GB/T 27021-2007Conformity assessment -- Requirements for bodies providing audit and certification of management systems -- Part 1: Requirements (English PDF)

Foreword

GB/T 27021 "Conformity Assessment Management System Certification and Accreditation Body" as a series of national standards, GB/T 27021 series of standards have been the identified part includes.

--- Part 1. Requirements;

--- Part 2. Environmental management system audit and certification body capacity requirements;

--- Part 3. Quality management system audit and certification body capacity requirements;

--- Part 4. Capacity planning of large-scale sustainability management system auditing and certification bodies;

--- Part 5. Assets management system audit and certification body capacity requirements;

--- Part 6. Business continuity management system audit and certification body capacity requirements;

--- Part 7. Road traffic safety management system audit and certification body capacity requirements.

This section GB/T 27021 Part 1.

This section drafted in accordance with GB/T 1.1-2009 given rules.

This section instead of GB/T 27021-2007 "conformity assessment management system audit certification requirements," and GB/T 27021-2007 compared to the main technical changes except for editorial changes are as follows.

--- Modify the definition of the term "fairness" (see 3.2, 2007 edition 3.2);

--- Modify the term "management system consulting" definition (see 3.3, 2007 edition 3.3);

--- Added terms such as "certification audit" "customer" "auditor" "competence" and "management system certification audit time" (see 3.4 ~ 3.17);

--- Added 4.8 "risk-based approach" (see 4.8);

--- Modify 5.2 "Fair Management" (see 5.2, 2007 edition 5.2);

--- Modify Chapter 6 "Structural Requirements" (see Chapter 6, Chapter 6 of the 2007 edition);

--- Removed the "Committee for the Protection of Justice" (see 2007 version 6.2);

--- Modify Chapter 7 "Resource Requirements" (see Chapter 7, Chapter 7 of the 2007 edition);

--- Added other considerations (see 7.1.4);

--- Modify Chapter 8 "Information Requirements" (see Chapter 8, Chapter 8 of the 2007 edition);

--- Removed "certified customer directory" (see 2007 version 8.3);

--- Modify Chapter 9, "Process Requirements" (see Chapter 9, Chapter 9 of the 2007 edition);

--- Added normative Appendix A provides the knowledge and skills required to undertake various types of certification functions (see Appendix A);

--- Increased information Appendix B provides a possible assessment of the ability of personnel (see Appendix B);

--- Increased information Appendix C provides examples of capacity to identify and maintain the process (see Appendix C);

--- Increased informative Appendix D provides examples of expected personal behavior (see Appendix D);

--- Added informative Appendix E provides an example of the audit and certification process (see Appendix E).

This section uses the translation method identical with ISO/IEC 17021-1:2015 "conformity assessment management system audit certification body requirements Part 1. Requirements "(in English).

The documents of our country that are consistent with the corresponding international documents that are normative references in this section are as follows.

--- GB/T 19000-2016 Quality Management System Fundamentals and Terminology (ISO 9000:2015, IDT)

--- GB/T 27000-2006 Conformity assessment vocabulary and common principles (ISO/IEC 17000:2004, IDT) for ease of use, this section made the following editorial changes ISO/IEC 17021-1:2015.

--- Replace the "certified client" with "theorganizationswhose" in 4.1.2b) managementsystemsarecertified);

--- Replaced with "certified customer" 5.2.3 Note 2 "Management System Certification Organization" (organizationswhosemanagement systemsarecertified).

This part of the National Certification and Accreditation Standardization Technical Committee (SAC/TC261) and focal point.

This part of the drafting unit.China national conformity assessment center, the national certification and accreditation supervision and management committee, China Certification and Accreditation Association, China Quality Certification Center, the radius of Mark Certification Group Co., Ltd., Guangzhou Po Certification Center Services Limited, Beijing West Certification Limited Responsible company, China Classification Society quality certification company, Shanghai Quality System Audit Center, China Certification Center Co., Ltd..

Introduction

Management system certification (such as the organization's environmental management system, quality management system or information security management system certification) is a guarantee Method to ensure that an organization has implemented the same requirements as its guidelines and related management system standards to manage its activities, products and services Services related systems.

This section specifies the requirements of the management system audit and certification bodies. It is engaged in quality, environment and other management system audit and recognition the certification body made general requirements. This section refers to such agencies as certification bodies. The implementation of these requirements is to ensure that the certification body is able to do so Management system certification in a way that is consistent, forceful, consistent and fair in order to promote international and national recognition of these institutions and accept their certification. This section this provides the basis for promoting the recognition of management systems certification, which is in the interest of international trade.

Management System Certification is an independent certification of the organization's management system.

a) meet the requirements;

b) the principles and objectives that enable it to achieve its statement from start to finish;

c) be effectively implemented.

As a result, conformity assessment activities such as management system certification provide value to the organization, the organization's customers, and the stakeholders.

Chapter 4 sets out the principles on which credible certification is based. These principles help users understand the essential nature of certification and are Chapter 5 ~ Chapter 10 made the necessary bedding. These principles form the basis for the requirements of this section, but are not themselves requirements for review. No.

Chapter 10 provides two alternative ways for certification bodies to establish and maintain a management system that guarantees and verifies that they always meet the requirements of this part.

Certification activities constitute the entire certification process from the application review to the termination of certification. Appendix E shows a number of certification activities Enough way to interact.

Certification activities include an audit of the organization's management system. The certification body usually certifies the organization's management in the form of a certification document or certificate System meets specific management system standards or other regulatory requirements.

This section applies to all types of management system audit and certification. To achieve the expectations of stakeholders, some of them may be needed Requirements, especially those on the auditor's ability to supplement additional guidelines.

In this section.

--- "should" indicate the request;

--- "Yi" means the suggestion;

--- "can" that allows;

--- "able" to indicate a possibility or ability.

These auxiliary terms are explained in more detail in Part 2 of the ISO/IEC Directives.

Conformity assessment management system audit certification body requirements Part 1. Requirements

1 Scope

This part of GB/T 27021 contains the principles of ability, consistency and fairness of all types of management system audit and certification bodies with the request.

Certification bodies operating in accordance with this section do not have to provide all types of management system certification.

Management System Certification is a third-party conformity assessment activity (see 5.5 of ISO/IEC 17000:2004), therefore implementing this activity the agency is a third-party conformity assessment agency.

Notes 1. Examples of management systems Quality management systems, environmental management systems and information security management systems.

Note 2. In this section, the management system certification is called "certification", and the third-party conformity assessment organization that implements certification is called "certification body."

Note 3. The certification body may be non-governmental or governmental, with or without statutory authority.

Note 4. This section serves as a guideline document for approval, peer review or other review process.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this article Pieces. For undated references, the latest edition (including all amendments) applies to this document.

ISO 9000 Quality Management System Fundamentals and Terminology (Qualitymanagementsystems-Fundamentalsandvocab-ulary ISO/IEC 17000 Conformity Assessment Vocabulary and General Principles (Conformityassessment-Vocabulary and general principles

3 Terms and definitions

ISO 9000 and ISO/IEC 17000 defined and the following terms and definitions apply to this document.

Certified client Management system has been certified by the organization.

Impartiality

Objectivity exists.

Notes 1. Objectivity means that a conflict of interest does not exist or has been resolved and does not adversely affect the successor activities of the certification body.

Notes 2. Other terms that may be used to express the element of impartiality are. independence, no conflict of interest, no prejudice, no prejudice, neutrality, fairness, open-mindedness, fairness Unaffected, by others, balanced.

Management System Consulting managementsystemconsultancy Participate in establishing, implementing or maintaining a management system.

Example 1. Planning or preparation of a manual or procedure.

Example 2. Provide specific advice, guidance or solution to the establishment and implementation of the management system.