Auditor requests confidential information via Email

[Randy]

This may be a total coincidence, but is the registrar BSI and did you get an e-mail today about a change in assessor?

This isn't the norm for sure, especially for a CAV. Anything other than corrective actions from the most recent audit NC's is pretty unusual. Basic information like employee count, changes and stuff like that may happen, but that's about it....But I could be guessing at best, how would I know?

 

[AndyN]

Andy,

Yes I know that ISO 17021 is the driving force for CBs. I was addressing the issue using 19011 as the reference since it (even though it might be leaning to more IA) still the requirement to be trained in for Auditing QMS. Am I wrong there?

IIRC 17021 and 19011 have parted company. 19011 is for mere mortals, while 17021 et al specifies everything needed to be a CB.

 

[spvdj]

Having worked as both an CB assessor and as a Quality Manager I have seen both sides. However, you should only send any information electronically that you or your business is comfortable in releasing outside of the confines of your organisation. The person requesting this information should understand and accept this. If the person that requests this information tries to put any pressure on you or makes you feel that you are doing something wrong, just ask to speak to your client manager within the CB that you using to raise the situation so it is appropriately dealt with.