The FAQs are some of the questions that we are frequently asked in some (but not all) of the areas in which IAF Accreditation Body (AB) members and their accredited Certification Bodies (CBs) practice. The questions and answers are not intended to be exhaustive; however, they constitute a common understanding and a guidance to manage, in a harmonized way, the conformity assessment activities under the specific situation of COVID-19.
Q25: During the COVID-19 crisis, if a CAB conducts a part of the recertification of a management system with remote audit activities and plans to complete the remainder of the audit onsite within six months, is it possible to reissue the certificate at the conclusion of the remote audit activities?
A25: If the CAB is not able to perform evaluation activities physically or when these cannot fully be replaced with evaluation activities as per IAF MD 4, then the normal scheduled recertification activities may be postponed for up to 6 months (see Q13)
Despite of this, if the certificate is expired, according to ISO/IEC 17021-1 § 9.6.3.2.5, the certification body can restore certification within 6 months provided that the outstanding recertification activities are completed, otherwise at least a stage 2 shall be conducted.
a certificate can only be renewed if the CAB is able to evaluate all the applicable requirements of ISO/IEC 17021-1 (9.6.3.2) through a complete and effective audit of the client’s management system, followed by a successful review and decision making activities
Q23: In consideration of this extraordinary period, if a Management Systems Certification Body is not able to perform audits, physically or with remote audit technique, can an Accreditation Body replace a witness assessment, as required in IAF MD17, with a remote office assessment or with other assessment activities (IAF MD17, § 2.2.1)?
A23: If witnessing cannot be delayed, instead of observing a CAB carrying out conformity assessment services, an Accreditation Body may either :
use other mechanisms (office assessment activities or other assessment activities IAF MD17, § 2.2.1) to assess the scope of accreditation.
or maintain the scope of accreditation providing that the witnessing assessment shall still be conducted immediately once it is possible.
Q22: Could time duration for closure of Non Conformities be prolonged taken into consideration the COVID-19 outbreak? If so, what will be the mechanism / procedure and who is responsible for decision making?
A22: Yes, If it is not possible to perform evaluation activities to effectively close the nonconformities (physically or as per IAF MD4: 2018), and if the conditions recommended by IAF ID3: 2011 are satisfied, closure of nonconformities could be prolonged. However, the postponement of any conformity assessment activity (e.g. surveillances, recertification) can only be postponed for up to 6 months in accordance with FAQ 10.
Q21: A number of CB clients are, as a result of the COVID-19 outbreak, switching their manufacturing to manufacture items such as face masks or ventilators, some governments are requesting that they have these items within their scope of management system certification approvals. Can such scope extension be done by remote means using MD4?
A21: Yes, following what was already clarified in Q5.
Q20: What will happen to the Transition periods (e.g. ISO 22000:2018, ISO 50000:2018); will these be extended?
A20: Yes, transition periods are extended for six mouths. The audit for transition can be done with remote audit techniques, following what has already been clarified in Q5.
Q19: According ISO/IEC 17021-1, § 7.2.4, “The initial competence evaluation of an auditor shall include the ability to apply required knowledge and skills during audits, as determined by a competent evaluator observing the auditor conducting an audit”. Is it possible to conduct this observation if the observer is using remote audit techniques?
A19: Yes, provided that the remote audit being observed can fully replace physical audit.
Q18: IAF ID 3:2011 §3 says that “If the risk of continuing certification is low, and based on the collected information the CAB may need to consider alternative short-term methods of assessment to verify continuing system effectiveness for the organization. This may include requesting relevant documentation (for example, management review meeting minutes, corrective action records, results of internal audits, test/inspection reports, etc.) to be reviewed off site by the CAB to determine continuing suitability of the certification (on a short-term basis only)”. Is this time, used to off-site review the documentation provided by the company, to be considered as “audit time” according to IAF MD 5:2019?
A18: yes, the off-site review of the documentation provided by the company is needed to plan and accomplish a complete and effective audit of the client organization’s management system. This time is to be considered as “audit time” according to IAF MD 5:2019. Audit duration may be reduced due to such off-site documentation review.
by IAF FAQ TF April 11, 2020
Q18:IAF ID 3:2011 文件的第3節(jié)提到“如果持續(xù)認(rèn)證的風(fēng)險較低,并且基于收集到的信息,合格評定機構(gòu)(CABs)可能需要考慮替代的短期評審方法,以驗證組織的管理體系的持續(xù)有效性。這可能包括要求組織提供相關(guān)文件(例如,管理評審會議記錄、糾正措施記錄、內(nèi)審結(jié)果記錄、檢測/檢驗報告等)。由合格評定機構(gòu)(CABs)實施非現(xiàn)場的審查,以確定認(rèn)證的持續(xù)適宜性(僅短期)”根據(jù)IAF MD 5:2019,用于對公司提供的文件進(jìn)行非現(xiàn)場審核的時間是否被視為“審核時間”?
Q17: During the COVID-19 crisis, if a CAB conducts a part of the initial certification of a management system with remote audit activities and plans to complete the remainder of the audit onsite within six months, is it possible to issue the certificate at the conclusion of the remote audit activities?
A17: No, a certificate can only be issued if the CAB is able to evaluate all the applicable requirements of ISO/IEC 17021-1 (9.3.1.2 Stage 1 and 9.3.1.3 Stage 2) through a complete and effective audit of the client’s management system, followed by a successful review and decision making activities. However, this could change for specific schemes.
Q16: in order to transfer an Accredited Certification of Management Systems (IAF MD2:2017), is it possible to conduct the pre-transfer visit with remote auditing techniques?
A16: Yes, if all the points listed in § 2.2.4 of IAF MD2:2017 and any issues arising from the document review, for example major nonconformities (2.2.2) can be evaluated remotely. However, this could change for specific schemes.
Q15: What will happen to the Migration period for ISO 45001; will it be extended?
A15: OHSAS 18001 certification can be extended by up to six months as detailed in FAQ 10. This means that transition period for migrating accredited certifications from OHSAS 18001:2007 to ISO 45001:2018 is extended to:
30 September 2021.
The audit for migration can be done with remote audit technique, following what already clarified in Q5.
Q14: For OH&SMS, according to IAF MD5:2019 (applicable from 7 May 2020), remote auditing techniques shall be limited to reviewing documents/records and to interviewing staff and workers. In addition for OH&SMS, process control and OH&S risk control cannot be audited using remote audit techniques. Considering the specific circumstances, is this valid?
A14: No, considering the specific circumstances, and that the applicability of IAF MD5:2019 has been extended from 7 May 2020 to 7 November 2020 (see Q24), the restriction placed on remote audit activities by IAF MD 5 shall not apply. This means that process control and OH&S risk control can be audited using remote audit techniques until the end of the COVID-19 emergency.
Q13: In consideration of this extraordinary period ,may all of:
l the conformity assessment activities (e.g. surveillances, recertification) be postponed for up to 6 months, and
l The validity of any output of any conformity assessment activity (e.g. a certificate or report) be extended for a corresponding period of up to 6 months?
A13: No. In cases where CABs are still able to perform evaluation activities physically or when these can be fully replaced with evaluation activities as per IAF MD 4, then normal scheduled conformity assessment activities (e.g. surveillances, recertification) should be performed. Otherwise, if the conditions recommended by IAF ID 3: 2011 are satisfied, the normal scheduled conformity assessment activities may be postponed for up to 6 months, and the validity of any output of the conformity assessment activity (e.g. a certificate or report) may be extended for a corresponding period of up to 6 months.
回答13: 否。如果認(rèn)證機構(gòu)仍然能夠?qū)嵤┑浆F(xiàn)場的審核活動,或者根據(jù)IAF MD4可以完全實施代替審核的活動,則應(yīng)執(zhí)行正常計劃的合格評定活動(例如監(jiān)督、再認(rèn)證)。否則,如果滿足IAF ID 3: 2011建議的條件,正常計劃的合格評定活動可以推遲最多6個月,并且合格評定活動的任何輸出(例如證書或報告)的有效性可相應(yīng)延長最多6個月。
IAF FAQ 特別工作組 2023年4月1日
Q12
Q12: Is IAF MD4:2018 exclusively applicable for management systems, persons, and product?
A12: No, Although the scope of IAF MD4:2018 is for the auditing /assessment of management systems, persons, and product (see IAF MD4:2018 Section 1-Scope), it can also be used for other types of conformity assessment activities under the IAF MLA, e.g. validation or verification, as referenced in Section 2 – para. 2 of MD4.
Q11: Is IAF ID3:2011 exclusively applicable for management systems certification?
A11: No, IAF ID3:2011 is primarily applicable for management systems certification, but it can be applied to all the accreditation and conformity assessment activities under the IAF MLA (see IAF ID3:2011 para. 1): Management systems certification Product certification Certification of persons Validation and Verification
Q10: For schemes under IAF MLA (Management system certification, Product certification, Certification of persons, Validation and Verification), how are conformity assessment activities to be managed in this extraordinary period?
A10:In consideration of this extraordinary period, for schemes of management system certification, product certification and certification of persons under IAF MLA, if it is not possible to perform evaluation activities (physically or as per IAF MD4: 2018), such as audits or exams, and if the conditions recommended by IAF ID3: 2011 are satisfied, all the conformity assessment activities (e.g. surveillances, recertification) may be postponed for up to 6 months, and the validity of any output of any conformity assessment activity (e.g. a certificate or report) may be extended for a corresponding period of up to 6 months. In this last instance, in order to document this to the client, if applicable, it is strongly suggested to issue an extension letter, which ratifies this extended validity and its period. This is essential to guarantee transparency and a correct communication to the external market. Appropriate records should also be updated. However, this could change for specific schemes. For validation and verification, particularly the greenhouse gas (GHG) validation and verification at project or organizational level, they are normally one-off conformity activities, therefore the IAF ID3 guidelines related to surveillance, recertification, extension of certification and recertification cycle etc. may not be applicable. However, for the assessment and accreditation of validation and verification bodies (VVBs), IAF ID3 can be used (see A11), and the remote approaches as per IAF MD4:2018 can be used by both ABs and VVBs (see A12).
Updated on 23/03/2020 to include all IAF MLA main scopes.
Q9: Is IAF ID3:2011 still applicable even though ID3:2011 refers to an accreditation standard that is no longer valid (ISO/IEC 17021:2011)?
A9: Yes. It is applicable. IAF General Assembly Resolution 2015–15 was taken to confirm this. For the maintenance of IAF Technical Committee documents it states: “The General Assembly, acting on the recommendation of the Technical Committee, resolved that references to ISO/IEC 17021 in IAF documents shall be understood to refer to ISO/IEC 17021-1:2015 in relation to CABs that have completed the transition and after the transition period. However, ABs and CABs will need to take account of the changes in ISO/IEC 17021-1 when using IAF documents which may not be revised until after the transition period to reference ISO/IEC 17021-1.”
Q8: If there is a postponement of 6 months in the deadline of a certificate, according to IAF ID3, will the next accreditation/certification cycle start from the new deadline, or does the original one need to remain?
A8:The deadline remains the original one. However, it could happen that in specific circumstances the timeline of surveillance could be modified accordingly.
Q7: What happens if a Company/CB is not comfortable in this period to give access to its location to the AB audit / assessment team for witnessing?
A7:IAF ID3 allows, in extraordinary events or circumstances like this, postponement of the assessment / audits. Moreover, according to IAF MD17:2015 Witnessing Activities for the Accreditation of Management System Certification Bodies and/or relevant timeline modified accordingly, it is justifiable and understandable in this situation that a CB or its client refuses a witness assessment by the AB. It is important to make audits only when there is agreement of all the parties involved (client, CB and AB). See MD17, 2.2.2 and 2.4.2. It is also possible to perform partial witnessing (2.4.10).
Q6: Is the limit imposed by ISO/IEC 27006 (maximum 30% of remote audit) still valid?
A6:ISO/IEC 27006 was published in 2015, while IAF MD4 was published in 2018 (Issue 2, Issued 04 July 2018, application from 04 July 2019). So, considering the specific circumstances, for ISO/IEC 27006 the relevant rules of IAF MD4 also are applicable. This means that is possible to adopt to ISO/IEC 27006 the MD4 approach, that is to exceed 30% “off-site” and allow a 100% off-site, during this COVID-19 period.
Q5: Is it possible to perform a full certification audit remotely?
A5: Yes, in theory it is possible, if for the specific scheme all the requirements can be evaluated remotely, including observation of activities. However, this could change for specific schemes.
Q4: Will the Nov. 2020 deadline for implementation of the new version of ISO/IEC 17011 still hold?
A4: The joint committee with ILAC that looks after all peer evaluations has developed a related document. The document has the agreement of the Regional MLA Chairs and is available on the IAF Website under:
Q3: What is happening with IAF MLA peer evaluations during the outbreak?
A3:The joint committee with ILAC that looks after all peer evaluations has developed a related document. The document has the agreement of the Regional MLA Chairs and is available on the IAF Website under:
Q2: Is it permissible to use remote assessments and audits to maintain the validity of accredited certifications during the COVID-19 crisis?
A2:Yes. The IAF Statement on COVID-19 referenced the use of remote assessments and the mandatory document to be used by ABs and CBs, IAF MD4:2018 IAF Mandatory document for the Use of Information and Communication Technology (ICT) for Auditing and Assessment Purposes. In addition, there is also informative document on principles for remote assessments – IAF ID12:2015 Principles on Remote Assessment that can be used in this instance. It is necessary to bear in mind however, that regulatory bodies, scheme owners and purchasers may have specific requirements that may need to be adhered to, and which may take precedence. IAF ID3 may also assist readers.
Q1: Are IAF and ILAC going ahead with the Joint IAF-ILAC Mid-term meetings in Beijing in March considering the COVID-19 outbreak, and subsequent travel restrictions?
A1:No, these meetings have been cancelled and not being re-scheduled. The work will be progressed by other means.