FSSC Information Day 2014 Integrity Program

Transcription

1 FSSC Information Day 2014 Integrity Program

2 Specifics FSSC 22000: Introduction Auditor competence Integrity program definition and overview Integrity program statistics Technical updates Moving forward

3 FSSC 22000: Introduction Specifics Interface with the CBs that use the FSSC Audit Scheme and measure the effectiveness of implementation of all applicable Standard requirements Drive Continuous Improvement

4 Specifics CB Auditor The CB Auditor is at the heart of the measurement of compliance to the requirements of FSSC o Must meet the requirements for competency

5 CB Auditor The knowledge and experience of an auditor (competence) and the application of this competence through a recognized FSMS standard is the foundation of any certification process and confirms the level of compliance and effectiveness Accomplished through a process auditing approach and the use of systems thinking

6 FSSC 22000: Competency Defined Competence must be measured and meet certain defined criteria defined in recognized standards approved by GFSI: o ISO/IEC 17021: Conformity assessment Requirements for bodies providing audit and certification of management systems o ISO/TS 22003: the standard that sets the generic requirements for bodies providing audit and certification of management systems o GFSI specific requirements o FSSC additional requirements

7 Specifics FSSC 22000: Requirements for CBs These requirements and regulations are presented in four separate Parts (FSSC version ) containing: o Part I: requirements of the food safety system and guidance on how to apply for certification o Part II: requirements for providing certification, including the regulation for the CBs and for the harmonization committee o Part III: requirements for providing accreditation including the regulation for the ABs o Part IV: regulations for the Board of Stakeholders

8 Integrity Program: Defined Integrity by definition is: o Doing the right thing at all times and in all circumstances o The quality of being honest and having strong moral principles; moral uprightness. The integrity of audits ensures confidence in certification Within this program, all licensed CBs must meet: o All FSSC requirements o Be accredited against the management system accreditation standard ISO/IEC by an Accreditation Body that has signed acceptance o And use the FSSC requirements

9 Integrity Program: Defined Review the performance of all licensed CBs at a defined frequency by representatives of the Foundation The review Process involves an Integrity Manager, an Independent Expert and Regional Inspectors Ian Hendra Asia and South Pacific Erwin Steenbruggen - Europe, Africa Bob Readel The Americas

10 Integrity Program: Defined The integrity program is risk based and covers: o The acceptance procedures of the CBs o The review of audit reports: Desk Audits conducted at the Foundation CB Office Conducted at CBs office Witness Audits conducted at CB Client o Screening audit data o Maintenance of an up-to-date Auditor database o Sanction policy and appeal and complaint procedure

11 Integrity Program: Purpose To verify that the certification body takes all steps required to evaluate conformance with the FSSC standard and fully complies with other associated requirements of the certification scheme, o Appendix IIA: development and implementation of scheme o Appendix IIC: GFSI requirements o ISO 17021: Requirements for bodies providing audit and certification of management systems o Explicit GFSI requirements. To confirm that the criteria for certification are met and all scheme requirements are assessed Part I Section 3: FSMS, PRP's, FSSC

12 Compliance is measured against: Requirements for Certification Regulations for CBs Appendix II A1 requirements: o Auditor training and work experience o Defining the scope of Certification o Duration of audit and audit reporting o Requirements for audit of PRPs o Requirements for the audit report o Criteria for non-conformities and certification decision o Requirements for initial Certification

13 o Requirements for Surveillance Audits o Notification of factors affecting Certification o Requirements for additional audits o Requirements for recertification Appendix II A2: requirements for Packaging Appendix II B: audit report format Appendix II B1: ISO requirements Appendix II B2: audit of PRPs Appendix II B2.2: PAS 223 Appendix II B3: additional FSSC requirements Appendix II C: additional GFSI requirements

14 CB Office Audit

15 Non-Conformities Office Audits 2014

16 Non-Conformities Office Audits 2014

17 Desk Reviews / CB Office Audit Summary 2014 Top 5 Non-conformities: 1. Auditor qualification, training and experience 2. Certificate scope 3. Audit report content 4. Audit duration 5. Certification audits

18 1. Auditor qualification, training and experience o Training logs and audit logs are not always readily available o Lack of documented continuous training program o Training certificates often over 5 years old o Audit logs not complete and up-to-date; required information not always available or missing o Currently there is a GFSI Working Group looking at this with representation from the various Scheme Owners

19 2. Audit scope/certificate scope o Scope descriptions are far too detailed describing subjects not relevant to the scope description o Guidance is located on the FSSC website but is often overlooked. It gives a good description of the requirements.

20 3. Audit report content: o CBs often design their own narrative audit report making it difficult to assess compliance to the basic FSSC requirements. Areas of concern include: An FSSC audit is always a full audit as outlined in FSSC Scheme Document Part II, Appendix IIB The Result Area is to contain Compliance or Non- Compliance items The Summary Section, positive evidence providing confirmation of compliance

21 o Description of Non-Conformities are not being identified as per the FSSC Scheme Documents and ISO Standards. Only 3 types of non-conformities are acceptable for use: Opportunity for Improvement (OFI) FSSC Part I Minor Non-Conformity Major Non-Conformity Area of Concern Non-Conformities identified during a Stage 1 Audit (ISO 17021) only

22 o Opportunities for Improvement (OFI) Audit reports having more than 5 OFIs raises questions for the reviewer OFI is not severe enough to be called out as a Minor NC but still needs to be brought to the attention of the organization Seek guidance on the FSSC Website

23 4. Audit duration o Audit plan and the supporting audit time calculation is often missing o CBs are seen designing their own calculation tool that is not compliant with the requirements. o Must follow ISO and the FSSC Scheme Documents. o Calculation Tool and Guidance Document are available on the FSSC Website

24 5. Certification Audit o CBs are having difficulty organizing the Certification Audit or Upgrade Audit Upgrade Audit : not always clear if it is an upgrade from ISO to FSSC discussed earlier by Jacqueline Certification Audit: not always noted in Stage 2 that all of the NCs from Stage 1 are assessed and have been closed Have seen Stage 1 and Stage 2 audits combined which is not allowed under the standard and CB procedures have not always been clear on this

25 o Companies with Multiple Sites Guidance is described in ISO 22003, clause A single certificate may contain multiple sites All sites must be audited Not all sites are audited although the certificate includes all sites belonging to the legal entity One overall report is made for the audit without mention of the individual sites An individual report is required for each site NCs are not always referenced to the individual site

26 Enter Manufactures Technical Updates ISO 22003: 2013 introduces a new set of designations for the categorization Revised scope Guidance has been published PAS 223 vs ISO Packaging Multisite guidance is outlined in the standard Classification of non conformities guidance on NC grading and time frame to close NCs has been published

27 Moving Forward Important Deadlines: o 1 November 2014 All new certificates must be against ISO PAS 223 can no longer be used o 31 October 2015 All existing certificates that refer to PAS 223 need to be transferred to ISO o Transfer to the updated ISO 22003:2013 sometime in 2016 in line with IAF

28 What have we covered: Discussed the importance of the auditor Defined and outlined the FSSC Integrity Program and how it is linked to the various governing standards Identified and reviewed the top 5 findings from the Program Looked at Technical updates and Deadlines

29 Keep in Touch Robert Readel, Regional Inspector, The Americas Phone Join us at LinkedIn: Group FSSC Follow us on

30 QUESTIONS?