling Cloud Computing user for a few years without realising ... as I paid my EBay bills using PayPal, used Amazon Books payment system, Google maps, Blogger, Google Reader for RSS feeds, LinkedIn, Yahoo Groups, Web based email, etc etc. Many say Cloud Computing is the next disruptive computing technology, just like the IBM Mainframe, Apple 2 computer and internet - Web 1.0/Web 2.0.

And why did I go to Google Reader for RSS feeds ? Probably because my Org didn't seem to provide Readers for RSS feeds, or it was too hard to find out how, or its use was discouraged. Many other employees looked at me blankly when I asked about RSS feed? So it was easier just to go outside the system. If I found anything worthwhile, then I'd just archive it, email it around internally or capture really useful bits onto a Sharepoint Wiki Page.

Another stage for the Microsoft vs Sun Microsystems paradigm debacle, with Microsoft's catch up commercialisation plans in offering a fee per use. "Cloud Computing" seems headed to SME's, so they don't have to outlay the capital for huge IT systems. Some commentators liken it to electricity and water utilities access and usage charging - where you don't need your own generator, windmill or well. Consumers expect reliable and safe supply at rates that are not exorbitant. But what about governance ? After all it was a utility, Enron, that led to the Sarbanes Oxley legislation in the USA.

It was dawning that, like the rest of Web 2.0 applications, rather than head in the sand, avoiding Cloud Computing issues, those with governance roles, need to be asking questions of those with their heads in the clouds, looking to blue sky horizon possibilities. Those questions need to be fully answered, and not treated dismissively.

Starting with ... Will Cloud Computing storage providers guarantee access to your information & records for as long as statutory regulations require, regardless of whether done in house or outsourced ... sometimes decades ? A good question and one being posed on How Stuff Works - Cloud Computing Security Concerns page. Very pertinent in an era of increased regulatory constraints, following the financial global meltdown. But then Key IT decision makers fret about the cost of software licensing and what they may perceive to be excessive and unnecessary data storage, ... forgetting the ramifications of not having data storage. Systems, which businesses need in order to operate, ie QMS, EMS, OHSMS, CRMS, FMS, have requirements to keep records for a very long time. Breach those and it could be a very costly threat to your business's longevity. Some commentators seem to be recognising this concern.

What about production history systems - no matter if managed in-house or via "Cloud Computing" applications ? If your product identity codes are re-used in a "wrap around" situation, it might be tempting to cut costs and not archive the records of each wrap around sequence separately. But how do you know if the data is for item "Awxyz" produced in 2006 or for item "Awxyz" from 2009. 3rd Party quality auditors certifying your Quality Management Systems, and Factory Production Control Systems, could take a dim view of your cost cutting - not good, especially if you plan to export into the EU in Europe.

There's the challenge - in line with James Robertson's view of two uses for a wiki - to ensure governance, "command and control" rules where they're needed - as well as to encourage collaborative environments with enabling support, hints and tips, to capture lessons learned, preventing key knowledge loss (refer egov.vic) . I decided to ask the "significant other", one of the aforementioned IT geeks, about his exposure to Cloud Computing & governance issues, a pause, then he explained how it was being adopted by some organizations, as a Virtual Private Cloud to enable collaboration with external users, and yet maintain security. Gartner predicts a future in Private Clouds/Virtual Private Clouds approaches for large organizations.

If IT departments were worried about managing security concerns with Web 2.0's Microsoft Sharepoint, they must be agonising over Governance and the full ramifications of Cloud Computing applications, eg Chieftech.blogspot. And again, despite all the proclamations, it will be a behavioural issue. Perhaps, looking at it from Web 2.0 experiences, if companies & quality management professionals have their heads in the sand, then the horses will bolt.

Oct 23, 2008

Records Management - where does it fit & where is it heading ?

There has been a lot of comment about increasing records management requirements eg retention schedules etc. Internationally these are covered under ISO 15489 Parts 1 &2 - these have been adopted into Australia. .

Many would argue that these have place imposts on businesses and stifled innovation. However increased strictures on Records Management processes are here to stay, and have been driven in the USA by the Sarbanes Oxley legislation, following the Enron furores. In Australia, Records Management requirements have been accelerated, following the Rolah McCabe vs BAT case in Victoria... According to Lawyers Weekly, "As at common law, there is a shift at the legislative level. The Crimes (Document Destruction) Act 2005 (Vic) amends the Crimes Act 1958 (Vic) and creates a new criminal offence in relation to the destruction of documents likely to be required in legal proceedings. An employee or officer attempting to delete a ‘smoking gun’ email, who therefore knows of the reasonable likelihood of litigation and intends to prevent the document from being used, could be prosecuted for document destruction. Both individuals and companies can be prosecuted, potentially facing large fines and imprisonment. .. A company may be vicariously liable for an officer who breaches the document destruction provisions of the Crimes Act. "

So it is really a case of "get over it and get on with it". Many legal firms are providing advice that could be quite challenging for some organisations, eg Freehills & Blake Dawson Waldron.

In fact, as part of their ISO 9001 quality management document control systems, organisations will have Records Management covered in their Quality Management Manual, or Department Handbook. This is the peak document in their quality system. Records may be either hard copy or electronic - and both should be covered in more detail in individual operating department quality management manuals.

Similar records management requirements exist for ISO 14001 Environment Management Systems. They also exist for also OHSMS systems - and as required for Workers Compensation Self Insurer's status under WorkCover NSW.

Some companies have also establised an Information Management standard. This may provide guidance on records management, eg including Records Disposal standards, as informed by the Australian Records Retention Manual.

This standard may be complemented by an Information Security Policy Statement, eg Victorian context. And there may also be an Information Management Governance Policy/Strategy, which will also address information security issues, eg such as information rights management.

Arising from Victorian State Government legislation, many organisations have developed very comprehensive records classification systems. These include records retention/disposal requirements, in accordance with Victorian and Australian federal legislative, relevant to businesses operating in Victoria. Ideally these would be developed with the involvement, and approval, from an organisation's legal counsel.

It can be very expensive to fall foul of the legislature on these issues : Failing to Keep Records is Expensive - Federal and New York regulators ordered the U.S. Trust Corporation to pay $10 million in fines to settle accusations that it violated bank secrecy laws and failed to keep complete records in a special trading unit.

It is interesting that e-technology is not always seen as providing positive improvements -
"Contrary to the conventional wisdom that technology is an aid to efficiency, the electronic age has made discovery of relevant documents an even lengthier and more expensive process than hitherto,'' Federal Court Justice Ronald Sackville's speech to the NSW Supreme Court conference, after hearing the Channel 7's C7 case, with a database compiled for the case consisting of some 86,000 documents, comprising nearly 590,000 pages.