Checklist ISO/IEC 17021: 2006. Conformity assessment ... - Sanas

ISO/IEC 17021 Requirement CB’s References COMMENT BY ASSESSORF 155-028.5.3 Except as required in this International Standard, isinformation about a particular customer or individualdisclosed to a third party without the written consentof the customer/individual concerned?Where the CB is required by law to releaseconfidential information to a third party, is thecustomer or individual concerned, unless regulatedby law, notified in advance of the informationprovided?8.5.4 Is information about the customer treated asconfidential, consistent with the CB’s policy?8.5.5 Do all personnel acting on the CB’s behalf, keepconfidential all information obtained or created duringthe performance of the CB’s activities?8.5.6 Does the CB have available and use equipment andfacilities that ensure the secure handling ofconfidential information (e.g. documents, records)?8.5.7 When confidential information is made available toother bodies (e.g. AB, agreement group of a peerassessment scheme) does the CB inform itscustomer of this action?8.6 Information exchange between a CB and itscustomers.8.6.1 Information on the certification activity andrequirementsDoes the CB provide and update customers on the following:a) a detailed description of the initial and continuingcertification activity, including the application, initialaudits, surveillance audits, and the process forgranting, maintaining, reducing, extending,suspending, withdrawing certification and recertification?b) the normative requirements for certification?c) information about the fees for application, initialcertification and continuing certification?2008-07-25 ©SANAS Page 12 of 34