SAAS Procedure201A.2015
SAAS Procedure201A.2015
2
3
4
5
6
7
8
9 For Use By Certification Bodies Performing
10 SAAS Accredited SA8000:2014 Certification Audits
11
12
13
14 October 2015
15
16
17
18
19
20
21
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
22
23 Contents
24
25 0. Introduction................................................................................................................................................. 4
26 0.1. DEFINITIONS...................................................................................................................................... 5
27 1. ACCREDITATION CRITERIA AND PROCESS ........................................................................................ 10
28 1.1. SAAS ACCREDITATION................................................................................................................... 10
29 1.2. ROUTES TO SAAS ACCREDITATION ............................................................................................. 11
30 1.3. APPLICATION FOR ACCREDITATION ............................................................................................ 13
31 1.4. GENERAL PROCESS REQUIREMENTS FOR SAAS ACCREDITATION ......................................... 14
32 1.5. INITIAL ASSESSMENT OF CB ......................................................................................................... 15
33 1.6. INITIAL ACCREDITATION DECISION PROCESS ............................................................................ 20
34 1.7. INITIAL ACCREDITATION ................................................................................................................ 21
35 1.8. CERTIFICATES ISSUED PRIOR TO ACCREDITATION .................................................................. 22
36 1.9. CONTINUANCE OF ACCREDITATION ............................................................................................ 23
37 1.10. INCREASED MONITORING OF CB ACTIVITY ............................................................................. 25
38 1.11. REACCREDITATION..................................................................................................................... 26
39 1.12. EXPANSION OR REDUCTION OF GEOGRAPHICAL AREAS...................................................... 28
40 1.13. COMPLAINTS ............................................................................................................................... 29
41 1.14. NONCONFORMITIES RAISED ON CBs ....................................................................................... 31
42 1.15. PREVENTIVE & CORRECTIVE ACTION ...................................................................................... 33
43 1.16. PUBLIC NOTICE AND INFORMATION ......................................................................................... 35
44 1.17. FEES ............................................................................................................................................. 36
45 1.18. SUSPENSION OR WITHDRAWAL OF ACCREDITATION ............................................................ 37
46 1.19. APPEAL PROCESS ...................................................................................................................... 39
47 1.20. CONFIDENTIALITY AND DISCLOSURE OF INFORMATION ....................................................... 40
48 1.21. APPROVAL AND REVISION OF ACCREDITATION REQUIREMENTS ........................................ 41
49 1.23 INTERNAL AUDITS, ON-SITE SAMPLING & WITNESSED AUDITS ................................................ 42
50 ANNEX A - ISO17021-1:2015 - SAAS ACCREDITATION ADDITIONAL REQUIREMENTS ............................ 43
51 ANNEX B - SAAS Documents ......................................................................................................................... 49
52 ANNEX C – USE OF SAAS ACCREDITATION LOGO .................................................................................... 50
53 ANNEX D – SA8000 CB Regular Data Submission ......................................................................................... 52
54
55
56
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 2 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
57
58
59 List of Figures
60 Figure 1 - The SAAS Procedure 201 Series ...................................................................................................... 4
61 Figure 2 SAAS Accreditation Interactions ........................................................................................................ 10
62 Figure 3 - CB Accreditation Process ................................................................................................................ 12
63 Figure 4 – Estimate of Initial Accreditation Audit Days ..................................................................................... 12
64 Figure 5 - Surveillance Methodology................................................................................................................ 24
65 Figure 6 - SAAS Reporting Process................................................................................................................. 32
66 Figure 7 - CB NC Response Times……………………………………………………………………………………..33
67 Figure 8 - CB CAP Elements…………………………………………………………………………………………….33
68 Figure 9 - Invoice Late Payments.……………………………………………………………………………………….36
69 Figure 10 - SAAS SA8000 Mark ...................................................................................................................... 51
70 Figure 11 - Data Submission Requirements....………………………………………………………………………..52
71
72
73
74
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 3 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
75
76 0. Introduction
77
78 The SAAS accreditation requirements for the accreditation programs that SAAS operates are described in the “201”
79 procedure series. These procedures are detailed in Figure 1 below.
80
201A 201B
Additional 201 Series, may be
For Use by CBs Performing Competence Requirements for developed
SA8000:2014 Audits Auditors and Other Personnel
81
82
83 Figure 1 - The SAAS Procedure 201 Series
84
85 This document is SAAS Procedure 201A, which describes the process for granting, maintaining, extending, reducing,
86 suspending and withdrawing SAAS accreditation for Certification Bodies (CBs) that deliver SA8000 certification. This
87 procedure is supported by other procedures as outlined in ANNEX B - SAAS Documents.
88
89 SAAS Procedure 201A is based upon the requirements of the following:
90
91 1. For the general administration and delivery of accreditation for SA8000 certification: ISO/IEC 17011:2004
92 “General requirements for accreditation bodies accrediting conformity assessment bodies”
93
94 2. For the general administration and delivery of SA8000 certification services: ISO/IEC 17021-1:2015 “Conformity
95 assessment –Requirements for bodies providing audit and certification of management systems - Part 1:
96 Requirements”
97
98 This document supersedes all previous versions of Procedure 201 and related Advisories. Procedure 201A is intended for
99 use by SAAS and for use by applicant and accredited CBs for their informational purposes. It defines the rights and
100 responsibilities of SAAS and accredited CBs, as well as the SAAS activities required for assessing and accrediting CBs. It
101 provides transparency that is required of an international accreditation body and has been established to assure
102 consistent and reliable assessments throughout the accreditation process. This document is supported by a set of
103 internal SAAS work instructions and other documents defining the conduct of accreditation audits.
104
105 SAAS has updated Procedure 200 and Procedure 201 in conjunction with the revision of SA8000:2014. In order to retain
106 clarity, Procedure 201 has now been split into two separate documents 201A and 201B (see above).
107
108 The accreditation requirements detailed in this document are designed to supplement or amend the requirements of
109 ISO17021-1:2015 as needed. Thus, the requirements of ISO17021-1:2015 SHALL apply as written. This procedure
110 SHALL specify additional or amended requirements as needed. See Annex A - ISO17021-1:2015 - SAAS
111 ACCREDITATION ADDITIONAL REQUIREMENTS in this document for additional requirements for applicant and
112 accredited CBs supplemental to those found in ISO 17021-1:2015.
113
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 4 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
171 records; or
172
173 b. the application review, the assignment of audit personnel, and/or review of the final report; or
174
175 c. the certification decision based on the final review of the audit report.
176
177 0.1.10 Foreign Premises – Refers to the CB’s premises at a physical location separate from the Head Office
178 location, from which one or more key activities are performed. These premises are covered by the scope
179 of SAAS accreditation. Key activities include:
180 a. policy formulation
181 b. process and/or procedure development
182 c. contract review (as appropriate)
183 d. audit planning and conduct of audits, as well as review, approval and decision-making regarding the
184 results of audits
185
186 0.1.11 Head Office – The CB’s main operational office, which shall be responsible for managing the
187 accredited certification-related activities. CBs SHALL have designated 1 staff person, an SA8000
188 Program Manager, to interface with SAAS. That person SHALL coordinate any questions and
189 answers, scheduling, invoicing and other communication needed in order to correspond directly with
190 SAAS and, if applicable, the SAAS-designated Client Manager. See Procedure 201B for Program
191 Manager qualifications.
192
193 NOTE: CBs SHALL have designated 1 contact person or department at the Head Office to which
194 SAAS invoices shall be sent. SAAS shall not send invoices to any other contact person or
195 department. It is the responsibility of the nominated contact person or department to ensure that all
196 invoices are paid in a timely manner. Failure to do so shall result in non-conformities being raised
197 against the CB and possible suspension and withdrawal of SAAS Accreditation.
198
199 0.1.12 Head Office Assessment – A systematic and independent evaluation performed by SAAS at the CB’s
200 main operational office. The audit determines whether the CB’s management system for operating a
201 certification system is effectively implemented.
202
203 0.1.13 Highest Risk, High Risk Countries – SAAS developed a certification country risk audit process to
204 categorize the oversight and assurance process activities according to risk level. Activities taking place
205 in higher risk locations shall receive more oversight than those in countries determined to be lower
206 risk. These countries have specific requirements for accredited SA8000 certification program, as
207 determined by this risk audit. These countries can be found at
208 [Link]
209
210 0.1.14 Initial audit – Prior to granting accreditation, the process of evaluating an applicant CB’s suitability
211 and readiness for accreditation SHALL be conducted through review of documentation, office audits
212 and witnessed CB audits.
213
214 0.1.15 Major non-conformity – One of the following situations:
215
216 a. The absence or total breakdown of a system to meet an accreditation requirement. A number of
217 minor non-conformities against one requirement can represent a total breakdown of the system
218 and thus be considered a major non-conformity.
219
220 b. A non-conformity that the judgment and experience of the SAAS Lead Auditor indicates is likely
221 either to result in the failure of the CB’s certification system or management system. Based on
222 available objective evidence, this failure raises significant doubt as to the credibility of the
223 certificates issued by the CB.
224
225 c. A minor non-conformity that has not been addressed or for which no significant improvement has
226 been made by the time of a follow-up audit, in spite the organisation’s commitment to resolve the
227 issue.
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 6 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
228
229 d. A major non-conformity may be raised after the audit ONLY in the case where a SAAS auditor
230 requires consultation with the SAAS head office.
231
232 e. A major non-conformity that has not been addressed or for which no significant improvement has
233 been made by the time of a follow-up audit, in spite of the CB’s commitment to resolve the issue,
234 SHALL lead to the CB being issued a warning and moved toward suspension.
235
236 0.1.16 Market Surveillance Visit (MSV) – A short (typically one-day) visit by SAAS to an SA8000-certified
237 organisation to determine the strength and demonstration of implementation of the CB’s SA8000 audit
238 management system at client sites and the effectiveness of the accredited certification process.
239
240 a. The objective of the MSV is to establish confidence in the CB’s certification process by direct
241 observations carried out during visits to a sample of its certified organisations, to use the results to
242 define appropriate levels of surveillance of the CB’s activities, and to improve the overall credibility
243 of the accredited SA8000 certification system. It is designed to show how well the system works
244 and provide assurance of the quality of the SA8000 system.
245
246 b. This visit consists of a high level look at the certified organisation and is typically a short, one-day
247 visit to a certified client to determine the level of confidence in the conformity of the management
248 system to SA8000 requirements and the effectiveness of the accredited certification process by
249 the CB.
250
251 NOTE: A market surveillance visit is not a "duplicate audit." The visit is intended only to strengthen
252 SAAS’s confidence in the activities of the CB.
253
254 0.1.17 Minor non-conformity –
255 a. A failure or oversight in some part of the CB’s management system relative to the requirements for
256 accreditation which is not systemic in nature;
257
258 b. A single observed lapse in following one item of the CB’s management system; such lapses do not
259 represent a breakdown of the CB’s systems or raise significant doubt about the credibility of
260 certificates issued by the CB.
261
262 0.1.18 Non-conformity (NC) – If fulfilment of specified requirements have not been demonstrated, a finding
263 of non-conformity SHALL be reported. Also referred to as a non-conformance. In the SAAS-
264 accredited system, identification of NCs initiate a corrective action request (CAR). A CAR is the initial
265 stage in the corrective action process. A corrective action SHALL be initiated as a result of a non-
266 conformity. The process required by SAAS of the CBs SHALL include containment/correction, root
267 cause analysis, corrective action and follow-up. NCs SHALL be logged using a nonconformance
268 report (NCR) to log and track occurrence of NCs.
269
270 0.1.19 Opportunity for Improvement (OFI) – These are intended to indicate where practice is a little slack
271 or inconsistent or systems may be improved. OFIs SHALL not be used where Minor NCs should have
272 been raised and SHALL not constitute telling the CB what to do (i.e. consultancy). Any negative
273 finding of a potential non-conformity shall be classified as an OFI (see definition of preventive action).
274 OFIs are documented within the body of the SAAS accreditation report. Additionally, SAAS may
275 include Observations– this is where SAAS can comment on best practice and ensure a value added
276 component to each audit.
277
278 0.1.20 Outsourcing/Subcontracting – As defined in ISO 17021-1:2015 - 7.5.1 to 7.5.4, outsourcing is
279 subcontracting work to another organisation to conduct certification activities on behalf of the
280 accredited Certification Body. For SAAS purposes, the terms “outsourcing” and “subcontracting” are
281 synonyms. “Partners,” as defined by some CBs to deliver certification activities, including marketing,
282 SHALL be recognized as subcontracting. This definition does not include contracted services by
283 individual auditors and/or technical experts. See also Annex A - ISO17021-1:2015 - SAAS
284 ACCREDITATION ADDITIONAL REQUIREMENTS, element 7.5 in this document.
285
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 7 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
286
287 0.1.21 Pre-Assessment Audit - A pre-assessment audit is an audit with a specific objective related to the
288 verification of an implemented system.
289
290 0.1.22 Preventive action – Action taken to eliminate the cause of a potential non-conformity or other adverse
291 situation.
292
293 0.1.23 Remote Audit – A limited-scope document review of policies, documents and records that is not
294 conducted on the premises of the CB. Remote audits may be used at the discretion of SAAS in
295 situations such as expansion of scope; CB’s with very few SA8000-certified clients; transition to new
296 SA8000 standard version; review of evidence for closure of NCs and other situations as may arise.
297
298 0.1.24 Review of Documentation – Process of comparing the requirements in the applicant’s certification
299 and management systems documentation to the accreditation criteria. Also known as a document
300 review or desk review. This is conducted remotely, during an off-site audit. The purpose of the
301 document review is to review all relevant documents and records supplied by the CB to evaluate its
302 system for conformity with the requirements of ISO/IEC 17021, SAAS Procedure 200 and other
303 applicable procedures and guidance.
304
305 0.1.25 Root Cause Analysis – A method of problem solving used for identifying the root causes of faults or
306 problems. CBs are expected to use Root Cause Analysis to address NCs to look deeper into problems
307 and find out why they're happening. The process of Root Cause Analysis helps guide people to
308 discover and understand the initiating causes of a problem, with the goal of determining missing or
309 inadequately applied controls that will prevent recurrence. [See also ISO/IEC 17021-1:2015 Clause
310 9.4.9 Cause analysis of nonconformities].
311
312 0.1.26 SAAS Client Manager (SAAS-CM) – In most cases SAAS assigns CBs a SAAS-CM for the
313 accreditation period, who manages communication and workflow. In the case of some smaller CBs, or
314 at the discretion of SAAS, the role of CM may be taken by any SAAS LA or the SAAS-PC. The SAAS-
315 CM conducts office audits, manages the witnessed audit process, investigates complaints, and works
316 directly with the CB to address technical questions about its systems. The SAAS-CM conducts many
317 of the CB’s audits, but other auditors may also participate during the accreditation cycle. In most
318 cases, the CB shall be transferred to a new SAAS-CM during the reaccreditation office audit. The
319 original SAAS-CM shall then be re-assigned to a new CB.
320
321 0.1.27 SAAS Social Certification Program Coordinator (SAAS-PC) –The SAAS-PC is responsible for
322 managing the coordination, scheduling, and reporting related to oversight of SAAS-accredited
323 Certification Bodies.
324
325 0.1.28 SA8000 Certification Program –SAAS oversees and grants accreditation for this certification
326 program. The program encompasses all the requirements and processes for assessing conformance
327 to the Standard and providing SA8000 certification, including the SA8000 Standard, SAAS Procedure
328 200, other documents that specify the requirements for conformity audits, and other requirements
329 applicable to SAAS and the CB.
330
331 0.1.29 Suspension of Accreditation – Temporary restriction on the accredited services that a CB may
332 provide. While accreditation for SA8000 is suspended, a CB may not issue any initial SAAS-accredited
333 certificates nor accept new SA8000 clients. However, the CB shall be required to continue providing
334 services to existing SA8000 clients.
335
336 0.1.30 Withdrawal (Cancellation) of Accreditation – Termination of a CB’s accreditation. The CB SHALL
337 be required to return the certificate of accreditation to SAAS, terminate any use of the SAAS logo,
338 remove any reference to accredited status, and withdraw accredited certificates. A notification of
339 withdrawal shall be published at [Link]
340
341 0.1.31 Witnessed CB Audit – A SAAS audit team SHALL witness an SA8000 audit to determine the CB
342 audit team’s competence to conduct the audit. Under most circumstances, this will be announced.
343 There may be limited circumstances when an unannounced witness audit may be required. An
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 8 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
344 unannounced witness is a witnessed audit that SAAS conducts without previously notifying the CB of
345 the date. SAAS will arrive at an audit site without giving the CB prior notice and proceed with a
346 witnessed audit. If SAAS chooses to use this type of audit, it SHALL collect the audit schedule from
347 the CB and provide a proposed SAAS audit team to the CB.
348
349 Note: For additional terms and definitions, please refer to SA8000:2014, Procedure 200:2015, ISO/IEC
350 17021-1:2015 and ISO/IEC 17000:2004. For terms and definitions specific to the Social Fingerprint
351 process, please refer to the SA8000:2014 Social Fingerprint Glossary.
352
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 9 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
353
External
Review
• ISO 17011
• SAAS Series of
Procedures SAAS
• ISO 17021
• SAAS
Procedures
CBs
200 and 201
• SA8000 SA8000
Certified
Organisations
366
367
368 Figure 2 SAAS Accreditation Interactions
369
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 10 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
370
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 11 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
425
426
427
428
429 Figure 3 - CB Accreditation Process
430
431
432
SAAS Estimated Initial Accreditation Audit Effort
in Audit Days
Route Route
Activity 1 2
Application Review 1 1
Pre-Assessment N/A 2
Document Review 1 2
Head Office Audit 4 4
Witness Audit 2 2
Accreditation Package Review 1 2
Annual Surveillance Head Office 1 2
Total Days 10 15
433
434 Figure 4 – Estimate of Initial Accreditation Audit Days
435
436
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 12 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
437
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 13 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
490
603 the team’s concerns and opportunities for improvement; however, they do not necessarily
604 require a formal response.
605
606 1.5.7 Document Review: The document review SHALL consist of a review of the application materials,
607 documented procedures and other evidence of compliance to requirements submitted by the
608 applicant. The SAAS LA SHALL conduct the document review to evaluate the applicant’s
609 submitted documentation and determine if the applicant has satisfactorily integrated the
610 requirements for accreditation into its management system and operating procedures.
611
612 a) The CB SHALL be informed of the identity of the proposed members of the SAAS audit team,
613 including any technical experts. The CB has the opportunity to raise objections to any team
614 member at this point.
615
616 b) The SAAS LA SHALL review the submitted policies, procedures and other supporting
617 documents and assess completeness and compliance with ISO 17021-1 and SAAS Procedure
618 200. As a result, the SAAS LA SHALL issue a report with the outcome of the document
619 review. The applicant may be required to provide clarifications and corrections before the
620 accreditation process proceeds.
621
622 c) As a result of the document review, the SAAS Head Office SHALL confirm whether the
623 applicant CB can progress via Route 1 if they have requested to do so.
624
625 d) If the decision from the document review is that further action is required for the documentation
626 before on-site accreditation audits may proceed, the CB shall be contacted and appropriate
627 arrangements made to resubmit documentation. This process shall continue until the
628 documentation is acceptable, the CB decides to withdraw its application or SAAS suspends
629 the application process.
630
631 e) SAAS may decide not to proceed with an on-site office and witness audit based on
632 deficiencies found during the document review. The applicant shall be notified of this decision
633 and shall have the opportunity to appeal.
634
635 1.5.8. Pre-Assessment: For those applicant CBs following Route 2, SAAS shall require an on-site pre-
636 assessment audit. The pre-assessment audit is a trial run in order to see if the applicant CB is
637 “ready” for their accreditation office and witness audits and seeks to determine the degree to which
638 the CB’s documented management system conforms to ISO 17021-1:2015, Procedure 200 and
639 SAAS Procedure 201A.
640
641 a) The pre-assessment is unique in that there are no formal corrective actions as an outcome but
642 a better understanding of what the SAAS auditors are looking for.
643
644 b) The SAAS Pre-Assessment Audit shall consist of:
645 i. A formal opening meeting
646 ii. A full evaluation of the organisation management system to ISO 17021-1:2015,
647 Procedure 200 and SAAS Procedure 201A.
648 iii. Identification of the working and non-working systems
649 iv. A formal closing meeting
650 v. A comprehensive report
651
652 c) The SAAS pre-assessment audit report identifies potential non-conformities, which the CB shall
653 have the opportunity to address prior to the initial accreditation office audit. However, the pre-
654 assessment audit report shall not include suggestions of how to do so. The pre-assessment
655 audit is mandatory for all CBs following Route 2 for accreditation.
656
657 1.5.9. Office audit: SAAS accreditation auditors SHALL conduct an on-site audit at the applicant CB’s
658 designated head office to review the organisation's documented management system policies,
659 procedures, documents and files, and conduct interviews with staff and auditors.
660
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 16 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
661 a) Office audits provide assurance that a SAAS applicant or accredited CB manages their
662 certification activities in compliance with SAAS requirements. SAAS office audits also confirm
663 that the CB’s nominated Head Office is communicating effectively with its local offices and that
664 there is a system for the global management of SAAS accredited certification programs.
665
666 b) SAAS auditors SHALL review that any non-conformities raised by SAAS have been analyzed
667 for root causes and the appropriate corrective and preventive action undertaken. SAAS
668 auditors SHALL verify that all associated personnel and auditors, including those in remote
669 locations, are given the necessary support by their accredited CB to perform effective and
670 consistent certification audits in line with SAAS requirements. SAAS auditors SHALL
671 understand and confirm the lines of authority and responsibility from the Head Office to remote
672 locations.
673
674 c) During an office audit, SAAS accreditation auditors review the CB’s procedures, documents,
675 work instructions and files as well as conduct interviews with appropriate staff and auditors.
676 When undertaken, the main objective of a SAAS Regional/Local Office Assessment audit is to
677 provide assurance that the CB Head Office is communicating effectively with their local office
678 and that the systems in place for the global management of SAAS accredited certification
679 program is effective, robust and consistent.
680
681 d) On-Site Office Audit Process:
682
683 i. For CBs utilizing Route 2, the SAAS-PC, with the SAAS-CM, SHALL arrange a pre-
684 assessment audit at the CB’s Head Office. SAAS SHALL confirm the date of the audit in
685 writing to the applicant, including a request for details on logistical arrangements. After the
686 on-site pre-assessment audit, the SAAS LA SHALL prepare a pre-assessment report,
687 which includes the details of the audit, a discussion of potential non-conformities and
688 concerns identified, and conclusions reached by the audit team. Potential non-conformities
689 SHALL be addressed by the applicant prior to the office audit.
690
691 ii. For CBs utilizing Route 1, a pre-assessment may not be necessary as long as the IAF-
692 member accreditation report has been submitted to SAAS for review as part of the
693 application materials and document review.
694
695 iii. Upon completion of the pre-assessment process, as necessary, the SAAS LA, with the
696 SAAS-CM, shall arrange a mutually acceptable schedule for the office audit(s). SAAS
697 SHALL confirm this schedule in writing with the applicant CB, including a request for
698 details on logistical arrangements and any other information required to carry out the audit
699 process. In addition, the applicant shall be informed of the SAAS plan for the office audit
700 and the SAAS audit protocol.
701
702 iv. In addition to the CB’s head office, other office locations are also subject to audit if they are
703 considered “critical,” as defined in the IAF GD 3:2003 documents on cross-frontier
704 accreditation.
705
706 v. Prior to conducting the office audit for initial accreditation, the applicant SHALL have
707 conducted a complete internal audit (all elements of the management system) and at least
708 one complete management review.
709
710 1.5.10. Witness Audit: During a witnessed audit, SAAS auditors observe the CB’s SA8000 auditors
711 performing an SA8000 audit to confirm that the CB’s procedures are effective in delivering credible,
712 consistent and robust SA8000 audits.
713
714 a) Upon completion of the office audit process, the SAAS LA, with the SAAS-CM, shall arrange a
715 mutually acceptable schedule for the SA8000 witness audit. SAAS SHALL confirm this schedule in
716 writing with the applicant CB, including a request for details on logistical arrangements, the
717 applicant CB’s audit team qualifications, details of the applicant CB’s audit plan, and any other
718 information required to carry out the audit process.
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 17 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
719
720 b) SAAS SHALL witness the CB’s audit team conducting a complete Stage 2 SA8000 audit for the
721 initial witnessed CB audit. Note: Under some circumstances throughout the accreditation cycle,
722 SAAS may request a CB witness audit to take place during a Stage 1 SA8000 audit.
723 i. At initial accreditation, and throughout the accreditation cycle, the CB shall notify SAAS if the
724 client organisation refuses a witnessed audit.
725 ii. If the client organisation chooses to transfer to another CB to avoid the witnessed audit, it cannot
726 receive a SAAS-accredited SA8000 certificate.
727
728 c) For witnessed audits, the number of members of the SAAS audit team should equal the number of
729 members of the CB’s audit team. In most circumstances, a one-person CB audit team is not
730 acceptable for an initial accreditation witnessed audit.
731
732 d) Prior to the witnessed Stage 2 SA8000 audit, the CB applicant SHALL provide the SAAS audit
733 team with evidence of the completed document review and conclusions from the Stage 1 SA8000
734 audit, including the CB auditors’ path notes. The procedure for conducting the Stage 1 SA8000
735 audit by the CB SHALL have addressed the outcome of the SAAS document review so as to take
736 into account comments and findings and required revisions to comply with Procedure 200.
737
738 e) As with all SA8000 audits, during the SAAS witnessed audit, the witnessed client organisation
739 SHALL remain responsible for the safety of the audit teams.
740 i. The SA8000 LA and/or SAAS Accreditation Auditor SHALL be expected to take immediate
741 action as needed at any point during the audit to avoid injury; this may necessitate the
742 team’s departure from the area or the organisation’s site if necessary.
743 ii. The SA8000 LA and/or SAAS Accreditation Auditor shall abide by the organisation’s safety
744 rules as he or she becomes aware of them.
745 iii. If the SAAS LA observes a hazard that he or she considers to be an imminent risk of high
746 severity to health and safety during the witnessed audit, the SAAS LA SHALL request an
747 immediate meeting with the CB’s audit team leader to inform him or her of the hazard.
748 iv. The CB’s audit team leader is expected to address the hazard with the organisation in
749 accordance with the CB’s processes.
750
751 f) When evaluating an individual or audit team's awareness and competence with respect to SA8000
752 technical issues (including the SA8000 Performance Indicator Annex), accreditation auditors
753 SHALL:
754 i. Raise an awareness/competence-related non-conformance against ISO 17021 paragraph
755 7.1 or 7.2 only if the CB team/individual shows a failure to consider, or consistent or
756 blatant disregard for audit evidence which has a potential negative consequence for
757 workers, in the reasonable judgment of the accreditation auditor (e.g. an issue that
758 jeopardizes the integrity of the certification audit).
759
760 ii. Avoid raising an awareness/competence-related non-conformance due to the absence of
761 evidence that a particular performance indicator was evaluated during the audit. (i.e. It
762 would be inappropriate for accreditation auditors to use the annex as a 'completeness'
763 checklist.)
764
765 g) SAAS auditors do not normally interfere with the CB’s SA8000 audit and do not intervene in the
766 audit process until after the closing meeting with the client. However, if during the SA8000 audit a
767 situation arises wherein the non-identification of certain critical deviations by the CB is likely to
768 compromise the results of the audit, the SAAS auditor may intervene and seek a course correction.
769 Such an action shall be recorded and issued as a CAR by the SAAS auditor even after the
770 correction is made by the CB.
771
772 h) Under all circumstances, the SAAS audit report and non-conformities (NCs) of a CB’s witnessed
773 audit SHALL be written in terms of the management systems requirements, certification
774 requirements, and accreditation requirements.
775
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 18 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
776 i) The SAAS witnessed audit SHALL not be complete until the SAAS LA receives and evaluates the
777 CB’s SA8000 audit report. As part of the SAAS accreditation audit, following a SAAS witness
778 audit, the CB SHALL provide a copy of their audit report to SAAS [identical to that as provided to
779 their client] within 10 working days after the last day of the on-site audit
780
781 1.5.11. The SAAS LA SHALL submit a copy of each accreditation audit report to the SAAS-PC, who is
782 then responsible for distributing it to the CB after technical and content review by SAAS personnel.
783
784 1.5.12. Evidence of the CB’s implementation of acceptable correction and corrective action for all non-
785 conformities SHALL be required before SAAS can initiate the initial accreditation decision process.
786 SAAS acceptance of the CB’s responses shall be based on a review by the SAAS audit team and
787 appropriate SAAS personnel. Follow-up audits and/or additional audits may be required. SAAS
788 SHALL communicate the results of all reviews to the applicant in writing.
789
790 1.5.13. Initial audits SHALL occur within the 12-month period preceding the accreditation decision. If any
791 audit occurred more than 12 months prior to the accreditation decision, SAAS may require a follow-
792 up audit.
793
794 1.5.14. In most circumstances, the applicant CB shall complete the initial accreditation process within one
795 year of the date of SAAS’s acceptance of the application. If the applicant does not successfully
796 complete the process within one year, SAAS may place the CB on “inactive” status.
797
798
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 19 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
799
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 20 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
830
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 21 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
851
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 22 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
896
952
953 c) SAAS guidelines for selecting the witnessed audits may include but are not limited to: diversity of
954 technical area, audit type, office audit results, and existence of complaints.
955
956 d) Individual witnessed audit sites SHALL be selected by SAAS in order to witness a wide spectrum of
957 organisations and auditors in witness audits for a CB over an accreditation cycle.
958
959 e) CBs SHALL make available to the SAAS LA a master list showing the current revision level of all
960 SA8000-related policies and procedures to assure effective document control.
961
962 1.9.5. A SAAS audit team consisting of two accreditation auditors SHALL witness a CB team of two or more
963 auditors at least once during the accreditation period.
964
965 1.9.6. The SAAS ARP provides a recommendation to SAAS staff to make final decisions about continuation
966 of a CB’s accreditation within the four-year accreditation period based on the satisfactory results of the
967 SAAS CB surveillance audits, or the satisfactory correction and corrective actions for any non-
968 conformities. Unsatisfactory results during the accreditation period may necessitate increased
969 surveillance of the CB, or suspension or withdrawal of accreditation.
970
971 1.9.7. SAAS CB surveillance audits SHALL utilize a combination of the methodologies in Figure 5:
972
SA8000 Witness Audits Head Office Audits
973
974 Figure 5 - Surveillance Methodology
975
976 1.9.8. On an annual basis, the SAAS Head Office SHALL send its proposed surveillance audit plans for the
977 following year to SAAS Accredited CBs. The plan is based on the CB’s performance from the previous
978 12 months, as well as its route for accreditation (Route 1 or Route 2).
979
980 1.9.9. Obligations of the Certification Bodies: Each accredited CB SHALL promptly notify SAAS of any
981 intended or actual changes to its management system or any other changes that may materially affect
982 its conformity to the accreditation criteria. This requirement encompasses, as an example, any such
983 changes in a country within the scope of accreditation, plans to begin activity in new countries, an
984 increase of 5-10 or more SA8000 audits in an existing country, or other such expansions that have
985 taken place, as well as at its headquarters. Additional examples include changes to:
986 a) Legal, commercial or organisational status;
987 b) Organisation and management, for example key managerial staff and changes to the accreditation
988 decision process;
989 c) Policies and procedures related to SA8000;
990 d) Personnel, equipment, facilities, location, working environment or other resources;
991 e) The intended use of subcontractors;
992 f) Acquisitions of or mergers with other CBs.
993
994
995
996
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 24 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
997
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 25 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
029
085 reaccreditation application form; a summary of the non-conformities identified in the audits, the CB’s
086 corrective action responses (including correction, root cause analysis, and corrective action), and the
087 status of the non-conformities (for example: open, closed, or verified); as well as a summary of
088 complaints and appeals. Reaccreditation shall not be considered if the CB has open major non-
089 conformities.
090
091 1.11.7. If the SAAS ARP recommends in favor of reaccreditation, upon a final decision by the SAAS Executive
092 Director, SAAS SHALL issue the CB a new accreditation agreement and certificate of accreditation.
093 SAAS may impose certain conditions in its reaccreditation decision for the CB. The re-accredited CB
094 SHALL have the duty to ensure that those conditions are met.
095
096 1.11.8. If SAAS decides against reaccreditation, SAAS SHALL notify the CB in writing of the decision, the
097 reasons for it, and any next steps for the CB and SAAS to initiate suspension or withdrawal of
098 accreditation. The CB may appeal the decision.
099
100
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 27 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
101
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 28 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
139
195 b) Report its plan of action to SAAS within 10 days, and submit subsequent reports every 30 days after
196 that point.
197
198 c) Establish contact with the complainant as part of the investigation.
199
200 d) Complete the investigation within 90 days or less, unless otherwise agreed upon with the SAAS
201 Executive Director.
202
203 [Link] SAAS may elect to investigate the CB’s actions in investigating the complaint by conducting an
204 additional audit of the CB and/or certified organisation.
205
206 1.13.3 Other Types of Complaints Received by SAAS:
207
208 [Link] SAAS may receive information regarding a CB or a CB’s certified client from a stakeholder with whom
209 SAAS or SAI, the owner of the SA8000 standard, has a relationship. This stakeholder may have
210 information that raises issues of concern about the certified organisation, which then requires
211 investigation by the CB. SAAS SHALL require CBs to treat such issues of concern as formal
212 complaints and undertake an investigation as noted in the points above, and correspond directly with
213 the stakeholder.
214
215 [Link] The relevant complainant may wish to remain anonymous. In such cases, SAAS SHALL act as the
216 intermediary; the CB SHALL send all correspondence to SAAS, which shall liaise with the complainant.
217
218
219
220 1.13.4 All complaints SHALL be logged and actioned, with records maintained. The CB SHALL provide the
221 SAAS auditor with this information during accreditation audits. All CBs in the SAAS accreditation system
222 SHALL keep records of complaints, appeals and responses for a minimum of 10 years after the resolution
223 of the complaint. Non-confidential information about complaints is published on the SAAS website:
224 [Link]
225
226 1.13.5 Each CB SHALL provide a detailed report to SAAS of all complaints received every 6 months. This report
227 SHALL include details of the complaint, outcome, root cause analysis and corrective action, as
228 necessary.
229
230 1.13.6 The CB complaints process SHALL include statutes covering whistleblowers which protects such
231 whistleblowers from retaliation. This SHALL include protection for personnel within the certified
232 organisation as well as other stakeholders within the SA8000 process.
233
234
235 1.13.7 SAAS has developed a confidential complaints system for stakeholders to use. This can be found at:
236 [Link]
237
238
239
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 30 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
240
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 31 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
290
291 Figure 6 - SAAS Reporting Process
292
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 32 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
293
305
306 Note: The timelines in Figure 7 do not include additional time for communication between SAAS and the CB if
307 responses are not accepted. It is recommended that the CB provide responses early to allow time for
308 additional reviews if needed. These timelines also do not apply while a non-conformity is under appeal.
309
310 1.15.3. The CB Corrective Action Plan (CAP) SHALL consist of four parts, as described in Figure 8. The CAP
311 SHALL be submitted using SAAS Form 415B. [See also ANAB Heads Up Issue: 137 - Re: Improved
312 Corrective Action Responses ([Link]
313
Part 1 Root Cause Analysis It is necessary to determine the root cause to take corrective action.
The CB should use an appropriate process, such as Fishbone
(Ishikawa) Diagram, Pareto Analysis, 5 Why’s, to determine cause.
Part 2 Correction/Containment Action to eliminate a detected non-conformity.
Part 3 Corrective Action Action to eliminate the cause of a detected non-conformity.
Part 4 Preventive Action Action to eliminate the cause of similar potential non-conformities.
314
315 Figure 8 - CB CAP Elements
316 1.15.4. The process for review and acceptance of corrective action plan SHALL include a review by the SAAS-
317 CM of the CB’s response, who SHALL then send his or her review to the SAAS-PC. Corrective action
318 SHALL address the systematic weaknesses that permitted the violation to occur, so actions that simply
319 state "train the auditor" shall likely be rejected.
320
321 1.15.5. SAAS-CMs are authorized to assess whether the CB has taken adequate correction, preventive and
322 corrective action and if the actions have been effectively implemented, with supporting evidence showing
323 effective implementation. NCs and their corrective actions SHALL be reviewed during the annual Head
324 Office Audit.
325
326 1.15.6. If applicable, the SAAS-CM SHALL explain his or her justifications for rejecting the CB’s response or for
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 33 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 34 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
353
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 35 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
363
372
373
374
375 Figure 9 - Invoice Late Payments
376
377
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 36 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
378
434 in writing. The notice SHALL inform the CB of the effective date of suspension or withdrawal and
435 SHALL include a clear statement of the reason(s) for the suspension or withdrawal. SAAS SHALL
436 make public the notice of suspension or withdrawal on its SAAS website at
437 [Link]
438
439 1.18.8. Upon receipt of the notice of withdrawal of accreditation (as applicable), the CB SHALL:
440
441 a) Provide to SAAS a list of and contact information for all clients affected, within five calendar days.
442
443 b) Provide to SAAS the notice the CB intends to send to its certified and applicant clients of (1)
444 withdrawal or cancellation of SAAS accreditation, (2) the requirement for the client to return the
445 SAAS accredited certificate (as applicable), and (3) the process to transfer to another SAAS
446 accredited CB. This SHALL be provided within five calendar days for SAAS’s review and approval.
447
448 c) Send the approved notification to its certified and applicant clients within 15 calendar days.
449
450 d) Make every reasonable effort to withdraw any SAAS-accredited certificate within 90 calendar
451 days.
452
453 1.18.9. SAAS may contact the CB’s certified and applicant clients directly in the event the CB fails to fulfil its
454 obligations.
455
456 1.18.10. A record of suspensions and withdrawals of accreditation SHALL be maintained on the SAAS website
457 at [Link] The name and location of each CB that has
458 been suspended, or has had accreditation withdrawn SHALL be posted, with the effective date(s) and
459 any explanation(s), as applicable.
460
461 1.18.11. If applicable, following withdrawal of accreditation, accreditation may be re-granted only after the CB
462 has successfully completed both the application process and the initial accreditation process again,
463 including payment of all required fees.
464
465
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 38 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
466
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 39 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
503
559
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 41 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
579
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 42 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
609 Annexures
610 ANNEX A - ISO17021-1:2015 - SAAS ACCREDITATION ADDITIONAL
611 REQUIREMENTS
612
613 ISO 17021-1:2015 – SAAS ACCREDITATION ADDITIONAL REQUIREMENTS
614
615 The following describes the SAAS accreditation requirements that supplement those found in ISO17021-1:2015 and
616 SHALL be implemented by accredited CBs and applicants seeking accreditation by SAAS for the SA8000 system.
617
618 1 Scope
619 Additional:
620 1.1 In general, SAAS Accreditation is granted on a country-by-country basis. A CB shall demonstrate to SAAS that it
621 is competent to operate in a particular country. Applicants for initial accreditation may apply for scope as follows, based
622 on the SAAS country risk assessment:
623 a) Lower Risk Countries: accreditation may be granted to conduct SA8000 audits and issue certificates in all countries
624 within this category.
625 b) High Risk and Highest Risk Countries: accreditation may be granted to conduct SA8000 audits and issue certificates
626 on an individual country by country basis.
627
628 2 Normative References
629 Additional:
630 a) SA8000:2014
631 b) SA8000:2014 Guidance Document
632 c) SAAS Procedure 200:2015
633 d) SAAS Procedure 201A:2015
634 e) SAAS Procedure 201B:2015
635
636 3 Terms and Definitions – no additions
637
638 4 Principles –
639 4.8.1 - All CBs SHALL adopt a risk based approach to delivering SA8000 certification.
640
641 Additional:
642 4.9 – In common with the organisations that they audit, each accredited CB is encouraged to support the concepts of a
643 social accountability system and to comply with the requirements of SA8000:2014 in the operation of its business.
644
645
646 5 General requirements
647
648 5.2 Management of impartiality
649 Additional:
650 [Link] – In order to avoid conflict of interest, CBs whose related bodies have provided SA8000 or similar human
651 resources management system consulting services within the prior three years to a particular organisation SHALL
652 not contract as a certification body for that organisation or any of its sites. This restriction includes related bodies
653 of the same parent company or affiliates, where the validity or reliability of an audit can be questioned because of
654 a consulting relationship.
655
656 Note: Consulting is the provision of documentation development or assistance with implementation of
657 management systems to a specific organisation. Training in a public forum is not considered consulting nor is an
658 introductory session such as a 1-day awareness program at the Client’s location. Arranging training and
659 participating as a trainer is not considered consultancy, provided that, where the course relates to management
660 systems or auditing, it is confined to the provision of generic information that is freely available in the public
661 domain. [See also ISO/IEC 17021-1:2015 5.2 Management of impartiality Clause 5.2.7 & 5.2.8].
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 43 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
662
663 [Link] – All CBs SHALL have a documented procedure that addresses anti-bribery and corruption in countries where
664 the CBs are accredited to deliver SA8000 Certification.
665 a) This documented procedure SHALL describe how it attempts to detect bribery and corruption between the CB,
666 staff, auditors, technical experts and committees, and its clients.
667
668 b) The detection process SHALL be based upon a documented risk assessment performed for each country where it
669 performs SA8000 Certification activities. At a minimum, the CB SHALL:
670 1. Have a developed principle based zero tolerance anti-corruption and anti-bribery policy. The policy
671 SHALL include statutes covering whistleblowers, protecting such whistleblowers from retaliation.
672
673 2. Have a policy that includes specific steps to report, investigate and address situations of attempted
674 bribery.
675
676 3. Have a reporting system with contact information for stakeholders to use.
677
678 4. Require auditor and employee acknowledgement and ongoing and continuing training on the subject,
679 policy, process and required actions.
680
681 5.2.14 – The CB SHALL have a documented procedure that describes its annual risk analysis of issues that might affect
682 its impartiality for every country in which it performs SA8000 certification. This analysis SHALL be presented at an annual
683 meeting of the Committee for Safeguarding Impartiality for debate and agreement.
684
685 5.2.15 – The impartiality committee SHALL contain individuals with demonstrable experience related to social
686 accountability issues in the regions where the CB delivers SA8000 certification.
687
688 5.3 Liability and financing
689 Additional:
690 5.3.3 – The CB SHALL present evidence of the appropriate level of professional indemnity and third party liability
691 insurance to the SAAS auditor at each head office audit. The CB SHALL also inform the SAAS auditor about its coverage
692 of individual contract auditors and subcontractors: either the contract auditors and subcontractors are covered by the CB’s
693 insurance or they have to carry their own insurance. If contract auditors and subcontractors are required to carry their own
694 insurance, the CB SHALL demonstrate how it ensures that the insurance is kept up-to-date.
695
696 6 Structural requirements
697 6.1 Organisational structure and top management
698 Additional:
699 6.1.5 – The CB SHALL have a documented procedure that describes how it disseminates changes in SAAS requirements
700 to its regional offices, contract auditors and subcontracted offices. This procedure shall also describe how it overcomes
701 language communication barriers.
702
703 6.2 Operational Control
704 Additional:
705 6.2.3 – The CB SHALL perform annual individual risk assessments for each country where it delivers SA8000
706 Certification.
707
708 6.2.4 – The CB SHALL not offer SA8000 certification in countries that meet the following criteria:
709
710 a) When applicable, as defined at [Link] and
711
712 b) Any country to which the CB Senior Auditors [as defined in 1.22.5 above] are not prepared to travel. The CB
713 SHALL maintain a list of such countries.
714
715 c) Any country to which SAAS accreditation auditors are not prepared to travel. Any such circumstances will be
716 listed at [Link]
717
718
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 44 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
719 7 Resource requirements - In addition to requirements below, SAAS Procedure 201B addresses process
720 requirements identified under this this clause.
721
722 7.1 Competence of personnel
723 Additional:
724 [Link] Using its own internal processes and records (and with reference to the requirements of SAAS Procedure 201B,
725 where applicable), the CB SHALL demonstrate that all personnel whose work may impact the SA8000 Certification
726 Program are competent. This includes:
727 a) Advisory Committee Members
728 b) Impartiality Committee Members
729 c) Management Staff
730 d) Audit Staff
731 e) Subject Matter/Technical Specialists
732 f) Administrative Staff
733 g) Outsourced partner organisations and individuals
734
735
736 7.2 Personnel involved in the certification activities
737 Additional:
738 [Link] Only appropriately qualified and competent individuals SHALL participate in SA8000 audits (as described in SAAS
739 Procedure 201B).
740
741 [Link] Those making the certification decision, as defined in SAAS Procedure 201B, SHALL be able to demonstrate how
742 they come to the certification decision if there are language communication barriers between the decision-maker and the
743 language the audit report and audit path notes are written.
744
745 [Link] The CB SHALL observe each of its auditors performing an SA8000 audit on-site at least once every 24 months.
746 Witnessed audits by SAAS shall not satisfy this requirement. Such observations SHALL be conducted by Senior Lead
747 Auditors, as identified in SAAS Procedure 201B.
748
749 7.3 Use of individual external auditors and external technical experts
750 Additional:
751 7.3.1 Contracts with individual auditors and external technical experts SHALL be reviewed and renewed annually. Such
752 contracts SHALL include the following information:
753 a) Whether the auditor shall work on an exclusive basis for the CB.
754 b) Whether the auditor is required to carry their own insurance.
755 c) That the auditor shall not use their own business cards or other personal documents during an SA8000 audit but
756 only that of the accredited CB.
757 d) That the auditor SHALL NOT offer any other services to any CB Client that he or she has audited within a 3-year
758 period of the last audit to that CB Client.
759 e) That the auditor SHALL attend experience exchange training at least once a year. Failure to attend two sequential
760 training sessions SHALL result in the cancellation of the contract.
761 f) That the auditor shall maintain CPE/CPD records as required by SAAS – see Procedure 201B.
762 g) That the auditor shall maintain an audit log for the work they do for the CB.
763
764 7.4 Personnel records
765 Additional:
766 7.4.1 All personnel training and audit records for any country in which the CB operates SHALL be available to the
767 SAAS Auditor at the time of the CB Annual Head Office Audit.
768
769 7.5 Outsourcing
770 Additional:
771 [Link] All outsourced activities SHALL require a legally enforceable service agreement between the accredited
772 Certification Body and the subcontracted organisation outlining the roles and responsibilities of each party.
773
774 a) The accredited CB SHALL assess any threats to impartiality that may arise as the result of a subcontracting
775 relationship and make such records available for review by SAAS.
776
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 45 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
777 b) Contracts with partner (subcontracted) organisations SHALL be subject to an annual review and SHALL
778 include relevant KPIs against which the performance of the partner can be monitored (e.g. quality of reports,
779 tardiness of reporting). These KPIs SHALL be reviewed by the CB at the time of management review.
780
781 [Link] The CB SHALL not outsource audits to a management system consultancy or training organisation, as this poses
782 an unacceptable threat to the impartiality of the CB.
783
784 [Link] CBs SHALL not outsource their SA8000 audit activity in highest risk countries.
785
786 [Link] CBs SHALL not use or outsource services of a subcontracted body that was formerly accredited by SAAS and
787 whose accreditation was reduced or withdrawn by SAAS and/or was unable to achieve accreditation through the SAAS
788 accreditation application process.
789
790 [Link] CBs SHALL not permit a subcontract organisation to further subcontract the required services to any organisation
791 or individual. This requirement SHALL be clearly stated in the contract between the CB and the subcontractor.
792
793 [Link] All SA8000 auditors who perform SA8000 audits SHALL present themselves as representatives of the SAAS-
794 accredited CB that has the authority to issue the SA8000 certificate.
795
796 a) Individual contract auditors and/or subcontracted auditing company representatives that perform SA8000
797 audits or audit related activities SHALL present themselves only as a representative of the SAAS accredited
798 CB.
799
800 b) All forms of identification, such as business cards or marketing materials, SHALL only reference the SAAS-
801 accredited CB.
802
803 c) Any additional contact information provided to the SA8000 client, worker representatives or employees
804 SHALL include the full contact details of the local representative (whether directly employed by a CB or
805 working through a subcontract agreement) and the SAAS-accredited CB’s head office. That contact
806 information SHALL include:
807 • The accredited CB's name and logo
808 • Contact information of the SAAS-accredited head office
809 • Name and contact information of the local representative
810
811 [Link] All CB auditors SHALL only utilize audit reports, stationery, and any other documentation that contains the
812 SAAS-accredited CBs name and logo. No other audit reports, stationery or any other documents of the individual
813 subcontractor or subcontracted organisation SHALL be used.
814
815 [Link] The certification body SHALL issue the SA8000 certificate to the client directly with its logo as well as the SAAS
816 mark.
817 a) Only a SAAS-accredited CB’s logo may appear on an SA8000 certificate.
818
819 b) In the interest of transparency, when used, subcontractors’ details SHALL appear on the SA8000 certificate,
820 displaying the name of the subcontracted organisation which carried out the audit.
821
822 c) An individual contractor or the subcontracted organisation’s logo is prohibited from being displayed on any
823 SA8000 certificate.
824
825 [Link] All SAAS-accredited CBs SHALL ensure that their auditors, including subcontractors, have controlled copies of
826 all of the policies and procedures that are required to perform SA8000 audits and are sufficiently trained and competent in
827 such policies and procedures.
828
829 [Link] The certification body may contract the SA8000 audit to individual auditors and may use the resources of partner
830 (subcontracted) organisations to provide SA8000 auditing services (under a contractual agreement) within the parameters
831 defined in this document.
832
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 46 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
833 a) All such contracted auditors and subcontracted auditing services SHALL conform to the CBs rules and
834 regulations.
835
836 b) The SAAS-accredited CB itself SHALL be responsible for all phases of the certification process, including
837 contractual arrangements, quotes, planning, auditing and review and approval of the audit report.
838
839 [Link] The SAAS Accredited CB SHALL perform internal audits of any subcontracted organisation at least once per
840 year, utilizing the CBs full-time staff. Internal audits performed by the partner organisation itself are not acceptable to fulfill
841 the accredited CBs requirements but SHALL be utilized as an input to the accredited CBs internal audit.
842
843 [Link] Representatives of any partner organisation SHALL participate in the management review of the SAAS-
844 accredited CB.
845
846 [Link] Every 12 months, each partner organisation SHALL be required to perform a risk and impartiality assessment of
847 its business to assess the integrity of the SA8000 audit services it offers on behalf of the accredited CB. Results of the
848 audit SHALL be forwarded to the CBs Impartiality Committee for review.
849
850 [Link] The accredited CB SHALL perform:
851 a) One duplicate audit on-site every two years of any subcontractor/partner organisation operating in high risk
852 countries.
853 b) One duplicate audit on-site every three years of any subcontractor/partner organisation operating in lower risk
854 countries.
855 c) The results of these audits SHALL be made available to the SAAS Auditor at the time of the annual Head Office
856 Audit.
857
858 8 Information requirements - no additions
859
860 9 Process Requirements - In addition to requirements below, SAAS Procedure 200 addresses process
861 requirements identified under this this clause.
862
863 9.1.2 Application Review
864 Additional:
865 [Link] CB’s SA8000 auditors SHALL rotate between clients so that no SA8000 auditor performs more than 5 audits per
866 certification cycle per client.
867
868 [Link] While any competent individual may perform preliminary planning work, the CB’s decision to accept an application
869 SHALL be assigned to an SA8000 LA (or higher-level individual), who is directly employed by the CB. Prior to
870 making such a decision, the assigned individual SHALL review and authorize outputs from the application review
871 process in the form of outline audit plan arrangements, indicating the following:
872
873 a) The audit team to be appointed (composed of auditors and technical experts [including any subcontracted
874 personnel], who, between them, have the totality of the competences and abilities required to perform the
875 certification activities). See also SAAS Procedure 201B.
876
877 b) The audit-days to be assigned for all activities associated with Stage 1 and Stage 2 SA8000 audits, including
878 justification for multi-site sampling and/or deviations from audit day requirements tables (where applicable).
879
880 c) The individual(s) who will be making the certification decision.
881
882 d) The CB SHALL maintain a record of this application review, decision, and authorization of outline audit plan
883 arrangements (including any limitations, and/or special considerations and/or justifications).
884
885 Note: The SA8000 LA referred to in the above requirement may or may not be a part of the audit team assigned
886 to the applicant.
887
888 9.2.2 Audit Team Selection and Assignments
889 Additional:
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 47 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
890 [Link].6 CBs SHALL NOT use any staff member from one of their certified clients [certified to any management
891 system standard] to act as an SA8000 auditor of another client.
892
893 9.6.4 Special Audits
894 Additional:
895 [Link] The CB SHALL have a documented procedure describing how it will perform duplicate audits on-site each year.
896 A duplicate audit in principle repeats the audit that was performed previously to check if the audit findings are credible.
897 These duplicate audit SHALL be performed as follows, in addition to that identified in [Link] above:
898 a) A minimum of one duplicate audit on-site for every 100 SA8000 audits globally that the CB performs.
899 b) The duplicate audit SHALL be based on a risk assessment conducted by the CB.
900 c) The results of these audits SHALL be made available to the SAAS auditor at the time of the annual Head
901 Office Audit.
902
903
904 10 Management system requirements for certification bodies
905
906 Additional:
907 [Link] The CB SHALL maintain detailed records of management review planning, deliberations, outcomes and
908 decisions that fully describe the discussions held.
909
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 48 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 49 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 50 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
006
007
008 1. ‘Social Accountability Accreditation Services’ – Light Grey - Pantone 416U
009 2. People sitting around inner circle (table) – Medium Blue - Pantone 301U
010 3. Inner circle (table) – Dark Blue - Pantone 268U
011 4. ‘SA8000’ inside of banner – Red - Pantone 200U
012 5. Banner at bottom – Dark Blue - Pantone 268U
013
014
015 Figure 10 - SAAS SA8000 Mark
016
017
018
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 51 of 52
Authors: L. Bernstein & P. Scott Social Accountability Accreditation Services Issue: 1
Approval: Rochelle Zaid SAAS Procedure 201A:2015 Effective: October 6, 2015
SA8000 Revenue x x
031
032 Figure 11 – Data Submission Requirements
033
034
035
036
037
038
039 ------------------ End of Document ------------------
Copyright © 2015 Social Accountability Accreditation Services. All rights reserved. Page 52 of 52