Update to Management Systems Program Overview

Bulletin date:
Bulletin number:
2025-02

Affected customers

This is intended for accredited customers, applicants, staff and assessors in the Management Systems Accreditation Program (MSAP).

 

What you need to know

The program overview was updated and includes the following changes: 

  • Accreditation Program Requirements (starting on p. 5)
    • IAF MD 28:2023 – IAF Mandatory Document for the Upload and Maintenance of Data on IAF Database was added and applies to all management systems certification bodies in this program.
    • The Artificial Intelligence Management Systems scheme was added, including related requirements.
    • The Food Safety Management System scheme was updated to reflect the IAF and APAC signatory status
    • ISO/IEC 20000-1:2018/Amd:2024 was added under the Information Technology Service Management Systems scheme.
    • ISO/IEC TS 27006-2:2021: editorial correction to title.
  • Accreditation Cycle Requirements was updated to provided clarifications related to fixed office locations assessments (p. 10).
  • Added Anti-bribery Management Systems APAC signatory status.
  • Witnessing Requirements (p. 12)
    • Energy Management Systems was removed to reflect that technical areas were removed in the 2021 version of ISO 50003: Energy management systems — Requirements for bodies providing audit and certification of energy management systems.
    • Medical Device Management Systems requirements were updated to clarify and align with IAF MD 8.

Important dates

  • March 31, 2025: SCC will use ISO/IEC 27006-1:2024 for all initial accreditation assessments, including extensions to existing assessments
  • March 31, 2026: Deadline for all CABs to complete the transition to ISO/IEC 27006-1:2024 and use this standard for all clients in the program

     

Special note: For clients accredited before the transition completion deadline, the CAB may use either ISO/IEC 27006:2015 or ISO/IEC 27006-1:2024 for surveillance audits after accreditation for ISO/IEC 27006-1:2024.

Questions?

Please contact Vivekananthan Kulasingham, Manager, Compliance and Assessment Services at vivekananthan.kulasingham@scc-ccn.ca or +1 613-238-3222.