Saturday, November 17, 2012

The Case for Quality


ISO 9001 section 0.1 states: “The adoption of a quality management system should be a strategic decision of an organization.”  While ISO 9001 is the most widely adopted quality management system (QMS) standard in the world, many companies attach little or no importance to a well-designed QMS.

A recent article: Stauffer, R, Owens, D. “Lasting Impression: Quality management’s positive impact on the economy” Quality Progress, November 2012 makes the economic case for a QMS implementation, asking the question: “Does quality have a payoff?”

The authors reference the study “The Contribution of Quality Management to the UK Economy”, jointly commissioned by the Chartered Management Institute (CMI) and the Chartered Quality Institute (CQI). 

The study, researched and written by the Center for Economic and Business Research (CEBR), conducted a review of relevant business and economic literature, developed 18 case studies from various business and public service sectors, and surveyed 120 organizations.  From the literature research it concluded that an effective QMS resulted in:

·         Upward pressure on stock prices while unsuccessful quality management systems had the opposite effect.

·         Enhanced customer and employee satisfaction and retention.

·         Reduced costs.

·         Improvement in key financial performance metrics.

·         Greater focus on customer satisfaction.

From the organizations surveyed the CEBR found:

·         On average costs were reduced by 4.8%.

·         More than 93% agreed that the QMS was a significant contributor to success.

·         95% agreed that the QMS contributes to customer retention and satisfaction.

·         83% thought that the QMS provides consistent improvement and therefore higher productivity

·         83% agreed that without an effective QMS they could not justify pricing to customers.

The study examined key economic indicators in the UK for 2011.  The study determined that an effective QMS:

·         Contributed ₤86 billion ($135 billion) to GDP.

·         Contributed ₤8.4 billion ($13.1 billion) in corporate tax receipts.

·         Caused employment to be 1.43 million higher (4.94%) than it would otherwise have been.

The article makes a strong case for a well-designed QMS.  The results are likely transferrable to the US economy with similar results.

The benefits of an effective QMS take time to appear.  They do not happen overnight.  Commitment, involvement, and leadership from senior management are keys to success.

For assistance with ISO 9001 implementation see www.rosehillsystems.com

 

Thursday, November 8, 2012

Acceptance Sampling


ISO 9001 section 8.2.4 says that the organization must monitor and measure the characteristics of the product in order to verify that the product meets requirements, but is silent on the methods to be applied to monitor and measure product characteristics.  The choice of inspection methods is left to the organization. 
Acceptance sampling is one such method.  Since it is not practical to inspect every item in a large batch, acceptance sampling allows you to infer batch quality by examining a random sample from the batch.  Statistically designed acceptance sampling plans, as a method of measuring product conformity, have been around since at least World War II.  Sampling plans like MIL-STD-105, authored by Harold F Dodge and others, have been in use for over 60 years.

Because not all items in the batch are examined, there are risks associated with statistical acceptance sampling.  Two risks are typically calculated:

·         The Acceptable Quality Level (AQL), also known as producer’s risk, is the percent defective that is likely to be accepted 95 % of the time.  There is a 5% chance that product of higher quality than the AQL will be rejected by the sampling plan.

·         The Lot Tolerance Percent Defective (LTPD), also known as consumer’s risk, is the percent defective that is likely to be accepted 10% of the time.  There is a 10% chance product as defective as the LTPD will be accepted by the sampling plan.

Each sampling plan has an associated operating characteristic curve (OC) which describes the probability of lot acceptance as a function of the lot’s percent defective.  The AQL and LTPD represent two points on the OC curve.  As the lot percent defective increases, the probability of accepting the lot based on the sampling plan that the OC curve represents decreases. 
In addition to the risks associated with acceptance sampling plans, there are some practical disadvantages:

·         While acceptance sampling greatly reduces the number of items inspected, other sampling methods such as statistical process control reduce inspection even further and provide process control feedback.

·         When a lot is rejected, we will know why the lot is rejected, but we will not know the root cause of the defect.  We will only know that the product is defective.  There is no control mechanism that will help us control the process the product comes from.

·         Acceptance sampling assumes random sampling, but in most cases the sample is stratified because the product is normally stored in boxes.  As such, it is possible that some product will never have a chance of being sampled and the sample will not be random.

·         Sampling plans based on AQL, LTPD, or AOQL (Average Outgoing Quality Limit) assume that a certain amount of defective material is acceptable.  This sends a message to employees and suppliers that some level of defectiveness is acceptable.  This is not the best message to send if the organization is trying to be a best in class producer.

Sampling plans can be designed by users, or selected from standards such as MIL-STD-105, now obsolete, or ANSI Z1.4 which implements the same plans.  A common pitfall suffered by users not familiar with sampling plan design is to design constant percentage sampling plans.  Avoid constant percentage sampling plans (a fixed percentage of the lot is sampled regardless of lot size).  For small lots, constant percentage sampling plans may not afford enough protection.  For large lots, an excessive amount of inspection will usually result, and the sampling plan will be over critical.
Consider a sampling plan that samples 10% of a lot.  For a 50 piece lot, a 5 piece sample will result in approximately a 1% AQL, but a 46% LTPD (a very weak sampling plan).  For a 5000 piece lot, a 500 piece sample will result in an AQL of .001% and the LTPD will be .46% - a plan unlikely to accept any lot.

While there are better ways to control production processes than acceptance sampling, acceptance sampling can be an effective method for a customer to protect itself from accepting defective purchased product.  Since the customer has no control over the manufacturing process, it is not important for it to understand what process variable caused defective material.  It need only know that the product is defective.  The customer is susceptible to stratified sampling, but accepts this disadvantage in favor of inspecting a small percentage of the entire batch.

For more information see www.rosehillsystems.com

 

Friday, October 26, 2012

Process Control using Shewhart Control Charts


ISO 9001 section 7.5.2 talks about controlling processes.  Some processes are controlled because the quality of the resulting product cannot be determined once the process is complete as 7.5.2 indicates, but there are many other good reasons to perform process control.  Collecting data on a process for the sake of collecting data is of little value.  It is best to collect and analyze process data. 
There are many tools for controlling processes.  The one I’ll talk about today is statistical process control using Shewhart Control Charts.  Walter Shewhart developed control charts around the turn of the last century.  They are tried and true, and I have used them to control a number of processes.

Control charts are based on the theory that the mean of a sample from a normal distribution is normally distributed, with the mean equal to the distribution mean and a standard deviation equal to the distribution standard deviation divided by the square root of the sample size.  In fact, for distributions that are non-normally distributed, the mean tends to be normally distributed.  So the technique is robust.
Shewhart control charts control the process mean by controlling the sample mean.  They control the process standard deviation by controlling the sample range.   Control is applied by calculating control limits for the sample mean and sample range and plotting the sample mean and range on mean (XBAR) and range (R) charts respectively. 

When a mean or range exceeds its control limit, we say that the process has gone out of control.  A data point that exceeds a control limit causes us to stop the process to understand the root cause of the out of control condition, or, more likely we make a process adjustment and note the adjustment on the chart.  For example, it is common for a machine tool to go out of control due to tool wear.  A simple machine adjustment brings the machine tool back into control.
One complaint about Shewhart Control Charts is that they are complicated to set up.  Some also complain that they require the machine operator to stop and make calculations.  In the old days, calculators and computers were not available, and it was more work for the machine operator to calculate the mean and range.  In the digital age though, these complaints are unfounded.  Software to create control charts is easy and inexpensive to come by, and some inspection tools actually do the work of calculating and plotting the control charts.

I put together a simple Excel spreadsheet that will do all the work for you.  You can download it here.  The spreadsheet has some fictitious data placed there so you can see the charts in action.  You can easily overwrite it with actual data.  Instructions for creating a control chart using the spreadsheet can be found here.  Instructions for using the control chart spreadsheet are also provided, and you can download them here.

For questions or help go to www.rosehillsystems.com

Sunday, October 21, 2012

Process Control and the Process FMEA


ISO 9001 section 7.5.2 addresses the control of production processes where the resulting output cannot be verified by subsequent monitoring or measurement.   In these cases, defects only become apparent during the use of the product.  Examples of processes that fall within this section are:
  • Welding
  • Brazing
  • Wave Soldering

There are many others.
Control of processes like these is accomplished by developing a well-defined process, validating that the process is effective, and controlling process variables using techniques such as statistical process control.

One tool for validating that the process is effective is the process FMEA (pFMEA).   Process FMEAs are interesting because they have wide applicability to a broad range of processes beyond those covered by 7.5.2.
FMEA stands for Failure Modes and Effects Analysis.  The technique has been around for a long time, having been first developed by the US Military (MIL-P-1629).  Many industries, such as automotive and aerospace have embraced the FMEA approach to both design and process validation.

In performing a process FMEA, the various steps in the process are presented in a spreadsheet.  Each process step has some likely failure mode(s).  Each failure mode has one or more root cause(s). 
For each root cause there is some effect on the product.  This is known as a failure effect.  To each failure effect is assigned a value for Severity (1-10).  The root causes of the failure effect are assigned frequency of occurrence (1-10), and a likelihood of detection (10-1). These three values are multiplied together to come up with a single Risk Priority Number (RPN).

The RPN is used to prioritize actions to improve the process.  As action is taken and process steps are modified, the RPN of the modified process is calculated to show the relative improvement.
There are 10 steps to conducting a pFMEA:
  1. Review the process.  Create a process flow chart.  Liest each process step in a pFMEA spreadsheet.
  2. Brainstorm the potential failure modes of each process step.
  3. List the potential failure effects of each failure mode.
  4. To each failure effect assign Severity (S) rankings (1 means not very severe, 10 means very severe).  Record the highest value among the failure effects identified as the severity ranking for the process step.
  5. Identify the potential root causes of each failure mode.  To each root cause assign Occurence rankings (1 means occurence s are rare, 10 means the root cause occurs frequently).  When there is more than one root cause, reaord the highest value among the root causes.
  6. To each root cause assign a Detection (D) ranking (10 means the root cause is unlikely to be dteected, 1 means it is very likely to be detected).  When there is more than one root cause, record the highest value among the root causes.
  7. Calculate the RPN = S x O x D
  8. Develop an action plan to improve the process, prioritizing on the highest RPNs.
  9. Take the actions in the plan.
  10. Recalculate the resulting RPNs after the actions are taken.
The FMEA method is not perfect.   The values assigned for Severity, Occurrence and Detection are somewhat arbitrary.  Moreover the values assigned are ordinal numbers or rankings, meaning a number assigned to a level.  They could as easily represent descriptions such as very low, low, medium, etc.  A higher value for a factor is more important than a lower value. 

Multiplication of ordinal numbers is not defined (We can’t come up with a numeric value for ”Low” x “High”).  A value of “4” is not necessarily four times as important as “1”.  The value “4” is just more important than “1”.  Still, the RPN has value, and when used properly the FMEA can direct a team towards process improvements.   In addition, the completed pFMEA provides evidence of how the process was developed.
A spreadsheet that can be used to perform a pFMEA can be downloaded here.  It is based on the process FMEA promoted by the Automotive Information Action Group (AIAG).  An example of a simple FMEA can be found here.   
For questions or assistance with FMEAs go to www.rosehillsystems.com


Friday, October 12, 2012

Customer Satisfaction

ISO 9001 section 8.2.1 states:
"As one of the measurements of the performance of the quality management system, the organization shall monitor information relating to customer perception as to whether the organization has met customer requirements.  The mehtods for obtaining and using this information shall be determined."




Measuring customer satisfaction means understanding what your customers think.  There are many ways to glean this information including:
  • Customer data such as quality and on time delivery reports
  • Customer compliments or complaints
  • Warranty claims
  • Customer satisfaction surveys
The problem with the first method is that most customers don’t provide them, so you’ll only hear from a few customers and at most monthly.  It’s hard to generalize from just a few customer reports.

Customer compliments are rarer still.  It’s more common to hear from a customer when something goes wrong than when you’ve done something right.  Complaints tell what’s going wrong, but do not reflect the good the organization is doing.
Warranty claims are a good way to tell what goes wrong and how much it’s costing.   With this type of data, preventive actions can be focused and feedback on the effectiveness of actions taken will show up in a short time.

Perhaps the best way to monitor customer satisfaction is to ask your customers what they think.  Toward this end, customer satisfaction surveys are a preferred method of listening to customers.  There are many ways to implement these:
  • Bingo cards - A bingo card is a small post card on which you ask a few questions and allow the customer to rate each question on a scale like 1 – 5. The other side has your address.They are typically placed in packaging are perhaps the least effective survey method. Few customers complete and return them.The card usually goes to the wrong department.A receiving department will probably just throw them out. It’s unlikely that they will get to the end user, and when they do, the end user is unlikely to return them. I tried these for several years and got less than a 1% return.
  •  On line surveys from web sites like SurveyMonkey.com can be helpful, but again, the customer must be motivated to go to the site and complete the survey. Some companies run contests and award prizes as an enticement. Some retailers even offer discounts on future purchases for completing the survey. They get the data they want, and possibly produce another sale.    
  • Salesmen’s feedback – One approach is to require the sales force to contact their customers periodically and ask a few well designed questions. The salesman completes a survey form and turns it in for analysis. This can be a good source of data, but the customer will be reluctant to indicate that the salesman is not meeting their expectations.
  • The best method I’ve seen is the telemarketing survey. Telemarketers, properly trained, can get to the end user, ask a short list of well-designed questions, and get good feedback which can be analyzed and studied. At the same time, the telemarketer will probe the customer for other potential business. While costly, a well designed and implemented telemarketing survey will reward the company with excellent data, and additional sales that may exceed the cost of the survey.

Whatever method you choose, keep in mind that you should be able to analyze  the data and draw conclusions.  For help with this topic go to www.rosehillsystems.com
 




        





 

Monday, October 1, 2012

Analysis of Data


ISO 9001 requires organizations to analyze data to demonstrate the suitability and effectiveness of the QMS, and to indicate where improvements can be made.  There are many sources of data to analyze, and the organization is at liberty to decide what data to study.
Typical data analysis might include these types of data:
  • Outputs from manufacturing processes, such as inspection results, warranty claims, etc.
  • Outputs from the corrective action process
  • Business process data such as on time delivery, customer satisfaction surveys, etc.
  • Vendor performance data such as on time delivery and quality performance
Data analysis can be complex, requiring sophisticated computer programs, or can be quite simple.  Pareto analysis, which separates the critical few from the trivial many, is a simple but powerful technique for determining where to focus improvement efforts.  This simple technique is best shown in a bar chart.  I like it because the results are clear and easily understood by senior managers. 

Information from statistical process control charts such as Shewhart control charts and many variants can be a powerful tool for pointing out processes in need of improvement, and for bringing manufacturing processes into statistical control.  It is not difficult to create spreadsheets that perform these analyses.

Trend charts can indicate those processes which are moving in an unwanted direction.  For example, charting warranty claims monthly can be an indicator that quality of product in the field is deteriorating.
More complicated analytical techniques such as analysis of variance, regression analysis, and designed experiments are useful for understanding the effect of process variables on process outputs.  These analyses can sometimes be done in a spreadsheet, but most often, more sophisticated software is employed.   They require a trained statistical analyst.  Most often, they are applied when troubleshooting process problems.

Organizations should identify those measurements that are important indicators of QMS performance.  Typically, data that is in alignment with the organizations quality objectives will be measured against established goals. 
The output of the data analysis processes can become the input to the preventive action and management review processes.  Using measurement data in this way keeps the organization in line with its objectives and allows it to adjust the QMS as necessary to meet the objectives that have been set.  When selecting measurements, and measurement methods, keep in mind the organization’s established objectives and the audience that will view the results. 

For more information or help go to www.rosehillsystems.com


Thursday, September 20, 2012

Quality Costs


In 1980, I bought a 1980 Pontiac Phoenix.  It was the worst car I ever owned. 
In those days I had a young family, and did minor auto maintenance such as oil changes myself to save money.   But I never changed the oil on this vehicle.  It seemed that every time the car was due for an oil change, it was at the dealer for some sort of repair, so I’d just have the dealer change the oil.
I was so disappointed with the vehicle, that I swore I’d never buy another GM car.  That was 32 years ago, and I’ve kept my promise.   My next car was a Japanese car.  I liked it so much I’ve been buying them almost exclusively ever since.  Can any company afford customers like me?
 Many believe that the cost of a field failure is the processing cost of the repair.  Genichi Taguchi, a well-known Japanese statistician and engineer, once theorized that the cost of a field failure is ten times the cost of the product.  If he is right, companies should spend most of its quality budget on prevention.
Some American managers believe that producing a quality product is too expensive.  I argue that producing a quality product reduces cost.  For a real life example, click here.  The problem is that most companies don’t really know how to measure quality cost. 

In many companies the major component of quality cost is appraisal (inspection).  Management knows what that cost is because it’s easy to measure.  They know how many inspectors there are and the associated overhead. 

There are other costs associated with quality though.   In general there are four areas of quality cost to consider:
  • Prevention
  • Appraisal (Inspection)
  • Internal Failures (scrap & rework)
  • External Failures (warranty claims, recalls, customer attitude)
In fact, all but the last cost are relatively easy to measure.  External failure cost or warranty cost is more elusive.  We can measure the cost of the return process – shipping cost, evaluation cost, and repair cost, but we can’t measure the customer’s attitude towards the failure.   Will he purchase the product again, or will he buy from someone else?  Will he share his disappointment with friends and colleagues?  I’ve shared the story above with hundreds of people.  Did any of them select a competitor’s automobile as a result?   Who knows?  Can any manufacturer afford to try to find out?

When considering where to spend a limited quality budget, invest in measurement and prevention.  Measurement indicates the problem areas.  Prevention works in the problem areas to reduce or eliminate them.  As the problems diminish, the costs of appraisal, internal and external failures go down.  The result: higher quality and lower cost.

For more information go to www.rosehillsystems.com

Wednesday, September 12, 2012

Identification and Traceability


ISO 9001 section 7.5.3 addresses identification and traceability of product.  Identification is normally performed by assigning a part number.  Purchased components normally contain a part number from the supplier.  When this is not the case, one should be assigned to the parts or to them upon receipt.
During production, a product that goes through multiple process steps must be identified as to which process steps it has gone through.  This is often accomplished by attaching a traveler document.  A traveler will indicate which process steps have been accomplished.  This is critical when the process step does not change the appearance of the product like passivation, cleaning, inspection and annealing.   Another way to do this is by changing the part number as the product goes through different process steps.

Position can be used as an indicator of production or inspection status.  For example, purchased product is not moved to inventory until inspection has occurred.  Any product not in inventory is considered uninspected.  All products in inventory are considered inspected.  Once removed from inventory, the product cannot be returned to inventory until it has been inspected.
If a product is removed from inventory, processed and returned to inventory, its part number should change when it is returned to inventory.  For example, an item that is plated and returned to inventory awaiting additional processing should have a different part number after plating.

Some parts cannot be marked with a part number.  In this case, the outer packaging should identify the part number of the item, and the item should be left in this packaging until consumed.  In cases where this is not possible, such as items that go into a clean room, the product should be placed in some acceptable tote container, and the container should be marked with the part number.
Test status must also be maintained in all stages of production.  Again, a traveler can indicate inspection status, or an inspection report can be attached to the product.  Also inspection steps that release only inspected product to the next process can be an indicator of inspection status, but is a less secure method.

While identification relates to part number or status, traceability relates to specific parts or production batches.  Traceability is required in some industries.  Lot control is easy to implement and should be considered by most organizations.  Lots can be controlled by marking them by production date.  In many cases, traceability is lost when the packaging is discarded.  In these cases, shipping paperwork should record which production batch (es) were shipped in each shipment.
Some see traceability as unnecessary extra work, but an ounce of prevention is worth a pound of cure.  Consider a product defect that gets into the field.  Knowing the production date where the defect started provides a method of creating a containment plan.  Knowing where that product was shipped, permits a positive recall that assures that only the potentially defective product is recalled.

In one company, we maintained serial number control of finished product and recorded lot numbers of each component on our inventory pick tickets as components went into assembly.  We had received a substandard batch of 14 bearings that started failing in the field.  We were able to recall a select group of 20 serial numbers (there were two lots of bearings in the production batch) for re-inspection and bearing replacement where needed.  Only a few customers needed notification, minimizing our exposure.  We were also able to identify the supplier and charge back the supplier for the defects.
Traceability is important when multiple suppliers supply the same product.  It can be a powerful tool for defect reduction and quality improvement.  Use it wherever possible.

For more information go to www.rosehillsystems.com

Friday, September 7, 2012

Achieving Quality


It’s important to understand what quality is and how to achieve it.  The definitions below will not be found in ISO 9001, but they are important to understand. 
Many companies have trouble with quality.  These companies tend to have inconsistent quality or ineffective quality systems.  One reason for this is that they do not have a clear understanding of what quality is or how to get it.  There are four absolutes of quality:

·         Definition

·         System for causing quality

·         Performance standard

·         Measurement system
To keep it simple, quality means conformance to requirements.  If you conform to requirements you do quality work, and if you don’t conform, you don’t do quality work.  There are no degrees of quality.  You either meet the requirements or you do not.  Similarly, there are no degrees of defects.  A product or service is either defective or not defective (it either meets requirements or it doesn’t).
To cause quality, companies implement inspection systems.  The problem is that quality cannot be inspected into the product.  This is not to say that inspection is unimportant, but to say that inspection need only be performed for proof of performance, or auditing.   In fact, the only way to cause quality is to design and build it into the product.  The system for causing quality then is defect prevention.

I once worked for a company that used sampling plans for critical, major and minor defects.  Respectively the acceptable quality levels (AQL) were 1%, 2.5% and 4% respectively.  If the products were running at these levels then, the company was shipping 7.5% defective product.  Performance standards like these make a statement:  Some defects are OK.  They send a message to employees that defects are allowed.
In order to produce a quality product, the only performance standard that will be successful is zero defects.  This doesn’t mean that nobody can make a mistake. Mistakes will happen.  What it does mean though is that when mistakes do happen, we work to understand the root causes, and take action to correct and eliminate them.  This sends a different message.  The message is that no defects are acceptable.  Consider the airline industry.  How many deaths from plane crashes are acceptable?

Any good company tries to measure itself to see how it is doing against goals.  It will measure sales, cost of sales, on time delivery, etc.  The measurement system for quality should be the cost of quality.  This means what it costs to do things wrong.  Some call this the price of non-conformance.  By focusing on this cost and driving to eliminate it, cost will go down as quality goes up.  When costs go down, profits increase.
For more information go to www.rosehillsystems.com.
 

Tuesday, September 4, 2012

Organization


ISO 9001 section 5.5.1 states:
"Top management shall ensure that responsibilities and authorities are defined and communicated within the organization." 
To meet this requirement, it is common for the quality manual to include an organization chart, or reference a documented chart.  I like to include the organization chart in the manual, with titles, but no names.  There are a couple of reasons for this:

·         Organizations change over time, and invariably the organization chart changes as new players are added or reporting changes.  If the manual references an organization chart, that chart must be kept up to date, and must be a controlled document.  It's not common for SMBs to manage a controlled organization chart, and many smaller companies don't have one at all.

·         If the manual has a detailed organization chart, the manual must be revised.  In an organization with lots of personnel changes, this can be overbearing.

Keeping a simple, general chart in the manual is a good compromise.  A chart like the one below usually passes muster with the external auditor, and rarely changes:
The old saw prevails - keep it simple.

Sunday, August 26, 2012

Conducting Internal Audits


Internal audits are a requirement of ISO 9001.   They are a critical component of any quality management system (QMS).  They let management know whether or not the QMS is compliant with ISO 9001, and will indicate any significant non-conformances to the QMS or the standard.
There should be an audit schedule.  The QMS must be in compliance with the schedule.  The external auditor will review random audits for completeness and for the quality of the audit performed.  A typical audit schedule might look like:

Process
Audit Frequency
Audit Month
Purchasing
annual
May
Design
annual
June

 An internal audit is compliant if it has a list of the questions asked and whether or not the QMS was in compliance with the question.  However, meeting these basic requirements does not necessarily mean that a quality audit was performed.
When creating an audit checklist, first study the process or document.  Form questions designed to understand whether the process is in compliance.  When forming the questions, consider requirements that go beyond the basic process requirements of the process.  For example when auditing a manufacturing process, it is natural to ask questions that determine whether or not the process is being followed.  In addition though, other questions such as ‘Are the technicians trained to perform these tasks?’ or ‘Are production records stored in the supervisors office?’ addresses other questions related to ISO 9001 that go beyond the basic process steps.

Collect objective evidence that the response is or is not in compliance with the process.  Since audits will be reviewed later, it’s important to show how the answer to an audit question was achieved.   This is especially important if the process is not in compliance with a question because a corrective action is required when noncompliance is uncovered.  The process owner will want to see the objective evidence to know how noncompliance was determined and to respond to the CA.
Objective evidence may take many forms.  An employee interview indicating who was spoken to and what questions were asked is one form of evidence.  Copies of records, or the record type examined and the record’s document number is another.  The number of records examined need not be large.  Five records of a record type are enough in most cases.  More records might be required if a significant noncompliance is uncovered.  In this case the auditor should be able to show whether the noncompliance is an isolated incident or a systemic problem.

In larger structured companies it is important to schedule audits with the audited organization in advance.  I like to audit without providing advanced notice, but this is not always possible.
Some people get uncomfortable when an audit is being conducted.  It is important to make those
audited comfortable with the audit.  I like to start an interview by explaining that I’m conducting a process audit, what process I’m auditing and that the audit is just a routine audit.  I point out that there are no wrong answers to the questions I’m going to ask.
Finally, keep in mind that the output of an audit is a record, and as such must meet the requirement of 4.2.4 Records.  I bring this up only to remind readers that audits must be legible and retrievable.

Friday, August 24, 2012

Design Verification and Validation


I’ve often been asked what the difference is between design verification and validation.  The terms design verification and design validations seem to mean the same thing, and in some standards the terms verification and validation are used interchangeably.  In ISO 9001, they are used to mean different things.
When and engineer starts a design, he starts with design inputs – the requirements he’s designing to.  When the design is complete, there are design outputs: specifications, drawings, etc. that describe the design.  Design verification then is the step of verifying that all the design input requirements have been addressed in the design.

A technique I like to use to do design verification is a compliance matrix.  Each row of the matrix is an input requirement, and each column of the matrix is a design output specification section or paragraph.  In a cell where the input was addressed in a particular specification I place an ‘X’ to indicate that the input requirement is addressed there.
To imagine the compliance matrix, consider an Excel spreadsheet where the requirements are the numbered rows, and the design output that addresses the requirement is one of the lettered columns.  In most cases one input requirement is addressed in one place in the output specifications, but this is not necessarily the case.   I’ve used this technique when assisting customers in the design of a quality management system based on ISO 9001.

Design validation is the process of determining whether or not the design functions to the input specifications.  This means manufacturing the product to the specifications and testing it against the input and output requirements to see if it works as intended.  Prototype testing falls into this category.  A test plan is created based on the input and design requirements (there might be additional requirements required by the design that were not included by the customer), and the product is tested to determine conformance.

 

Wednesday, August 22, 2012

Corrective Action

Corrective action is a critical component of ISO 9000.  The standard specifically requires a documented procedure that describes the corrective action process.

Quality can be free, but it can also be very expensive.  Consider the following example.
A company I was working with was having a problem with a supplier part.  A pneumatic valve appeared to fail at the customer’s assembly plant.  We couldn’t tell if the product was defective from the supplier, we were making it defective, or if the customer was handling the product improperly.  But it was clear that the product coming back from the end customer was defective.  The valve just didn’t work.

Not knowing the source of the problem, we began adding fixes:
             100% inspection of the incoming valves
             Added a test fixture to test the valves in a final assembly
             Reduced the voltage to the valve to weed out any borderline valves
             A neophyte decided that more is better so the valves were tested 10 times instead of once (as if you can inspect quality into the product)

Still the customer reported defects.  We proposed that the customer test in a piece of test equipment like ours so we could determine if the product was acceptable on arrival, and before it was installed into the customer’s product.  The customer balked.
Finally, a year after the problem initially arose, the customer realized that the wattage of the solenoid should be a quarter watt, but they had specified a 1 watt coil.  Low and behold – problem solved.

If you were to watch the manufacture of the subassembly today you will see an operator testing the valve 10 times.
Depending on who you talk to, there are 4 or 5 or 8 steps to corrective.  Here are my five:
  1. Problem Statement
    1. State the requirement
    2. State the non-conformance
    3. State the objective evidence of the non-conformance
  2. Containment Plan
    1. When did the problem start
    2. What are we doing to control the bleeding while we are looking for a solution (short term fix)
  3. Root cause analysis
    1. There are a myriad of techniques, such as fishbone analysis, control system model, etc.
    2. Expect there to be more than one root cause.
  4. Corrective Action Plan
    1. What will be done to eliminate the root causes?
    2. When will it be implemented?
  5. Follow Up
    1. Was the implemented corrective action effective (did it eliminate the root causes)?
    2. Was the short term fix removed?
Corrective action is not rocket science, but root cause analysis can be difficult.  In many cases we see that once the fix has eliminated the pain, it tends to stay in place, and no root cause analysis is performed, or if it is performed, the short term fix is not removed.  Adding inspection and testing which would otherwise not be necessary increases quality cost (and product cost) while not eliminating the source(s) of the problem.

For more information go to www.rosehillsystems.com

Friday, August 17, 2012

Management Review


One of the requirements of ISO 9001 is 5.6 Management Review.  The idea is that periodically, management reviews the effectiveness of the quality management system (QMS) and determines what changes are necessary to improve it.  It is the responsibility of the Management Representative to prepare these reviews.
ISO 9001 has very specific requirements for the inputs and outputs of the management review process.  The required inputs are:
·         Results of audits
·         Customer feedback
·         Process performance and product conformity
·         Status of preventive and corrective actions
·         Follow-up from previous management reviews
·         Changes that could affect the QMS
·         Recommendations for improvement
To these, I like to add data analysis results.  It’s not required, but it makes a lot of sense.  The standard expects data analysis from various processes to be used as inputs to the preventive action process.  Why not share these analyses with management? This allows them to be involved in selecting those actions to work on.  It also documents the data analysis, which is evidence that we are complying with section 8.4 Analysis of data.
An example of data analysis is on time delivery to customers.  We might study late deliveries by product, and do a simple Pareto analysis to identify the worst offenders.  A recommendation for improvement might be to study the top five late delivered products to identify the root causes.
One of the outputs of the management review should be action items:
·         What are we going to do?
·         Who’s responsible for getting it done?
·         When will it be done?
These action items will become inputs to the next management review.
Attendance
Attendance should include all senior management, all middle managers, and any other employees on the implementation team.  Senior management must be involved and aware; middle managers are the ones who will agree to get things done.  If it is important enough to be ISO 9001 certified it’s important enough for these people to attend.
Frequency of Meetings
The standard is moot on frequency except to say that these reviews should be at ‘planned intervals.’  The external auditor will frown on reviews held less frequently than annually.  Some companies have these meetings annually.  In my last company we held them quarterly. 
There’s a lot of work in putting on an annual management review.  The meetings can take a couple of hours or more.  It’s hard to schedule required attendees into a long meeting.  It’s better to spread the work out.
Personally I don’t believe in separate QMS reviews.  Rather, I believe that management should meet at least monthly to review the entire business, and one component of this review should be a review of the QMS.  Review some parts of the QMS every month, and some less frequently.
For example, consider reviewing product quality, on time delivery to customers, and action items monthly, audits and preventive actions quarterly, customer feedback and external audit results annually, etc.  This approach assures that:
·         all requirements in the review process are met,
·         the work is spread out over time and there is less preparation for any one meeting,
·         the QMS is kept in focus by middle and senior management because they hear about it every month,
·         the review of the QMS is integrated into the business instead of being a separate activity
Management Review is one of the key components of ISO 9000.  Periodic review of the QMS is important.  After all, installing and supporting a QMS costs money.  It's important for management to assure that the QMS is effective.  What better way to assure that we're not wasting our money than to take a look at what we're getting for what we're spending.

For more information on ISO 9001 implementation see www.rosehillsystems.com