Scope Shrink Under Certification Pressure

Scope determination. Removing Site B solely to save two audit days is not acceptable. The certification scope must cover activities, products, and services within the organization's control and over which it can be expected to have influence. Site B performs shredding, stores lithium batteries, and ships residues to Site A; those are core activities under the central EMS, aspect register, and legal register. The fire and lost records explain an evidence problem, not a scope exclusion. Excluding Site B would make the certificate misleading.\n\nOptions: postpone the initial audit until sufficient records are reconstructed, add audit days and auditors to cover Site B with alternate evidence, or issue a scope that explicitly excludes Site B only if the client genuinely removes those activities from its EMS and the certification body agrees. The last option would require changing the EMS boundary and would likely be impractical. The audit program manager's practical path should not override accreditation and impartiality requirements.\n\nJudgement point: a scope exclusion is a boundary decision, not a scheduling convenience.

Risk-based plan. With 10 days and two auditors, I would allocate days by risk, not equally: Site B (battery storage and fire) gets the most time, Site A gets dismantling plus central EMS and consolidation, Site C gets refurbishment. I would use the fire as a risk indicator and sample records before and after the incident. Because two months of records were destroyed, I would triangulate with waste shipping manifests, battery inventory logs, fire department reports, maintenance records, and interviews.\n\nSampling: select all high-risk processes at B (battery receipt, storage, thermal monitoring, fire response), then random samples of manifests and inspections across shifts. At A and C, sample across shifts and temporary workers. If evidence is insufficient, extend the audit rather than reduce scope. Document the rationale and any limitations in the report.\n\nJudgement point: lost records increase audit risk. The auditor should not treat missing evidence as evidence of conformity or as automatic nonconformity; instead, seek corroborating sources and state the limitation.

Professional response. I would acknowledge the commercial relationship but explain that audit time and scope must be based on evidence and risk. Reducing days without reducing scope would undermine the audit conclusion. I would document the request and my rationale, then propose options: add resources, extend the schedule, or postpone. If the manager continues to pressure, I would escalate through the certification body's impartiality or technical review process.\n\nIndependence: the auditor must not allow a key-account status to affect findings or scope decisions. Acceptance of a scope limitation without disclosure could mislead customers and regulators. If the client insists on exclusion, the audit report should clearly state the scope limitation and the certification decision should reflect it.\n\nJudgement point: commercial pressure is a threat to objectivity. The correct response is transparent escalation, not private compromise.