amjs澳金沙门(中国)有限公司

来自总部新闻

23. Apr 2024

新的ISO要求：

气候变化成为管理体系标准的焦点

背景

国际标准化组织（ISO）和国际认可论坛（IAF）早就认识到气候危机及其影响带来了许多重大挑战。不可预见的天气事件和气温上升对人们的安全和健康，尤其是员工的安全和健康产生直接影响，进而导致工作条件的变化。这反过来对供应链产生直接影响，在某些情况下会损坏或影响生产设施，并对生产力和产品质量产生全方位的影响。

因此，ISO和IAF在两个月前，即2024年2月22日发布了联合公报。这份公报提出了在所谓的“伦敦宣言”中已宣布的措施，即最重要和最相关的管理体系标准应如何应对气候变化问题。这些要求自2024年2月23日起生效。

新要求

这份公报列出了确保公司和组织解决这些问题的变化。这些变化被锚定在第4.1章 - 了解组织及其背景 和第4.2章 - 了解相关方的需求和期望 中，如下所示：

第4.1章 新增：“组织应确定气候变化是否是一个相关问题。”

第4.2章 新增：“注：相关方可能有与气候变化相关的要求。”

ISO和IAF的目标是确保在已经涵盖的主题之外，组织也能解决气候变化问题及其对他们带来的影响。在背景中锚定这些主题象征着组织方法的整体性，因为在此基础上，这些要求可以、应该并且必须在标准的所有其他方面得到考虑（另见本文的“下一步是什么”部分）。

对组织的影响

对于认证公司来说，amjs澳金沙门不会改变，因为（以前颁发的）amjs澳金沙门将继续有效。新要求将在相应的审核中由审核员进行审核。

然而，认证公司必须确保通过在背景中解决上述问题并考虑相关方的要求来应对气候变化及其带来的挑战。基于这些发现，组织必须定义被认为适当的措施。与大多数其他主题一样，这里也适用基于风险的方法。

下一步是什么？

这些要求包含在所有A类管理体系标准（可认证标准）中，并随后包含在附件SL的附录2的协调结构中。

随后，审核实践组，一个由专家、审核员和用户组成的非正式ISO小组，发布了如何在ISO 9001审核中作为示例查询这些主题的指导。这些指导可以作为组织查询和锚定上述主题的基础。

Quality Austria如何提供支持？

我们的Quality Austria审核员已准备好在审核中处理相关问题，并以综合方式考虑和查询它们。如果您有任何进一步的问题，请联系我们或您的负责审核员。

受影响的标准

根据上述公报，目前直接受影响的标准如下：

- ISO 14298:2021 图像技术 — 安全印刷流程管理

- ISO 16000-40:2019 室内空气 — 第40部分：室内空气质量管理系统

- ISO 22163:2023 铁路应用 — 铁路质量管理系统 - ISO 9001:2015及在铁路行业应用的具体要求

- ISO 22301:2019 安全和韧性 — 业务连续性管理系统 — 要求

- ISO 28000:2022 安全和韧性 — 安全管理系统 — 要求

- ISO 29001:2020 石油、石化和天然气工业 — 行业内特定的质量管理系统 — 产品和服务供应组织的要求

- ISO 30301:2019 信息和文档 — 记录管理系统 — 要求

- ISO 34101-1:2019 可持续和可追溯的可可 — 第1部分：可可可持续性管理系统的要求

- ISO 35001:2019 实验室和其他相关组织的生物风险管理

- ISO 37301:2021 合规管理系统 — 使用指南的要求

- ISO 46001:2019 水效率管理系统 — 使用指南的要求

- ISO/IEC 27001:2022 信息安全、网络安全和隐私保护 — 信息安全管理系统 — 要求

- ISO 21401:2018 旅游及相关服务 — 住宿设施的可持续管理系统 — 要求

- ISO 30401:2018 知识管理系统 — 要求

- ISO 50001:2018 能源管理系统 — 使用指南的要求

- ISO/IEC 20000-1:2018 信息技术 — 服务管理 — 第1部分：服务管理系统要求

- ISO 19443:2018 质量管理系统 — 在供应核安全产品和服务的核能行业供应链中的ISO 9001:2015应用的具体要求

- ISO/IEC 19770-1:2017 信息技术 — IT资产管理 — 第1部分：IT资产管理系统 — 要求

- ISO 21001:2018 教育组织 — 教育组织的管理系统 — 使用指南的要求

- ISO 37001:2016 反贿赂管理系统 — 使用指南的要求

- ISO 41001:2018 设施管理 — 管理系统 — 要求

- ISO 44001:2017 协作业务关系管理系统 — 要求和框架

- ISO 14001:2015 环境管理系统 — 使用指南的要求

- ISO 15378:2017 医药产品的初级包装材料 — ISO 9001:2015应用的具体要求，参考良好生产规范（GMP）

- ISO 18788:2015 私营安全运营管理系统 — 使用指南的要求

- ISO 21101:2014 冒险旅游 — 安全管理系统 — 要求

- ISO 22000:2018 食品安全管理系统 — 食品链上任何组织的要求

- ISO 37101:2016 社区的可持续发展 — 可持续发展的管理系统 — 使用指南的要求

- ISO 39001:2012 道路交通安全（RTS）管理系统 — 使用指南的要求

- ISO 45001:2018 职业健康和安全管理系统 — 使用指南的要求

- ISO 9001:2015 质量管理系统 — 要求

以下标准已经变更（截至2024年5月3日）：

- ISO 9001:2015/Amd 1:2024 质量管理系统

  要求 修正案1：气候行动变化

- ISO 14001:2015/Amd 1:2024 环境管理系统

  使用指南的要求 修正案1：气候行动变化

- ISO 22000:2018/Amd 1:2024 食品安全管理系统

  食品链上任何组织的要求

  修正案1：气候行动变化

- ISO 22301:2019/Amd 1:2024 安全和韧性

  业务连续性管理系统 要求 修正案1：气候行动变化

- ISO 37001:2016/Amd 1:2024 反贿赂管理系统

  使用指南的要求 修正案1：气候行动变化

- ISO 37301:2021/Amd 1:2024 合规管理系统

  使用指南的要求 修正案1：气候行动变化

- ISO/IEC 20000-1:2018/Amd 1:2024 信息技术

  服务管理 第1部分：服务管理系统要求

  修正案1：气候行动变化

- ISO/IEC 27001:2022/Amd 1:2024 信息安全、网络安全和隐私保护 信息安全管理系统

  要求 修正案1：气候行动变化

- ISO 41001:2018/Amd 1:2024 设施管理

  管理系统 要求 修正案1：气候行动变化

- ISO 45001:2018/Amd 1:2024 职业健康和安全管理系统

  使用指南的要求 修正案1：气候行动变化

- ISO 50001:2018/Amd 1:2024 能源管理系统

  使用指南的要求 修正案1：气候行动变化

23. Apr 2024

New ISO requirements:

Climate change becomes the focus of management system standards

Background

The International Organization for Standardization (ISO) and the International Accreditation Forum (IAF) recognized some time ago that the climate crisis and its effects present many major challenges. Unforeseen weather events and rising temperatures have a direct impact on the safety and health of people in general and employees in particular, which subsequently leads to changes in working conditions. This in turn has a direct impact on supply chains, damages or affects production facilities under certain circumstances and has an impact on productivity and product quality in every sense.

As a result, ISO and IAF published a joint communiqué two months ago, on February 22^nd, 2024. This presented the measures – already announced in the so-called 'London Declaration' – on how the most important and relevant management system standards should address climate change issues. These requirements have been valid since February 23^rd, 2024.

New requirements

This communiqué sets out changes to ensure that companies and organizations address these issues. These changes are anchored in chapters 4.1 - Understanding the organization and its context and 4.2 - Understanding the needs and expectations of interested parties and are as follows:

• Kapitel      4.1 Added: ‘The organization shall determine whether climate change is a      relevant issue.’
• Kapitel      4.2 Added: ‘NOTE: Relevant interested parties can have requirements      related to climate change.’

The aim of ISO and IAF is to ensure that, in addition to the topics already covered, organizations also address the issues of climate change and the resulting impacts that arise for them. Anchoring these topics in context symbolizes the holistic nature of the approach for the organization, as the requirements can, should and must be taken into account in all other aspects of the standard on this basis (see also the "What happens next" section in this article).

Effects on organizations

For certified companies, nothing will change as the certificates (as previously issued) will remain valid. The new requirements will be reviewed by auditors in the respective audits.

However, certified companies must ensure that they address the issue of climate change and the resulting challenges by addressing the issues (as defined above) in context and taking into account the requirements of interested parties accordingly. Based on these findings, the organization must define measures that are deemed appropriate. As with most other topics, the risk-based approach applies here.

What happens next?

These requirements are included in all type A management system standards (certifiable standards) and subsequently included in the harmonized structure of Appendix 2 of Annex SL.

Subsequently, the Auditing Practices Group, an informal ISO group consisting of experts, auditors and users, has issued guidance on how these topics can be queried as examples in an ISO 9001 audit. This guidance can serve as a basis for organizations to query and anchor the above-mentioned topics for themselves.

How does Quality Austria provide support?

Our qualityaustria auditors are prepared to deal with the relevant issues in the audits and to consider and query them in an integrated manner. If you have any further questions, please contact us or your responsible auditor.

Affected standards

According to the above-mentioned communiqué, the following standards are currently directly affected:

• ISO      14298:2021 Graphic technology — Management of security printing processes
• ISO      16000-40:2019 Indoor air — Part 40: Indoor air quality management system
• ISO      22163:2023 Railway applications — Railway quality management system - ISO      9001:2015 and specific requirements for application in the railway sector
• ISO      22301:2019 Security and resilience — Business continuity management      systems — Requirements
• ISO      28000:2022 Security and resilience — Security management systems —      Requirements
• ISO      29001:2020 Petroleum, petrochemical and natural gas industries —      Sector-specific quality management systems — Requirements for product and      service supply organizations
• ISO      30301:2019 Information and documentation — Management systems for records      — Requirements
• ISO      34101-1:2019 Sustainable and traceable cocoa — Part 1: Requirements for      cocoa sustainability management systems
• ISO      35001:2019 Biorisk management for laboratories and other related      organisations
• ISO      37301:2021 Compliance management systems — Requirements with guidance for      use
• ISO      46001:2019 Water efficiency management systems — Requirements with      guidance for use
• ISO/IEC      27001:2022 Information security, cybersecurity and privacy protection —      Information security management systems — Requirements
• ISO      21401:2018 Tourism and related services — Sustainability management system      for accommodation establishments — Requirements
• ISO      30401:2018 Knowledge      managemhttp://www.qualityaustria.com/en/product-groups/information-security/iso-iec-27001-information-security/ent      systems — Requirements
• ISO      50001:2018 Energy management systems — Requirements with guidance for use
• ISO/IEC      20000-1:2018 Information technology — Service management — Part 1: Service      management system requirements
• ISO      19443:2018 Quality management systems — Specific requirements for the      application of ISO 9001:2015 by organizations in the supply chain of the      nuclear energy sector supplying products and services important to nuclear      safety (ITNS)International Organization for Standardization ISO internal      ID 4
• ISO/IEC      19770-1:2017 Information technology — IT asset management — Part 1: IT      asset management systems — Requirements
• ISO      21001:2018 Educational organizations — Management systems for educational      organizations — Requirements with guidance for use
• ISO      37001:2016 Anti-bribery management systems — Requirements with guidance      for use
• ISO      41001:2018 Facility management — Management systems — Requirements with      guidance for use
• ISO      44001:2017 Collaborative business relationship management systems —      Requirements and framework
• ISO      14001:2015 Environmental management systems — Requirements with guidance      for use
• ISO      15378:2017 Primary packaging materials for medicinal products — Particular      requirements for the application of ISO 9001:2015, with reference to good      manufacturing practice (GMP)
• ISO      18788:2015 Management system for private security operations —      Requirements with guidance for use
• ISO      21101:2014 Adventure tourism — Safety management systems — Requirements
• ISO      22000:2018 Food safety management systems — Requirements for any      organization in the food chain
• ISO      37101:2016 Sustainable development in communities — Management system for      sustainable development — Requirements with guidance for use
• ISO      39001:2012 Road traffic safety (RTS) management systems — Requirements      with guidance for use
• ISO      45001:2018 Occupational health and safety management systems —      Requirements with guidance for use
• ISO      9001:2015 Quality management systems — Requirements

The following standards have already been changed (as of May 3, 2024):

ISO 9001:2015/Amd 1:2024 Quality management systems
Requirements Amendment 1: Climate action changes

ISO 14001:2015/Amd 1:2024 Environmental management systems
Requirements with guidance for use Amendment 1: Climate action changes

ISO 22000:2018/Amd 1:2024 Food safety management systems
Requirements for any organization in the food chain
Amendment 1: Climate action changes

ISO 22301:2019/Amd 1:2024 Security and resilience
Business continuity management systems Requirements Amendment 1: Climate action changes

ISO 37001:2016/Amd 1:2024 Anti-bribery management systems
Requirements with guidance for use Amendment 1: Climate action changes

ISO 37301:2021/Amd 1:2024 Compliance management systems
Requirements with guidance for use Amendment 1: Climate action changes

ISO/IEC 20000-1:2018/Amd 1:2024 Information technology
Service management Part 1: Service management system requirements
Amendment 1: Climate action changes

ISO/IEC 27001:2022/Amd 1:2024 Information security, cybersecurity and privacy protection Information security management systems
Requirements Amendment 1: Climate action changes

ISO 41001:2018/Amd 1:2024 Facility management
Management systems Requirements with guidance for use
Amendment 1: Climate action changes

ISO 45001:2018/Amd 1:2024 Occupational health and safety management systems Requirements with guidance for use Amendment 1: Climate action changes

ISO 50001:2018/Amd 1:2024 Energy management systems
Requirements with guidance for use Amendment 1: Climate action changes