Certification Body • 2 mins read
2 mins read
Related topics
One of UKAS’ current Strategic Priorities is to develop a secure, online and free-to-use database of certifications that have been issued by our accredited Certification Bodies.
This database will present information on each organisation holding accredited certification from a UKAS accredited Certification Body, including details of the organisation, scope and the awarding Certification Body. As such, the database will allow organisations, public bodies and Government agencies that require and rely upon the confidence provided by accredited certification to easily verify the validity of a certificate directly from UKAS.
In its initial stages, the database will be restricted to Management Systems Certification, however Product and Personnel Certification is planned for future inclusion.
This database will provide additional value to the accredited certification community by:
- Being used by regulators and manufacturers who require accredited certification throughout their supply chain
- Making it easier to identify (and therefore prevent) fraudulent certificates
- Being linked to other organisations or systems that are used to check company credentials
- Identifying market trends and industry metrics
- Supporting the UKAS risk-based assessment programme
- Enabling uploads to relevant third-party databases, such as the IAF Cert Search, NHSS, etc.
It is critical to the success of this database that our customers have confidence in the system and in how UKAS will operate it. To this end, UKAS has engaged heavily with our accredited Certification Bodies in Management Systems, to ensure they fully understand the requirements and that the database is flexible, with low overheads for Certification Bodies uploading data.
As a non-profit distributing organisation, UKAS will not commercialise the system. The database once launched in 2022 will be available at no additional charge to UKAS customers.
Security is also a priority for this project, and it has been essential to prevent data mining via the downloading of lists. Security measures to prevent this include a limitation on daily searches, a search requirement of Certificate Number or Company Name with an auto-suggest limit of 10, meaning full words are required to conduct a search.
Penetration prevention has been ensured through 2millisecond Bot Protection, Amazon Web Services AI Systems, two-factor authentication, as well as regular penetration testing.
Additionally, suppliers hold ISO 27001 accredited certification, the database is fully GDPR compliant, and data and back-ups are stored on UK servers.
UKAS is currently in the testing phase of this project, and it is anticipated that the database will be launched in 2022.