Step 1: Preliminary investigation
When a client expresses interest in certification services, the KEBS CB determines whether the client is sufficiently prepared for the audit process. The client is requested to complete the Initial questionnaire (CER/FORM 2)
If the client is found not to be ready, the CB provides feedback on the gaps identified.
Step 2: Application
If the client is found to be ready, a cost quotation is done and if this is acceptable to the client, the client completes the formal application form (CER/FORM 1)
Step 3: Stage one audit
Certification audits are done in two stages; stage one and two.
This stage one audit is done to:
- review the clients documentation,
- evaluate if the client’s internal audit and management reviews are being planned and performed and if they are effective
- provide focus for the stage 2 audit and agree with the client on the details for the stage two audit
- To confirm information given in CER/FORM 2 and collect information regarding the scope of the audit
For the initial certification audit, part of the stage one audit must be at the client’s premises.
The time period between the stage one and the stage two audit is dependent on the gaps identified during the stage one audit and is mutually agreed between the CB and the client
Stage 4: stage two audit
The stage two audit is done on site and its main objective is to evaluate the implementation well as the effectiveness of the client’s management system. During this audit non-conformities may be raised. The client has 30 days in which to carry out corrective action on the non-conformities raised.
Stage 5: Certification decision
After the follow-up audit, during which time the corrective action from the stage two audit are confirmed to have been carried out, the audit findings and conclusions are evaluated in order to make the certification decision by the certification committee.
Once certified, the certificate is valid for 3 years
Stage 6: Surveillance
For the first contract period, surveillance audits are carried out every six months. For subsequent contracts the frequency may be reduced depending on the status of the management system. In any case the frequency shall not be less than one a year.
Stage 7: Recertification
This is virtually identical to the initial audit except that the stage one audit does not have to be on site