SCS FSC Chain-of-Custody Guidance for Certification of Multiple Sites

Transcription

1 2000 Powell Street, Ste. 600 Emeryville, CA USA main fax SCS FSC Chain-of-Custody Guidance for Certification of Multiple Sites Table of Contents I. Central Office Procedures... 2 A. Central Office and Certificate Manager... 2 B. Participation of Eligible Sites... 2 C. Training Plan... 2 D. Central Office Audit Program (Internal Audit Program)... 3 E. Record Keeping... 3 II. Central Office Administration... 4 A. Consent Forms (where applicable)... 4 B. Training Program... 4 C. Trademarks Management... 4 III. Management of Participating Sites... 5 A. Provision of Information and Documents... 5 B. Number and Increase of Participating Sites... 6 C. Requirements for Participating Sites... 7 IV. Central Office Audit Program... 7 A. The Central Office Audit Program (Internal Audit Program)... 7 B. Qualifications of Central Office Auditors (Internal Auditors)... 8 C. Requirements for CAR Issuance by the Central Office... 9 D. Central Office Internal Audit Reporting Requirements and Annual Review Version 4-0 (October 2014) SCS Global Services FSC-A Page 1 of 10

2 I. Central Office Procedures A. Central Office and Certificate Manager Requirements 4.1, 4.2, 5.1.1, and Every Multi-site or Group organization must designate a particular site, department, or function to be the Central Office (CO). This CO will administer the certificate and ensure the requirements of FSC-STD are met, as well as ensure that the relevant certification requirements for each Participating Site (PS) are met. As part of this responsibility, the CO must be able to demonstrate that it has the necessary technical and human resources to manage the number of PS under the scope of the certificate. The CO must assign a Certificate Manager with legal or management authority and technical support necessary to implement the responsibilities specified in the multiple sites standard and manage the number of Participating Sites. The Certificate Manager must be someone with professional experience, knowledge, and competence to manage the certificate and implement the requirements of the applicable FSC standards at each PS. B. Participation of Eligible Sites Requirements 4.4 and An organization is not required to include all of their associated sites on their certificate. A Central Office may also hold or administer more than one Multi-site or Group certificate. In both cases, clear procedures must be written to ensure that only the Participating Sites (sites included in the respective FSC certificate) claim their products as FSC-certified and use the FSC trademarks. The CO procedures must also cover the organization s process for adding/including and removing Participating Sites (PS), and procedures describing the measures taken to prevent the mixing of uncertified products from noncertified sites into certified product lines of Participating Sites. C. Training Plan Requirements 5.1.3, 5.2.3, and The CO is responsible for establishing a training program for both the CO s auditors (those persons who will conduct the Central Office (aka internal) audits see D. below) as well as the relevant personnel at each PS. The plan for the training program must cover the latest version of all FSC Policies and Standards applicable to the scope of the certificate and any applicable CO procedures. Participating Site representatives and other relevant personnel must be trained to ensure the COC certification requirements are being followed. CO auditors (internal auditors) must be trained to ensure CO audits (internal audits) are conducted objectively and cover the full scope of the certificate at each PS. Version 4-0 (October 2014) SCS Global Services FSC-A Page 2 of 10

3 For certificates with more than 20 Participating Sites, and where the Participating Sites are not linked through common ownership, the internal auditors must be in possession of a formal ISO 9001, ISO 14001, or OHSAS lead auditor certificate achieved through a recognized accredited training course. Recognized course certificates include those accepted by auditor registration schemes such as IRCA and RABQSA. D. Central Office Audit Program (Internal Audit Program) Requirements 4.5 and 4.6 All Participating Sites must be included in a Central Office Audit Program (internal audit program) developed and implemented by the CO. The only exception is in cases where SCS audits 100% of PS; only then is the CO exempt from implementing an internal audit program. For all cases where SCS conducts external audits of a sample of PS only (i.e. less than 100% of PS), the CO procedures must include a plan for the internal audit program. For further information on the CO Audit Program, please see Section IV below. E. Record Keeping Requirements and The CO is required to maintain up-to-date records of all PS under the scope of the certificate, including: a. A list of all Participating Sites, with the following information*: i. Contact information (name, phone number, address, physical address); ii. Appointed Participating Site s COC representative; iii. Date of entry into the Multi-site or Group COC certificate; iv. Date of withdrawal from the scope of the certificate (if applicable); v. The certificate sub-code assigned; vi. The site activity (e.g. primary processor, secondary processor, trader, printer, retailer); vii. Indication if the PS implements a Controlled Wood verification program, Supplier verification program for reclaimed materials, and/or outsourcing; viii. Indication if the PS has signed a declaration stating that no material has been FSC labeled, sourced as controlled material, or sold as FSC certified or FSC Controlled Wood since the last internal audit. b. Where applicable, the signed consent form or contract of each PS (see Section II below); c. Records demonstrating the scope of COC certification for each Participating Site; d. Records of all internal audits (see Section IV below), including: i. Nonconformities identified in such audits; ii. Actions taken to correct them; iii. CO s annual review of its audit program and procedures; e. Records of training provided by, or on behalf of, the CO, and of participation therein; f. A list of the CO s auditors and their qualifications. Version 4-0 (October 2014) SCS Global Services FSC-A Page 3 of 10

4 Note that records must be archived for at least five (5) years and be made available to SCS upon request. *SCS has a template available to facilitate the creation of a list of Participating Sites, covering the information required in clause (a) above. Please ask for it if you are interested. II. Central Office Administration A. Consent Forms (where applicable) Requirement 4.3 A consent form or contract is necessary for any Multi-site or Group COC certificate where the Participating Sites are not linked through common ownership. A form or contract must be signed by each PS in the certificate scope and must include the following: a. Acknowledgement and agreement to the general obligations and responsibilities for participation in the Multi-site or Group COC certificate, as stipulated in the standard, the certification contract, and the documented procedures of the CO; b. Agreement to conform to all applicable FSC certification requirements and the documented contractual obligations, corrective action requests, and procedures of the CO; c. Authorization of the CO to apply for and administer the FSC Chain of Custody certification on behalf of the PS; d. Acknowledgement of mutual responsibility for the maintenance of the certificate, where nonconformities identified at the level of the PS or the CO may result in corrective action requests, certificate suspension, and/or certificate withdrawal. B. Training Program The plan for the training program included in the CO procedures (see Section I above) must be implemented and maintained such that all internal auditors and relevant PS staff are aware of the latest FSC Policies and Standards and are equipped to meet the requirements. Initial training must be completed prior to the first evaluation audit from SCS, and it must follow the training plan thereafter. C. Trademarks Management Requirements in FSC-STD , Annex 2, Section 1 In addition to the regular trademark requirements found in FSC-STD and FSC-STD , the CO is responsible for enforcing the additional Multi-site and Group certificate holders requirements found in part 1 of FSC-STD , Annex 2. The CO must ensure that all uses of the FSC trademarks (i.e., the Version 4-0 (October 2014) SCS Global Services FSC-A Page 4 of 10

5 initials FSC, the name Forest Stewardship Council, and the FSC checkmark-and-tree logo) by any PS in any application, such as an on-product stamp, a web site, on-site poster, or a print ad, is approved by SCS. Although the Central Office / Certificate Manager is encouraged to seek the approval on behalf of the PS, flexible arrangements can be made upon request. At minimum, the CO should have access to all logo approval records. Sub-codes of Participating Sites cannot be added to the FSC trademark license code. For Group COC Certificates, the CO must not produce any document similar to an FSC certificate for the Participating Sites. If individual membership documents are issued, no other forest certification schemes marks or names can appear and these statements must be included: a. Managing the FSC certification program of [name of group] b. Group certification by SCS III. Management of Participating Sites A. Provision of Information and Documents Requirement It is the Central Office s responsibility to: a. Provide each PS with a copy of the FSC Chain of Custody standard (FSC-STD ), the FSC Trademarks standard (FSC-STD ), and any other relevant certification standards (e.g., FSC- STD , FSC-STD ), all available from SCS or for download at b. Provide each PS with a copy of the documented (most up-to-date) CO procedures; c. Ensure that all PS representatives understand that SCS and/or SCS accreditation body, ASI, has the right to access any site covered under the certificate for the purposes of evaluating the Chain of Custody program with or without advanced notice; d. Ensure that all PS representatives understand which information SCS, ASI and/or FSC may collect and publish for public viewing, including: PS name and address(es), , phone, certificate sub-code, certificate issuance and expiration dates, the standards against which PS is certified, PS contact person, product groups (including product class, product type, species where Version 4-0 (October 2014) SCS Global Services FSC-A Page 5 of 10

6 applicable, material categories), and Controlled Wood Risk Assessment(s) and Controlled Wood Summary Certification Report, where applicable 1 ; e. Ensure that all PS representatives understand which obligations must be met in order to participate in the certificate, including which nonconforming actions may result in a site s exclusion from the certificate. This information and documentation may be kept online or on an intra-organizational server in order to ease the administrative burden, as long as it can be viewed at-will from every PS, and demonstrated upon request of any auditor at each and every site audit. B. Number and Increase of Participating Sites Requirements After each external audit (for example, initial evaluation, annual surveillance, or expansion of scope), SCS will approve an annual growth rate for any Multi-site or Group certificate which maintains an internal audit program. The growth rate will be indicated in the audit report from 0-100% based on SCS assessment of the ability of the CO to manage the number of PS. The factors considered to determine the growth rate include the number of nonconformities issued, the past growth rate, the experience and number of qualified auditors, and other risk factors. The growth rate is determined at SCS sole discretion. Keep in mind that Group COC certificates are limited to a maximum number of 500 Participating Sites. Also, Multi-site and Group COC certificates without a Central Office Audit (internal audit) Program can only add new Participating Sites to the scope of the certificate after all applicant sites have been audited and approved by SCS. For those certificates with an approved growth rate, the CO may add a new PS at any time until they reach the annual growth limit approved by SCS. To add a new PS to the certificate, the CO must submit the initial internal audit report for each applicant site to SCS (see Section IV below). New PS are considered certified after the site information is published in the FSC database. If the addition of PS exceeds the approved growth limit, then SCS must conduct a sample-based audit of all of the new sites added since the previous external audit before the new sites which exceed the limit can be added to the certificate. For example: 1 By signing the FSC Trademark License Agreement, the Licensee agrees that FSC Global Development as well as the FSC Network may process and use the name and address as well as address and telephone number for direct marketing purposes, i.e. to promote the FSC Certification Scheme and FSC AC s mission to promote responsible management of the world s forests. The Licensee may object to this use of the contact data at any time by sending an to [email protected]. Version 4-0 (October 2014) SCS Global Services FSC-A Page 6 of 10

7 A Multi-site certificate has 30 PS and a growth limit of 30% (10 additional PS). The CO conducts initial internal audits of 10 new PS and those are added to the certificate, thus reaching the growth limit. The CO then wishes to add 5 more new PS, so the first step is to conduct initial internal audits of those 5 sites. However, at this point SCS is required to conduct a sample-based external Expansion of Scope audit of all 15 new PS (and also audit the CO) before the second group of 5 new sites can be added to the certificate. To remove a PS from the certificate, the CO must notify SCS in writing within three working days of the PS being considered removed by the CO. The PS will then be removed from the FSC database. C. Requirements for Participating Sites Requirements 6.1 and 6.2 Although the CO is responsible for ensuring that most of the requirements of the standard are met, PS also have some responsibilities. Each PS must: a. Assign a representative who has authority to ensure that all applicable requirements are met and procedures are followed, and who serves as the contact for the CO; b. Conform to all applicable FSC Chain of Custody requirements; c. Conform to all applicable participation requirements as specified by the CO; d. Respond to all requests from the CO or SCS; e. Inform the CO of all changes that may affect conformance to certification or participation requirements (such as changes in ownership, staff, procedures, or processes); f. Provide full cooperation and assistance with respect to the completion of audits performed by the CO, SCS, or ASI; g. Ensure that all CARs issued by the CO or SCS are addressed within their established timelines; h. Use their assigned sub-code on sales and transport documents for FSC-certified products. Details on the assigned sub-code to be used by each PS will be provided by FSC. IV. Central Office Audit Program A. The Central Office Audit Program (Internal Audit Program) Requirements 5.3.1, 5.3.2, 5.3.3, and The Central Office is responsible for ensuring that all sites included in their certificate meet all relevant Chain of Custody requirements. There are two options for ensuring this: a) SCS can audit 100% of Participating Sites each year; or b) the CO can implement an internal audit program for its PS, and SCS will then audit only a sample of PS with each external audit. This section covers requirements for those certificates which will implement an internal audit program. The Central Office must conduct an audit prior to an applicant site s inclusion as a Participating Site Version 4-0 (October 2014) SCS Global Services FSC-A Page 7 of 10

8 (initial internal audit). In the case of initial evaluation audits, the CO must complete initial internal audits of all PS prior to SCS conducting our external sample-based audit. Central Office audits of each PS must also be conducted at least annually. If a Participating Site also serves as the Central Office, then the operational aspect of that site (e.g. those requirements specified in ) do not need to be included in the internal audit program. However, those operational aspects will be annually audited by SCS. The CO may waive the annual internal audit for any PS under the following conditions: a. The site has already been audited by SCS in the same calendar year; AND/OR b. The site has submitted a signed declaration to the CO stating that no material has been FSC labeled, sourced as controlled material, or sold as FSC certified or FSC Controlled Wood since the last internal audit. NOTE: The Central Office cannot waive more than two consecutive annual internal audits for any site. The default for internal audits is that they are to be conducted on-site at each PS. However, internal audits may be conducted remotely ( desk audit ) instead of on-site for any PS that is: a. Trading in finished and labelled products (e.g. retailers); b. Trading products without taking physical possession; c. Exclusively handling certified products made of a single input material (e.g. the whole site production is FSC 100%). B. Qualifications of Central Office Auditors (Internal Auditors) Requirement The Central Office is responsible for ensuring that internal auditors are qualified and have the training and experience required in order to conduct audits of Participating Sites. The following must be considered in the selection of CO auditors: a. The professional experience and ability to evaluate a Participating Site s conformance with the Chain of Custody standard, and other FSC standards as relevant (e.g., STD , STD ); b. Fluency in the language used at the site (or accompaniment by a translator); c. Objectivity and impartiality: Auditors may not audit activities for which they are directly responsible to handle or execute or participate in, or for which they have any other conflict of interest. (For example, a person who is responsible for material handling at a facility on a day to day or operational basis cannot be an internal auditor and audit their facility against the material handling requirements in ). Version 4-0 (October 2014) SCS Global Services FSC-A Page 8 of 10

9 C. Requirements for CAR Issuance by the Central Office Requirements and Annex B The Central Office must have the formal authority to issue Corrective Action Requests (CARs) to Participating Sites. The CO auditor must evaluate a nonconformity to determine if it constitutes a minor or major CAR. The auditor must consider the impact of the nonconformity on the supply chain and the credibility of the FSC system when evaluating it. A nonconformity can be considered minor if: a. It is a temporary lapse; or b. It is unusual/non-systematic; or c. The impacts of the nonconformity are limited in their temporal and organizational scale; and d. It does not result in a fundamental failure to achieve the objective of the relevant requirement. A nonconformity must be considered major if it results in, or is likely to result in, a fundamental failure of the COC system at the Participating Site. Such fundamental failure is indicated by nonconformity(ies) which: a. Continue over a long period of time; or b. Are repeated or systematic; or c. Affect a wide range of the production or a large proportion of workers; or d. Are not corrected or adequately addressed by the Participating Sites once it has been identified. The CO may also issue observations to PS. An observation does not in itself constitute a nonconformity, but the auditor has identified a potential problem which may lead to a future nonconformity if not addressed by the PS. CAR closure must be implemented within the following timelines: a. Minor CARs one year OR by the next annual Central Office audit (whichever happens first); b. Major CARs three months. Minor CARs that are not closed within the established timelines must be upgraded to major CARs. The decision regarding whether or not a site is eligible to be included or remain in the scope of the certificate must be determined according to the outcomes of Central Office audits. If any of the following occurs, then the site must be immediately removed from the Multi-site or Group COC certificate: a. Major CARs have not been addressed within established timelines; b. Five (5) or more major CARs are issued for a single standard (e.g or ) to a Participating Site during a Central Office audit. NOTE: If major CARs are issued during the initial audit by the Central Office, then the applicant site Version 4-0 (October 2014) SCS Global Services FSC-A Page 9 of 10

10 cannot be included in the scope of the Multi-site or Group COC Certificate until the major CARs are closed. D. Central Office Internal Audit Reporting Requirements and Annual Review Requirements and The results of the internal audit of each Participating Site must be documented in a report that includes (at a minimum) the following information: a. Participating Site details (sufficient to identify the site); b. Checklist covering all certification requirements applicable to the PS (at a minimum the COC standard FSC-STD and the trademark standard FSC-STD ), providing a systematic presentation of findings, and demonstrating conformity or nonconformity to each requirement; c. Status of CARs issued by SCS and the CO, including CARs from both the previous and current audit; d. Verification of FSC material balance for each PS in accordance with the requirements of FSC- STD ; e. Summary of audit conclusions, including the decision on whether or not the site is eligible to be included or remain in the scope of the certificate. The CO must conduct an annual review of its internal audit program and procedures. This review includes the results of each Participating Site s internal audit in order to address any necessary changes or identified issues. If you have questions or concerns as you prepare for your upcoming SCS audit, please feel free to contact any member of our staff. Version 4-0 (October 2014) SCS Global Services FSC-A Page 10 of 10