COVID-19 Announcement, Derogation 2022-2
Amendment to COVID-19 Announcement, Derogation sent on 24 March2022 by GSTC.
Date: 14th October 2022
To: GSTC Accredited Certification Bodies
CC: Assurance Services International
Tourism has been among the hardest hit of all the economic sectors affected by theoutbreak and measures to control the spread of COVID-19. Many countries are lifting
constraints on travel and gathering; however, the gradual recovery of tourism is
expected to continue throughout 2022. In that regard, the GSTC has amended
derogation 2022-1 sent on 24 March 2022. This derogation 2022-2 replaces theprevious derogation 2022-1 dated 24 March 2022.
This derogation applies to all GSTC audits planned by accredited CBs and allows CBs
to:
1. Postpone the audit when the CB’s client is non-operational or travel and gathering
restrictions remain in place in the CB’s client location. This derogation allows theCB to postpone the audit for a period of three (3) months from the date of thisderogation. If a GSTC certificate is due to expire in 2022, it may be extended forup to three (03) months beyond its original expiry date. A recertification audit shallbe performed as soon as travel restrictions have been lifted and before themaximum 03-month extension expires in order to renew certification.
1.1. In the case, the audit has already been postponed, or an extension wasgranted in 2022 based on derogation 2022-1, certificates may be extended
with the proper justification up to 03 months from the date of application ofderogation 2022-2 and the corresponding audit must be planned andcompleted at the earliest opportunity within the extended period. The GSTC
requires the CB to inform the GSTC Technical Team (td@gstcouncil.org) ofthe approach taken in each case.
1.2. The CB is allowed to postpone the audit or extend the certificate per the client’srequest. The CB shall retain documented evidence for the reasons to apply
point #1 in this derogation.
2. Conduct remote audits only when the CB’s client is operational, but the CBs areunable to conduct a normal on-site audit due to travel restrictions in the client’s
country of operation. The CB shall retain documented evidence for the reasons toconduct a remote audit.
2.1. The CB shall use a risk-based approach to determine whether the audit should
be carried out on-site or remotely. The CB shall conduct an assessment ofhealth risk to the client and appointed auditor involved in the on-site audit, todetermine whether an on-site audit is deemed appropriate. The CBs shalldocument in audit reports the type of audit (remote, on-site or hybrid) and shallprovide a clear justification of the chosen method.
2.2. The CB shall evaluate all the requirements of the remote audit and document
whether a requirement/finding raised during the remote audit may be subject
to re-evaluation through an on-site audit when travel and gathering restrictions
are lifted in the client’s country of operation. The remote audit option shall only
apply in the case of surveillance audits. This is expected to be a short timemeasure until the COVID-19 situation improves and constraints on travel andgathering are no longer applicable. Remote audits shall not be conducted in
the event that the CB’s client is non-operational (see point 1 above).
3. The CB shall use a risk-based approach to determine the feasibility of a hybrid
audit and the requirements to be evaluated remotely and on-site. The timeline for
conducting remote and on-site audits shall be based on the risk-based approach,feasibility to assemble an audit team and travel restrictions in the client’s countryof operation. The CBs shall document in audit reports whether this derogation has
been applied and shall provide a clear justification of the chosen method.
3.1. Hybrid audits can have two variations:3.1.1. Two-part audit combining on-site activities and off-site activities withina determined period.
3.1.2. Two auditors: one performing the remote activities and anotherperforming the on-site activities. Both auditors shall comply with theGSTC Auditor Training per clause 10.9 in the GSTC Accreditation
Manual v2.5. The lead auditor shall also comply with GSTC Auditor
Qualifications, knowledge and skills listed in section 10 in the GSTC
Accreditation Manual v2.5
3.2. The hybrid audit option shall apply only in the case of initial and recertification
audits. Hybrid audits shall not be conducted in the event that the CB’s client is
non-operational.
3.3. When a hybrid audit option is the chosen method, the CB shall complete onsite and off-site activities before issuing a certificate to the client. The CB shallalso comply with the regular GSTC certification requirements on nonconformities per the GSTC Accreditation Manual v2.5.
The CBs shall retain documented evidence for each case where this derogation has
been applied and specify clearly if the audit was conducted remotely, on-site or hybrid.
The following definitions apply to this derogation:● Operational: When all the CBs client’s activities and functions are up andrunning.
● Hybrid Audit: Combination of on-site audit (activities performed at the locationsuch as inspections, interviews, observations, etc.) and remote audit (activities
performed at any place other than the location of the auditee).

For conducting remote and hybrid audits, the following documents should beconsidered:● IAF ID 3: 2011: Management of Extraordinary Events or Circumstances
Affecting ABs, CABs and Certified Organizations.
● IAF MD 4: 2018: The Use of Information and Communication Technology(ICT) for Auditing/ Assessment Purposes.
● ISO 19011:2018: Guidelines for auditing management systems.
● ISEAL Guide on Using Technology and Data in Remote Audits.
CBs are advised to regularly monitor official government travel instructions/advice. As
soon as official domestic government travel restrictions are lifted, audits shall be
conducted according to regular GSTC audit and certification requirements. It is
important, however, that CBs ensure that the sources of official travel announcements
are consistent with the legal reference made by the CB’s travel insurance.
The GSTC will continue to monitor the situation and provide any updates. For any
other questions please contact GSTC Technical Team (td@gstcouncil.org).

Sincerely,Randy Durband
GSTC CEO