ISO 9001 : Control Of Change

In this series of blog posts, I will be taking a look at the main sections of ISO 9001, what they are, why they are important ...

This 101 is looking into Section 8.5.6 Control of changes. Why is this important to my business? Because things change; customer requirements change; materials change; technology changes; people change.

"You get the idea!"

If we do not have a way to manage these changes then we are in danger of not meeting contractual requirements, missing a new technology opportunity or at very worst, chaos (normally when too many people change at once!)

How do I do this? Well, there are two main types of changes. Planned and unplanned. When planned changes occur you can plan them into your business over a period of time. When unplanned changes occur, you need a framework to deal with them.

Both types of changes can be dealt with by setting up a risk management process. This includes brainstorming your risks to identify them, analyzing how much they are likely to impact you and what you want to do about them. You can either do something about the risk, accept the risk as it is or outsource the risk.

An an example, given the rain we are having here in the UK at the moment, could be the risk of a leaking roof in your office area. This could damage computers, paperwork and cause significant structural damage. To do something about the risk you may have a 'work from home' policy in place or a know where you could hire a temporary office.

You could also accept the risk as you have very little paperwork or computer equipment in the office. Finally, you will no doubt have some insurance to cover your building in the case of structural damage.

How do I manage this? All this can be outlined in a risk register and a business continuity plan that you keep in various safe places so you can refer to them in times of need.

Many of the companies I have worked with have found it useful to have an independent person to work with them to help facilitate the creation of a risk register and business continuity plan.


If you would like to know more about anything I've mentioned in this blog post, do give me a call on 01858 414226 or leave a comment below and let's see how I can help you.