Management Systems Certification Rules & Regulations
Summary of the rules applying to applicants and certified organizations. Full documents are available on request from info@amyinternational.org.
1.0 Types and schemes of certification
- Management system certification gives assurance that an organization's system conforms to its stated policy and the applicable international standard, can meet its objectives and is effectively implemented.
- Schemes include ISO 9001, ISO 14001, ISO 45001, ISO 22000, ISO 13485, ISO 50001 and ISO/IEC 27001.
1.1 Criteria for granting certification
- A documented management system appropriate to the certification scope and conforming to the standard.
- At least one complete cycle of internal audit and management review, found effective by AMY auditors.
- All dues, including the certification fee, paid.
- Records of complaints and the actions taken, available for verification.
- Successful Stage 1 and Stage 2 audits with a favourable audit team recommendation.
2.1 Certification agreement
- The agreement is signed once the client accepts AMY's quotation.
2.2 Stage 1 audit
- AMY reviews documentation at the client's site and gathers information on activities, processes and applicable legislation.
- All observations must be resolved before Stage 2 is planned. Multi-site organizations follow procedure P-4-1-2.
2.3 Stage 2 audit
- AMY audits the client's premises against an agreed plan to verify the system is effective, and issues a formal report.
2.4 Non-conformities
- The client submits corrections and a root-cause corrective action plan within 10 working days of the audit's last day.
- Corrective action must be verified within 90 days for major and 30 days for minor non-conformities. Missing these deadlines cancels the audit for new clients or may suspend the certificate of certified clients.
2.5 Recommendation and 2.6 issue of certificate
- Certification is recommended only after audit reports are reviewed and corrective actions are accepted and, for major non-conformities, verified.
- The certificate is issued once all non-conformities are closed, remains AMY's property and is valid for three years subject to successful surveillance.
2.7 Surveillance and 2.8 recertification
- Surveillance audits take place at least once a year; the first within 12 months of the certification decision.
- Recertification confirms continued conformity across the full scope and is scheduled at least 60 days before expiry.
2.9 Special audits
- Carried out for scope extensions, complaint investigations, follow-up of suspended clients or major non-conformities, and changes to certification requirements.
2.10–2.11 Notice of changes
- AMY gives advance notice of changes to certification requirements and verifies client compliance.
- Clients must promptly notify AMY of changes in ownership, legal status, key personnel, addresses, sites, scope or major processes.
2.13 Suspension, withdrawal and reduction of scope
- Certification may be suspended for serious or persistent failure to meet requirements, refusal of audits, misuse of the certificate or logo, or failure to submit corrective actions. Suspension lasts at most six months and is shown in AMY's public register.
- Unresolved suspension, serious legal issues, malpractice or the client's own request lead to withdrawal; the certificate must be returned.
- Parts of the scope that persistently fail requirements may be removed. Anyone may ask AMY to confirm a certificate's validity.
2.14 Use of certification mark
- Certification must be referenced accurately and never on products or packaging, or in a way that implies product certification.
- All references must stop on suspension or withdrawal and be amended if scope is reduced.
2.16–2.17 Obligations
- Clients must keep meeting requirements, give access to records and sites (including to accreditation body personnel), pay fees and report significant changes and serious incidents.
- AMY publishes the certification status of its clients and gives due notice of changes to requirements.
3.0 General terms
- Either party may terminate with 30 days' written notice; a termination fee of up to 15% of the agreement value may apply.
- Client information is not disclosed without written consent unless required by law.
- Egyptian law applies; unresolved disputes go to arbitration under the Egyptian Arbitration Act.
- Clients may appeal decisions on applications or on granting, suspending, withdrawing or refusing certification. Complaints are investigated without disclosing the complainant's identity.
- AMY's liability is limited to certification of the management system, not the client's products or services.