Certification Body Requirements - v1.2
Certification Body Requirements - v1.2
Certification Body Requirements - v1.2
BODIES
The CRSB is not liable for any costs, or any potential, real or estimated loss of earnings resulting
from any actions taken by a person or entity related to their participation in the program, including,
without limitation, any actions taken prior to applying to become a Certification Body.
The Organization seeking to become an approved Certification Body contacts the CRSB and
undergoes a review and assessment by the Oversight Body.
2. Approved Certification Body
The Organization has received an approval letter from the Oversight Body confirming that the
organization meets all Certification Body requirements. In addition, the organization has signed
a delivery contract with the CRSB and the Oversight Body. The Organization may begin
soliciting business but shall not perform any certification services until the Organization has
achieved approval.
3. Approved Certification Body
The Organization has completed the one-time training (for auditors) and has retained a
minimum of one qualified auditor as defined in section 7.3. Once approval is achieved, the
Organization may offer certification services.
4. Surveillance
The Oversight Body will review the performance of all Certification Bodies annually, at a
minimum.
3.4 Confidentiality
The Certification Body shall have a documented procedure in place to manage information
obtained during the certification process. The procedure shall require (i) that all information
obtained during the certification process is considered proprietary and treated as confidential,
unless the Client agrees to make the information publicly available; and (ii) is handled in
Definitions and purpose of different types of Client assessments (see Table below):
Definition: The Client must provide select records to the Certification Body
by email, video conference, or mail by a particular date specified. This can
Partial Pays: Client
also be provided on-site if requested by the Client. This is a cost efficient way
Records to provide second or third-party assurance on an annual basis, while Conducted by:
Assessment reducing the time burden and cost to the Client. Certification Body
Definition: The Client must provide all records required for CRSB certification
to the Certification Body by email, video conference, or mail by a particular
Pays: Client
Full Records date specified. This can also be provided on-site if requested by the Client.
Assessment This is a cost efficient way to provide second or third-party assurance on an Conducted by:
annual basis, while reducing the time burden and cost to the Client. Certification Body
Full on-site audit (FA), Partial records assessment (PRA), Self-declaration (SD), Shadow Field
Audit (SFA)
*A Shadow Field Audit (SFA) shall be conducted a minimum of 1 time per 5-year cycle. The
SFA will be scheduled at an agreed upon time by the Certification Body, Oversight Body and
auditor.
If the Certification Body does not complete the requirements of the initial 3-year audit cycle
or there are issues, complaints or additional training needed, the Certification Body shall
continue with the 3-year audit cycle until all requirements have been met.
The Certification Body shall have 30 days from receipt of the audit report to respond to the
Oversight Body in writing with a proposal for corrective action and a timeline for completing
the plan for each identified non-conformance. The Oversight Body will have 15 days from
receipt of the Certification Body’s corrective action plan, to communicate to the Certification
Body the acceptability of the proposed action and the method and timeframe for follow up.
To officially resolve the non-conformance, the Certification Body, shall provide evidence of
correction via email to the Oversight Body for review and final approval. In some
circumstances, the Oversight Body may decide to evaluate it at the next scheduled audit.
7.7.1 Applicability
The appeals and complaints procedure is not intended to verify legal compliance or
endorse any activity as meeting any legal requirements that may apply to an individual
operation. Complaints and appeals may only be reviewed by the CRSB, Certification
Bodies, and related auditors where the issues involved are directly related to a
requirement found in the CRSB’s Standards. Where Canadian legislation requires that
such appeals and complaints be addressed in accordance with Canadian laws, the
appeals and complaints procedure will not apply.
7.7.2 Procedure
The Certification Body must have a documented procedure for receiving and resolving
appeals and complaints from Clients, auditors and any other stakeholders related to the
CRSB certification services they provide. They must have a dedicated individual that is
publicly identified (e.g. on the organization’s website) for stakeholders to contact. The
appeals and complaint procedure must also be publicly available and include a
reasonable time for confirming receipt of the complaint and an estimated resolution
date.
Appeals and complaints must be submitted and handled as outlined in the steps below.
The procedure applies to Certification Bodies and the CRSB.