Halcyon Instruments: Scope, Calibration and an Impartiality Trap
Halcyon Instruments designs and manufactures laboratory balances at a single site and sells them in 22 countries; 130 staff. It has applied to a certification body for an ISO 9001:2015 initial certification audit. The application states a scope of 'design, manufacture, sales and servicing of laboratory balances', 130 FTE, one site, no exclusions. Stage 1 is scheduled in six weeks. Pre-assessment internal checks show: internal audit has covered 4 of 9 processes; management review has not yet reviewed resource adequacy or the status of actions from the previous review; 9 instruments in the service laboratory lack calibration certificates and one is used for final acceptance testing; and two customer complaints about drift are unresolved with no investigation record. The certification body's proposal includes an optional 'pre-audit gap review' performed by the same audit team that would conduct Stage 2, priced at EUR 3,800. The sales director wants to add 'distribution' to the scope because a reseller in Germany handles logistics.
1. Should Halcyon accept the pre-audit gap review? Explain the impartiality issue and the practical alternatives.
Read the worked answer
Decline the pre-audit by the same team. ISO/IEC 17021-1 requires certification bodies to safeguard impartiality and prohibits them from providing management system consultancy. A gap review performed by the auditors who will conduct Stage 2 creates a self-review threat: they would be evaluating their own advice, and the client may feel pressure to accept findings to avoid conflict. It also compromises the credibility of the certificate.
Options:
- Use an independent consultant, or a separate division of a certification body with a clear firewall - but even then, check that body's rules on pre-assessments and disclose the relationship.
- Better: run an internal readiness review against the standard, or commission a consultant who will have no role in the audit.
The sales director's proposed scope change is a separate issue and not a reason to accept the package. Halcyon should also ask the certification body how it manages impartiality and who will be on the audit team. If the body offers the gap review as standard practice, that is a warning sign about its independence, and the purchasing decision should weigh it.
2. Which gaps must be closed before Stage 1, and how would you decide whether to proceed or postpone?
Read the worked answer
Stage 1 is a readiness review, not a mini Stage 2. It checks that the QMS documentation meets the standard, that internal audits and management review have been performed, and that the organization is ready for Stage 2. The gaps found are exactly the Stage 1 triggers.
Before Stage 1:
- Complete internal audit coverage of the remaining five processes, with competent auditors not auditing their own work (9.2).
- Hold a management review covering all 9.3.2 inputs and record decisions.
- Calibrate the nine instruments or assess the validity of results produced since calibration lapsed; the one used for final acceptance testing is the priority (7.1.5.2).
- Investigate the two drift complaints, including root cause and an effectiveness check (10.2).
Should Halcyon postpone? If these can be genuinely completed in six weeks, proceed. If not, postpone rather than present a system that is documented but not operating. Stage 2 evaluates implementation and effectiveness; a rushed management review or backdated internal audit will be visible and may produce a major nonconformity or a recommendation to delay certification. A short postponement costs less than a failed Stage 2.
3. Advise on the scope wording and on whether 'distribution' should be added because of the German reseller.
Read the worked answer
Scope wording must reflect what Halcyon controls. The proposed scope - design, manufacture, sales and servicing of laboratory balances - is plausible if all four activities are performed at the single site. 'Distribution' should not be added merely because a German reseller handles logistics.
4.3 requires the scope to state the products and services, and to be available and maintained as documented information. If the reseller takes title and distributes independently, that activity is outside Halcyon's QMS boundary; including it would create an obligation to demonstrate control that Halcyon does not have. If instead Halcyon controls the arrangement - pricing, delivery promises, customer contract - then the reseller is an external provider (8.4) and must be controlled, but that does not require 'distribution' in the scope.
Questions to settle before the application is finalized:
- Who contracts with the German customer, and who handles complaints and warranty?
- Does Halcyon service balances in Germany, or does the reseller?
- Are there activities at the reseller's site on which Halcyon's QMS depends?
A scope that overstates control is a Stage 1 finding; a scope that understates it leaves activities uncontrolled. Align the wording with the actual process map and contractual flow.