The Silent Killer of CB Accreditation
If you asked most certification body managers what their biggest accreditation risk is, they would probably mention audit documentation, competence records, or committee procedures. Few would identify communication management as their top vulnerability.
But here is the reality: communication chain failures are the most common root cause of accreditation nonconformities. Not because certification bodies do not communicate, but because they cannot prove they communicated.
What ISO/IEC 17021-1:2015 Requires
ISO/IEC 17021-1:2015 contains numerous requirements for communication between the certification body and its clients, auditors, and other stakeholders. These requirements span the entire certification lifecycle:
- •Clause 9.2.1: Information about the initial audit must be communicated to the client, including the scope, criteria, and audit team.
- •Clause 9.4.1: The audit plan must be communicated to the client in advance, and any concerns about the plan must be resolved before the audit proceeds.
- •Clause 9.4.5: Audit findings, including nonconformities, must be communicated to the client with clear requirements for response.
- •Clause 9.6.2: Changes affecting the certification must be communicated and documented.
These are not optional courtesies. They are mandatory requirements that accreditation assessors verify during every assessment.
How Communication Chains Fail
The failure is rarely that communication does not happen. It is that the evidence of communication is lost, incomplete, or unverifiable.
Email Overload and Lost Threads: In a busy certification body, planners and coordinators handle hundreds of emails per week. Audit-related communications are mixed in with everything else. Threads branch, get forwarded, are replied to by different people, and eventually become untraceable. Six months later, when an assessor asks for evidence that the audit plan was sent to the client, finding the specific email in a massive inbox is time-consuming and sometimes impossible.
Verbal Communication Without Records: Phone calls and in-person conversations are common in CB operations. An auditor calls a client to discuss findings. A planner calls an auditor to change a schedule. These conversations happen, but they leave no record. When the accreditation assessor asks for documentation, there is none.
Client Disputes: Clients sometimes claim they were never notified of audit dates, findings, or deadlines. Without a verifiable communication record with timestamps and delivery confirmation, the CB has no way to counter these claims.
Internal Communication Gaps: The planner sends information to the auditor, but the auditor claims they never received it. The committee chair sends a question to the audit team leader, but the response is never documented. Internal communication failures are just as damaging as external ones.
The Accreditation Assessment Scenario
Here is a typical scenario that plays out during accreditation assessments:
The assessor selects a sample of certification files. For each file, they trace the complete lifecycle from application through certification. At each step, they ask: "Where is the evidence that this was communicated to the client?"
- •Was the audit plan sent? Show me the record.
- •Were the audit findings communicated? Show me the record.
- •Was the client notified of the certification decision? Show me the record.
- •Was the surveillance schedule communicated? Show me the record.
For a CB running on email, answering each question requires searching through inboxes, finding the specific message, and demonstrating that it was sent to the right person at the right time. This process is slow, stressful, and unreliable.
For a CB running on Certiva, every communication is logged within the platform, linked to the specific client and audit, with timestamps and delivery confirmation. The assessor's questions are answered in seconds, not minutes.
The Real-World Consequences
Communication chain failures lead to several types of accreditation findings:
- •Minor Nonconformities: Isolated instances where communication records are missing or incomplete. These require corrective action but do not typically threaten accreditation status.
- •Major Nonconformities: Systematic failures in communication management. When the assessor finds that communication records are missing across multiple files, it indicates a system-level problem that requires significant corrective action.
- •Repeated Findings: When the same communication management issues are raised in successive assessments, assessors conclude that the CB has not addressed the root cause. This escalates the severity and can lead to more serious consequences.
Why Email Is Not a Communication Management System
Email was designed for asynchronous personal communication. It was not designed to serve as a compliance-grade record management system. Its limitations in a CB context are fundamental:
- •No Linkage to Business Objects: An email about an audit exists independently of the audit record. There is no automatic connection between the message and the client file, the audit plan, or the stage report.
- •No Process Enforcement: Email does not ensure that required communications happen. If a planner forgets to send the audit plan to the client, email does not flag the omission. If a notification deadline passes, email does not alert anyone.
- •No Centralized Access: Communication records are distributed across individual inboxes. If the person who sent the original email leaves the organization, finding the record may become impossible.
- •No Verification: Email delivery is unreliable. Messages can be filtered to spam, bounced, or simply ignored. Without read receipts (which most recipients block), there is no confirmation of delivery or receipt.
How Software Solves Communication Management
Certiva approaches communication as a core operational function, not an afterthought:
- •Platform-Based Communication: Communications sent through Certiva are automatically logged, timestamped, and linked to the relevant client and audit. The record is created as a byproduct of normal work, not as a separate documentation task.
- •Communication Templates: Standard notifications (audit plan transmittals, finding notifications, certification decisions) are template-based, ensuring consistency and completeness.
- •Portal-Based Document Exchange: When clients submit documents or respond to findings through the client portal, the submission is logged automatically. There is no ambiguity about what was received and when.
- •Automated Notifications: The system sends required notifications at defined points in the workflow. When an audit plan is finalized, the notification goes out automatically. When a finding is raised, the client is notified through the system.
- •Complete Communication History: Every communication related to a client or audit is accessible from a single timeline. There is no searching through inboxes or file folders. The complete history is available in one place.
Building a Culture of Documented Communication
Software alone does not solve the communication problem. It must be accompanied by a cultural shift where all significant communications happen through the platform, not around it. This means:
- •Training staff to use the platform for all client communications, not just some of them.
- •Documenting verbal communications in the system immediately after they occur.
- •Using the client portal as the primary channel for document exchange.
- •Ensuring that auditors communicate findings through the system, not via personal email.
Certiva makes this cultural shift easier because the platform is designed to be the most convenient way to communicate, not an additional documentation burden.
Ready to eliminate communication chain failures?
Book a demo at getcertiva.com and see how Certiva creates an automatic, accreditation-ready communication trail for every interaction.