Access Restriction and a Friend at the Certification Body
You lead a three-person team conducting an ISO 14001:2015 recertification audit at a metal-finishing plant with 450 employees. On day 3, the operations manager bars your access to the wastewater treatment room, calling it commercially sensitive, even though the room was in the audit plan and was audited last year. You have already seen a pH probe with calibration due 11 weeks ago and a pipe labeled emergency bypass with no lock or seal. The client's CEO calls your certification body's regional manager, who tells you by phone: They are a key account; be pragmatic and close the audit. Your team also includes a technical expert employed by the client's parent company. The audit is scheduled for five days.
1. Identify the professional-conduct and impartiality issues and state what you would do before continuing the audit.
Read the worked answer
The issues are improper commercial pressure, a conflict of interest on the team, and a scope access restriction. ISO 19011's principles - integrity, fair presentation, due care, independence, and evidence-based approach - do not permit closing an audit to protect an account. A regional manager's instruction cannot override audit evidence.
Actions: politely decline the request and state that closing without evidence would misrepresent conformity; disclose the call and the parent-company relationship to the audit programme manager and the impartiality function; remove or reassign the technical expert from any decision-making role and re-evaluate the team's independence; document the call, time, and content in the audit record. A normal confidentiality agreement is acceptable, but any additional NDA that would prevent reporting to the certification body should be refused. If pressure continues, escalate to the certification body's impartiality committee before issuing any conclusion.
2. How should you treat the denied access, the overdue calibration, and the bypass line as audit evidence?
Read the worked answer
The audit contract and plan give the team access to the scoped area. Record the denial in writing, ask for the specific reason, and request records - calibration certificates, maintenance work orders, bypass logs, permits, and monitoring reports - while interviewing operators and observing from accessible areas. The denial is an audit limitation, not a finding by itself, but it prevents verification.
The overdue pH calibration is objective evidence that monitoring equipment may not be controlled under clause 9.1.1. The unsealed bypass is evidence of a possible operational-control weakness under clause 8.1, and could be significant if it can lead to unauthorized discharge. Do not classify either as major or minor until you verify whether the bypass is permitted, whether it was closed and controlled, and whether calibration affects data validity. If access remains denied, you cannot conclude on that process; consider suspending or qualifying the audit rather than dropping the area.
3. What should go into the audit record and report, and how should escalation be handled?
Read the worked answer
Document the exact time, people present, words used, and your response to the regional manager's call. Record the access limitation, the evidence observed, and the effect on audit conclusions. Report findings factually with clause references: for example, 9.1.1 for monitoring and calibration, 8.1 for operational control, and 6.1.3 if a compliance obligation is affected.
Escalate to certification-body management and to the client's top management, not only the operations manager. The report should state that the wastewater treatment process could not be fully verified. If this is a certification audit, follow the certification body's impartiality and suspension procedures. Do not let the commercial relationship alter the finding or the report wording. Retain all records, including the denied-access note, because they show how the conclusion was reached.