Outsourcing & External Provider Policy

Purpose

control of outsourced activities that affect certification

Scope

This policy applies to UKG personnel, contractors, subject-matter experts, assessors, decision-makers, administrators and candidates to the extent relevant to their role.

Mandatory controls

• UKG remains responsible for certification activities it outsources.
• Providers are evaluated for competence, impartiality, confidentiality, security and performance.
• Contracts define responsibilities, records, data protection and access for audit.
• A provider may not make an unauthorised certification decision.
• Performance is monitored and deficiencies require corrective action.

Required records

• Provider due diligence, contract, monitoring and corrective actions.

Review and control

This controlled document is reviewed at least annually and whenever there is a material legal, scheme, technology, risk or accreditation change. The English master controls; translations must be reviewed after a material English change.