GB/T 27423-2019Conformity assessment—Guide to risk management for inspection and testing services (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

Inspection is an important part of the national quality infrastructure. It belongs to the high-tech service industry and is also a high-risk industry. Inspection service It involves national economy and people's livelihood, and policy risks, technical risks, and financial risks are everywhere.

Judging from the development trend of relevant international standards, risk management is already the "core" of management. The newly revised ISO 9001:2015 Standards such as Management System Requirements, ISO/IEC 17025:2017, General Requirements for Capabilities of Testing and Calibration Laboratories Management thinking.

In China, the risk management of inspection and testing services has always been a weakness, and a practical and highly integrated risk management indicator is urgently needed South document to guide inspection and inspection agencies to establish a management system based on risk thinking. This standard provides services for inspection and testing institutions in China.

The characteristics of the service are referenced to the international guidance documents on the formulation of general risk management and service standards.

Risk management methods and systems. Institutions need to further refine requirements based on the characteristics of their services and risk appetite to meet national policies, Standards and other requirements for risk management, balance risk-benefit relations, seize opportunities in market competition, and strive for excellence.

1 Scope

This standard provides general principles for risk management of inspection and testing services, internal environment, target setting, event identification, risk assessment, risk treatment, Guidance on control activities, information communication, supervision and inspection.

This standard applies to organizations that provide inspection and testing services.

2 Normative references

The following documents are essential for the application of this document. For dated references, only the dated version applies to this document. For undated references, the latest version (including all amendments) applies to this document.

GB/T 19000 Quality Management System Foundation and Terminology

GB/T 23694 Risk Management Terminology

GB/T 24353 Risk Management Principles and Implementation Guide

GB/T 24421.1 Standardization work guide for service industry organizations Part 1: Basic requirements

GB/T 24620 Service Standards Development Guidelines Consider Consumer Demand

GB/T 27000 Conformity Assessment Vocabulary and General Principles

GB/T 27921 Risk Management Risk Assessment Technology

3 Terms and definitions

GB/T 19000, GB/T 23694, GB/T 24421.1, GB/T 24620 and GB/T 27000 as well as the following terms and definitions The meaning applies to this document.

4 General

4.1 Risk management is an organic part of the organization's management. It should be integrated into the organization's culture and behavior and run through the entire process of the organization's operations.

4.2 The principle of ERM is to ensure both goals and decisions based on reasonable risk assessment, as well as risk assessment and risk The response process is reasonable and standardized to reduce and control uncertainty. At the same time, make sure all people understand the organization's goals, and everyone Be clear about the relationships between each other's actions and their effect on achieving goals.

4.3 Internal environment, target setting, event identification, risk assessment, risk treatment, control activities, information communication, supervision and inspection are currently common The key links of risk-based institutional governance, organizations should organize, plan and implement risk management according to the above eight links (not limited to), See Chapter 5 to Chapter 12 for related guidelines.