System Guides

The ISO Compliance Guide within CIMSNex serves as a unified repository for all clauses extracted from diverse ISO standards such as ISO 9001, ISO 45001, ISO 20000, ISO 27001, ISO 14001, and ISO 18788. This consolidated presentation offers users a centralized platform to comprehend the scope and relevance of each clause within their organization's framework. To initiate the process, users are prompted to generate a Statement of Applicability (SoA) for every individual clause. This is achieved by clicking the "Add" button and completing the requisite fields provided.

1. Implementation Guide: By clicking on this link, you can access a detailed page that expounds on the requirements of the specific clause. This guide provides an in-depth understanding of what is expected for each clause.
2. Documentation: This column offers visibility into the documents required by the standard. It clearly outlines what documentation is essential for compliance with the specific clause.
3. Templates: Here, you can find a selection of customizable templates that are available for download. These templates are designed to align with the requirements of the clause and can be tailored to your organization's needs.
4. System Records: This column provides direct links to system-generated reports that are relevant to the particular clause. These reports help you keep track of your compliance efforts.

Furthermore, the "ISO Compliance Guide and Assessment" feature includes the "Add" button, which enables the mapping of your organization's application of the clause. Here are the fields associated with this mapping:

• STD-CLAUSE: For instance, "ISO 27001 - Clause 4.3-ISMS."

• ID: This field is automatically generated by the system.

• Review Date: The date you are currently inputting the assessment.

• Review Purpose: Reason of the assessement. If you are reviwing the assessment for the first time, select Pre-Implementation, After implementation of the system, review to update the status of the statement by selecting Post-Implementation. Any other review assessment will be for the purpose of Management Review to to update the status of the ongoing implementation of the different components of the system.

• Responsibility: Identifies the individual or team responsible for implementing the clause requirement.

• Implementation Status: This includes various statuses that signify the level of compliance:

• "NOT IMPLEMENTED": The requirement has not been implemented, and there is no evidence of its existence within the organization.

• "INITIAL/ ADHOC": The requirement is in its initial stages, implemented on an ad hoc basis with no formal processes or documentation.

• "PARTIAL IMPLEMENTATION": Parts of the requirement have been implemented, but there are significant gaps or inconsistencies in its application across the organization.

• "LARGELY IMPLEMENTED": The requirement is implemented in a majority of relevant areas, with consistent processes, documentation, and periodic reviews.

• "CONSISTENTLY IMPLEMENTED": The requirement is consistently/ uniformly applied across relevant areas of the organization, with defined processes and documentation. 

• "FULLY IMPLEMENTED":  The requirement is fully implemented across the organization, with well-defined processes, thorough documentation, and continuous monitoring.

• "OPTIMIZED/MATURE": The requirement is not only fully implemented but also optimized for efficiency and effectiveness. Continuous improvement practices are in place, and the control is regularly reviewed and updated.

• "NOT APPLICABLE": Denotes clauses that are irrelevant or excluded from the organization's scope.

• Additional Description: Provides an additional space for any supplementary information.

• Attachment: Allows for attaching relevant documents or references i.e., the customised template which is now the final document policy or procedure in pdf format

STATEMENT OF APPLICABILITY

To access the current Statement of Applicability, simply navigate to the "ISO Compliance Assessment/SOA Report" option in the menu. Upon clicking, a report will be generated, presenting a comprehensive overview of the current status of each clause's implementation. From this report, users can review and update the status of implementation for individual clause requirements by selecting the "Review" button corresponding to the respective record. This enables users to efficiently manage and track the progress of clause implementation within their organization's framework.

KPI and KRI STATUS REPORT

As you complete and update the Statement of Applicability, the system automatically generates the KPI (Key Performance Indicator) and KRI (Key Risk Indicator) status report, indicating your current risk exposure based on the implementation status. In the generated report, the KPI and KRI statuses are color-coded as either Red or Orange. To access the KPI Report, simply navigate to the "ISO Compliance Guide/ISO KPI Report" option in the menu.

When KPI and KRI statuses are coded as Red or Orange, it indicates that immediate action needs to be taken. This color-coded system provides a visual indication of areas where performance or risk levels are not meeting the desired thresholds or standards, prompting organizations to prioritize and address critical issues promptly.