particular requirement is addressed (CB to provide details) Yes/No 5 Requirement for Certification Bodies 5.1 and contractual matters 5.1.1 Legal responsibility – The certification body shall be a legal entity, or a defined part of a legal entity, such that it can be held legallyresponsible for all its certification activities. A governmental certification body is deemed to be a legal entity on the basis of its governmental status. 5.1.2 Certification agreement - The certification body shall have a legally enforceable agreement with each client for the provision of certification activities in accordance with the relevant requirements of this part of ISO/IEC 17021. In addition, where there are multiple offices of a certification body or multiple sites of a client, the certification body shall ensure there is a legally enforceable agreement between the certification body granting certification and the client that covers all the sites within the scope of the certification.
8.3.3 A certification body shall have rules governing the use of any statement on product packaging or in accompanying information that the certified client has a certified management system. Product packaging is considered as that which can be removed without the product disintegrating or being damaged. Accompanying information is considered as separately available or easily detachable. Type labels or identification plates are considered as part of the product. The statement shall in no way imply that the product, process or service is certified by this means. The statement shall include reference to: —identification (e.g. or name) of the certified client; —the type of management system (e.g. quality, environment) and the applicable standard; —the certification body issuing the certificate. 8.3.4 The certification body shall through legally enforceable arrangements require that the certified client: a) conforms to the requirements of the certification body when making reference to its certification status in communication media such as the internet, brochures or advertising, or other documents; b) does not make or permit any misleading statement regarding its certification; c) does not use or permit the use of a certification document or any part thereof in a misleading manner; d) upon withdrawal of its certification, discontinues its use of all advertising matter that contains a reference to certification, as directed by the certification body (see 9.6.5);
system, products and processes as well as demonstrated level of management system effectiveness and the results of any previous audits. NOTE 1 Annex E provides a f lowchart of a typical audit and certification process. NOTE 2 The following list contains additional items that can be considered when developing or revising an audit programme, they might also need to be addressed when determining the audit scope and developing the audit plan: — complaints received by the certification body about the client; — combined, integrated or joint audit — changes to the certification requirements; — changes to legal requirements; — changes to accreditation requirements; — organizational performance data (e.g. defect levels, key performance indicators data); — relevant interested parties’ concerns. NOTE 3 If specified by the industry specific certification scheme, the certification cycle can be different from three years. 9.1.3.3 Surveillance audits shall be conducted at least once a calendar year, except in recertification years. The date of the first surveillance audit following initial certification shall not be more than 12 months from the certification decision date. NOTE It can be necessary to adjust the frequency of surveillance audits to accommodate factors such as seasons or management systems certification of a limited duration (e.g. temporary construction site).