Information reviewed: 14 November 2026. Global guidance for organisations considering management system certification across several locations.
Several locations do not automatically require separate certificates, and a common brand does not automatically make one certificate suitable. The important question is how the management system operates across the organisation and how the relevant assessment rules apply to the activities involved.
Multi-site certification can offer a coherent way to describe a genuinely connected system. It can also be misunderstood as permission to list every branch while assessing only headquarters. This guide helps buyers prepare the right information, question sampling assumptions and understand how different site arrangements affect a proposal.
Establish the applicable framework
The official Global ACI document catalogue lists Global ACI-TECH-3-001 for auditing and certifying a management system operated by a multi-site organisation. The established IAF MD 1:2023 document provides the corresponding background framework. Consult the current applicable documents and scheme conditions through the certification body; older reference material should not override later rules.
MD 1 describes a single management system with an identified central function, authority over that system, centralised management review and an internal audit programme covering all sites. Sampling depends on relevant eligibility and similarity considerations; an organisation can contain sampled and non-sampled activities. These principles do not create a universal sampling entitlement for every standard or network.
Describe the management connection between sites
Begin with the decisions that connect the locations. Who establishes the management system? Who approves changes? Who sees performance across the network and can require corrective action? A shared logo or common document template does not answer those questions.
Draw a simple map of authority and information. Identify where a site reports a problem, who investigates issues affecting other sites and how management learns whether action has worked. The map should describe actual practice rather than an ideal corporate structure that employees do not recognise.
Where several legal entities participate, explain their relationships and the authority supporting the arrangement. Do not assume that common ownership proves a single functioning system or that different ownership structures can be assessed without review. Provide the facts so the certification body can determine the appropriate route.
Identify what each location does
Prepare a site register showing addresses, activities, relevant personnel, operating patterns and significant differences. Separate offices from production, warehousing, field operations and other relevant functions. Mark planned locations and sites that have closed rather than mixing them with active operations.
A useful register connects a location with its role in delivery. Headquarters may manage design while a facility assembles products and a regional team performs maintenance. The network is connected, but those activities are not identical. The assessment programme should not be based on an assumption that every address is another copy of headquarters.
Review the register with local managers. A central list can miss informal storage, seasonal operations or work performed at customer premises. Early disclosure is more useful than discovering an omitted activity after a quotation has been accepted.
Separate multi-site certification from site sampling
One certificate and a sampled audit programme are different decisions. Ask the certification body to explain the proposed arrangement before assuming that fewer visits will be permitted. The relevant standard, scheme and operating characteristics matter.
Do not use a sampling formula found online as a guaranteed quotation calculator. Even a correctly reproduced formula can be applied to the wrong population, activity or assessment context. The body must review the actual organisation and justify its programme under the applicable rules.
For buying purposes, request the basis of the site grouping, what is assessed centrally, which activities need separate attention and how the programme addresses differences over time. A clear explanation is more useful than an unexplained percentage reduction described as a multi-site discount.
Compare three fictional organisations
The following examples are invented. They show why the same number of addresses can lead to different questions, not predetermined certification outcomes.
|
Organisation |
Operating pattern |
Main question for review |
|
Branch service network |
Similar services under central control |
How is consistency demonstrated and assessed? |
|
Specialist manufacturing group |
Sites perform different processes |
How will unique activities receive suitable coverage? |
|
Branded partner network |
Local businesses manage significant decisions |
What authority and system connection actually exist? |
In the first example, a service network uses common methods and centrally reviews results. The buyer should still explain differences in size, language, customer activity and local conditions. Similarity should be investigated rather than assumed from a common service name.
In the second, one factory designs assemblies, another performs production and a third handles specialist testing. The group should describe how the processes interact and where unique expertise is needed. A proposal copied from the branch-network example would leave important questions unresolved.
In the third, partners share branding and purchasing benefits but make substantial independent operating decisions. The central organisation needs to explain its actual authority and system arrangements. The certification body may need a different route from the one the commercial team initially imagined.
Make central control visible through evidence
Show how the organisation identifies issues across sites and makes decisions that reach the relevant operations. Practical evidence might include an actual system change, a response to recurring complaints or a decision to provide resources where performance is weak.
Avoid preparing a central folder that tells a different story from local practice. If a site uses its own process, explain why and how that difference is managed. Uniformity is not the same as effectiveness; identical paperwork can conceal different activities or poorly controlled exceptions.
Choose examples that a reviewer can follow from decision to outcome. A policy stating central authority is easier to write than evidence that the authority is used. The organisation’s own management should understand that distinction before requesting a combined certification arrangement.
Consider temporary sites and customer premises
Projects, installations and mobile services can create location questions that a register of permanent offices does not answer. Describe where the relevant work takes place and how access, supervision and records are managed.
Ask how the certification body will consider temporary activities within the applicable scheme. A short project may require different planning from an established warehouse. A customer’s premises may have access and confidentiality conditions that need agreement before an assessor can attend.
Do not omit these activities because they are inconvenient to schedule. Provide expected project dates and realistic opportunities for observation. If the activity is unavailable at the proposed audit time, discuss how the programme will achieve the necessary objectives rather than promising that a central document review always replaces it.
Distinguish virtual operations from physical activity
A distributed online team and a physical warehouse raise different assessment questions. Remote communication can connect people, but it does not transform a physical process into a virtual site. Explain where the work happens and what evidence the assessment needs.
For a digital service, identify the organisational responsibilities, supporting infrastructure and relevant external providers. For a physical activity, consider what must be observed and how access will be arranged. Multi-site planning and remote assessment are related decisions, but neither should be used as an automatic shortcut for the other.
Ask the body to describe its proposed methods and the conditions under which the plan might change. A useful programme can combine approaches where appropriate while remaining clear about the objectives served by each.
Understand the implications of findings across a network
An issue found at one location may concern a local event, a shared process or a wider management weakness. The organisation should investigate that distinction instead of assuming the finding ends at the site boundary.
Ask how findings will be communicated and how the body evaluates implications for the certification arrangement. Internally, identify who checks whether other sites face the same cause. Correcting one record at one branch may leave a common problem unchanged.
Avoid promising that a difficult site can simply be removed to protect the desired outcome. Discuss genuine scope changes and the relevant rules openly. The purpose of a certification arrangement is credible assurance, not a mechanism for excluding inconvenient evidence after it appears.
Check how the certificate communicates coverage
Ask how the certified organisation, sites and activity differences will be identified. A certificate may use supporting schedules, so review the complete proposed information rather than the first page alone.
Check that a customer can understand which operation delivers its service. If different standards cover different parts of a group, the documents should not imply uniform coverage without support. Sales teams need access to the correct information so they can describe the position consistently.
For authenticity and status, follow the separate verification guide. A correct site list is a coverage question; it does not independently establish that the certificate remains active.
Plan additions, closures and acquisitions
New locations can affect the certification arrangement and audit programme. Explain their activities, management connection and readiness to the issuer before claiming they are covered. An acquisition may bring different processes or controls that require more attention than adding an address to a spreadsheet.
Agree who notifies the body when a site opens, closes or changes activity. Keep customer-facing schedules current after the relevant evaluation and decision. Where a facility leaves the group, review its use of certification information rather than assuming public claims will update themselves.
Compare proposals on the same network profile
Send the same site register and management description to every shortlisted provider. Ask for the intended coverage, competence, assessment methods and programme assumptions. Investigate large differences in effort before treating them as price competition.
Keep travel, access and language assumptions visible. A cheaper proposal can become unsuitable if it overlooks unique activities or expects access the organisation cannot provide. A more extensive programme should likewise explain the need rather than rely on an unexplained claim that every location always needs identical treatment.
Sources and article note
The Global ACI catalogue and established MD 1 reference above provide the framework context. The three fictional organisations, tables and preparation suggestions are original editorial guidance. Current scheme and accreditation arrangements determine the actual assessment route.
Research providers through the directory. Send corrections through the contact page. Certification bodies may submit organisation details for review; listing does not establish eligibility for site sampling.
