A Tale From Olden Days
I worked for a telecommunications manufacturer back in the days when analogue was just becoming digital . It was large company with some products at the leading edge of technology. We had several teams: one developing new products, one for assessing feasibility of production. Finally, there was one that solely covered testing. One of the senior staff wryly observed that there were now more resources involved in testing a product than actually inventing it. The observation was a good one. ISO certification costs (including maintenance) can be significant.
Duplication – How to Generate ISO Certification Costs
A large-ish organisation will probably hold:
ISO 9001- Quality Management
ISO 14001 - Environmental Management
ISO 27001 - Information Security Management
ISO 45001 - Health and Safety Management
Progress Equals Savings?
Therefore, you are now carrying up to four standard approvals, all based on the same template and with many similar requirements. Have the visit duration and costs have gone down as the similarities between standards have increased and the market matured? No – sorry. The opposite has occurred, and though each standard has got more like the others, the time taken to complete the audits continues to increase. Your Certification Body seems to reinvent the wheel on every visit, and your overall ISO Certification Costs rise. My former colleague was absolutely right. Certification has become an industry in its own right. Hundreds of very well paid people are involved in writing the standards, running the certification bodies etc. They have a vested interest in duplication of tasks, hence keeping the industry going, and the costs high.
Any Good News?
Did I promise some good news in the title of this piece? Oh yes – I did!
Here it is:
Enter ISO 45001, the final guest to arrive at the party. It’s a vital new part of the ISO jigsaw, replacing OHSAS 18001. Finally, every key area of a business is now covered by a standard, which conforms to a common template (a standard of standards if you like). The standards I listed earlier will cover 95% of companies for 95% of their needs. At last, they all share common structure and features. Imagine four previously separate circles being squeezed into a tight Venn Diagram; common aims, common structure, common processes, but differing activity focus.
Groundhog Day for You and Your Consultant
Formerly, following initial approval against one of these standards, each company would need to be checked annually to ensure they are maintaining their systems properly. Around 50% of the duration of such visits was spent looking at exactly the same issues, namely how you have maintained the system, irrespective of the standard concerned. Therefore, a typical company with a one day maintenance visit per year, per standard, would receive four days worth of maintenance visits, of which something like four half days (two days) would be spent assessing at exactly the same areas, how the systems are maintained. At 2018 prices, that’s probably about £2000 spent looking at the same things, without considering how much it costs you to have members of your staff supporting the visit and not adding value to your business. Thankfully, this duplication can now be avoided. How?