ISO 9000-3 Digest         Monday, 16 December 1996      Volume 01 : Number 027

In this issue:

	re: HOAXES
	SSQ December Meeting
	how do I unsubscribe
	Re: how do I unsubscribe
	ISO 9000-3
	[none]
	QUESTION: Company self-registration
	Re: QUESTION: Company self-registration 
	Re: QUESTION: Company self-registration
	BOUNCE iso9000-3@quality.org: Non-member submission from [John Deprez ] (fwd)
	Re: QUESTION: Company self-registration 

----------------------------------------------------------------------

From: "Bill Casti, CQA (Moderator)" 
Date: Wed, 27 Nov 1996 16:51:36 -0500 (EST)
Subject: re: HOAXES

NOTE: This message is being posted to all lists at QUALITY.ORG. If you 
belong to more than one list here, you will receive duplicate postings. 
My apologies for that, but there is no simple way to prevent it.

- -----------------------

All,

I have just received a request for approval for a message containing
information about the so-called "Deeyenda" virus. 

The "Deeyenda" virus is a hoax.  It does not exist.  There is no such
thing as virus which can execute simply by being passed in e.mail.  If you
want more info about this and other hoaxes, point your browser at

 	http://www.kumite.com/myths/

There was also an Information Bulletin sent out by the CIAC last week that
is "Recommended Reading". 

  Title: Internet Hoaxes: PKZ300, Irina, Good Times, Deeyenda, Ghost

  URL:   http://ciac.llnl.gov/ciac/bulletins/h-05.shtml

Please be VERY CAREFUL when you send messages such as this, or other
security threats.  Check your sources and make sure what you post is
correct. 

If you RECEIVE any messages purporting to warn you of "email viruses", be
sure to also point those ill-informed individuals to sites such as those
above, so they can get educated, too! 

Regards.
Bill



==============================================================================
        Bill Casti, CQA                 Email: help@quality.org
        Domain Owner                    Pager: +1 800 604 6149
        QUALITY.ORG                       Fax: +1 703 834 8209
- ------------------------------------------------------------------------------
           QUALITY RESOURCES ONLINE at: http://www.quality.org/qc
==============================================================================
                                                                              


------------------------------

From: "Paquin, Sherolyn A." 
Date: Thu, 5 Dec 1996 15:45:47 -0500
Subject: SSQ December Meeting

Society for Software Quality, Inc.
Washington Area Chapter

Presents Guest Speaker: John Moore
Topic: The Software Project Control Panel

Date: Tuesday, December 10, 1996
Time: 7:00 PM Refreshments/Networking; 7:30 PM Meeting
Place: Hughes STX, Greenbelt, Maryland (Directions below)
Who: All are invited. SSQ Membership not required for attendance.

General Sponsors:  Hughes STX, BDM, SPC, Loral, PRC, AMS

About the Topic

The Software Project Control Panel is a tool for visualizing and 
monitoring
the condition of a project.  The displays on the panel, if updated 
regularly
and kept within acceptable ranges, will help a project stay on course.  
The
panel includes gauges and charts on a range of important project metrics,
such as cumulative earned value, elapsed time, total cost, CPI, TCPI, 
total
program performance efficiency, tasks, quality gates progress, aggregate
schedule growth, aggregate requirements growth, voluntary turnover, 
overtime
hours, risk impact, risk liability, warning indicators, and defects by
activities.  The gauges include redlines and warning indicators to 
highlight
danger zones.

Dr. Moore will describe the background of the control panel from its
inception at the Airlie Software Council to its currently implementation 
as
an MS Excel VBA application.  He will demonstrate the control panel which 
is
currently undergoing beta testing.  He will answer questions about the
control panel and have available software project management literature 
from
the Software Program Manager's Network for distribution.  This talk will 
be
of interest to anyone who is investigating project performance metrics or
ways to improve communication of project level information to the entire
project team.

About the Speaker

Dr. Moore is an employee of Computers and Concepts Associates which 
operates
the Software Program Manager's Network.  He has over 17 years experience 
as a
software developer, project manager, and engineer.  He has contributed 
papers
and articles on software project management, software maintenance, risk
assessment, energy systems, and infrastructure management systems.  He 
has
just completed a pocket guidebook on earned value project management for
software projects and is leading an initiative to improve estimating for 
real
time systems.

The Software Program Managers Network (SPMN) was formed in 1992 by the
Assistant Secretary of the Navy for all services and OSD agencies.  The
Network's goal is to identify highly effective practices from industry,
government, and academia and convey them to software managers and
practitioners to improve the cost, schedule and performance of weapons,
command and control, and information systems.  These best practices and
lessons learned are disseminated through Direct Satellite Broadcasts, the
NETFOCUS newsletter, workshops, symposia, guidebooks, videotapes, and 
other
media.


Future Meetings: 
Date,  Speaker,  Topic,  Location
Jan 14,  Mark Servello, Why to NOT have a SPA,  Virginia
Jan 27,  Roundtable,  Internet Security,  Maryland


Directions
Take the Beltway to the BW Pkwy North exit.  Once on the BW Pkwy, take 
the
Greenbelt NASA exit.  Turn toward the Greenway Plaza Shopping Center and 
then
a right at the next light (just after the shopping center).  Hughes STX 
is on
the left hand side.  Enter the parking lot at the second left entrance.  
The
meeting will be in room 438.
 
For More Information:
Call  Chris Dryer (202) 767-2894 (e-mail:  dryer@mustang.nrl.navy.mil) 
or  Steve Leydorf (410) 573-7286 for further information.

Open to All:To receive monthly e-mail updates contact Chris
Dryer:   dryer@mustang.nrl.navy.mil




------------------------------

From: Vivian Hindbo 
Date: Thu, 05 Dec 1996 14:53:08 -0700
Subject: how do I unsubscribe

Sorry for the noise on the list--I've lost the 
address of the list administrator.
- -- 
Vivian Hindbo
Document Design Analyst
mailto:vivian.hindbo@actc.ab.ca
ACTC Technologies Inc.
http://www.actc.ab.ca

------------------------------

From: Dave Grummer 
Date: Fri, 6 Dec 1996 11:04:14 +0900 (JST)
Subject: Re: how do I unsubscribe

 unsubscribe iso9000-3 Chris Lamatsch 

Dave Grummer

Fusion Systems Japan,Inc.
No.2 Toshin Aobadai Bldg,9th Fl,
Aobadai,3-17-18 Meguro-ku,
Tokyo 153,Japan.

Tel : 81-3-5456-7561
Fax : 81-3-5458-4422

grummerd@fsj.co.jp
http://www.fsj.co.jp

		

On Thu, 5 Dec 1996, Vivian Hindbo wrote:

> From: Vivian Hindbo 
> Sorry for the noise on the list--I've lost the 
> address of the list administrator.
> -- 
> Vivian Hindbo
> Document Design Analyst
> mailto:vivian.hindbo@actc.ab.ca
> ACTC Technologies Inc.
> http://www.actc.ab.ca
> 


------------------------------

From: Kathy Reynolds 
Date: Mon, 09 Dec 1996 11:43:06 -0800
Subject: ISO 9000-3

Hello:

I am trying to obtain the latest version of ISO 9000-3.  It has been 
updated since the 1991 version.

Could you please tell me how I can obtain the latest version and how much 
it costs?

I am also interested in the latest version of the TickIT Guide.

Thank you,
Kathy Reynolds
KReynolds@cc.atinc.com

------------------------------

From: accioly@copa.rio.com.br (felipe accioly) 
Date: Fri, 13 Dec 1996 08:13:29 -0300
Subject: [none]

unsubscribe iso9000-3

------------------------------

From: gdaczkow@telesciences.com (Greta H Daczkowski)
Date: Fri, 13 Dec 96 15:38 EST
Subject: QUESTION: Company self-registration

Well, it has been a long time since I have heard of any activity on
this mail list.  So, here is a question!

I've heard that some larger companies (Bellcore, Hewlett Packard) are able
to register themselves to ISO-9001/2/3.  Is this possible?

I would expect that they would have to have a separate business unit
independent of the rest of the company so there isn't any bias?

Would they also have to certify their auditors through RAB?

Please respond quickly,  I need an answer by Monday.

Thanks

Greta Daczkowski



===================================================================

     _/_/_/_/_/  _/_/_/_/       Greta Daczkowski
    _/          _/     _/       System Test Engineer
   _/  _/_/_/  _/      _/       Securicor Telesciences 
  _/      _/  _/      _/         (609) 866-1000 
 _/_/_/_/_/  _/_/_/_/           email:g.daczkowski@telesciences.com
			    snailmail:351 New Albany Rd
				      Moorestown, NJ  08057
==================================================================


------------------------------

From: Glen Ford 
Date: Fri, 13 Dec 1996 23:44:21 -0500 (EST)
Subject: Re: QUESTION: Company self-registration 

At 15:38 1996-12-13 EST, you wrote:
>From: gdaczkow@telesciences.com (Greta H Daczkowski)
>Well, it has been a long time since I have heard of any activity on
>this mail list.  So, here is a question!
>
>I've heard that some larger companies (Bellcore, Hewlett Packard) are able
>to register themselves to ISO-9001/2/3.  Is this possible?

Sure, why not? They need quality systems as much as (or more than) anyone else.

>
>I would expect that they would have to have a separate business unit
>independent of the rest of the company so there isn't any bias?

I presume that you mean for auditors? If so the only thing they require is
that the auditor not be part of the area being audited. So someone from say
accounting could audit the shipping area, someone from shipping could audit
manufacturing and so on. 

However, from a purely practical point of view, most larger organizations
have one or more audit groups already in existance. The internal audit group
reports directly to the audit commitee (they deal primarily with the
financial audits). There is usually a pre-existing Quality Assurance group
which can also be used. Either of these groups are usually added to (IA) or
converted over to (QA) in order to provide internal auditors.

Having said that, some organizations choose specifically to avoid using
those groups. Instead they pull people out of other areas as required. To a
certain extent the choice reflects the culture of the organization, and the
difficulty of selling ISO to the company (involvement=commitment).


>
>Would they also have to certify their auditors through RAB?
>

That depends on where they are. In the US I believe that it would be wise as
an absolute minimum (in other words IMVHAUO yes).


>Please respond quickly,  I need an answer by Monday.
>
>Thanks
>
>Greta Daczkowski


Glen D. Ford
Mississauga, Ontario, Canada
Bwca Management Consulting/CanDa Software
visit our Websites at: www.io.org/~gford/bwca.html
                   and www.io.org/~gford/canda.html
Pick up free software at www.io.org/~gford/canda.html
Read our Organizational Development Models at www.io.org/~gford/bwca/models.html
Comments are encouraged.
- ------------------------------------------------------------------
"Hey, ya gotta laugh ...."
__________________________________________________________________


------------------------------

From: John Deprez 
Date: Mon, 16 Dec 1996 08:52:49 +0100
Subject: Re: QUESTION: Company self-registration

Glen Ford wrote:
> 
> From: Glen Ford 
> At 15:38 1996-12-13 EST, you wrote:
> >From: gdaczkow@telesciences.com (Greta H Daczkowski)
> >Well, it has been a long time since I have heard of any activity on
> >this mail list.  So, here is a question!
> >
> >I've heard that some larger companies (Bellcore, Hewlett Packard) are able
> >to register themselves to ISO-9001/2/3.  Is this possible?
> 
> Sure, why not? They need quality systems as much as (or more than) anyone else.
> 
>

Maybe there is a misunderstanding here, but if you say REGISTER, I
understand
it as obtaining a certificate, right ? 

Then the company that issues the certificate (thus does the assesment)
must be registred, so if they have a registration body, I think it could
be possible, 
as long as they are indeed independant.

------------------------------

From: "Bill Casti, CQA (Moderator)" 
Date: Mon, 16 Dec 1996 10:11:56 -0500 (EST)
Subject: BOUNCE iso9000-3@quality.org: Non-member submission from [John Deprez ] (fwd)

NOTE: Respond *both* to the poster's address (see below) and to the list's
posting address, OR as directed in the posting, but definitely NOT to me. 

Thanks.
Bill

- ---------- Forwarded message ----------
Date: Mon, 16 Dec 1996 02:55:15 -0500
From: John Deprez 
Organization: Alcatel Bell Telephone Belgium
To: iso9000-3@quality.org
Subject: Re: QUESTION: Company self-registration


Glen Ford wrote:
> 
> From: Glen Ford 
> At 15:38 1996-12-13 EST, you wrote:
> >From: gdaczkow@telesciences.com (Greta H Daczkowski)
> >Well, it has been a long time since I have heard of any activity on
> >this mail list.  So, here is a question!
> >
> >I've heard that some larger companies (Bellcore, Hewlett Packard) are able
> >to register themselves to ISO-9001/2/3.  Is this possible?
> 
> Sure, why not? They need quality systems as much as (or more than) anyone else.
> 
>

Maybe there is a misunderstanding here, but if you say REGISTER, I
understand
it as obtaining a certificate, right ? 

Then the company that issues the certificate (thus does the assesment)
must be registred, so if they have a registration body, I think it could
be possible, 
as long as they are indeed independant.


------------------------------

From: Glen Ford 
Date: Mon, 16 Dec 1996 18:52:10 -0500 (EST)
Subject: Re: QUESTION: Company self-registration 

Oops ... that'll teach me to read the subject line.

I guess I didn't answer the question you asked so I'll try again.

First off, you might want to read the archives for the ISO9000 list. There
have been a number of discussions lately regarding self-registration. In the
mean time I'll try to summarize the discussion:

1. ISO Registration is a customer driven requirement. If your customers
require ISO registration then it makes sense to get registered. If they do
not then it doesn't make sense to register.

2. Meeting the ISO900x requirements does provide a number of benefits in and
of itself, exclusive of the benefits of registration.

3. Third party registrars are used to provide independant proof that your
system meets the ISO900x requirements. The alternatives to external
registrars are second party audits (ie the customer checks for himself) and
acceptance of supplier claims. Therefore if you do not use a third party
registrar then it forces your client to accept your claims sight unseen or
else to check themselves.

4. If a customer is using your ISO900x registration to justify some of their
own actions (or more likely inactions) then their registrar may not accept
self-registration (should not in fact). This may mean that your customers
may need to consider you as an un-registered supplier and add appropriate
steps (audits or inspections). This would increase their costs for using
your product versus another supplier.

5. Why should the customer believe your claims of ISO900x if you can't be
bothered to verify it through a third party.

6. The general opinion seems to be that self-registration is a serious blow
to the creditability of ISO900x designations.


As for your question regarding RAB certified auditors. It's irrelevant.
Anyone who requires RAB certified auditors won't accept self-registration.
And anyone who accepts self-registration probably won't check if there was
an audit let alone RAB certified auditors. Finally anyone who'll go to the
trouble of auditing you before buying from you probably won't use the
internal auditors for more than cursory checking anyway. 



At 23:44 1996-12-13 -0500, you wrote:
>From: Glen Ford 
>At 15:38 1996-12-13 EST, you wrote:
>>From: gdaczkow@telesciences.com (Greta H Daczkowski)
>>Well, it has been a long time since I have heard of any activity on
>>this mail list.  So, here is a question!
>>
>>I've heard that some larger companies (Bellcore, Hewlett Packard) are able
>>to register themselves to ISO-9001/2/3.  Is this possible?
>
>Sure, why not? They need quality systems as much as (or more than) anyone else.
>
>>
>>I would expect that they would have to have a separate business unit
>>independent of the rest of the company so there isn't any bias?
>
>I presume that you mean for auditors? If so the only thing they require is
>that the auditor not be part of the area being audited. So someone from say
>accounting could audit the shipping area, someone from shipping could audit
>manufacturing and so on. 
>
>However, from a purely practical point of view, most larger organizations
>have one or more audit groups already in existance. The internal audit group
>reports directly to the audit commitee (they deal primarily with the
>financial audits). There is usually a pre-existing Quality Assurance group
>which can also be used. Either of these groups are usually added to (IA) or
>converted over to (QA) in order to provide internal auditors.
>
>Having said that, some organizations choose specifically to avoid using
>those groups. Instead they pull people out of other areas as required. To a
>certain extent the choice reflects the culture of the organization, and the
>difficulty of selling ISO to the company (involvement=commitment).
>
>
>>
>>Would they also have to certify their auditors through RAB?
>>
>
>That depends on where they are. In the US I believe that it would be wise as
>an absolute minimum (in other words IMVHAUO yes).
>
>
>>Please respond quickly,  I need an answer by Monday.
>>
>>Thanks
>>
>>Greta Daczkowski
>
>
>Glen D. Ford
>Mississauga, Ontario, Canada
>Bwca Management Consulting/CanDa Software
>visit our Websites at: www.io.org/~gford/bwca.html
>                   and www.io.org/~gford/canda.html
>Pick up free software at www.io.org/~gford/canda.html
>Read our Organizational Development Models at
www.io.org/~gford/bwca/models.html
>Comments are encouraged.
>------------------------------------------------------------------
>"Hey, ya gotta laugh ...."
>__________________________________________________________________
>
>
Glen D. Ford
Mississauga, Ontario, Canada
Bwca Management Consulting/CanDa Software
visit our Websites at: www.io.org/~gford/bwca.html
                   and www.io.org/~gford/canda.html
Pick up free software at www.io.org/~gford/canda.html
Read our Organizational Development Models at www.io.org/~gford/bwca/models.html
Comments are encouraged.
- ------------------------------------------------------------------
"Hey, ya gotta laugh ...."
__________________________________________________________________


------------------------------

End of ISO 9000-3 Digest V1 #27
*******************************