There are two types of actions in an ISO 9001 Quality Management System: Corrective action and preventive action.  Many people struggle with just what a preventive action looks like and how it differs from a corrective action.  What’s funny about this discussion is how everyone tries to explain the difference as merely an interpretation of the words “occurrence” and “potential”.

For example, the ISO 9000:2005 definition states:

Corrective Action (Clause 3.6.5):
action to eliminate the cause of a detected nonconformity and its recurrence.

Preventive Action (Clause 3.6.4):
action to eliminate the cause of a potential nonconformity and its occurrence.

But does this really clear it up for anyone?

What’s the Difference between Corrective Action and Preventive Action?

Corrective action is performed on detected nonconformities.  In other words, there are real defects that exist right now

Read more...   |    2 Comments »

According to the Institute of Internal Auditors (IIA), an effective system of internal controls helps ensure that our organizational processes are functioning properly, that our financial information is reliable, and that we’re in compliance with applicable regulations. Businesses primarily implement internal controls systems to protect themselves from internal fraud and abuse, while many do so with regulatory or standards compliance in mind.

It is interesting to note that, in many cases, the internal control system at many companies consists of volumes of instruction-like procedures that document activities. If a company is taking the time and effort to develop a procedure-based financial control system, it’s worth the additional effort it takes to:

Read more...   |    Leave Comments »

Writing procedures is an exercise in controlling the cost of compliance.  You’re trying to comply with customer expectations, management objectives, government regulations, and/or industry standards, making compliance expensive.  Regardless of the reason for compliance, wouldn’t you want to write as few procedures as possible if you could still conform to the compliance mandate and keep your compliance costs to a minimum?

Read more...   |    Leave Comments »

Small public companies like yours may finally have to begin providing the Securities and Exchange Commission (SEC) with certified assessments of their internal controls.  Smaller micro caps will be required to comply with SOX 404(b) reporting requirements beginning June 15, 2010; they’ll have to attest to the effectiveness of their internal controls in their annual reports released on or after June 15 of next year.  So, for those whose annual reports are just seven months away, the time to consider is over — it’s time to take action!

Read more...   |    Leave Comments »

The first phase in any project management process is project initiation, where the goal is to uncover the project’s scope — the boundaries for resources, expectations, results, feasibility, the team, and your requirements — and produce a project charter.  Now that you know the project’s goals and scope and you have a project charter, what’s next?

Project planning is the second phase of any project management process and consists of developing the core planning elements.  The output of this phase is a set of project management documents, or plans.  The most important one is the project plan itself.  (Figure 1 shows the table of contents for a project plan.)

Read more...   |    Leave Comments »

Last week, we learned about the five phases of project management.  Each phase of project management has a distinct purpose, importance, and set of outputs designed to ensure that the project manager is moving the project towards the desired results.  The first phase is Project Initiation.

Phase I – Project Initiation

The primary purpose of Project Initiation is to discover the project’s scope — where are its boundaries?  As you see in Figure 1, you need to determine and document the User Requirements & Project Assumptions, produce a Business Case Justification & Feasibility Study, and put together a Project Charter and Project Team.

Read more...   |    Leave Comments »

Today, everything is a project with more and more people finding themselves in a project management role of some type.  You don’t have to have the title of Project Manager to manage projects.

A Project is a temporary collection of related tasks to achieve a desired and usually unique result.

What do you think? Do you find yourself managing a collection of related tasks to achieve a desired result?  If so, you qualify as a project manager.  Businesses today are evolving, downsizing, and pushing more work down the organization chart.  You may be a project manager and not know it.  But what if you haven’t been trained as a Project Manager with the necessary skill and tool sets?

Read more...   |    1 Comment »

The question “What should be in your accounting manual?” should first be answered by another question: “Why do you need an accounting manual?” Whether you are looking to purchase a pre-written accounting manual or create your own accounting manual from scratch, these are two important questions to answer.

Read more...   |    Leave Comments »

Question of the month: Do you understand the meaning of the term “internal controls?”

The internal controls requirement in Sarbanes-Oxley Section 404 has created the most uncertainty and distress in businesses. Frequently those of us involved in office processes are not accustomed to having our work planned and verified to the degree that is common on most factory floors.

Read more...   |    Leave Comments »

When you hear the phrase “internal control system required by Sarbanes-Oxley (SOX) Section 404,” do you automatically think of policies and procedures?  Simply having accounting policies and procedures does not indicate an internal control system.  Well-written accounting procedures that document well-defined accounting processes, however, are an important component of the internal control system you are building. 

Read more...   |    1 Comment »