Step 2: Application

If the client is found to be ready, a cost quotation is done, based on the information given in the APPLICATION FORM and send to the client and if this is acceptable to the client, the client pays the application fees and the HOD-CB sends the client a commitment letter to undertake the certification services.

Note: Payment of application fees is an indication that the client has accepted the cost quotation and has read and understood the conditions of contract.

Step 3 : Stage One Audit

Certification audits are done in two stages; i.e. stage one and two.

This stage one audit is done to:

• Review the client's management system documented information against the normative document requirements.
• Evaluate the client's site-specific conditions and to undertake discussions with the client's personnel to determine the preparedness for stage 2
• Review the client's status and understanding regarding requirements of the standard, in particular with respect to the identification of key performance or significant aspects, processes, objectives and operation of the management system;
• Review the allocation of resources for stage 2 and agree the details of stage 2 with the client
• Evaluate if the client's internal audit and management reviews are being planned and performed and if they are effective
• Provide focus for the stage 2 audit and agree with the client on the details for the stage two audit
• To confirm information given in the APPLICATION FORM and collect information regarding the scope of the audit

For the initial certification audit, part of the stage one audit may be conducted at the client's premises and a documented conclusion on the fulfilment of stage 1 objectives and readiness for stage two including identification of any areas of concern that could be classified as nonconformities during stage 2 will be send to the client.

The time period between the stage one and the stage two audit is dependent on the gaps identified during the stage one audit and is mutually agreed between the KEBS CB and the client. In any case this time period shall not be more than six months. If the six months lapse before the stage 2 audit is done, another stage 1 audit must be performed. If a client´s management system is found, after the stage 1 audit, not to be ready for stage two, another stage 1 audit shall be performed at the appropriate time at the cost of the client.

Step 4 :Stage Two Audit

The stage two audit is done on site and its main objective is to evaluate the implementation well as the effectiveness of the client's management system.

The audit includes an examination of at least the following:
(a) information and evidence about conformity to all requirements of the applicable management system standard or other normative document
(b) performance monitoring, measuring, reporting and reviewing against key performance objectives and targets (consistent with the expectations in the applicable management system standard or other normative document)
(c) the client's management system and performance as regards legal compliance
(d) operational control of the client's processes
(e) internal auditing and management review processes
(f) management responsibility for the client's policies
(g) Links between the normative requirements, policy, performance objectives and targets (consistent with the expectations in the applicable management system
Steps to Certification (KEBS CB) Rev 1 30 November 2015 Page 3/3
standard or other normative document), any applicable legal requirements, responsibilities, competence of personnel, operations, procedures, performance data and internal audit findings and conclusions.

During this audit if non-conformities are found they shall be recorde are classified as either major or minor.

Corrective action plans must be submitted for all nonconformities. The time for submitting of Corrective Action Plan (CAP) by the auditee/client is a maximum of 2 weeks and the auditor/CB must indicate acceptance of the plan before the client undertakes the actions therein.

For minor nonconformities the recommendation for certification can be made based on an acceptable Corrective Action Plan and the effectiveness of the corrective action shall then be evaluated at the next audit. The time for carrying out of the corrective action shall therefore be determined by the auditee/client and submitted as part of the corrective action plan.

When major nonconformities are raised, the process of certification decision making shall not begin until the corrective actions have been undertaken by the client and effectiveness thereof been evaluated and found to be effective within a maximum of sixty days.

Step 5 : Certification Decision

After the follow-up audit, during which time the corrective action plan from the stage two audit are confirmed to have been carried out, the audit findings and conclusions are evaluated by a peer audit and the certification officer who then makes recommendations to the certification committee. The committee makes the certification decision. Once certified, the certificate is valid for 3 years.

Step 6 : Surveillance

For the contract period, surveillance audits are carried at least once a calendar year except in recertification years.

Step 7 : Recertification

Recertification audit shall be conducted at least two months before the expiry of the certification contract.

Click on the links below for additional information on the Certifications Body.

• Policy on use of certification marks.
• Sample contract agreement for certification
• Policy on impartiality
• Handling of enquiries, compliments, complaints and appeals
• Frequently asked questions on certification