Stage 1 findings and pressure to backdate records
Polymer Renew is a 90-employee plastics recycler preparing for stage 2 certification. The stage 1 audit has just closed with findings: internal audit reports do not cover two clauses; management review minutes record discussion but no decisions or actions; the legal register has not been used to evaluate compliance; calibration records are missing for three instruments; and dust from shredding, a significant aspect, is absent from the monitoring plan and operational controls. Stage 2 is scheduled in four weeks. Top management asks the consultant to create the missing records with last month's dates and to keep the dust issue quiet until after certification. The consultant is told that the customer contract depends on certification and that a postponement would be embarrassing.
1. How should the consultant respond to the request to backdate records and conceal the dust aspect? Explain the professional and certification consequences.
Read the worked answer
The consultant should refuse. Creating records with false dates is falsification of evidence and would mislead the certification body. It breaches integrity, could invalidate the certificate if discovered, and may expose the organization and the consultant to contractual and accreditation consequences. The dust aspect must be added to the aspect register, significance evaluation, monitoring plan and operational controls before stage 2. The correct response is to tell top management that the gaps are real and must be closed by doing the activities now-internal audit, management review, compliance evaluation, calibration-and recording the actual dates. If the work cannot be completed in four weeks, the certification body should be asked to postpone stage 2. A postponement is cheaper than a failed audit, a withdrawn certificate or a finding of fraud.
2. Assess whether the organization should proceed to stage 2 in four weeks and outline the readiness actions required.
Read the worked answer
Proceeding is defensible only if objective evidence can be produced. For each stage 1 finding: complete an internal audit of the missing clauses using an independent auditor, issue the report and corrective actions; hold a management review with the required inputs and outputs, decisions, actions and minutes; update the legal register and evaluate fulfilment of each obligation; calibrate or verify the three instruments and assess the validity of earlier data; and add dust to the aspects, evaluate its significance, implement controls and monitoring, and set an objective if significant. Then conduct a short gap assessment and check that evidence exists at the point of use, not only in a folder. The decision should be go or postpone based on evidence and management commitment, not on contractual pressure. If resources are insufficient, postpone.
3. What will the stage 2 auditor look for in these areas, and how should the organization present the dust aspect?
Read the worked answer
The auditor will sample internal audit reports and auditor competence/impartiality, management review minutes with decisions and actions, compliance evaluation records, calibration certificates and traceability, monitoring data, the aspect register and operational controls, and interviews with workers and contractors. The dust aspect should be presented honestly as a newly identified significant aspect, with the updated register, significance evaluation, controls such as enclosure, extraction, monitoring and housekeeping, and any objective or action in progress. Honest disclosure with evidence of control is stronger than concealment. The organization should not coach witnesses to give scripted answers; the auditor will test consistency between what people say and what records show. If an action is still in progress, the organization should show the plan and the evidence of implementation to date.