GB/T 27206-2025Guidelines for remote auditing by certification bodies (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

Please note that some of the contents of this document may involve patents. The issuing organization of this document does not assume the responsibility for identifying patents.

This document is proposed and coordinated by the National Technical Committee for Certification and Accreditation of Standardization (SAC/TC261).

This document was drafted by: China Certification and Accreditation Association, Guangzhou CESI Certification Center Services Co., Ltd., China National Accreditation Service for Conformity Assessment Certification Center, China Quality Certification Center Co., Ltd., SGS-CSTC Standards Technical Services Co., Ltd., Jiangsu Tiangui Certification Co., Ltd., British Standards Management System Certification Co., Ltd.

Certification (Beijing) Co., Ltd., Beijing Engwei Certification Center Co., Ltd., New Century Inspection and Certification Co., Ltd., Beijing Junyou Integrity Testing Co., Ltd.

Certification Co., Ltd., Beijing Elvi Quality Certification Center, Zhongbiao Huaxin (Beijing) Certification Center Co., Ltd., Fangyuan Mark Certification Group Co., Ltd.

Company, China Classification Society Quality Certification Co., Ltd., China Quality Association Quality Assurance Center, Shanghai Quality System Audit Center, Beijing Samsung 9000 Certification Center Co., Ltd., Beijing Tairuite Certification Co., Ltd., Beijing Oriental Zongheng Certification Center Co., Ltd., Anhui Provincial Quality and Standardization Research Institute, Xingyuan Certification Center Co., Ltd., China Railway Inspection and Certification Center Co., Ltd., Noah Testing and Certification Group Co., Ltd., China Credit Certification (Shenzhen) Co., Ltd., Beijing Wuzhou Hengtong Certification Co., Ltd., China Automotive Research Institute Huacheng Certification (Tianjin) Co., Ltd., Great Wall (Tianjin) Quality Assurance Center Co., Ltd., Beijing Continental Hangxing Quality Certification Center Co., Ltd., Beijing Zhongjingkehuan Quality Certification Co., Ltd., Taier Certification Center Co., Ltd., China Automotive Certification Center Co., Ltd., China Academy of Building Research Co., Ltd., China Building Standard Design Institute Co., Ltd.

Company, Sairui Certification Co., Ltd., Beijing Huadian Wanfang Certification Co., Ltd., Fire Protection Product Conformity Assessment Center of the Ministry of Emergency Management, Shandong Shitong Guo International Certification Co., Ltd., Beijing United Zhiye Certification Co., Ltd., Zhongbiao Hexin (Beijing) Certification Co., Ltd., Hubei Optical Valley Standard Innovation Technology Ltd.

The main drafters of this document are: Wang Yaning, Wang Suo, Liang Xiaojun, Fang Yan, Zheng Dandan, Qin Hong, Wang Yu, Qi Rui, Jia Lan, Pan Rong, Liu Bozhao, Sun Zhujun, Ren Qingyue, Zhou Taotao, Dong Xiaoyan, Yu Wentao, Liu Qi, Bian Xiaoou, Luo Hui, Qu Li, Zheng Yan, Zhang Le, Ying Xiaoyun, Ke Zhangyong, Yu Fang, Sun Xun, Yang Wanxia, Xiao Dingsheng, Wang Meng, Li Chenxuan, Chen Jian, Hu Yuenan, Zheng Shen, Li Haitao, Xu Qiang, Wu Xiangliang, Li Chao, Zhou Chang, Sun Bing, Zhang Dawei, Song Bin, Feng Meng, and Zhou Junfeng.

Introduction

To adapt to special circumstances (including but not limited to public health events, travel restrictions, natural disasters and other restrictive circumstances), (a situation in which the auditor cannot reach the audited party's premises to conduct the audit) and improve the audit efficiency. Certification bodies should take risk prevention and information Based on the principles of security assurance and continuous improvement, remote audit methods are used to enhance, integrate and restructure internal and external resources, improve certification management capabilities, and promote The rapid development of information and communication technology (ICT) The development and widespread application of remote auditing provide more possibilities.

Remote auditing can bring many benefits to both the auditor and the auditee, including but not limited to reducing travel time and costs, improving overall Carbon footprint, improve the efficiency of obtaining audit information; avoid traveling to high-risk areas, enable more sites to be accessed remotely, and maintain certification Continuity of state.

This document aims to provide guidance for certification bodies to manage remote audit activities based on the practice of remote audit and in combination with the development of ICT technology.

To regulate and guide certification bodies to effectively implement audits and achieve audit objectives. Certification bodies need to consider the relevant parties when applying this document. need.

Certification Body Remote Audit Guidelines

1 Scope

This document provides guidance for certification bodies to implement remote audits, including remote audit principles, remote audit program management, remote audit implementation, remote audit capabilities, and monitoring, evaluation and improvement.

This document is applicable to the planning and implementation of remote certification by certification bodies in the audit (inspection) activities of management system certification, product certification and service certification.

Activities related to process audits. For reference only for other types of audits or similar activities.

2 Normative references

GB/T 19000

GB/T 19011-2021

GB/T 23694

GB/T 27000

3 Terms and Definitions

The terms and definitions defined in GB/T 19000, GB/T 19011-2021, GB/T 23694, GB/T 27000 and the following apply This document.

4 Principles of Remote Audit

The audit principles established in Chapter 4 of GB/T 19011-2021.

4.2 When using ICT to conduct remote audits, attention should be paid to the security of information and its transmission, including confidentiality, integrity and availability.

Identify laws, regulations and customer requirements related to information security and, before the audit, determine the actions needed to ensure compliance with laws, regulations and customer requirements.

Reach consensus with the audited party on relevant measures.

Note. In some cases, due to information security requirements, the audit process does not allow or partially allows the use of ICT, which may make it impossible to implement or Fully implement remote auditing.