Clarification is sought in respect to ISO/TS 22003:2013 Clause 9.1.5
Is it correct that for Category E Catering organisations the “sites” referred to in ISO/TS 22003:2013 Clause 9.1.5.3 and 9.1.5.4 are sites where an organisation operates and are not locations (Customer Location) where an organisation provides catering events, that are managed from one or more of their “site(s)”.?
Referenced Clauses
9.1.5.3 The use of multi-site sampling is only possible for categories A, B, E, F and G (see Table A.1) and for organizations with more than 20 sites operating similar processes within these categories. This applies to the initial certification, to surveillance and to recertification audits. The certification body shall justify its decision on sampling for multi-site certification.
Where multi-site sampling is permitted, following certification, the annual internal audit programme shall include all sites of the organization.
NOTE Risk is another consideration when determining sampling and can increase the level of sample indicated in Table 1.
9.1.5.4 Where the certification body offers multi-site sampling, the certification body shall utilize a sampling programme to ensure an effective audit of the FSMS where the following apply.
a) For organizations with 20 sites or less, all sites shall be audited. The sampling for more than 20 sites shall be at the ratio of 1 site per 5 sites. All sites shall be randomly selected and, after the audit, no sampled sites may be nonconforming (i.e. not meeting certification thresholds for ISO 22000).
b) At least annually, an audit of the central office for the FSMS shall be performed by the certification body.
c) At least annually, surveillance audits shall be performed by the certification body on the required number of sampled sites.
d) Audit findings of the sampled sites shall be considered indicative of the entire system and correction shall be implemented accordingly. Table 1 gives examples of the number of sites to audit when sampling is used.
September 2020
Yes, it is correct.
Note: “Customer Location or application site of catering that customer owned” approach is highly similar to “temporary sites” definition in IAF MD 1. Therefore, the CB should handle these customer locations or customer owned sites as “temporary sites” not “permanent sites.
Regarding “What is the meaning of a full certification audit or its coverage?” sub-question in above note:
If one considers the reply to IAF FAQ Q5, “full certification audit” shall be understood as “full (certification) audit” (ISO/IEC 17021-1 9.4.10) or a “ full/complete management system (certification) audit (mentioned in ISO 19011:2018 A12)” (ISO/IEC 17021-1 9.6.2.2), which normally (but not limited) apply to initial certification audits and recertification audits, to evaluate the continued fulfilment of all of the requirements of the relevant management system standard or other normative document.
For instance, a full certification audit is an audit which is covering :
- For an initial certification : 9.3 + 9.4 (up to 9.4.7)
- For a surveillance : 9.6.2.2 + 9.4 (up to 9.4.7)
- For a recertification : 9.6.3.2 + 9.4 (up to 9.4.7)