Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Document Version

1.1

This article explains how compliance with section 7.5 of ISO-19001:2015 can be achieved when using Confluence with Comala Document Management. It also provides information about support for other elements of the standard

,

and a list of the tools required for successful implementation.

Confluence is a documentation tool used to help teams collaborate and share knowledge efficiently. It acts as your home for document collaboration and acts as a repository as it keeps full

tracking

track of what changed in each document, when, and by whom. Team members can create, share, and collaborate on content. 

If your

organisation

organization has an ISO-19001:2015 quality management system, you can leverage Confluence to meet many of the requirements of that standard. In fact, we believe that using Confluence across your

organisation

organization is aligned well with many of the overarching objectives of the standard: i.e improved communications,

decentralisation

decentralization of quality processes, and knowledge sharing.

Extending Confluence with Comala Document Management will help you meet the requirements related to the management and control of documents (section 7.5, Documented information).

This article explains how compliance with section 7.5 can be achieved when using Confluence with Comala Document Management. It also provides information about support for other elements of the standard

,

and a list of the tools required for successful implementation

Table of Contents

Table of Contents
minLevel1
maxLevel3
outlinefalse
typelist
printablefalse
Info

Comalatech Appfire Comala does not claim compliance or certification of any of our tools, as it is not possible for any vendor to offer a compliant system. In addition to taking advantage of technical elements, compliant systems must also implement the necessary procedural and administrative controls.


Info
title

Need Help?

Need help setting up Confluence and Comala Document Management for controlled documents?  Contact Us.



1. Checklist against the ISO 9001:2015 requirements of section 7.5 (Documented information)

Reference

Requirement (the original working is given in italics)

How to Achieve Compliance

Comalatech



Appfire Comala Apps

Confluence

Processes and activities

7.5.1

Certain documented information is required


QMS documentation is maintained in one or several Confluence spaces.

Create the required documents natively within Confluence, or attach external documents.

7.5.2

Documented information should be:

  1. Identified and described

  2. Reviewed and approved


Comala Document Management provides a way to enforce a review and approval process for documents. This approval process is supported by built-in electronic signatures and an audit log. The flexibility provided by the Comala Document Management macro language enables configuring an approval process which reflects your defined documented approval processes and the different organizational roles you have.

Each Confluence page has a unique Space/Title combination.

Page versions are captured automatically and provide comparisons between versions.

Unique page identifier may be allocated manually (i.e., using page properties or page metadata).

Define the review and approval process which works best for you.

7.5.3.1

Documented information will be:

  1. Available to users;

  2. Protected (from loss, misuse)


Comala Document Management provides the means to clearly distinguish between current and draft versions of documents. Some organizations go further and are using Comala Publishing to help separate between approved pages and pages which are still in the authoring and approval process. It creates a structure of an authoring space, where approved documents are automatically published into an official space.

Users can access Confluence throughout the internet (as per your network and security configuration) using any device.

Confluence provides facilities to limit the access to documents in a granular manner.

Use Confluence within a secure infrastructure. Implement policies for access management.

7.5.3.2

  1. Users need to be able to access and use the documentation;

  2. Documents need to be preserved; and dispositioned

  3. Apply change control;

  4. Certain external documentation should also be controlled


  • Comala Document Management provides the mechanism to change control each document (see explanation for 7.5.2 above).

  • For external documents: they can be attached to Confluence pages, and these pages then provide the control mechanism for the external document. Comala Document Management can then be used to approve each external document in a similar way to that of internal documents.


  • Confluence permission mechanism is granular enough to allow some users to have 'view only' access to documents.

  • Documents may be disposed by moving to a segregated area in Confluence (typically a space sub tree which is hidden from most users)


Implement backup policies.

Block Confluence pages from being deleted (through access management).

2. Tips on how Confluence and Comala Document Management can reinforce ISO 9001:2015 processes

2.1 Improved communication (ISO 9001:2015 sections 7.4, 8.2.1, 8.4.3)

The ISO 9001:2015 requires a conscious effort to establish good communication channels:

  • from the management to the entire organization;

  • toward customers, i.e in

regards
  • regard to your products and services;

  • with your suppliers.

Confluence can be a key pillar in your communication strategy. It provides a friendly, modern environment to share documents. Moreover, it has some key features to promote effective communication. For example:

  1. Out of the box, it offers a daily digest where users may be notified about changes on pages in a compact and non-spammy manner.

  2. Confluence pages come with support for bi-directional communication; (permitted) users may comment on pages, share with colleagues, or start a whole discussion in a forum

which
  1. that is related directly to the page. This helps cultivate a culture where feedback can be given by anybody in the organization.

  2. Confluence comes with a powerful search engine.

  3. With Comala Document Management and Comala Publishing, you may create Confluence Spaces which have only official, controlled pages,

which
  1. that can be shared with customers and suppliers.

2.2 Organizational knowledge (ISO 9001:2015 section 7.1.6)

From its very start, Confluence has been widely used to capture and share organizational knowledge. In particular, some of the built-in page templates are

especially

specially designed for that, i.e

:

. the built-in templates ‘How-to-articles', and 'Troubleshooting articles'. Making Confluence available to everyone and providing your team with the context and space to record their knowledge can, over time, create a rich reference

which

that your team can rely on.

Info

You can read more about this here: https://confluence.atlassian.com/doc/use-confluence-as-a-knowledge-base-218275154.html

2.3 Awareness, competence and training (ISO 9001:2015 sections 7.3, 7.2)

Comala Document Management can be used to support a training-related workflow. Users can then be assigned to approve that they have read a certain page, and this approval is recorded on the page.

2.4 The toolset required to set

-

up a document management system on Confluence

The following table shows the typical set of tools used by companies

who

that maintain their Quality Management System in Confluence :

Component

Role

Confluence

The platform for creating, storing and using the documented information.

Comala Document Management

A Comalatech

An Appfire Comala app for Confluence which provides a way to enforce an approval process for documents. This approval process is supported by built-in electronic signatures and an audit log. The flexibility provided by the Comala Document Management macro language enables configuring an approval process which reflects your defined documented approval processes and the different organizational roles you have.

Comala Publishing

(optional)

A Comalatech

An Appfire Comala app for Confluence which helps separate between approved pages and pages which are still in the authoring and approval process. It creates a structure of an authoring space, where approved documents are automatically published into an official space. This helps ensure that end users of documents will always access the current approved release.

It complements the functionality of Comala Document Management and is optional. Some customers find it easier to work with a set of two spaces, or it can be used in cases where there are more strict auditing requirements.

Secure infrastructure

Provide a secure platform, where only authorized users are accessing and modifying the data.

Backup facilities.

Find out more...

For more information contact us

Or visit the Appfire website which has a compliance resource hub. This includes app feature resources that can help you put technical controls in place to protect company assets and comply with third-party data requirements (governmental or contractual).

You’ll find white papers, ebooks, app guides and documentation, and more.

https://hub.appfire.com/compliance/

 

(c) 2023 Appfire Comala Technology Solutions, Inc.