Welcome to the Frequently Asked Questions (FAQ) section of ACSQ. This section aims to be a complete and detailed guide to the world of Corporate Management Systems and related Certifications. Not just answers to the most frequently asked questions, but a technical dictionary to consult for any doubts regarding this matter. This section does not replace and is not to be intended as a summary of the conditions of sale and return policies, which must always be consulted before any purchase on this site.
Management Systems
What is a Management System?
A management system is a structured set of policies, procedures, processes, responsibilities, resources, and practices that an organization adopts to achieve and maintain specific objectives (e.g., product/service quality, environmental management, occupational health and safety, information protection). A good management system allows for standardizing behaviors, reducing variability, demonstrating compliance with regulatory requirements, and improving the capability to respond to risks and opportunities.
Why certify a Management System?
Certifying a Management System through an independent body like ACSQ S.r.l. allows for obtaining a long series of benefits, both technical and image-related. Beyond establishing full compliance with the requirements of a Standard, a certified System provides authority and professionalism. The main practical benefits are: greater credibility towards customers and suppliers, access to markets and tenders requiring certifications, continuous process improvement, reduction of waste and accidents, and greater risk management capability.
What are the most common Standards?
Corporate standards are approved technical documents that define precise rules, specifications, or guidelines for products, services, processes, and systems. Their main purpose is to guarantee quality, safety, and efficiency, creating a common language and ensuring that performance is repeatable. Most global standards are developed by the International Organization for Standardization (ISO). Here is a list of the most common ones:
- ISO 9001 (Quality): This is the reference standard for the implementation of a QMS based on Risk-based thinking and the process approach. The standard defines the requirements to guarantee that the organization is able to regularly provide products or services that comply with customer requirements and mandatory regulations.
- ISO 14001 (Environment): A standard specifying the requirements for an EMS, allowing the organization to identify, evaluate, and manage its environmental aspects and related significant impacts according to a Life Cycle Perspective. It requires the definition of an environmental policy, the planning of measurable objectives for the improvement of environmental performance, and the guarantee of legislative compliance (compliance obligations). It does not impose specific performance criteria but provides a structural framework for ecological risk mitigation and pollution prevention.
- ISO 45001 (Occupational Safety): This is the first international standard defining the requirements for an Occupational Health and Safety (OH&S) Management System. The goal of the standard is to provide organizations of all sizes and sectors with a structured framework to: Proactively prevent work-related injuries and illnesses; Guarantee safe and healthy workplaces for employees and visitors; Improve safety performance through the identification and management of risks and opportunities.
- ISO 27001 (Information Security): An international standard defining the requirements to establish, implement, maintain, and improve an ISMS. The technical focus is the protection of information assets through risk management, ensuring the three cardinal principles of logical and physical security: Confidentiality, Integrity, and Availability (CIA Triad). The standard requires the drafting of a Statement of Applicability in which the company selects the security controls (among those listed in Annex A) necessary to mitigate the vulnerabilities and threats identified during the risk assessment.
Competencies and Services offered by ACSQ S.r.l.
Is ACSQ S.r.l. an accredited body?
Yes. ACSQ S.r.l. is an accredited body for the issuance of System Certifications of the ISO series, Gender Equality, and PAS 24000. ACSQ Srl is an Italian company operating in compliance with the UNI CEI EN ISO/IEC 17021 standard, which defines the Requirements for bodies providing audit and certification of management systems. On the corporate website at the url www.acsq.t it is possible to consult the relative Accreditation Certificate.
What services does ACSQ S.r.l. provide?
ACSQ S.r.l. issues the System certifications for which it has obtained accreditation; furthermore, it is able to design and deliver training courses directly for company personnel regarding Management Systems and related Certifications.
What certifications does ACSQ S.r.l. issue?
ACSQ S.r.l. is able to issue the following System certifications:
- ISO 9001 Certification (Quality): the most widespread standard indicates a series of norms and guidelines necessary for the realization of a Quality control and management system in an organization's production processes.
- ISO 14001 Certification (Environment): identifies a series of norms, guidelines, and references useful for building a system capable of managing and controlling environmental policies, the primary objective of which is to reduce the impact and repercussions of corporate activities on the surrounding environment.
- ISO 27001 Certification (Information Security): identifies a series of norms and guidelines necessary for the realization of an Information Security Management System. The standard includes aspects related to the logical, physical, and organizational security of information.
- ISO 45001 Certification (Occupational Health and Safety): defines the requirements and obligations necessary to obtain a management system for the health and safety of workers in the workplace, thus capable of preventing potential risks and reducing the incidence of accidents and occupational diseases in work environments and on corporate productivity.
- UNI/PDR 125:2022 Certification (Gender Equality): this standard promotes the elimination of gender discrimination and the adoption of policies and practices that favor fair treatment and opportunities for both sexes, actively promoting equality at work.
- PAS 24000 Certification (Social Management System): establishes minimum requirements in key areas such as labor relations, human rights, health, safety, and business ethics, contributing to ensuring equal, adequate, and sustainable social performance.
The list above may not be exhaustive of the certifications offered; therefore, it is advisable to consult the dedicated system certifications web page, which is always updated.
What training courses does ACSQ S.r.l. provide?
ACSQ S.r.l. provides training courses for Internal Auditors within the scope of corporate Management Systems of the series:
- ISO 9001
- ISO 14001
- ISO 45001
Certification Process
What are the timeframes of the Certification Cycle?
generally, every certification cycle has a standard duration of 3 years and follows a rigorous structure defined by international standards for accreditation. During this cycle, the certified organization commits to ensuring continuous compliance with the Reference Standard and the timely resolution of any Non-Conformities detected by the auditors, under penalty of suspension or revocation of the certificate.
How does the Certification Cycle develop?
Except for special cases and certifications, generally, the certification issued by ACSQ S.r.l. typically has a three-year validity. The process is articulated in:
- Initial Audit (Stage 1: document review; Stage 2: field verification);
- Periodic surveillance to confirm the maintenance of requirements;
- Renewal Audit at the end of the three-year cycle
Surveillances aim to verify that the system continues to be effective and that corrective actions for any detected non-conformities have been implemented. A more detailed version of the certification process is published on the Certification Guide page of this site.
How do surveillance visits take place?
Surveillance visits serve to control the continuous effectiveness of the management system during the validity period of the certificate. ACSQ S.r.l. schedules at least two visits in the three-year period: the first within 12 months from the certification decision and the second in the following calendar year. During surveillances, the implementation of corrective actions, the management of any changes, regulatory compliance, and performance indicators related to the scope of certification are evaluated.
What obligations does the client have after the certificate is issued?
The client must maintain the effectiveness of the management system, implement corrective actions, record and handle complaints received from their own customers, and promptly communicate to the certification body any relevant variation (e.g., corporate structure, addresses, scope, sites, legal proceedings impacting the certification). They must also respect the rules on the use of the logo and certificate and preserve the evidence required for surveillances.
What does the suspension or revocation of the certificate entail?
Suspension is a temporary measure that invalidates the use of the certificate and logo until the removal of the causes that led to the suspension (e.g., non-payment, unresolved NCs, impediment to audits). If the situation is not resolved within the terms (typically 6 months), ACSQ S.r.l. may proceed with the revocation or reduction of the scope of certification. During suspension/revocation, the organization must cease any public reference to the certificate. For further details on suspensions and revocations, please refer to the internal document Contractual Conditions.
What are the costs and payment methods?
Costs are communicated in the acceptance document (contract) and include fees for the initial evaluation, surveillances, travel expenses, and board and lodging for personnel. The rates shown are VAT excluded and usually require advance payment for visits. Cancellation beyond the terms may result in penalties (e.g., flat-rate amount indicated in the contract). Non-payment may influence the possibility of issuance/use of the certificate and may lead to its suspension or revocation.
How can the logo be used and what are the limitations?
The use of the ACSQ logo is allowed only for activities included in the scope of certification and according to the Trademark Regulation for the use of certificates and logos. It is forbidden to use the certificate or the logo in a misleading manner (for example, indicating scopes not verified) or during periods of suspension. Improper use may result in claims for damages.
Appeals and Complaints
How can I submit a complaint?
Complaints against ACSQ S.r.l. must be sent to the Management via PEC (certified email) or registered letter. ACSQ S.r.l. confirms receipt within 5 working days. Within 30 working days from the last communication received, ACSQ will communicate to the client the outcome of the evaluation and the resolution actions, should the complaint be admitted.
How can I submit an appeal?
An organization may submit an appeal against decisions and acts performed by ACSQ S.r.l. towards it, within the scope of the signed certification contract (certification not issued, suspension, revocation, requests for supplementary or special audits), within 14 days from the date of communication of the relative decision. The appeal can be sent via PEC or registered letter.
Who can I ask for further information?
The ACSQ S.r.l. information office is appointed to answer any questions and doubts from users. It is possible to contact the information office via email (