Question - when you have your organization certified according to MD1, having a centralized management review, must your sites conduct a local MR?
Nope not as such, but at least they need to be able to demonstrate what they contribute to the
headquarters CENTRAL FUNCTION relevant to the requirements they're responsible for meeting.... And the
headquarters CENTRAL FUNCTION needs to be able to show how the locations contribute to the whole.
The
headquarters CENTRAL FUNCTION location must specify what portion of the MS each location is responsible for and what the reporting requirements are. Under MD-1 up to 20% of the audit duration at each location can be reduced when this is all done as part of a multi-site........Additional reduction of duration can also be assigned when MS are integrated IAW IAF MD-11.
One catch for multi sites is that all locations must be assigned the same risk level which could negate a portion if not all reductions. Risk has to be assigned as the highest determined so if there are 6 locations that are medium, 2 that are low and 1 that is high, they all must be factored as high.
In an integrated system the risks are unique for each standard so you can have 2, 3 or even 4 different risks and durations that get added together before factoring the total integrated reduction (up to 20%) so let's say we've determined 2 days (Q), 1.5 days (E) & 2 days (S) we get 2+1.5+2 = 5.5 days duration and the integrated factor is 20% (factor 0.8) we come up with 5.5 x 0.8 = 4.4 days ( round up to 4.5 day integrated audit) MD5 required audit days to be to the nearest 1/2 (0.5) day.
