Rational Dev

ISO 9001 - Is All That Documentation Worth It?

I worked for a company that implemented ISO 9001 while I was there. One of my projects was even used during the examination and I had to explain to the ISO 9001 rep how I used it.

After going through the ISO 9001 process, how do I feel about it? Personally, I think ISO 9001 is mainly a thing for advertising and provides very little in terms of your process.

During software development, we were forced to create ISO 9001 documentation. Documentation is a good thing, don't get me wrong... but we were making documentation that did not seem relevant and was an overly complex.

The company I worked for didn't really have many projects that used ISO 9001 properly, but the ISO tester let themselves be lead around. I thought the tester should have been delving much deeper into the business, but this was not apparent from where I was sitting. I was surprised to learn that the company passed.

The ISO 9001 documentation we were creating was not made to make our software better... but to ensure that we were meeting ISO 9001 requirements. I feel we could have made a much better documentation system than ISO 9001 that would have led to much less paperwork and led to creation of better software.

ISO 9001 documentation is also tedious for the people who have to make it. This led to developers making jokes about it and being less motivated to perform tasks.

I think ISO 9001 might be good for marketing, but as someone who has seen what is required to be ISO 9001 compliant, I am probably less likely to be impressed with the company. I would rather work with a company that has developed an efficient documentation system and show top quality work and references.

Posted On: January 16, 2007 - 8:13am by Rational
( categories: )

Old ISO vs new ISO 9001

mbabbitt   |   May 7, 2007 - 5:45pm

I think the writer may be refering to the older ISO 9001 requirements as the amount of documentation required has been significantly reduced. Also, the new ISO 9001 is process oriented, not procedural. And it is not based on passing an element (4, 5, 6, 7, 8) checklist.

I just took a class in auditing for ISO 9001 and the emphasis was on understanding an organization's processes and whether customer satisfaction and continual improvement could be demonstrated. Also: except for the 6 required documented procedures (for control of documents and records -- change control -- and for recording reviews of oversight, such as meeting minutes) and documents needed by the organization, there are no longer requirements by ISO for vast amounts of unnecessary documents. If that is a recent experience, perhaps you had a registrar that was not the best. The fact you saw overly complex documentation says it all.

I would advise the writer that in the future he perform more research to validate his understanding of standards such as ISO as they are usually evolving by responding to industry needs. This anecdotal and negative experience could be due to following a discontinued standard, a company's misunderstanding of the present standard, or to a bad registrar or to a combination of each. My own prejudices against ISO have been overcome but commentaries like this one only serves to reinforce outdated stereotypes.

Michael B. Babbitt, MA, CSQE, CISA

User login

Google

Navigation