A multinational manufacturer is debating whether to put its Clause 4.3 scope statement in writing or simply describe it verbally to its certification body. The internal auditor reminds the team of an expectation set out in Clause 4.3 and reinforced in GAICC Foundation Module 4. Which statement BEST reflects that expectation?
Clause 4.3 (Determining the scope of the AI management system) concludes with an explicit normative requirement: 'The scope shall be available as documented information.' In management system auditing under ISO/IEC 17021-1, documented information provides objective, verifiable evidence establishing the exact organizational, technical, physical, and geographical boundaries under assessment. Certification bodies cannot certify an undocumented or verbal scope statement; auditors evaluate conformity against the defined boundaries set out in the documented scope during Stage 1 and Stage 2 audits. A dynamic model inventory lists technical assets, but it does not establish organizational governance perimeters or provide justified rationales for exclusions. Moreover, certification bodies are prohibited by accreditation rules from drafting or authoring the scope on an auditee's behalf, as doing so compromises their independence and impartiality.
===============
Currently there are no comments in this discussion, be the first to comment!