10 Rules for successful
ISO 9000 Registration

by C.W. Russ Russo



Working toward ISO 9000 registration can feel like wading through a morass. Participants can feel like the fellow up to his posterior in alligators in a swamp. Through my experience of helping several companies transform their quality assurance processes to meet ISO 9000 requirements, I have learned the following 10 simple tenets for successful registration.

1 - Forget the ISO 9000 standard.

Forget the standard and concentrate on your internal processes and your customers' needs. Your quality assurance system is supposed to satisfy your organization's needs. Think about what you need to do to effectively and efficiently produce your product or service and meet your customers' needs. Each of the 20 sections of the standard is designed to challenge your thinking about how you conduct your business and how you satisfy your customers.

Some people will do the most amazing things to themselves in the name of ISO 9000. When someone tells me they must do something because ISO 9000 requires it, I know they are focused on the standard rather than on their own processes and customers. While there are certain requirements in the standard, many of the challenging tasks people create for themselves have no justification in reality. If something doesn't pass the crucial "process/customer need" test, don't do it.

2 - Know the standard.

The standard is short-less than 10 pages. The problem for many organizations is that the standard is generic and doesn't provide specific implementation guidelines. No one external to your company can tell you the "right way" to implement ISO 9000 because it's about your product and your customers. The answers must come from people who own the processes. The more you work with the standard and think about applying it to your own situation, the more you become an expert. One good tactic is to have several people working on an ISO 9000 implementation team to bounce ideas and interpretations off each other.

3 - You are smarter than any auditor.

Yes, auditors are certified. Most have experience in quality control or quality assurance. Few have experience as operations or line personnel. So even if the auditor has worked in your industry, this doesn't mean that he or she has worked in a company the same size as yours or has used the technology you use. Also, there is no guarantee that the auditor has kept current with the industry-specific knowledge.

A subrule here is never take any requirement claim in the standard at face value. Respect the auditors, but do not believe them blindly. While auditors know the standard, they don't know your system, your specific processes or your customers. It is always useful to ask auditors to show you the specific sentence in the standard being referred to and to explain the thinking behind their interpretation.

Another important subrule revolves around the fact that auditors are only at your company for a few days and don't have an opportunity to thoroughly learn your business in detail. One of the best things you can do for yourself and your company is to make sure your employees understand what ISO 9000 is all about and how their jobs support the company's quality policy. This requires a planned and concerted effort to get the word out and run a good communications program as the registration project develops.

4 - Keep it simple.

This rule sounds like an old saw, but it is true. There is specific guidance in both the standard and the guidelines that encourages you to achieve simplicity. You should attempt to develop and implement the simplest quality assurance system that works well. For example, always try to work with the lowest level of documentation possible. If a work instruction will serve, do not write a procedure. Use flowcharts, pictures and diagrams instead of words in both procedures and work instructions.

Also, use work instructions as training records. You don't need to develop separate training documentation. Simply have the supervisor observe an employee perform the work instruction, sign off with a standard statement at the bottom of the form, and file the work instruction as the employee's training record.

Good organizational communication is simple and focused. Write simple sentences, aimed at the eighth-grade reading level-even if you have a company full of Ph.D.s. This raises the likelihood that people will read and act on the material.

Use standard forms whenever possible. For example, develop a fill-in-the-blank form for your internal audit report and assemble relevant documents as attachments. Use the back of internal audit forms as your corrective action form. One major complaint against ISO 9000 is that it is documentation-intensive. That is a fallacy. Smart quality personnel know how to avoid too much detail and minimize paper.

5 - Salvation is in the details.

An alternative way to say this is "plan your work and work your plan." A computer-based project-management software program can be a blessing and will help you identify and track the myriad of tasks and activities that need to be accomplished. Further, it will help you stay on track and on schedule.

Most ISO 9000 transformation projects involve hundreds of steps and tasks. While they are not complex individually, following up on them can be. Most delays in an implementation timetable are due to small breakdowns in schedules. These can snowball until the project goes into crisis overload. Getting control of the details on the front end saves much time and frustration.

6 - Set milestones and enforce them.

Identify milestones that will show participants both how much has been accomplished and what remains to be done. Dividing the project into manageable sections also can reassure participants that the project is achievable. To do this organizing work, use computer project software, distribute GANTT charts showing milestones and publish milestones and tasks in meeting minutes. Make sure to spread the work around and let everyone know that they are an important contributor and that failure to deliver on time lets down everyone on the team. Do quarterly progress updates to management, and don't hesitate to identify missed deadlines. It's not politically wise to identify individuals who aren't performing. It will only take a couple of missed deadlines reports before offenders start taking their responsibilities to the project more seriously.

7 - Get help.

Frequently, the organization's quality manager is selected to be the ISO 9000 management representative. This seems logical because management sees ISO 9000 registration as a quality department issue. This is a false perception. Quality is a line management issue.

To avoid shunting the responsibility to the quality manager, form an ISO 9000 oversight group or executive support group. These "champions," who represent the highest level of functional management, should be responsible for knocking down barriers and encouraging participation. They need to promote and support the ISO 9000 project by ensuring their people contribute as needed. Members of this group should meet at least quarterly and receive brief reports of the project's progress. Some companies put ISO 9000 as an agenda item on the executive steering committee's quarterly agenda.

The second group should be the implementation team. The quality manager might chair this group, but outsiders should do the "committee work." For example, one person should be responsible for running the internal audit program, and a different person should run the corrective and preventive action program. Yet a third individual should be responsible for the documentation development program to satisfy ISO 9000 requirements.

Fill this group out with one or two interested wizards-people enthusiastic about their work. They enjoy being in the forefront of change efforts and manage to get things done. They can come from anywhere within the organization and are a marvelous addition to the registration project. Start searching for wizards in the accounting department and from among mid-level supervision in the operations department.

8 - Keep the project visible.

A closely related issue is the need to promote the project in order to secure resources and help. Use milestone charts and graphs to show progress, report activities in the company newsletter, post progress reports on employee bulletin boards and talk up the project next to the water cooler and as an agenda item in department meetings. Given a choice between a one-hour briefing for a department and several short, 10-minute progress updates in department meetings, go for short updates.

Find ways to keep the project alive and visible so that people see that it is ongoing and an integral part of the organization. Effectively publicizing an ISO 9000 transformation project takes frequent and varying types of small exposures rather than a few big events. The point is to help people adapt to and accept the program as part of their daily lives.

9 - Celebrate small victories.

Find any excuse to party or to help people feel good about their progress and be recognized for their efforts. Sometimes just a kind word or two is sufficient, but you should also try to organize specific celebrations around milestones. They need not be elaborate. A group breakfast for the team takes is easy and inexpensive to organize.

10 - Remember the political issues.

Certainly, ISO 9000 is a wonderful concept. It is reasonable, and everyone should appreciate its value to the organization. But the reality is that we are all creatures of our corporate cultures. Further, we have substantial ego involvement in our work and our vision of our positions in the organization. Two fundamental phenomena underlying these political realities are the need for self-preservation and the territorial imperative. These drives make changes in our roles and responsibilities feel very risky.

Another political reality an implementation team must reckon with is the human tendency to form and voice opinions based on unspoken assumptions and insufficient information. While people are often prepared to act despite a lack of information, not knowing what is expected or the likely outcome feels dangerous. One solution is an active public relations campaign that recognizes these fears and helps people understand how the ISO 9000 transformation will directly affect their jobs. Individual and group feedback to ISO 9000 participants is another powerful way to reduce individuals' uncertainty and discomfort.

11­p;ISO 9000 registration looks great on your résumé.

Every quality expert knows you are supposed to give your customers more than they anticipated. This article was supposed to have 10 rules; however, here is an "extra" for good measure. It is probably the most useful of all.

ISO 9000 is neither a miracle nor a panacea. Organizations experience disheartening and frustrating times during such a large project. But the process clearly works, and the outcomes for organizations are powerful in both external, customer-oriented and internal, employee-oriented ways. This is evident in the number of companies pursuing and obtaining ISO 9000 registration. The total is increasing logarithmically, and it is predicted that at least 100,000 companies in the United States will register or seek registration by the turn of the century. Talented and experienced ISO 9000 management representatives will be in demand. On the darkest days, think about the bright shining spot on your résumé that your experience with ISO 9000 registration represents.

About the author

C.W. Russ Russo is managing partner of The Trainers Workshop, a consulting firm in Lawrence, Kansas, that provides consulting, training and support in quality management, continuous improvement and ISO 9000