Quality Management Articles - Quality Matters Blog: ISO09001 vs ISO027001

ISO9001

What is ISO9001?

• A Quality Management system for turning customer requirements into customer satisfaction.


• Provides the mechanism for continual improvement.


• A set of common sense guidelines for running a successful business.

What are the benefits of ISO9001 Registration?

• Internationally recognised quality mark


• Certificates awarded by independent accredited organisations.


• Customers do not have to do their own checks on a supplier.

How many ISO9001 Certificates have been issued?

Over 1 million worldwide.

What is covered by ISO9001?

BS EN ISO 9001:2000 requires 5 main sections to be addressed, these are:

1. Quality Management System;


2. Management Responsibility;


3. Resource Management;


4. Product Realisation;


5. Measurement, Analysis and Improvement

Each section is subdivided as required and covers all elements of the business having an impact on quality.

ISO27001

What is ISO27001?

• An Information Security Management System for protecting customer information and data from unauthorised disclosure.


• Confidentiality, Integrity and Availability


• Risk assessment and management


• Access controls and computer security


• Protection of hardware and software assets


• Business continuity management and disaster recovery

What are the benefits of ISO7001 Registration?

• Internationally recognised Information Security Mark.


• Certificates awarded by independent, accredited organisations.


• 3rd Party assurance of information security credentials.

How many ISO27001 Certificates have been issued?

Under 4000 worldwide (includes BS7799 certificates)

What is covered by ISO 27001?

ISO27001 requires 5 main sections to be addressed, these are:

1. Management Responsibility;


2. Internal ISMS Audits;


3. Management Review;


4. ISMS Improvement

Correlation between ISO9001 and ISO27001

How long does it take to obtain certification?

This obviously varies from organisation to organisation, but the prime requirement is that the organisation must have three months of 'track record' from completion of the document set.

As a rough guide, ISO9001 can be achieved in about 6 months while ISO27001 takes about 12-18.

What documentation is needed?

A Quality & ISMS manual and procedures/processes for operating the systems.

Once certificates are issued what happens next?

The certification authority will carry out surveillance visits each year to ensure continued compliance.

Labels: factsheet, ISO27001, iso9001, simple