Thread Content
Risk management is a consistently important aspect of business management today and for some time to come. For the many small businesses in the country, how can they deal with complex and changing risk management challenges? The author mainly explains this from the perspective of quality risk management. External quality risk management: The external quality risks for small businesses include the risk of random inspections of the company’s product quality by regulatory agencies or industry bodies, as well as the quality risks arising from customers’ use of the company’s products. All these external quality risks can be controlled through effective management of internal product quality; only by ensuring good control over internal product quality can external quality risks be effectively reduced. Internal quality risk management is a systematic and complex process that involves not only the control of product quality itself, but also the identification, analysis, and effective management of risks associated with relevant processes. This paper selects certain processes of the quality management system standards for risk analysis. Many managers in companies believe that a quality management system is simply document management – that as long as the documents are properly managed, the quality management system is in order. This is a misconception; document management holds a very important role in a quality management system, but establishing an effective quality management system certainly requires more than just focusing on document management. We can provide a brief explanation of the risks associated with document management by referring to the clause on document control in ISO9001 quality management system standard 4.2.2. The standard requires that \"to ensure the documents are sufficient and appropriate, they must be approved before being released.\" Why is approval necessary before the documents are released? First, due to the varying abilities and levels of the personnel responsible for drafting, as well as their different positions which affect their understanding of the processes in question, the documents produced may not be sufficient or appropriate ； Second, the prepared documents are approved by designated personnel who review them, assessing them from various angles and perspectives, including their interfaces, thereby reducing operational risks resulting from improper document preparation. The standard also requires “ensuring that file changes and the current revision status are identified.” For documents in enterprises, especially those that serve as guidelines for production operations or are used to determine whether products are qualified, it is particularly important to control any changes to them and to keep track of their current revision status. Most companies use version numbers for control; when changes are made to files, it is essential to update and manage their version numbers, otherwise significant risks may arise. For example, if a customer of a company requests that the specifications of a product be adjusted, but due to factors such as the simultaneous use of old and new versions of documents or the failure to retrieve old versions in time, the company ends up using the specifications from those old documents. As a result, the products manufactured may not meet the required standards, leading to the rejection of batches of products and causing economic losses of varying degrees for the company. The ISO 9001 standard requires that, where applicable, training or other measures be provided to acquire the necessary capabilities; however, small businesses often overlook the standardization and effectiveness of such training. It is common practice in some small businesses for master craftsmen to train their apprentices on the spot, without any standardized training materials or assessment systems. As a result, the suitability, adequacy, and effectiveness of the training depend entirely on the individual master, which leads to variations in the skill levels of the apprentices trained by the same master. Coupled with the lack of a scientific assessment system, this creates instability in the quality of the products produced by the company. Furthermore, the mentorship approach of training apprentices carries another risk: the key technologies of the company may end up in the hands of just one person. If that person leaves the company, it could result in incalculable losses, representing a significant risk. The proper approach is for a company to create relevant documents that document the key technologies and experiences; by continuously enriching and accumulating such documents, it will become a great asset for the company. Regarding infrastructure management, the ISO9001 standard requires that “the organization shall identify, provide, and maintain the infrastructure necessary to meet product requirements.” As the production equipment for infrastructure, it is a key or decisive factor for certain enterprises in carrying out production; therefore, the maintenance of such production equipment is essential. However, the author has found that many companies fail to carry out proper maintenance of their production equipment. For example, some companies do not have any maintenance plan for their production equipment, and they rarely conduct inspections or maintenance on it on a regular basis; they only seek repair services from the equipment manufacturers once the equipment breaks down and affects production. This will have a certain impact on the product delivery times as well as the financial losses of the company, posing risks to the company’s quality management. The above lists some of the requirements of a quality management system, and it explains the risks associated with quality management as well as the measures to address them. It is hoped that this will provide some insights for small businesses in terms of quality risk management, enabling them to improve their quality management practices and thereby increase customer satisfaction. Source: China Certification and Accreditation Magazine