If a scheme doesn’t have specific rules regarding remote evaluation/audit, is it possible that CABs (depending on the risk analysis done by the CAB) perform all the evaluation/audit activities remotely for initial certification or part of initial certification?
Assuming that a CAB has developed a scheme based on an international standard and defined that initial certification can be performed remotely in certain circumstances such as pandemic or disaster cases etc. Is it acceptable?
Note that: In IAF FAQ:
“Q5: Is it possible to perform a full certification audit remotely?
A: Yes, in theory it is possible, if for the specific scheme all the requirements can be evaluated remotely, including observation of activities. However, this could change for specific schemes.”
It isn’t clear what “full certification audit” covers.
September 2020
The IAF FAQ is valid here during the pandemic, if the scheme has no specific requirements, then all auditing activities for the initial certification can be carried out remotely, including Stage 1 and Stage 2, as long as all necessary evidence can be gathered and reviewed in that way.
Note should also be taken of the requirements of IAF ID 3 and MD 4.