The certification process for system certification
What happens during certification: an introductory description
What happens during certification: an introductory description
FORCE Certification A/S is accredited by DANAK, the Danish Accreditation and Metrology Fund (a member of European Accreditation, or EA) to perform certifications in accordance with:
FORCE Certification has been granted authorisation to conduct certification in accordance with European directives; see About FORCE Certification A/S.
The foundation of FORCE Certification’s system and process certification work is the Ministry of Industry, Business, and Financial Affairs’ law on business support activities and associated executive orders, and in particular, the requirements of DS/EN ISO/IEC 17021.
The English text of these standards serves as the basis for the certification processes.
Companies interested in certification should note that certifications must adhere to the requirements specified in the applicable standards, accreditation requirements, and guidelines at all times. When these requirements change, companies must implement the changes by the deadline established in the standard or guideline in order to maintain their certifications.
These kinds of changes can also require changes to be made to a concluded certification agreement.
We at FORCE Certification A/S will inform companies of these changes as soon as we become aware of them.
Using such information as the scope of the certification and the legal requirements that the company is subject to, FORCE Certification A/S provides a quote for certification, including surveillance audits, for approval. Once signed, this document becomes the formal certification agreement. It includes FORCE Certification’s standard terms, as well as ABC-Sys, our special provisions for system certification. FORCE Certification A/S appoints an auditing team comprising staff approved by FORCE Certification A/S, taking into consideration the required skills and capabilities, as well as any special circumstances (e.g., impartiality) that apply to the certification job in question. Additionally, observers (internal auditors or auditors in training) from FORCE Certification A/S may also participate. The appointed team is then presented to the company, which may raise justified objections against the team’s composition.
For DANAK-accredited certification, companies should note that upon request from DANAK, FORCE Certification A/S is obligated to provide DANAK all information necessary for it to oversee the accreditation, including information regarding pricing and hourly rates, and their underlying calculations.
Furthermore, FORCE Certification A/S is obligated to receive oversight visits from DANAK; companies must accept the possibility that such an oversight visit may include FORCE Certification’s accredited on-site activities – that is, participation in auditing, etc. at the company.
During the certification process, FORCE Certification A/S will ensure that prior to the Stage 2 audit (see below), companies obtain information from relevant government agencies regarding any agreements and outstanding issues that could be relevant to the certification process.
During the Stage 2 audit, companies must be prepared to present documents regarding any agreements, authorisations, approvals, obligations, prohibitions, surveillance reports, and outstanding issues relevant to the certification process.
The certification process is typically conducted in two Stages: Stage 1 and Stage 2.
The purpose of Stage 1 is to:
Stage 1 includes a review of the documentation for the system and a visit to the company. In certain cases, it may be possible to conduct Stage 1 without a visit to the company.
After the Stage 1 audit, the company receives a report that lists any problem areas and areas for improvement. Corrections / corrective action must be processed and closed by the company before the Stage 2 audit.
A reasonable amount of time before the Stage 2 audit, the company receives a plan for how the Stage 2 audit will proceed.
The purpose of the Stage 2 certification audit is to determine:
The company is required to:
Auditing visits are conducted in accordance with FORCE Certification A/S’s procedures, and include the following elements:
During the concluding meeting, the lead auditor:
During the concluding meeting, the company will receive documentation for any nonconformities or problem areas identified.
Documentation for the company’s handling of identified nonconformities/problem areas should be sent to FORCE Certification A/S within the established time frame, which is not to exceed 90 days.
In some circumstances, FORCE Certification A/S may conduct follow-up visits to the company’s location(s) in order to verify the implementation of corrections/corrective action.
FORCE Certification A/S verifies corrections/corrective action as follows:
Corrections and corrective action must be implemented and verified within 90 days after FORCE Certification notifies the company of a nonconformity or problem area.
When notifying a company of a large or critical nonconformity, FORCE Certification will assess whether the company can maintain its certification status during the period in which the nonconformities are being addressed.
If verification is not possible within 90 days, FORCE Certification reserves the right to conduct a new assessment, which may include a visit to the company’s premises.
Once the Stage 2 audit has been conducted and the company has communicated the action it took in response to nonconformities and observations, if applicable, the lead auditor will recommend to the certification manager that FORCE Certification A/S issue a certificate. Once the certification manager’s verification is complete, the company is issued its certificate.
The scope of certification, expiration date, and other information are included on the certificate.
The company’s system documentation is assessed during the Stage 1 and Stage 2 audits.
FORCE Certification A/S may request that this documentation be sent before the visits.
Companies may provide system documentation on paper, via access to a corporate intranet, or in another format.
Storing and updating system documentation in accordance with applicable requirements (e.g., PED, archiving for 10 years) is the company’s responsibility.
An overview of outdated system documents must be continuously maintained subject to the company’s document management system.
FORCE Certification A/S offers multi-site certification with visits that are reduced in scope.
To be eligible for multi-site certification:
The scope of visits is determined according to recognised guidelines (IAF MD 1:2018), which include the following:
Any nonconformities or observations recorded at one site must be addressed at all affected sites within the scope of the certification.
In the case of a multi-site certification agreement valid for 3 years, if the company decides to exclude one or more sites (e.g., because they may be unable to meet certification requirements) after the Stage 2 audit, the certification agreement is terminated. Thereafter, a new certification agreement can be concluded to reflect the change in scope, resulting in a new certification process.
For a certificate to remain valid, the company must at all times operate in accordance with its policies, system documentation, system requirements, contractual obligations, and any applicable legal determinations. FORCE Certification A/S will continue to oversee compliance through surveillance audits to the company, which will occur at least once per year.
These visits will be conducted according to an audit plan developed by the lead auditor. The purpose of the plan is to ensure that the elements and processes that comprise the management system are evaluated at least once during the period of validity. The plan also ensures that locations covered by the certificate are visited as provided for in the basis for certification and in accordance with accreditation requirements. Further details depend on the particular rules that FORCE Certification A/S has developed for the certification standard in question.
The dates and times of surveillance audits are arranged between FORCE Certification A/S and the company. Visits are conducted according to a plan that incorporates elements of the overall requirement basis.
In the event that FORCE Certification A/S becomes aware of situations requiring additional surveillance audits, these visits may be conducted on short notice.
Certificates are valid for 3 years, provided that surveillance audits are conducted annually.
At the time of renewal, a new certification agreement is concluded, valid for a new 3-year period.
Should a company wish to make significant changes to its management systems while it holds a valid certificate, details of the planned changes must be sent to FORCE Certification A/S as soon as possible.
Significant changes include changes affecting the following:
The lead auditor will assess whether these changes could impact the validity of the certificate, and whether the changes require assessment via an extraordinary follow-up visit to the company.
Minor system changes, such as updates to procedures, formulae, references, etc. can be evaluated during the first surveillance audit following their implementation.
There may be a need to conduct an audit visit on short notice in the following situations:
Audit visits are conducted according to an audit agenda sent to the company before the visit.
The cost of such a visit is determined by any associated expenses and the hourly rate indicated in the applicable pricing agreement.
Unannounced audit visits may be conducted as part of the system certification process in accordance with:
FSSC 22000, which stipulates that the certifying body must be able to conduct at least 1 unannounced visit within the certification period.
After such a visit, the customer will receive an audit report.
Our services are provided at the rates specified in our most recently published pricing list.
FORCE Certification A/S provides quotes for certification services based on applicable rules for accredited certification, as well as on our experience with certification at similar companies. These quotes include time spent and any applicable travel and lodging expenses, in accordance with FORCE Certification’s most recently published pricing list.
To maintain certification, FORCE Certification conducts regular surveillance audits at least once per year. The frequency of these visits will be specified in the certification agreement. You will be billed for hours associated with these visits, as well as any applicable travel and lodging expenses, in accordance with FORCE Certification A/S’s most recently published pricing list.
Before a certificate expires, FORCE Certification will conduct a re-certification visit, billed in accordance with the certification agreement.
Other services deemed necessary by FORCE Certification A/S or desired by the company in connection with ongoing certification maintenance will be billed in accordance with the applicable pricing list.
In addition, there are travel and lodging expenses, in accordance with FORCE Certification A/S’s most recently published pricing list.
Aside from the procedure itself, the company must be aware of certain situations that could arise during the certification process. These situations are described in greater detail in our special provisions, ABC-Sys.
For your convenience, some sections of these provisions are summarised below.
At any time, FORCE Certification A/S may suspend a certificate within its period of validity in the event that its terms are violated or at the request of the company; for more details, see section I of ABC-Sys.
During the suspension period, normally no longer than 90 days, the customer’s management system certification will be temporarily invalidated.
The suspension status will be made public on FORCE Certification A/S’s
website, where it can be found under Search a valid scertificate.
At any time, FORCE Certification A/S may recall a certificate within its period of validity, in the event that the certified company neglects to rectify the situation(s) that resulted in suspension before the deadline set by FORCE Certification A/S.
The customer’s management system certification becomes invalid immediately after the recall notice is issued.
The recall status will be made public on FORCE Certification A/S’s website, where it can be found under Search a valid certificate.
Immediately upon receiving notice from FORCE Certification A/S of a suspended or re-called certificate, the customer must cease to use the FORCE Certification A/S mark, as well as any and all promotional materials which make reference to the certificate, including sales materials, brochures, websites, etc.
In response to a request to expand the scope of applicability for an already issued certificate, FORCE Certification A/S will review the request and assess whether an audit visit is needed to determine whether to grant the expansion. This may be conducted at the same time as an surveillance audit.
If FORCE Certification A/S finds that the customer has gravely or continuously failed to meet the certification requirements for a given portion of the certificate’s applicable scope, FORCE Certification A/S will restrict the scope of the certificate so as to exclude the areas which do not meet the requirements.
If FORCE Certification A/S restricts the scope of a certificate, all promotional materials must be corrected in accordance with the new scope.
FORCE Certification’s certification mark will be attached to certificates sent by post.
Requirements regarding the use of the mark are specified in ABC-Sys.
Note in particular that companies are not entitled to use DANAK’s marks in any way.
Once a certificate has been issued in accordance with a module listed in the European directives, the customer may use FORCE Certification’s identifying number, 0200, on the product classes to which the certificate applies.
Product marking regulations are provided in the corresponding EU directives.
Once an FSSC 22000 certificate has been issued, the company may use the FSSC certification mark. Additional information on this topic is available from the FSSC website.
FORCE Certification A/S will treat all information as confidential in accordance with ABC-Sys.
Note that appeals and complaints must be submitted in writing no later than 4 weeks following the receipt of a decision or the date of certification; see ABC-Sys.
The procedure for submitting an appeal or complaint is indicated on our website, under Complaints & Appeals to FORCE certification A/S.
FORCE Certification A/S is obligated to publish at appropriate intervals an overview of information on registered certificate holders; see ABC-Sys.