1. If and when a CB determines that there are activities/processes that cannot be audited remotely, for example Production, and the CB is completing a recertification audit, can the CB still issue the new 3 year certificate when the CB did not audit all activities and processes or is this a certificate to identify IAF-ID3?
Yes, however CBs are encouraged to think outside the box and not just dismiss these clauses as not being auditable. There are tools such as video chat and streaming that could help an auditor see product realization activities. There could be client access issues and concerns, but CBs must gather sufficient information to support the conclusion that the certificate should be maintained. The certificate issued after the recertification audit decision does not need to have [IAF-ID3] appended to the certificate number.