10. Doing a full re-certification audit with 100% off-site auditing for a company with lots of manufacturing processes where there is no ability to have cameras in the production area etc. is very challenging especially without both customer and auditor buy in. What guidance and direction can be provided on what can and what cannot be done off-site given the level of ICT available, complexity of processes, products, etc.?
Each CB and Lead Auditor will need to assess the objective evidence that can be obtained and determine if it is sufficient to support the audit conclusion and maintenance of the certification. Each access situation and audit may be unique. CBs can always set stricter rules based on the situation. CBs should refer to IAF MD 4 for further requirements for conducting audits using ICT.