The Most Critical Step in the Certification Process
The certification decision is the single most consequential action a certification body takes. When a CB issues a certificate, it is making a formal declaration that an organization's management system conforms to the requirements of a specific standard. If that decision is wrong, the consequences affect the CB, its clients, and the integrity of the certification system.
ISO/IEC 17021-1:2015 Clause 9.5 establishes clear requirements for how certification decisions must be made. The person or persons making the decision must be competent, they must not have been involved in the audit, and the decision must be based on a review of the audit information.
Despite the clarity of these requirements, committee review management is one of the most problematic areas for certification bodies. The problems are not usually about intent. They are about process. CBs want to make good decisions, but without systematic support, the process is error-prone.
Common Committee Management Problems
Problem 1: Qualification Gaps. The committee member assigned to review a certification file may not have the required competence for the specific scope. If the certification is for an EA code that the reviewer has no experience with, their review cannot adequately assess whether the audit findings are appropriate.
This happens because committee assignment is often informal. The quality manager or senior staff member selects reviewers based on availability rather than qualification matching. In a busy period, the reviewer who is available may not be the reviewer who is qualified.
Problem 2: Incomplete Reviews. Not all committee members complete their review before the certification decision is recorded. This can happen when reviews are managed via email and one member's response is missed, or when there is pressure to issue the certificate quickly and someone decides that two out of three reviews is "good enough."
Problem 3: No Separation Between Audit and Decision. In smaller CBs, the pool of qualified personnel is limited. There is a risk that the person reviewing the file participated in the audit, either as a team member or in a supervisory capacity. ISO/IEC 17021-1:2015 explicitly requires separation between the audit function and the decision function.
Problem 4: Undocumented Decision Rationale. The committee makes a decision, but the rationale is not documented. If the decision is questioned later, whether by the client, the accreditation body, or in an appeal, there is no record of why the decision was made.
Problem 5: No Systematic Follow-Up on Conditions. Sometimes the committee approves certification with conditions, such as requiring closure of a minor nonconformity within a defined period. If these conditions are not tracked systematically, they may be forgotten or unverified.
What ISO/IEC 17021-1:2015 Actually Requires
The standard's requirements for the certification decision are specific:
- •Clause 9.5.1: The CB must have a process to make decisions on certification based on the information gathered during the audit process and any other relevant information.
- •Clause 9.5.1.1: The persons making the certification decision must not have participated in the audit. This ensures impartiality.
- •Clause 9.5.2: The CB must ensure that the persons making the certification decision have the appropriate competence to understand the type of management system being certified, the applicable requirements of the standard, and the audit findings.
These requirements mean that the committee review process must validate competence, enforce separation, and document the decision. Any failure in these areas is a direct nonconformity.
How Certiva Manages Committee Reviews
Certiva implements committee review management as a structured, enforced process:
Committee Composition:
- •The system maintains a register of all qualified committee members, including their qualifications by standard and scope category.
- •When a certification file is ready for committee review, Certiva identifies which members are qualified to review based on the specific scope of the certification.
- •The system prevents assigning a committee member who was involved in the audit being reviewed.
Qualification Validation:
- •Before routing a file for review, the system validates that the assigned committee members collectively have the required competence for the certification scope.
- •If the assigned members do not provide adequate coverage, the system flags the gap and suggests alternatives.
Signing Order Enforcement:
- •Committee reviews follow a defined signing sequence. Each member reviews the file and records their assessment.
- •The system enforces the sequence. A downstream reviewer cannot sign until upstream reviewers have completed their review.
- •This prevents premature decisions and ensures that every required review is completed.
Decision Blocking:
- •The certification decision cannot be finalized in the system until all required committee members have completed and signed their reviews.
- •This is a hard block, not a soft warning. The system physically prevents the certification from proceeding without complete committee approval.
- •This eliminates the risk of certificates being issued before the review process is complete.
Decision Documentation:
- •Each committee member's review is recorded with their assessment, any comments, and their signature with timestamp.
- •The overall certification decision is recorded with its rationale.
- •The complete decision record is linked to the certification file and retained as part of the permanent record.
The Committee Review Workflow
Here is how a typical committee review flows through Certiva:
- 1. File Preparation: The audit report, findings, evidence, and client responses are compiled in the system. The file is marked as ready for committee review.
- 2. Member Assignment: Qualified committee members are assigned to the file. The system validates their qualifications and confirms separation from the audit team.
- 3. Review Period: Each member accesses the complete file through their portal. They review the audit report, examine findings, and assess whether the evidence supports certification.
- 4. Individual Assessment: Each member records their assessment: approve, approve with conditions, or decline. They add comments and sign their review.
- 5. Decision Compilation: Once all members have signed, the system compiles the individual assessments into an overall decision.
- 6. Certification Action: Based on the committee decision, the appropriate action is taken: certificate issuance, conditional approval with tracked conditions, or refusal with documented rationale.
Benefits Beyond Compliance
Systematic committee management provides benefits that extend beyond satisfying accreditation requirements:
- •Decision Quality: When every reviewer is qualified and every review is complete, the quality of certification decisions improves. Errors in audit reports are more likely to be caught. Questionable findings are more likely to be challenged.
- •Audit Efficiency: Accreditation assessors spend significant time examining committee records. When these records are systematic, complete, and well-organized, the assessment proceeds smoothly and efficiently.
- •Risk Reduction: A well-documented committee process protects the CB in the event of disputes, appeals, or legal challenges. The complete decision record demonstrates that the certification was issued based on a thorough, competent review.
- •Training and Development: Committee review records provide valuable data for training and development. Patterns in committee feedback can identify areas where auditors need additional support or training.
The Cost of Getting It Wrong
A certification issued without proper committee review is a liability. If the certified organization subsequently fails to meet its obligations, the CB's decision process will be scrutinized. If the review was incomplete, the reviewers were unqualified, or the process was not documented, the CB bears responsibility.
During accreditation assessments, committee management findings are typically classified as major nonconformities because they directly affect the reliability of certification decisions.
Ready to eliminate committee management risk?
Book a demo at getcertiva.com and see how Certiva enforces proper committee review with qualification validation, signing order control, and complete decision documentation.