Management System Audits
During the COVID 19 pandemic EQA have worked with other certification bodies across the globe in certification groups to ensure that the most effective approach has been taken to managing audits in a pandemic.
The current best practice for audits is to determine a blended approach to auditing to ensure an effective certification audit can be completed. Based on a blended approach to auditing there are three options to completing the audit:
- Fully Remote: All elements of the audit will be done remotely, this could use a combination of approaches such as telephone calls, video calls, pre-recorded videos etc.
For processes on a full remote audit there can be many options: Live video calls with staff involved in the process and a demonstration of the process, pre-recorded video of the process and subsequent interview with relevant staff or where video evidence can not be obtained then a documentation review along with relevant staff can take place.
- Partial Remote: Where there is a requirement to cover some element of the audit onsite and the rest is done remotely through documentation review and video calls with staff. Generally, this would be done where processes need to be seen in person or where data protection and information security policies prohibit remote viewing of information.
- Full onsite: In some cases a full onsite is required and auditor will follow all safety controls in place onsite.
EQA have developed an approach focused on the following steps for auditing in the current climate:
- Contact the client to determine when and how the audit can be carried out.
- Complete a remote audit risk assessment to determine whether it is possible to complete your certification audit full remotely, partial remote or whether a full onsite is required.
This is all based on multiple factors relating to such things as the type of scope, the number of issues raised at the last audit, the availability of technology on the day of the audit.
- Carry out the audit, where the audit is remote the auditor will make a determination on whether an effective audit has taken place and if necessary will notify the client if additional time is needed onsite to cover the audit fully.
With regards to remote auditing the auditor will be in touch prior to the audit and will send a video link for the audit.
It is up to the client how they want to share documentation but the general approach is through a cloud server such as Microsoft OneDrive or Dropbox where the client shares a link to the files. Another approach would be to share the screen on the day of the audit to go through the documentation.
EQA will work with clients during this complex situation to ensure that the value and integrity of the management system certification is maintained.
If you have any concerns or queries regarding your certification please contact us on 01-4734188 or email us at info@eqa.ie.
Security System Audits
As per the PSA instructions, under level 5 restrictions all security audits are currently being carried out fully remotely.
For all security audits the requirements for documentation remain the same, the auditor will review all required documentation remotely
It is up to the client how they want to share documentation but the general approach is through a cloud server such as Microsoft OneDrive or Dropbox where the client shares a link to the files. Another approach would be to share the screen on the day of the audit to go through the documentation.
Instead of site audits documentation of sites will be required to be viewed by the auditors on the day of the audit.
For all audits a list of quotes and sales orders will need to be sent into the auditor so that he can take a sample amount for review during the audit. The list does not need to include any client information, reference numbers will suffice.
If you have any concerns or queries regarding your certification please contact us on 01-4734188 or email us at info@eqa.ie.