scheme, e.g. ISO/TS 22003, these shall be applied. NOTE Where there are multiple sites not covering the same activity sampling is not appropriate. Multiple Sites: a client has a number of sites meeting the criteria from a) to c) below, certification bodies may consider using a sample-based approach to multiple-site certification audit: all sites are operating under the same ISMS, which is centrally administered and audited IS 9.1.5.1 and subject to central management review; all sites are included within the client’s internal ISMS audit programme; all sites are included within the client’s ISMS management review programme The certification body wishing to use a approach shall have procedures in place to ensure the following: The initial contract review identifies, to the greatest extent possible, the difference between sites such that an adequate level of IS sampling is determined 9.1.5.1.2 A representative number of sites have been sampled by the certification body, taking into account: the results of internal audits of the head office and the
scheme, e.g. ISO/TS 22003, these shall be applied. NOTE Where there are multiple sites not covering the same activity sampling is not appropriate. IS 9.1.5.1 Multiple Sites: a client has a number of sites meeting the criteria from a) to c) below, certification bodies may consider using a sample-based approach to multiple-site certification audit: all sites are operating under the same ISMS, which is centrally administered and audited and subject to central management review; all sites are included within the client’s internal ISMS audit programme; all sites are included within the client’s ISMS management review programme IS 9.1.5.1.2 The certification body wishing to use a approach shall have procedures in place to ensure the following: The initial contract review identifies, to the greatest extent possible, the difference between sites such that an adequate level of sampling is determined A representative number of sites have been sampled by the certification body, taking into account: the results of internal audits of the head office and the
BCB%20F010%20(ISMS)-CRM%20cum%20DRR_ISO%2027006-%202015.docx