Management system guidance

7.0 Support

ISO Navigator Pro™ is a free tool that provides practical, expert guidance for businesses wishing to interpret and better implement the requirements of ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018.

Our range of templates cover the requirements of ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018, and offer an easy way to implement your next management system.

7.4.2 Internal Communication

Internally, your organization needs to communicate information relevant to the management system amongst all levels and functions, including information on any change, as appropriate, and have to establish a mechanism to enable all persons performing work under the organization’s control to contribute to continual improvement.

All well as briefing employees during introductory presentations, try using a combination of other methods to promote awareness, such as posters placed on notice boards and leaflets with pay-slips, etc.

Use training sessions to inform employees of the plan, how they will be expected to contribute. Issues pertaining to the management system that could be communicated include:

  1. Day-to-day operations and general awareness;
  2. Environmental and health and safety regulatory reporting;
  3. Information on achieving management system objectives and targets;
  4. Incidents, accidents and near misses;
  5. Environmental aspects and health and safety hazards.

Effective communication media:

  1. Verbal (i.e., meetings, briefing, etc.);
  2. Formal memorandums;
  3. Newsletters;
  4. Posters or bulletin boards;
  5. Suggestion box.

Auditors will wish to determine if the policies meet the intent and are understood, by interviewing personnel at all levels. Although the exact content of the policies does not need to be recited by interviewees, the awareness of the policies and how their job affects the company objectives should be determined.

This does not require your employees to memorize the policies but it does mean they should be aware of it, know where it may be found and be able to paraphrase, or give an interpretation as it applies to them.

If the personnel interviewed do not know what their measurable objectives are and/or do not know what the organizational objectives are that they have a direct effect upon, the auditor would be further directed to evaluate top management’s communication of the policies and objectives.

Inferred awareness through knowledge of procedures is not considered sufficient; otherwise why have the requirement in the first place? A quick and convenient way to promote and communicate the policy might be to create a shortened version of main policy; try condensing it to five key words or even a couple of short sentences. This can be posted on bulletin boards in each department.

You could even add it to the reverse side of staff security passes or ID badges. If an auditor asks an employee whether they are aware of the policy; they can point to the bulletin board, or point to it on their badge. The employee can further elaborate to the auditor, what the policy means to them and how it influences their work.

Your organization should encourage the two-way flow of information between your workforce and management. Input from employees is considered vital in the development of quality, health, safety and environment policies and procedures. Employee’s input on concerns relating to health and safety and any feedback on how the health and safety management system can be improved are equally as important.

It is also vital that your employees are kept informed of matters relating to their health, safety and welfare via Health and Safety Representatives, Supervisors and Managers. Communication and consultation should take place both formally and informally. Health and safety representatives can be appointed to assist your company with the process.

Health and safety representatives will attend health and safety committee meetings where as part of their duties they will be encouraged to raise health & safety matters on behalf of the employees they represent and also feedback on information and practices relating to health and safety of employees. Inputs to quality, health, safety and environment consultation might include the following:

  1. Identification of hazard and risks;
  2. Management system objectives and targets;
  3. Incident investigations;
  4. Health and safety action plans;
  5. Operational changes affecting health, safety and welfare;
  6. Introduction of new plant and equipment;
  7. Contractors and visitors to site;
  8. Information request from interested parties.

Your organization should also communicate health and safety requirements to its visitors and contractors that attending your sites. Visitors to each site should receive health and safety information relating to the site rules and procedures during signing in. In addition, contractors should be required to go through a contractor’s induction briefing.

More information on PDCA

Planning

Context

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
4.1 Organizational Context 4.1 Organizational Context 4.1 Organizational Context
4.2 Relevant Interested Parties 4.2 Relevant Interested Parties 4.2 Relevant Interested Parties
4.3 Management System Scope 4.3 Management System Scope 4.3 Management System Scope
4.4 QMS Processes 4.4 EMS Processes 4.4 OH&S Management System

Planning

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
5.1 Leadership & Commitment 5.1 Leadership & Commitment 5.1 Leadership & Commitment
5.2 Quality Policy 5.2 Environmental Policy 5.2 OH&S Policy
5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities
    5.4 Consultation & Participation

Support

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
6.1 Address Risks & Opportunities 6.1.1 Address Risks & Opportunities 6.1.1 Address Risks & Opportunities
6.2.1 Quality Objectives 6.1.2 Environmental Aspects 6.1.2 Hazard Identifcation
6.2.2 Planning to Achieve Objectives 6.1.3 Compliance Obligations 6.1.3 Legal & Other Requirements
6.3 Planning for Change 6.1.4 Planning Action 6.1.4 Planning Action
  6.2.1 Environmental Objectives 6.2.1 OH&S Objectives
  6.2.2 Planning to Achieve Objectives 6.2.2 Planning to Achieve Objectives
 

Doing

Support

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
7.1 Resources 7.1 Resources 7.1 Resources
7.2 Competence 7.2 Competence 7.2 Competence
7.3 Awareness 7.3 Awareness 7.3 Awareness
7.4 Communcation 7.4.1 Communcation - General 7.4.1 Communcation - General
7.5 Documented Information 7.4.2 Internal Communcation 7.4.2 Internal Communcation
  7.4.3 External Communcation 7.4.3 External Communcation
  7.5 Documented Information 7.5 Documented Information

Operations

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
8.1 Operational Planning & Control 8.1 Operational Planning & Control 8.1.1 General
8.2 Customer Requirements 8.2 Emergency Preparedness 8.1.2 Eliminating Hazards
8.3 Design & Development   8.1.3 Management of Change
8.4 Purchasing   8.1.4 Outsourcing
8.5 Product & Service Provision   8.2 Emergency Preparedness
8.6 Release of Products & Services    
8.7 Nonconforming Outputs    
 

Checking

Monitoring, measurement, analysis and evaluation

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
9.1 Monitoring & Measurement 9.1.1 Performance Evaluation 9.1.1 Performance Evaluation
9.2 Internal Audit 9.1.2 Evaluation of Compliance 9.1.2 Evaluation of Compliance
9.3 Management Review 9.2 Internal Audit 9.2 Internal Audit
  9.3 Management Review 9.3 Management Review
 

Acting

Improvement

ISO 9001:2015
ISO 14001:2015
ISO 45001:2018
10.1 Improvement - General 10.1 Improvement - General 10.1 Improvement - General
10.2 Nonconformity & Corrective Action 10.2 Nonconformity & Corrective Action 10.2 Incident, Nonconformity & Corrective Action
10.3 Continual Improvement 10.3 Continual Improvement 10.3 Continual Improvement
 

Want to know more?

SSL certification

A certificate guarantees the information your internet browser is receiving now originates from the expected domain - https://www.iso9001help.co.uk. It guarantees that when you make a purchase, sensitive data is encrypted and sent to the right place, and not to a malicious third-party.

Free PDCA guidance

ISO Navigator™ is our FREE online training tool that shows you how to apply the principles of PDCA to your operations. We also offer many helpful templates that get you on the road to documenting your management system, please visit the download page.