Accreditation

Scope of accreditation services

SwedAcc grants accreditation to certification bodies (CBs) for the certification of management systems against the following standards, among others:

• ISO 9001 — Quality management systems
• ISO 14001 — Environmental management systems
• ISO/IEC 27001 — Information security management systems
• ISO 45001 — Occupational health and safety management systems
• ISO/IEC 20000-1 — Service management systems
• ISO 22000 — Food safety management systems

The exact scope granted to each accredited body — standards, industry sectors and geographical coverage — is published in the public register of accredited bodies.

The accreditation process

1. Application. The certification body submits an application describing its legal status, management system, personnel competence and the scope of accreditation sought.
2. Document review. SwedAcc assessors review the CB's documented processes against ISO/IEC 17021-1 and applicable SwedAcc requirements.
3. Office assessment. An assessment team performs an on-site or remote assessment of the CB's head office functions, including impartiality safeguards and competence management.
4. Witnessing. SwedAcc witnesses the CB performing certification audits at client sites to verify practical competence.
5. Accreditation decision. An independent accreditation committee reviews the assessment report and decides whether accreditation shall be granted, and for which scope.
6. Publication. Granted accreditations are published in the public register with an accreditation number, scope and validity dates.

Assessment cycle

Accreditation is granted for a cycle of up to four years. During the cycle SwedAcc conducts:

• Annual surveillance — office assessments and selected witnessing of audits;
• Extraordinary assessments — triggered by complaints, changes in the CB or other risk indicators;
• Reassessment — a full assessment before the end of each cycle for continued accreditation.

Accreditation may be suspended or withdrawn where an accredited body no longer meets the requirements. The register always reflects the current status.

Requirements documents

SwedAcc's accreditation requirements are based on ISO/IEC 17021-1 and are published as SwedAcc regulations (STA-series). Applicants receive the full documentation package upon application.