Impartiality Statement and Certification Decisions
At the core of Insight Assurance’s impartiality policy is our management’s commitment to maintaining independence, in fact, perception and removing threats to impartiality. Insight Assurance defines threats as a relationship that threatens the impartiality based on ownership, governance, management, personnel, shared resources, finances, contracts, marketing, and payment of a sales commission and/or other inducements for the referral of new clients.
Review and analysis of impartiality are conducted on an ongoing basis as well as annually with regards to all prospects, clients, and personnel to ensure all conflicts of interest and threats to impartiality are identified, reviewed, analyzed, resolved, and monitored. In addition, Insight Assurance’s review process ensures that we do not perform audit services for clients where non-audit services have been performed and that ISO management consulting services are not performed by Insight Assurance.
Insight Assurance’s leadership ensures adherence to the impartiality policy through periodic management reviews, automated monitoring tools, internal audits, and formal risk assessments of our audit processes.
Insight Assurance operates under and complies with the independence requirements established by the American Institute of Certified Public Accountants, Payment Card Industry Security Standards Council (PCI SSC), ISO/IEC 17021:2015, ISO/IEC 27006:2015 and ISO/IEC 17020:2012.
Certificate Decisions
Information on the certification body’s processes for granting, refusing, maintaining, renewing, suspending, restoring, or withdrawing certification or expanding or reducing the scope of certification is defined below.
Granting of certification:
Upon completion of the initial certification, recertification or certification transfer audit process, Insight Assurance’s certification decision maker will perform a comprehensive review of the audit file and any corrective action plans and supporting evidence. The review will verify that the Company’s management system is in conformance with the applicable ISO standard and non-conformities have been properly addressed. Upon successful completion of this review, Insight Assurance grants the certification.
Refusing of certification process:
Should Insight Assurance’s certification decision maker’s comprehensive review of the submitted audit package result in the identification of open issues or non-conformities, Insight Assurance’s certification decision maker shall withhold the granting of certification until such time that the Company can demonstrate all criteria for certification has been achieved. If the Company exceeds the allowable remediation period outlined in the applicable standard a new initial certification audit will be required.
Maintaining certification process:
Insight Assurance requires that over the lifecycle of the certification, annual surveillance audits must be completed in years two and three, with a recertification audit to be completed prior to the expiration of the certification. Insight Assurance’s certification decision maker may suspend or withdraw the Company’s certification if the required audits are not performed or open non-conformities have not been properly addressed.
Suspension of certification process:
Insight Assurance will initiate its suspension process if the Company does not re establish conformance of its management system standard requirements within the allowable timeline, fails to abide by the contract terms and agreements or fails to perform the required audits.
Restoring of certification process:
Insight Assurance will restore a certification that has been placed on suspension once all outstanding issues have been closed and verified as such through off-site or on-site review.
Withdrawal of certification process:
Insight Assurance will withdraw a certification as a direct result of, but not limited to, non-performance of audits, miss-representation, non-closure of open corrective action, failure of the appeals process to close an open corrective action or at the request of the Company.
Expansion of certification process:
At the request of the Company through an application process, Insight Assurance will request and review documentation supporting the additional scope. Upon completion of the review, an on-site audit will be performed to determine conformance of the Company’s additional scope with the applicable ISO standard. This may require an addendum to the contract and/or additional fees.
Reduction of certification process:
Insight Assurance may require that the Company’s scope of certification be reduced if it is determined that the scope is no longer valid. Insight Assurance’s certification decision maker will approve a request from the Company for scope reduction if audit procedures support that the scope is no longer applicable to the Company’s business. Insight Assurance’s certification decision maker will refuse scope reduction if the reduction is to avoid non conformities.
About Insight Assurance’s Name and Logo
As an accredited certification body, Insight Assurance has developed a trademarked logo that demonstrates our certified clients’ conformance with relevant ISO standards. The rules associated with the use of our name and logo regarding ISO certifications are documented in the terms and conditions of our contract and again upon successful certification for our clients. Insight Assurance monitors the use of its name and logo to ensure compliance with our contractual agreement, ISO 17021:2015 and ISO 27006:2015.