Medium risk: above-mentioned documents are not managed accurately and are not accessible without problems High risk: documents are not up to date and not complete. Note: The use of other certification schemes must be taken into account appropriately during the risk assessment (certification under multiple schemes at the same time may be one of the factors for a higher risk). The result of the risk assessment drives the audit intensity with respect to traceability, mass balance and documents to be verified during the audit: Regular risk: auditor must check a random document sample from three successive months Medium risk: auditor must check a random document sample from three successive months plus documents from one complete month High risk: auditor must check documents of three successive months completely 1.1.14. Are the above-mentioned Verify if documentation for five is covered ISCC registration, relevant documents kept for at least five within the management system. Verify the documents, QM system years? oldest documents available (starting with the registration with ISCC). 1.1.15. Are documents and information Verify that no access of third parties to Distribution lists, emails and treated confidential and are they confidential documents, information, access authorizations to data not made accessible to third databases, etc. is possible. bases parties? 1.1.16. Is it ensured, that the system user Only applicable for individually certified Farm/ Confirmation email from ISCC has submitted to ISCC the reporting Plantation and of Origin, as well as First template provided by ISCC, on the Gathering Point, Central Office, Collecting amount of raw materials and/or point and Processing units, producing final biofuels certified according to biofuel. Verify if the system user has received ISCC in the previous calendar the confirmation email from ISCC confirming year? that the reporting obligation was fulfilled.
Medium risk: above-mentioned documents are not managed accurately and are not accessible without problems High risk: documents are not up to date and not complete. Note: The use of other certification schemes must be taken into account appropriately during the risk assessment (certification under multiple schemes at the same time may be one of the factors for a higher risk). The result of the risk assessment drives the audit intensity with respect to traceability, mass balance and documents to be verified during the audit: Regular risk: auditor must check a random document sample from three successive months Medium risk: auditor must check a random document sample from three successive months plus documents from one complete month High risk: auditor must check documents of three successive months completely 1.1.14. Are the above-mentioned documents kept for at least five years? Verify if documentation for five is covered within the management system. Verify the oldest documents available (starting with the registration with ISCC). ISCC registration, relevant documents, QM system 1.1.15. Are documents and information treated confidential and are they not made accessible to third parties? Verify that no access of third parties to confidential documents, information, databases, etc. is possible. Distribution lists, emails and access authorizations to data bases 1.1.16. Is it ensured, that the system user has submitted to ISCC the reporting template provided by ISCC, on the amount of raw materials and/or biofuels certified according to ISCC in the previous calendar year? Only applicable for individually certified Farm/ Plantation and of Origin, as well as First Gathering Point, Central Office, Collecting point and Processing units, producing final biofuel. Verify if the system user has received the confirmation email from ISCC confirming that the reporting obligation was fulfilled. Confirmation email from ISCC
ISCC_EU_Procedure_Chain_of_Custody_v3.2.docx