About

Coalfire Certification is an accredited certification body per both the ANSI National Accreditation Board (ANAB) and the United Kingdom Accreditation Service (UKAS), no. 9224.

The certification body administers management system audits for service organizations within the cloud and technology, healthcare, and financial sectors.

Impartiality

As part of our commitment to remain impartial of our applicant and certified organization relationships, Coalfire Certification manages neutrality at both an individual staff auditor level as well as an account level to ensure objectivity across all assessment activities. Coalfire Certification has also established an independent, external committee that is chartered with the review of the effectiveness of these controls and has the authority to make decisions affecting the business to safeguard impartiality from being compromised, such as by actions of self-interest, self-review, familiarity, or intimidation.

Certificate agreement

The certification body applies the procedures detailed within ISO/IEC 17021-1 as well as other normative references governing the audit activities pertaining to the scope of certification, as appropriate. Obligations of the organization at the time of application are communicated in the form of both a certificate agreement and vendor terms within the certification body master services agreement.

Supplemental details that support certificate decisions comprising granting, refusing, maintaining, renewing, suspending, restoring, or withdrawing certification in addition to the expansion or reduction of certificate scopes are also described within this agreement.

Decision process

Certificate decisions are facilitated via a centralized team of subject matter experts that review each audit file for conformity to the internal quality system maintained by the certification body and normative references made applicable via the management systems certification body accreditation.

A summary of the procedures performed and the objective evidence that was inspected as part of the certification body examination is communicated in the form of an audit report at the conclusion of each assessment. The report issuance is accompanied by a recommendation from the appointed lead auditor performing certification activities under the oversight of the accredited certification body.

Certificate validity

End users or readers that are in receipt of certificate awards issued by the certification body can determine the validity of the artifact and status of certification by accessing the public certificate directory

Suspensions

The certification body reserves the right to suspend certificates of its clients at any time due to situations involving, but not limited to, violations to the certificate agreement, negligence, concealment of material facts, non-conformance to the underlying audit criteria, investigations, complaints, and unpaid invoices for services rendered.

Certification is invalidated at any point within a suspension period. All suspensions are clearly labelled within the affected certificate entry made available within the public certificate directory.

Appeals

For current and prospective clients, the certification body encourages upfront and open feedback should there exist concerns involving, but not limited to, incompetence, prejudice, application reviews, assessment results, approach, and enforced deadlines. All submissions will be acknowledged by the certification body within 5-7 business days. Additional information can be found here.

Complaints

For any party that interacts with the certification body, its certificate documents, or certified organizations, complaints may be communicated either by web form or email for immediate attention. All submissions will be acknowledged by the certification body within 5-7 business days. Additional information can be found here.

Marks

The use of the certification body seal and accreditation marks are strictly controlled and permissions governing their uses may be limited or withdrawn at any time without notice. The seal of the certification body is not to be used within individual email signatures and business cards in addition to print or digital forms that may allude to a misrepresentation of the certified scope.

Permissible modification or alteration to the certification body seal is limited to the size of the graphic only. Changes to accreditation marks must be consulted directly with the mark owner and is required to be incompliance with any external branding guidelines published by the affected oversight organization.

The logo and short name of the International Organization for Standardization (ISO) is not permitted to be used by any certified organization as a result of that entity’s relationship with Coalfire Certification.

Logos and marks may only be applied while the certificate is in good standing per the public certificate directory. For any suspended or revoked certificates, the associated seal or marks are not permitted for use in advertisement or digital media.

If the agreement between the certification body and the certified organization is terminated, all permissions relating to the use of the certification body seal and accreditation marks are withdrawn and the use of these identifiers are required to be amended at the earliest reasonable opportunity.