Evidence that withstands scrutiny
Evidence that withstands scrutiny
ISO/IEC 17021-1:2015 separates the audit, the technical review and the certification decision. That separation is what a certificate is worth, and it is the reason the cycle looks the way it does.
Scope, sites, headcount, shifts, processes and any outsourcing are established in writing. This determines audit time; an inaccurate application produces an audit programme that will not survive Stage 1.
Client and bodyThe certification body confirms competence for the scope, determines audit time and appoints an audit team with no conflict of interest.
Certification bodyDocumentation, internal audit, management review, site conditions and the scope as stated. The output is a written statement of what must be in place before Stage 2, and when.
Audit teamEvidence that the system is implemented and effective, gathered on site through interview, observation, record sampling and process walkthrough.
Audit teamNonconformities are stated with the requirement and the evidence. The organisation submits correction, root-cause analysis and corrective action; the body verifies effectiveness, not intention.
Client, then bodyA competent reviewer who took no part in the audit examines the file for completeness, consistency and whether the evidence supports the recommendation.
Independent reviewerTaken by authorised personnel who neither audited nor reviewed. The certificate is issued with a scope, sites and validity that match exactly what was assessed.
Authorised decisionPeriodic audits confirm continued conformity and address changes to scope, sites, personnel, complaints and use of the mark.
During the cycleA full review of performance across the whole cycle before renewal — not a repeat of Stage 2, and not a formality.
End of cycleTell us what must be relied on, who will rely on it and by what date. We will confirm the correct programme, evidence requirement and responsible entity — or tell you it is outside our scope.
