ISO procedures/forms for our IT dept.

ISO doesn't require "specific" forms or policies.

You may need to update some of your forms and proceedures to include ISO requirements such as revision level and approvals.

For the most part, ISO 900x certification means that you have policies and proceedures in place, and that you follow those policies.

Check with the ISO coordinater, and verify what you need to do.

Chas

I went through ISO900 cert at a company I worked for.
1 individual wanted us to change every form and proceedure to what he had used at the last place he worked.
He claimed that that was the only way we could get certified.

Our QA manager (who had lead ISO9000 teams at 2 other firms) said that all we had to do was to modify our existing documents, and add a few policies.

Specifically, we had to add date and revision to all forms and company documents.
We had to create a mission statement, and document our change control proceedure.
Documenting continuous improvement was a big hurdle for us.
As was the FMEA proceedure.

Remember that ISO9000 does NOT specify documents or proceedures.
ISO9000 simply verifies that;
1. You document what you do
2. You follow your documented proceedures

Anyone who makes it a lot more complicated is trying to create excess paperwork.

For some further information
www.iso.org
http://www.iso-9000-2000.org/

This sub-page goes into good detail
http://www.iso-9000-2000.org/2/4/explan00.html

http://www.bulltek.com/English_Site/ISO9000_Introduction_English/ISO90002000_English/ISO%209000-3%20English/body_iso_9000-3_english.html

http://www.isoeasy.org/isorefs.htm

Chas