Sri Lanka Institute of Information Technology

LAB 1: ISO 9001:2015

R.M.S.S Rathnayake
IT19172774
Y3S2
2021 JUNE-DECEMBER
Enterprise Standards for Information Security -IE3102
 Enterprise Standards for Information Security
3rdYear, 2nd Semester, 2021- Lab 1
_________________________________________________________________________________

Lab 1: ISO 9001:2015

The initial phase of implement ISO 9001:2015 is generating a checklist for the organization. By having
a checklist you will be able to gain following benefits;

• act as a sampling plan and time manager;

• be provided to the auditee ahead of the on-site audit;
• be used as an information base for planning future audits;
• ensure a consistent audit approach;
• ensure that adequate evidence is obtained;
• ensure that the audit scope is being followed;
• help an auditor to perform better during the audit process;
• help to ensure that an audit is conducted in a systematic and comprehensive manner;
• provide a means of communication and a place to record data for use for future reference;
• provide a repository for notes collected during the audit process (i.e. audit field notes);
• provide a record that the QMS was examined;
• provide objective evidence that the audit was performed;  provide structure and continuity to an
audit;  serve as a memory aid.

You have been hired as consultant to implement ISO 9001:2015 in a selected organization. Follow
guidelines below to achieve your target

1. Read the ISO 9001:2015 Quality Management System Assessment Checklist provided by DQS Inc.

https://dqsus.com/wp-content/uploads/2017/02/RP2-ISO9001_2015.pdf

2. Provide an introduction for the selected organization

Roxxon airways

Roxxon airways is an international airways company based in Colombo, Sri Lanka. They basically
provide transportation services to people who needs to fly over the abord to fulfill their personal and
business matters on regular basis. They also provide services to business firms who need to get
supplementary materials from abord to continue their respective businesses.

Roxxon airways maintaining a online booking system where their customers can place their orders and
book themselves a air tickets without being into various processes. they also have a maintenance team,
 supply unit, engineering team and internal audit team. And a have a disaster recovery team incase of
emergency

3. Identify 15 processes of the selected organization . Briefly describe selected processes

Business processes description

1) HR Responsible for managing the process of recruiting, hiring, onboarding,

training, and firing employees and administering employee benefits like
salary information.

2) Marketing Responsible for producing marketing and promotional materials.

Managing social media accounts for company. Conducting marketing
campaigns.

3) Air operations Maintaining flight schedules, assigning flight crew to airplanes

4) Maintenance Maintaining the physical assets of the company like computers and
provide support to engineers

5) Disaster recovery In case of emergency (natural, intentional and hostage situations)

6) Passenger Process of issuing a air ticket to customer and until customer going off in
transportation arrival destination.

7) Cargo transportation Process of receiving a cargo to delivering a cargo.

8) Online booking Managing a payment gateway and verify payments. Managing a ticket
system issuing process. provide verification code for ticket purchasing.

9) Management increase the efficiency and effectiveness of their employees, processes,

and whole organization.

10) Engineering Provide engineering assistance in case of aircraft failures, maintenance,

and repairs in crucial components of aircrafts.

11) Accounting responsibilities include recording accounts, paying bills, billing clients and
customers, tracking assets and expenditures, managing payroll, and
keeping track of critical tax documents.

12) Purchasing Managing necessary equipment purchasing and real estate for company

13) Baggage handling Handling baggage of customers and tagging them according to passenger
ID

14) Internal audits Assess the company's risks and the efficacy of its risk management efforts.
Ensure that the organization is complying with relevant laws and statutes

15) Supply unit Make sure enough supplements are supplied to airplanes before they take
off from airport including fuel supply, food and beverages, and other
necessary stuff. Keep record on inventory.
4. Complete “Annex 1: Assessment Summary Sheet” attached below with the identified processes

5. Use an “X” to indicate that the clause was assessed in the area described. Use a “D” to indicate that a
discrepancy was found, in the checklist

6. Attach completed Annex 1: Assessment Summary Sheet to the “ISO 9000 – class assignment” and
upload it in to given link

Annex 1: Assessment Summary Sheet

ISO 9001:2015
Processes of the Organization

Quality 1 2 3 4 5 6 7 8 9 10 1 12 13 1 15
Management 1 4
Systems: Discrepancy
Requirement Reference
s Number
Clause Clause
Number Description

4.1 Understanding the X X X X X x

organization and its
context
4.2 Needs and X D D X X X D
Expectations of the
Interested Parties
4.3 Determining the X X
scope of the quality
management
system
4.4 Quality X X X X X D X
Management
System and its
processes
5.1 Leadership and X X X
commitment
5.2 Quality Policy X X X X X X X X X X X X X X X
5.3 Organizational X X X X X X X X X X X D X X X
roles,
responsibilities and
authorities
 6.1 Actions to address X X X X D X X X X X X X X X X
risks and
opportunities
Quality objectives X X X X X X X X X X X X X X X
6.2 and planning to
achieve them
6.3 Planning of changes X
7.1 Resources X X X X X X X X X X X X X X X
7.1.1 General X

7..1.2
People D D D D D D D D D D D D D D D
7.1.3 Infrastructure X X X X X X X X X X X
7.1.4 Environment for the X X X X X
operation of
processes
7.1.5 Monitoring and D X X X X X X X X X X X
Measuring
Organizational X X X X X X X
7.1.6 Knowledge
7.2 Competence X X X X X X X X X X X X X
7.3 Awareness X X X X X X X X X X X X X X X
7.4 Communication X X X X X

ISO 9001:2015
Processes of the Organization

Quality 1 2 3 4 5 6 7 8 9 1 1 1 1 1 1
Management 0 1 2 3 4 5
Systems: Discrepancy
Requirement Reference
Number
s
Clause Claus
Numbe e
r Description

7.5 Documented X X X X X X X X X X X X X X
Information
7.5.1 General X
7.5.2 Creating and X X X
updating
7.5.3 Control of X D X
documented
Information
8.1 Operational X X D X X
planning and
control
8.2 Determination of X X X D X X X X X
requirements
8.2.1 Customer X X X X X X X X X X X X X X
communication
8.2.2 Determination of X X X X X X D D X X X
requirements X
related to products
and services
8.2.3 Review of D X
requirements
related to products
and services
8.2.4 Changes to
requirements
8.3 Design and X
Development
8.3.1 General X X X X X X X X X X X X X
8.3.2 Design and X X X X
development
planning
Design and X X X D D D
development
8.3.3 inputs
8.3.4 Design and X X X X X X X X X X X X X X
development
controls.
8.3.5 Design and X X X X X X X X X D X X X
development
Outputs
8.3.6 Design and
development
changes
8.4.2 Type and extent of X X X X X X
control of external
provision

8.4.3
Information for D D D D D D D D D D D
external providers
8.5.1 Control of D D X D D D D D D D D D D
production and
Service
 ISO 9001:2015
Processes of the Organization

Quality
Management
Systems: Discrepancy
Requirements Reference
Number
Clause Clause
Number Description

8.5.2 Identification and X X X X X X X X X X X X X

traceability
8.5.3 Property belonging to X X X X X X X D X
customers or external
providers

8.5.4
Preservation X X X X X X X X X X X
8.5.5 Post-delivery activities X X X X X X X X X X X X X X
8.5.6 Control of changes X X X X X X
8.6 Release of products and X
services
8.7 Control of nonconforming X
products
9.1.1 Monitoring, X X X X X X X X X X X
measurement, analysis
9.1.2 Customer Satisfaction X X X X X X X X X X X X X X X
9.1.3 Analysis and evaluation X X X
9..2 Internal Audits X
9.3 Management Review X X X
10.1 Improvement – General X
10.2 Nonconformity/Correctiv X X X X X X X X X X X X X
e Action
10.3 Continual improvement X X X X X X X X X X X X X

* Use an “X” to indicate that the clause was assessed in the area described.
Use a “D” to indicate that a discrepancy was found.