CHAPTER 8: DOCUMENTATION AND RECORDS

One of the key reasons for designing and implementing a management system is to enable the organisation to move beyond what is known, in the terms of the capability maturity model, as an ‘ad hoc’ organisation. An ad hoc organisation is one that has ‘no fixed processes, or procedures, results depend very much on individual performance, and a lot of people’s time is spent on “firefighting”, fixing bugs in software, and resolving incidents’.10

ISO9001:2000 is a well-known and widely implemented quality assurance or business process management system. If the organisation does not already have an existing ISO9001 certified management system and needs guidance on the documentation, document control and records issues ...

Get ISO27001 / ISO27002 A Pocket Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.