Yearly surveys on the application of ISO Management Systems show a steady worldwide increase in certifications based on ISO 9001 (quality management) and ISO 14001 (environmental management). However, while these surveys do not indicate the size of the organisations that have implemented the standards, experience in Europe shows that a growing number of small to medium-sized enterprises (SMEs) implement multiple Management Systems, though some face difficulties in doing so and need help.
Why do SMEs implement Integrated Management Systems ?
The main reason is that many SMEs are suppliers to large companies that impose quality and environmental requirements on their supply chain. In many cases, these requirements can only be met by implementing a management system and being certified. Also, governments apply quality, environmental and even sustainability criteria in their purchasing and procurement activities. SMEs are therefore forced to implement quality and environmental management systems to stay in business.
What are the difficulties and how can ISO help ?
Although Management Systems are applicable to any organisation, regardless of type and size, it is generally acknowledged that SMEs face specific difficulties when implementing these standards, particularly when implementing multiple standards together. The reasons are manifold and partly outside the influence of ISO and its member bodies, such as limited resources (money, time, people). However, there are also reasons related to the standards themselves where ISO and its member bodies can help make life easier for SMEs.
The first reason is that Management Systems are written in a language that can be quite difficult to understand and may contain elements that suggest the systems are bureaucratic and intended only for large organisations. In response, ISO has published ISO 9001 for Small Businesses. What to do that explains each ISO 9001 requirement in easy-to-read language and provides examples on how SMEs should implement them. Similar publications exist for environmental, food safety and information security management systems.
Until recently the second was that the various ISO systems are based on different models, specify different elements, and state similar requirements in different wording. Now with the introduction of ISO 9001:2015 the 3 main management systems are very much alike, which makes integration much easier. This will certainly assist not only SMEs but all organisations in applying multiple systems to their business processes.
Integrated use of Management Systems
The ISO handbook The integrated use of management system standards addresses both of these standards-related reasons as to why SMEs struggle with the implementation of quality and environmental management. In essence, it clearly shows how the management system elements specified in abstract language are related to an organisation’s daily operational and management processes. It also provides a clear pathway for integrated management system implementation.
The handbook shows how the formal elements of a single management system are related to the processes and managerial activities of a shop employing six people, and how multiple management systems requirements are related to, and support, a medium-sized catering company with a regional scope. In addition to this imaginary example, the book contains many real-life illustrations taken from case studies included in an accompanying CD-ROM. It is well worth buying and reading if you are interested in an Integrated Management System.
Key factors for successful Management System implementation in an SME
There are many factors that influence the success of Management System implementation by an SME – those below are also addressed extensively in the ISO handbook.
1. Stick to your existing management system
Any organisation that stays in business and is able to provide products and services to its customers operates a management system, however lean or informal. This system, in whatever form, should be taken as the basis and starting point for implementing an Management System such as ISO 9001. Implementing ISO 9001 does not mean you “build” a (new) quality management system, but that you evaluate your current management practices against ISO 9001 requirements, and adapt and add where necessary. Therefore, every management system is unique and an organisation should not buy a handbook from the Internet or apply standard procedures provided by a consultant. The risk is that these tools may not fit, will add bureaucracy, will not be seen by employees as adding value - and are only likely to be activated when the annual certification audit is imminent !
The difficulty is to link abstract requirements to real-life processes and management practices. Once an organisation has been able to do this, the extent to which the requirements are already being met – and what must still be done by adapting and not by rebuilding – becomes clear. Informal management practices sometimes need to be formalised (for example, some records should be maintained to demonstrate that things have been done), but in many cases this contributes to the effectiveness and efficiency of the operations, and thus adds value to the organisation.
2. A management system is not identical to documented procedures
A management system is a tool to help achieve organisational objectives. Any measure taken should be consistent with the basic objective of the system : does it help in doing a better job, in being more successful, and in achieving the business plan ? There are many measures that can contribute to this objective, for example raising personnel competence, adopting “foolproof” technical devices, using pictograms, handy forms to check and fill out (which later become records as well), etc. However, you should hesitate before establishing extensive documented procedures, especially in SME situations, because in many cases this does not align with organisational culture and daily practices.
3. Look for the commonalities between different Management Systems
Although worded differently, all Management Systems are based on the same fundamental concepts :
Process management and control : ensure that processes deliver the intended results and that applicable requirements are complied with
Plan-Do-Check-Act approach to management and process control : establish objectives, define the processes needed, monitor progress and compliance, take action where necessary, and consider improvement opportunities
Risk management : identify the risks that provide threats and opportunities, and implement controls to minimise negative effects on performance and maximise potential benefit.
Quality management carries the risk that customers are not satisfied and that quality-related (legal and customer) requirements are not met. The risk in environmental management is that the environmental performance does not meet legal requirements, stakeholder expectations and/or the organization’s own policy objectives.
Management Systems specify very similar elements based on these concepts that should be part of the organisation’s overall management system. Considering the requirements of the standards with these basic concepts in mind will assist SMEs in interpreting and applying them in an integrated way.
4. Keep it simple
Less is better and small is beautiful in many situations where management systems are implemented – especially for SMEs. By keeping the first three key factors in mind, SMEs should be able to adapt the system to suit the size and complexity of the organisation. It is possible to conform to the requirements of ISO 9001 and ISO 14001 without extensive documentation.
Flowcharts and forms are in many cases more effective than documented procedures, and records often provide more added value than process descriptions. Specifying what to do is preferable to describing how to do it, and can be done more concisely. It is important that the design of controls be in line with the culture of the organisation and the level of competence of the personnel.
Not just for large organisations
Management Systems are not just tools for large organizations. Given the trend towards outsourcing activities and the growing importance of cooperation in the value chain, effective Management System implementation by SMEs is of key importance in facilitating trade and promoting sustainable development.
ISO Management Systems can be implemented in an integrated way by SMEs, and can add value to their businesses as long as some key factors for success are taken into account. ISO has already published useful SME guidance and will develop its future standards in a way that facilitates the implementation and integration of multiple standards.
For more information visit our website - www.csa-consultants.me