{"text_format":"1","workbook":"xlsx","n_sheets":30,"sheets":["Master","Admin","TNV-F-001","TNV-F-01-RT","TNV-F-002","TNV-F-001-A","TNV-F-004","TNV-F-010","TNV-F-008","TNV-F-005 St1","TNV-F-014 ABMS","TNV-F-014 ISMS","TNV-F-008 (2)","TNV-F-005 St2","TNV-F-015 ABMS","TNV-F-015 ISMS","Addiontal Notes","TNV-F-011","TNV-F-037","TNV-F-037-Z","Final Certificate copy","TNV-F-001-KYC","TNV-F-008-Surv 1","TNV-F-005 Surv 1","TNV-F-065 Surv 1","Annual KYC-2","TNV-F-008-Surv 2","TNV-F-005 Surv 2","TNV-F-065 Surv 2","IMAGES"],"not_rendered":{"charts":0,"images":0,"macros":1,"external_links":0,"defined_names":4,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Master","index":0,"n_rows":29,"n_cols":17,"rows_kept":29,"cut":false,"hidden":true,"merged":[[2,11,2,12],[2,13,2,16],[3,10,4,10],[3,11,4,11],[3,12,4,12],[3,13,4,13]]}
[]
[null,"Yes No Sheet","Accreditation Offered","QMS Risk Cat","EMS Complexity","OHSMS Complexity","ISMS Complexity","ABMS Complexity","BCMS Complexity",null,"Man-days for QMS"]
[null,"Yes","IAS","High Risk","High","High",null,null,null,null,"No. of Employees","Total Auditor Man-days for Initial Certification",null,"On Site Man-days for"]
[null,"No","Unaccreidted","Medium Risk","Medium","Medium",null,null,null,null,null,"Average Scale Man-days","Total outside Man-days @ 90%","Stage1 Audit","Stage2","S A","Re"]
[null,null,null,"Low Risk","Low","Low",null,null,"IAS",null,null,null,null,null,"Audit","Annual","Assessment"]
[null,null,null,null,"Limited",null,null,null,"TNV",null,"1-5",1.5,1.35,0.5,1,1,1]
[null,null,null,null,"Special",null,null,null,null,null,"5-10",2,1.8,1,1,1,1]
[null,null,null,null,null,null,null,null,null,null,"11-15",2.5,2.25,1,1.5,1,2]
[null,null,null,null,null,null,null,null,null,null,"16-25",3,2.7,1,2,1,2]
[null,"Effective No of Staff","Risk Class/ Complexity","Man-days","Adjusted Man-days",null,"Level of Integration",null,null,null,"26-45",4,3.6,1,3,1.5,3]
[null,"15","Medium",2.5,{"$f":"D11","v":2.5},null,0,null,null,null,"46-65",5,4.5,1,4,1.5,3]
[null,null,"Low",2.5,{"$f":"D12-(D12*10%)","v":2.25},null,0.2,null,null,null,"66-85",6,5.4,1,5,2,4]
[null,null,"High",2.5,{"$f":"D13+(D13*10%)","v":2.75},null,0.4,null,null,null,"86-125",7,6.3,2,5,2,5]
[null,null,null,null,null,null,0.6,null,null,null,"126-175",8,7.2,2,6,3,5]
[null,null,null,null,null,null,0.8,null,null,null,"176-275",9,8.1,2,7,3,6]
[null,null,null,null,null,null,1,null,null,null,"276-425",10,9,2,8,3,7]
[null,null,null,null,null,null,null,null,null,null,"426-625",11,9.9,2,9,4,7]
[null,null,null,null,null,null,null,null,null,null,"626-875",12,10.8,2,10,4,8]
[null,"EMS Mandays Calculation",null,null,null,null,null,null,null,null,"876-1175",13,11.7,2,11,4,9]
[null,"Effective No of Staff","Risk Class/ Complexity","Man-days","Adjusted Man-days",null,null,null,null,null,"1176-1550",14,12.6,2,12,5,9]
[null,"15","High",4.5,null,null,null,null,null,null,"1551-2025",15,13.5,2,13,5,10]
[null,null,"Medium",3.5,null,null,null,null,null,null,"2026-2675",16,14.4,2,14,5,11]
[null,null,"Low",3,null,null,null,null,null,null,"2676-3450",17,15.3,2,15,6,11]
[null,null,null,null,null,null,null,null,null,null,"3451-4350",18,16.2,2,16,6,12]
[null,"OHSMS Mandays Calculation",null,null,null,null,null,null,null,null,"4351-5450",19,17.100000000000001,2,17,6,13]
[null,"Effective No of Staff","Risk Class/ Complexity","Man-days","Adjusted Man-days",null,null,null,null,null,"5451-6800",20,18,2,18,7,13]
[null,"15","High",4.5,null,null,null,null,null,null,"6801-8500",21,18.899999999999999,2,19,7,14]
[null,null,"Medium",3.5,null,null,null,null,null,null,"8501-10700",22,19.8,2,20,7,15]
[null,null,"Low",3,null,null,null,null,null,null,"10700>>>>"]

{"sheet":"Admin","index":1,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":true,"merged":[]}

{"sheet":"TNV-F-001","index":2,"n_rows":91,"n_cols":13,"rows_kept":91,"cut":false,"hidden":false,"merged":[[38,7,38,12],[34,1,34,6],[35,1,35,6],[36,1,36,6],[37,1,37,6],[38,1,38,6],[18,1,18,4],[25,5,25,8],[21,0,21,12],[22,1,22,4],[22,5,22,8],[22,9,22,12],[37,7,37,12],[23,1,23,4],[24,1,24,4],[25,1,25,4],[23,5,23,8],[23,9,23,12],[24,5,24,8],[24,9,24,12],[27,11,27,12],[27,3,27,4],[25,9,25,12],[33,7,33,12],[32,7,32,12],[29,0,29,12],[34,7,34,12],[90,10,90,12],[90,8,90,9],[90,5,90,7],[90,3,90,4],[90,0,90,2],[56,0,56,12],[84,0,84,8],[87,0,87,12],[86,0,86,8],[85,0,85,8],[64,0,64,8],[86,9,86,12],[64,9,64,12],[63,0,63,12],[72,6,72,8],[72,0,72,1],[71,0,71,12],[67,9,67,12],[67,0,67,8],[68,0,68,1],[69,0,69,1],[68,6,70,8],[70,0,70,1],[65,0,65,8],[65,9,65,12],[66,0,66,8],[66,9,66,12],[68,9,70,12],[76,1,77,4],[76,5,76,7],[76,0,77,0],[73,0,74,1],[0,0,0,12],[1,0,1,12],[10,0,10,4],[15,0,15,12],[11,0,11,4],[11,5,11,12],[4,5,4,7],[5,5,5,7],[16,1,16,4],[2,1,2,12],[3,1,3,12],[4,1,4,4],[5,1,5,4],[4,8,4,12],[5,8,5,12],[26,3,26,4],[16,5,16,8],[10,5,10,12],[6,1,6,12],[16,9,16,12],[12,0,13,4],[26,7,26,8],[26,11,26,12],[27,7,27,8],[17,1,17,4],[26,0,27,0],[19,1,19,4],[85,9,85,12],[84,9,84,12],[79,9,79,12],[80,9,80,12],[81,9,81,12],[82,9,82,12],[73,8,73,9],[73,10,74,12],[83,6,83,8],[77,5,77,7],[83,2,83,5],[82,0,82,8],[83,0,83,1],[75,0,75,12],[81,0,81,8],[78,0,78,12],[79,0,79,8],[80,0,80,8],[31,0,31,12],[42,1,42,6],[43,1,43,6],[44,1,44,6],[45,1,45,6],[51,1,51,6],[39,1,39,6],[7,2,7,12],[8,2,8,12],[9,2,9,12],[33,1,33,6],[32,1,32,6],[30,0,30,12],[12,9,12,11],[12,5,12,7],[14,0,14,12],[13,5,13,7],[13,9,13,11],[46,1,46,6],[47,1,47,6],[48,1,48,6],[49,1,49,6],[50,1,50,6],[35,7,35,12],[49,7,49,12],[50,7,50,12],[51,7,51,12],[52,7,52,12],[53,7,53,12],[54,7,54,12],[55,7,55,12],[40,0,40,12],[52,1,52,6],[36,7,36,12],[57,1,57,6],[58,1,58,6],[59,1,59,6],[61,1,61,6],[62,1,62,6],[57,7,57,12],[58,7,58,12],[59,7,59,12],[61,7,61,12],[60,1,60,12],[53,1,53,6],[54,1,54,6],[55,1,55,6],[41,1,41,6],[41,7,41,12],[39,7,39,12],[42,7,42,12],[43,7,43,12],[44,7,44,12],[45,7,45,12],[46,7,46,12],[47,7,47,12],[48,7,48,12]]}
["Client Inquiry Form"]
["Basic Information"]
["Name of Company","HIGH JACK"]
["Postal Address","74, rue du Docteur Lemoine, F-51100 REIMS (France)"]
["Phone/ Mobile","03 10 45 40 01",null,null,null,"Website"]
["Email","contact@high-jack.fr",null,null,null,"Legal Status",null,null,"Company"]
["Scope","Information systems security audit"]
["Standard(s)","ISO 27001:2022"]
["Requirement","Yes"]
["Accrediation ","TNV"]
["Statutory & Regulatory Requirements: (Related to the Nature Work & Management System Certification)"]
["Outsourced Process: if any; which effects the conformity of the product/service"]
["Type of Application",null,null,null,null,"Initial",null,null,"Yes","Transfer ",null,null,"No"]
[null,null,null,null,null,"Combined Audit",null,null,"No","Recertification",null,null,"No"]
["* Note: In case of transfer audit, Transfer form (TNV-F-001-A) will open."]
["Audit Location & Activities thereat"]
[null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Address","74, rue du Docteur Lemoine, F-51100 REIMS (France)"]
["Activities","High Jack protects the sustainability of companies by providing them with innovative solutions and cybersecurity training, in order to strengthen their resilience against digital threats and build a secure and sustainable professional environment.",null,null,null," ",null,null,null," "]
["Core Process","High Jack protects the sustainability of companies by providing them with innovative solutions and cybersecurity training, in order to strengthen their resilience against digital threats and build a secure and sustainable professional environment.",null,null,null," ",null,null,null," "]
["Support Process",null,null,null,null," ",null,null,null," "]
["Note: In case of more than 1 additonal site, Please attach separate sheet(s) for additional sites"]
[null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Shift","//"]
["Full time",5]
["*Part Time","//"]
["*Calculation of Part time worker","No of Man-days paid in a year","No of Working days in your organisation in a year","Effective No of Part Time Worker ",null,"No of Man-days paid in a year","No of Working days in your organisation in a year","Effective No of Part Time Worker ",null,"No of Man-days paid in a year","No of Working days in your organisation in a year","Effective No of Part Time Worker "]
[null,null,null,{"$f":"ROUND(B28/C28,0)","v":{"$error":"#DIV/0!"}},null,null,null,{"$f":"ROUND(F28/G28,0)","v":{"$error":"#DIV/0!"}},null,null,null,{"$f":"ROUND(J28/K28,0)","v":{"$error":"#DIV/0!"}}]
["Similar work ","*Provide particular of the similar nature of work only if you wish to claim reduction, If any"]
["Note: (For multi-site, indicate all sites to be covered under certification) (If there are any employees on site which you are claiming are out of Scope, please explain rationale for justification here)"]
["Mandatory Information"]
["Part-A"]
["SL. No.","Particular",null,null,null,null,null,"Information"]
[1,"Certification Requested",null,null,null,null,null,"ISMS"]
[2,"Size and complexity of client’s organization",null,null,null,null,null,5]
[3,"The number of employees department wise",null,null,null,null,null,2]
[4,"Number of user",null,null,null,null,null,23]
[5,"Number of Sites",null,null,null,null,null,1]
[6,"Number of Server",null,null,null,null,null,2]
[7,"Number of WS+PC+Laptop",null,null,null,null,null,31]
["Part-B"]
["SL. No.","Information",null,null,null,null,null,"Documented or Not (Yes/No)"]
[1,"Have you conducted minimum one internal ISMS audit covering the scope of certification",null,null,null,null,null,"Yes"]
[2,"Have you conducted minimum one management review covering the Scope?",null,null,null,null,null,"Yes"]
[3,"Policy",null,null,null,null,null,"Yes"]
[4,"Description of the IT-infrastructural",null,null,null,null,null,"Yes"]
[5,"Identification and methodology of  Risk                                                  ",null,null,null,null,null,"Yes"]
[6,"Risk Treatment  Plan                                                                             ",null,null,null,null,null,"Yes"]
[7,"Risk Assessment  Report                                                                      ",null,null,null,null,null,"Yes"]
[8,"Statement of Applicability w.r.t. ISO 27001                                                    ",null,null,null,null,null,"Yes"]
[9,"Procedures and Control Point.                                                                ",null,null,null,null,null,"Yes"]
[10,"Records required by the standard                                                          ",null,null,null,null,null,"Yes"]
[11,"IT/Security Management                                                                                       ",null,null,null,null,null,"Yes"]
[12,"Internal IT/Security Audit                                                                                             ",null,null,null,null,null,"Yes"]
[13,"No. of Customer/Projects  covered under the scope",null,null,null,null,null,"Yes"]
[14,"Detail of the service outsourced",null,null,null,null,null,"Yes"]
["Part-C"]
[1,"Confidentiality required by your company for confidential or sensitive information?",null,null,null,null,null,"Yes"]
[2,"Availability of Access to organizational ISMS records for Assessment / Review?",null,null,null,null,null,"Yes"]
[3,"Is all ISMS information / records can be made available for review to the audit team?",null,null,null,null,null,"Yes"]
[4,"In case of confidential or sensitive information can’t be revealed to the Audit team, kindly specify:"]
["4a","Type of information / records can’t be disclosed to Audit Team"]
["4b","Reason for non disclosure"]
["Additional Information"]
["Language of Audit?",null,null,null,null,null,null,null,null,"English"]
["Have You Specific Programme/Timescale For Achieving Registration?",null,null,null,null,null,null,null,null,"Yes"]
["Have you called on the services of a consultant?**",null,null,null,null,null,null,null,null,"No"]
["If yes, please specify which one:"]
["Name",null,"Adrien Jannel",null,null,null,"Signature:"]
["Designation",null,"CEO"]
["Date",null,"2025-03-28"]
["To be filled by authorised business associate only:-"]
["Name of business associate:",null,"NA",null,null,null,"Country:"]
["Verification of Relationship with client:",null,"Relative","Training","Consultancy","Previous Employment ","Agency","Any other Relationship with company","**Any relationship with consultant"]
[]
["* I hereby declare that my role in this company is limited to marketing & audit management as authorised by TNV through memorondum of understanding signed between TNV & our organisation. I further declare that me or any representative of our organisation have no pre existing relationship/past relationship (3 year) with the organisation proposed to be audited, relationship with any key staff/management, any relationship either financial or non-financial which may affect the decision of CB for the assignment of audit under reference does not exist and we maintain full impartiality as required."]
["Signature:",null,null,null,null,"Name of Authorised Person:"]
[null,null,null,null,null,"Date:"]
["For TNV System Certification Pvt Ltd Use Only:-"]
["Does accreditation request is available with the TNV (Refer accreditation letter)"]
["Does territory of the application is in active list (Refer accreditation letter)"]
["Does Scope demand is available with the TNV (Refer accreditation letter)"]
["Does MSS request is available with TNV (Refer accreditation letter)"]
["Reviewed By:",null,null,null,null,null,"Date:"]
["Can the application be further processed?"]
["Does Technical Expert Required to process this application:"]
["Name of Expert, If required"]
["Comment (if Any): "]
[]
[]
["TNV F- 001 I - ISMS Inquiry Form",null,null,"Issue 02",null,"Issue Dt: 01st June 2022",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-01-RT","index":3,"n_rows":93,"n_cols":12,"rows_kept":93,"cut":false,"hidden":true,"merged":[[5,1,5,6],[5,7,5,13],[6,1,6,6],[6,7,6,13],[7,1,7,6],[7,7,7,13],[0,0,0,13],[1,0,1,13],[2,0,2,13],[3,0,3,13],[4,0,4,6],[4,7,4,13],[11,0,11,13],[12,1,12,6],[12,7,12,13],[13,1,13,6],[13,7,13,13],[14,1,14,6],[14,7,14,13],[8,1,8,6],[8,7,8,13],[9,1,9,6],[9,7,9,13],[10,1,10,6],[10,7,10,13],[18,1,18,6],[18,7,18,13],[19,0,19,13],[20,0,20,13],[21,0,21,13],[22,1,22,6],[22,7,22,13],[15,1,15,6],[15,7,15,13],[16,1,16,6],[16,7,16,13],[17,1,17,6],[17,7,17,13],[26,1,26,6],[26,7,26,13],[27,0,27,13],[28,1,28,6],[28,7,28,13],[29,1,29,6],[29,7,29,13],[23,1,23,6],[23,7,23,13],[24,1,24,6],[24,7,24,13],[25,1,25,6],[25,7,25,13],[33,0,33,13],[34,0,34,13],[35,0,35,13],[36,0,36,6],[36,7,36,13],[37,0,37,6],[37,7,37,13],[30,1,30,6],[30,7,30,13],[31,1,31,6],[31,7,31,13],[32,1,32,6],[32,7,32,13],[44,0,44,13],[45,0,45,6],[45,7,45,13],[46,0,46,13],[47,0,47,6],[47,7,47,13],[38,0,38,6],[38,7,38,13],[39,0,40,13],[41,0,41,13],[42,0,42,13],[43,0,43,6],[43,7,43,13],[51,0,51,13],[52,0,52,6],[52,7,52,13],[53,0,53,6],[53,7,53,13],[54,0,54,13],[48,0,48,6],[48,7,48,13],[49,0,49,6],[49,7,49,13],[50,0,50,6],[50,7,50,13],[58,0,58,6],[58,7,58,13],[59,0,59,6],[59,7,59,13],[60,0,60,6],[60,7,60,13],[55,0,55,6],[55,7,55,13],[56,0,56,6],[56,7,56,13],[57,0,57,6],[57,7,57,13],[65,0,65,6],[65,7,65,13],[66,0,66,6],[66,7,66,13],[67,0,67,13],[68,0,68,6],[68,7,68,13],[61,0,61,6],[61,7,61,13],[62,0,62,13],[63,0,63,6],[63,7,63,13],[64,0,64,6],[64,7,64,13],[72,0,72,6],[72,7,72,13],[73,0,73,13],[74,0,74,6],[74,7,74,13],[75,0,75,6],[75,7,75,13],[69,0,69,6],[69,7,69,13],[70,0,70,6],[70,7,70,13],[71,0,71,6],[71,7,71,13],[79,0,79,13],[80,0,85,6],[80,7,85,13],[86,0,86,2],[86,3,86,6],[86,7,86,9],[86,10,86,13],[76,0,76,6],[76,7,76,13],[77,0,77,6],[77,7,77,13],[78,0,78,6],[78,7,78,13],[87,0,87,2],[87,3,87,6],[87,7,87,9],[87,10,87,13],[88,0,88,13],[92,0,92,3],[92,4,92,5],[92,6,92,8],[92,9,92,10],[92,11,92,13]]}
["TNV-F-01-RT REMOTE ASSESSMENT REQUEST & FEASIBILITY EVALUATION FORM"]
["Instruction for Filling of This Form"]
["Part 1 to be filled by the client organization and signature need to be placed in part 1, in case client want to share other details, please attach it in separate sheet. Other part to be prepared by TNV System Certification Pvt. Ltd."]
["Part 1. Basic Information of the applicant (to be provided by the client organization who is requesting for remote audit):"]
["Subject",null,null,null,null,null,null,"Particular"]
[1,"Name of the client organization"]
[2,"Address"]
[3,"Mail"]
[4,"Contact no."]
[5,"Contact Person"]
[6,"Scope"]
["Reason of Requesting Remote Assessment"]
[1,"How seriously your system is affected?"]
[2,"Have you conducted an impact assessment? (mandatory for existing client)"]
[3,"Social Unrest (war, Crime, strike, tension, riot, terrorism, flood, disaster etc)"]
[4,"Unsuitability of the Physical Audit due to presence of Pandemic, Epidemic, Communicable decease etc."]
[5,"Any other reason"]
[6,"Type of proposed audit",null,null,null,null,null,"Initial / Surveillance / Special / Recertification"]
[7,"Tentative Proposed time of the audit"]
["Evidence of the Above Fact / Claim"]
[]
["Checklist for Our Customers"]
[1,"Availability of Suitable Place for Meeting?"]
[2,"Availability of Suitable infrastructure for Remote Audit?"]
[3,"Availability of the software for meeting?"]
[4,"Availability of the document in digital form?"]
[5,"Do you allow audit team and observer to take print screenshot or record video?"]
["Declaration of the Applicant for Remote Assessment"]
[1,"Can ICT (Information and Communication Technology) methodology be used for Remote Control?"]
[2,"Please specify (example: GoToMeeting, Skype, Microsoft Teams, Cisco WebEx, Team Viewer, Zoom etc.) "]
[3,"Is the ICT method used safe?"]
[4,"Required infrastructure (example: Notebook, PC, Mobile Phone, Tele conference etc.) "]
[5,"Do you have a secure environment to share relevant documents or records to be used for auditing? Or you propose to share on TNV platform?"]
["Agreement for Confidentiality, Security and Data Protection"]
["I hereby agree to use and provide access of the auditable site through meeting application like Zoom, BlueJeans, UberConference, Cisco Webex Meetings, Join.me, GoToMeeting, Skype, Adobe Connect, Lifesize Video Conferencing or any other software having similar feature. "]
["I hereby declare that I shall not use any software which is not encrypted or in beta stage. Further I confirm that minimum required feature like chat box, video, audio, sharing of screen and documents, recording of video, mute audio and video are available. Further I am an authorized person to authorize such access and grant access to TNV to take screenshot, record video of the meeting / site. Further I assure that in case requirement, I hereby assure to provide recorded video as per request of the TNV for the purpose of this audit. Further I authorized TNV to allow any observer for the meeting who may be representative of any regulatory body or accreditation body or any other agency or authority as required. Further I/we agrees with the requirement of Confidentiality, Security and Data Protection as applicable."]
["Information submitted by:"]
["Date:"]
["Signature:"]
[]
[]
["FOR ADMINISTRATIVE PURPOSE ONLY\n(TO BE FILLED BY TNV SYSTEM ONLY)"]
["Part 2. Feasibility and Risk Analysis for Remote Audits"]
["Verification Point",null,null,null,null,null,null,"Response"]
["Confidentiality, Security and Data Protection (CSDP)"]
["Can agreement between auditor and auditee about CSDP issues be ensured?"]
["Use of ICT"]
["Is there is a stable connection with good online connection quality?"]
["Does client allow The ICT allows access to relevant documented information including software, databases, records, etc.?"]
["Is it possible to make the authentication/identification of interviewed people preferably with image?"]
["Can effective communication be established with the organization? If observation of facilities, processes, activities, etc, is relevant to achieve audit objectives, is this possible to access them by video?"]
["People in the Organization"]
["Is it possible to access and interview people relevant for the attainment of the audit objective?"]
["Do we have competence / resources to meet the audit objective?"]
["Operations"]
["To what extent has operation of the management system been affected?"]
["Has the Certified organization conducted an impact assessment? (for existing client)"]
["If the organization is not operating regularly, due to contingency situations, does the processes/ activities being performed are representative and allow fulfillment of the audit objectives?"]
["When will the organization be able to function normally? Remote audit is limited to 2 consecutive audits."]
["Date when the audit can be applied normally again?"]
["Will the organization need to use alternative manufacturing and/or distribution sites? If so, are these currently covered under the current certification or will they need to be evaluated?"]
["Does the client require a disaster recovery plan or emergency response plan? If yes, does they implement the plan? (Mainly to be applied for BCMS and ISMS)"]
["Complexity of the Organization and Audit Type"]
["In case of initial assessment or reassessment and in case of any type of audit require full assessment of the standard and wider sampling (e.g.), can a careful analysis of feasibility of remote audits to fully evaluate the organization conformity to all requirements should be performed."]
["In case of complex organizations, processes, or products and services, is this possible to attain the objectives of the audit remotely?"]
["Does client need an early verification or verification can be postponed to one year or normal surveillance frequency?"]
["Is there any serious complaint / feedback for the client on media, review, public feedback or in news?"]
["Part 3. Conclusion / Outcome of the review:"]
["Conclusion",null,null,null,null,null,null,"Outcome"]
["The audit objectives can be attained with the remote audit - proceed to remote audit"]
["The audit objectives can be achieved partially - a remote audit may be done partially and later complemented with an on-site audit"]
["The audit objectives cannot be attained via remote audit"]
["Any special training / monitoring required to allow this audit"]
["Action need to be taken after the review"]
["Audit is possible therefore audit shall be conducted remotely."]
["Audit is not possible therefore audit has been postponed to a later date"]
["Certificate is suspended"]
["Certificate is to be withdrawn"]
["Client have been dropped (for new client application)"]
["Signature"]
[]
[]
[]
[]
[]
[]
["Reviewed by: ",null,null,null,null,null,null,"Approved by: "]
["Date: ",null,null,null,null,null,null,"Date: "]
["Note: Copy of the decision shall be given to the client and for client who have been allowed to undergo with remote assessment, this format shall form part of the client file and for other client, copy of the decision shall be given on request only."]
[]
[]
[]
["TNV-F-01-RT Remote Assessment Request and Verification",null,null,null,"Issue 01",null,"Issue Dt: 01st Apr 2020",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-002","index":4,"n_rows":94,"n_cols":33,"rows_kept":94,"cut":false,"hidden":false,"merged":[[12,6,12,7],[18,5,18,8],[67,6,67,9],[75,8,75,10],[75,11,75,13],[47,1,47,5],[47,6,47,9],[49,1,49,5],[65,1,65,5],[65,6,65,9],[65,10,73,13],[66,1,66,5],[66,6,66,9],[67,1,67,5],[52,1,52,5],[48,6,48,9],[49,6,49,9],[50,6,50,9],[51,6,51,9],[52,6,52,9],[48,1,48,5],[16,1,16,3],[17,1,17,3],[23,4,23,13],[76,2,76,4],[76,5,76,7],[76,8,76,10],[68,6,68,9],[69,6,69,9],[70,6,70,9],[71,6,71,9],[72,6,72,9],[73,6,73,9],[71,1,71,5],[72,1,72,5],[73,1,73,5],[68,1,68,5],[69,1,69,5],[70,1,70,5],[43,0,43,1],[37,2,37,5],[37,10,37,13],[27,10,27,11],[33,0,33,13],[34,0,34,1],[18,9,18,10],[25,10,25,13],[25,1,25,9],[16,11,18,13],[30,12,30,13],[32,1,32,9],[28,1,28,9],[29,10,29,11],[29,12,29,13],[30,1,30,9],[30,10,30,11],[19,0,19,3],[20,0,20,3],[21,0,21,3],[28,12,28,13],[31,10,31,11],[31,12,31,13],[27,12,27,13],[45,10,45,13],[47,10,63,13],[54,6,54,9],[55,6,55,9],[56,6,56,9],[57,6,57,9],[58,6,58,9],[59,6,59,9],[60,6,60,9],[61,6,61,9],[62,6,62,9],[26,10,26,11],[26,12,26,13],[29,1,29,9],[34,6,34,9],[34,10,34,13],[38,0,38,13],[32,10,32,11],[26,1,26,9],[28,10,28,11],[27,1,27,9],[93,0,93,3],[93,4,93,5],[93,6,93,8],[93,9,93,10],[93,11,93,13],[90,1,90,2],[90,4,90,7],[90,8,90,9],[85,8,85,13],[86,0,89,2],[86,3,89,7],[86,8,89,13],[90,10,90,13],[85,0,85,2],[85,3,85,7],[13,2,13,13],[64,0,64,13],[43,2,43,5],[45,2,45,5],[45,6,45,9],[46,0,46,13],[53,1,53,5],[54,1,54,5],[55,1,55,5],[15,0,15,13],[56,1,56,5],[57,1,57,5],[58,1,58,5],[59,1,59,5],[60,1,60,5],[61,1,61,5],[62,1,62,5],[63,1,63,5],[53,6,53,9],[63,6,63,9],[45,0,45,1],[39,2,39,5],[32,12,32,13],[31,1,31,9],[84,0,84,13],[35,0,35,1],[36,0,36,1],[41,0,41,1],[83,0,83,13],[75,5,75,7],[36,2,36,5],[36,6,36,9],[36,10,36,13],[35,2,35,5],[74,0,74,13],[77,8,77,13],[75,2,75,4],[75,0,75,1],[37,6,37,9],[37,0,37,1],[42,0,42,1],[39,0,39,1],[40,0,40,1],[39,6,39,9],[39,10,39,13],[44,0,44,1],[50,1,50,5],[51,1,51,5],[0,0,0,13],[1,0,1,13],[2,1,2,2],[2,7,2,9],[35,6,35,9],[35,10,35,13],[14,1,14,4],[14,5,14,13],[24,0,24,13],[3,2,3,13],[4,2,4,13],[5,2,5,13],[12,9,12,13],[12,3,12,5],[23,0,23,3],[22,0,22,3],[18,0,18,3],[9,3,9,4],[9,9,9,13],[9,6,9,7],[34,2,34,5],[6,3,8,13],[10,2,10,13],[9,1,9,2],[81,1,81,2],[81,3,81,4],[81,5,81,7],[82,1,82,2],[82,3,82,4],[82,5,82,7],[78,1,78,2],[78,3,78,4],[78,5,78,7],[79,1,79,2],[79,3,79,4],[79,5,79,7],[80,1,80,2],[80,3,80,4],[80,5,80,7]]}
["ISMS Contract Review",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes",null,null,null,null,null,null,null,null,null,null,null,null,"QMS","EMS","OHSMS"]
["Part 1. Basic Information of the client:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No",null,null,null,null,null,null,null,null,null,null,null,null,"High","High","High"]
["SL.","Reference Number (unique ID Allotted)",null,null,null,null,null,"Date:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Medium","Medium","Medium"]
[1,"Name of Company",{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Low","Low","Low"]
[2,"Postal Address",{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Limited"]
[3,"Contact Details (Mail & Phone)",{"$f":"'TNV-F-001'!B5","v":"03 10 45 40 01"},null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Special"]
[4,"Standard(s)",{"$f":"'TNV-F-001'!B8","v":"ISO 27001:2022"}]
[5,"Requirement",{"$f":"'TNV-F-001'!B9","v":"Yes"}]
[6,"Accreditation Offered",{"$f":"'TNV-F-001'!B10","v":"TNV"}]
[7,"Does Scope requested within Accreditation",null,"Within",null,"Yes","Out of Scope"]
[8,"Scope",{"$f":"'TNV-F-001'!B7","v":"Information systems security audit"}]
[9,"Does the client falls in the TNV restricted list?"]
[10,"Does the scope define activity of company correctly?",null,null,null,null,"Does scope need amendment?"]
[11,"Final Scope after discussion with client"]
[13,"Any Specific Timeline for Certification"]
["Part 2. Verification of Impartiality"]
["Sl."," Existing Relationship with Business Associate",null,null,"Relative","Training","Consultancy","Previous Employment ","Agency","Any other Relationship with company","**Any relationship with consultant"]
[1]
["Any conflict exist with business associate?",null,null,null,null,"Review can be processed?"]
["Is this government client?"]
["Involvement of any agency?"]
["Is their any risk which influencing the audit process?"]
["Any addtiontal control need to established?"]
["Reason of Rejection",null,null,null,"* TNV shall specify the reason of rejection due to involvement of business associate in any activity/ies which is conflicting with the TNV. Application rejection letter shall be issued seprately."]
["Part 3. Availability of resources for Accepting the Assignment"]
["SL.","Review of Audit Planning Factor"]
[1,"Does the TNV have auditor / TE available for the audit?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
[2,"Do we have enough LA / Expert in Technical Area?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
[3,"Does this Scope falls within Accredited IAF Cluster?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
[4,"Can we meet the timeline of the client?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
[5,"Is it requiring additional Travel Time to visit the site?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
[6,"Activities at site during the planned audit date (Seasonality Factor is considered)",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
[7,"Is the number of employee declared by the client seeming appropriate in order to the Scope / activates of the Organisation",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Part 4. Effective Staff, Audit Location & Activities thereat"]
["Site Sampling Criteria",null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Address",null,{"$f":"'TNV-F-001'!B18","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"},null,null,null,{"$f":"'TNV-F-001'!F18","v":0},null,null,null,{"$f":"'TNV-F-001'!J18","v":0}]
["Activities",null,{"$f":"'TNV-F-001'!B19","v":"High Jack protects the sustainability of companies by providing them with innovative solutions and cybersecurity training, in order to strengthen their resilience against digital threats and build a secure and sustainable professional environment."}]
["Shift (for verification of each shift)",null,{"$f":"'TNV-F-001'!B24","v":"//"}]
["Total No. of Employee: (For multi-site, indicate all sites to be covered under certification) (If there are any employees on site which you are claiming are out of Scope, please explain rationale for justification here)"]
["Calculation of Effective Manpower",null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["A. Total Staff at Site",null,{"$f":"C42+C43","v":5},null,null,null,{"$f":"G42+G43","v":{"$error":"#VALUE!"}},null,null,null,{"$f":"K42+K43","v":{"$error":"#VALUE!"}}]
["B. Full time",null,{"$f":"'TNV-F-001'!B25","v":5},null,null,null,{"$f":"'TNV-F-001'!F25:I25","v":0},null,null,null,{"$f":"'TNV-F-001'!J25:M25","v":0}]
["C. Part Time / Contract Worker",null,{"$f":"'TNV-F-001'!B26:E26","v":0},null,null,null,{"$f":"'TNV-F-001'!H28:I28","v":{"$error":"#VALUE!"}},null,null,null,{"$f":"'TNV-F-001'!L28:M28","v":{"$error":"#VALUE!"}}]
["Similar work (if applicant claims reduction)",null,{"$f":"'TNV-F-001'!B29","v":"*Provide particular of the similar nature of work only if you wish to claim reduction, If any"}]
["D. Effective number of Employee (B+C)",null,{"$f":"C42+C43","v":5},null,null,null,{"$f":"$G$41","v":{"$error":"#VALUE!"}},null,null,null,{"$f":"$K$41","v":{"$error":"#VALUE!"}}]
["E. Need for visiting Temporary Site"]
["Part 5. Client Review"]
["Sl.","Criteria",null,null,null,null,"Particular"]
[1,"Number of Sites"]
[2,"Number of Servers:"]
[3,"Server Location(s):"]
[4,"Number of application development and maintenance staff:"]
[5,"Number of Users:"]
[6,"Number of Work Stations, PCs and Laptops:"]
[7,"Number of Networks:"]
[8,"Number of Internet Connections:"]
[9,"Extent of Remote Work:"]
[10,"Details of the number and Scale of any development projects"]
[11,"Details of any legal and regulatory requirements applicable to ISMS"]
[12,"Details of any IT outsourcing (hardware or software):"]
[13,"Details of any monetary transaction processes (credit card payments etc)"]
[14,"Volume of data processed"]
[15,"Significance in legal compliance Prosecution Financial penalty or goodwill damage"]
[16,"Network & Encryption Technology Ext Internet with encryption With use of encryption built in Without encryption"]
["Part 6. Calculation of Man-Days"]
["Sl.","Criteria",null,null,null,null,"Details"]
[1,"Calculation of Effective Man power doing work under the organization’s control\n"]
["1a","Full Time"]
["1b","Part Time (Average Basis)"]
["1c","Contracted"]
[null,"Total Number of Effective Staff"]
[2,"Basic Man-Days"]
[3,"Addition/Reduction of the Man-Days due to complexity of business Sector and IT "]
[4,"Total Man-Days for initial Audit",null,null,null,null,{"$f":"G72-(G72*G73)","v":0}]
["Part 6. Audit Man-Days for Certification Cycle"]
["Total Man-Days",null,"Stage 1 Man-days",null,null,"Stage 2 Man-days",null,null,"Surveillance Man-days",null,null,"Total MD for Certification Cycle"]
[{"$f":"G74","v":0},null,null,null,null,null,null,null,null,null,null,{"$f":"A77+I77*2","v":0}]
["Part 7. Selection of Audit Team",null,null,null,null,null,null,null,"* Verification of Impartiality & Existing Relationship",null,null,null,null,null,null,"List"]
["Sl.","Name of the Person",null,"Availability",null,"Roles",null,null,"Relative","Training","Consultancy","Previous Employment ","Agency","Any Relationship",null,"Yes"]
[1,null,null,"On-site/Remote",null,"Team Leader",null,null,null,null,null,null,null,null,null,"No"]
[2,null,null,"On-site/Remote",null,"Auditor"]
[3,null,null,"On-site/Remote",null,"Technical Expert"]
[4,null,null,"On-site/Remote",null,"Observer (If Any)"]
["* Please disclose detail of your existing relationship/past relationship (3 year) with the organisation proposed to be audited, relationship with any key staff/management, any relationship either financial or non-financial which may affect the decision of CB for the assignment of audit under reference."]
["Part 8. Approval of Application Review"]
["Prepared by: Assessment Manager",null,null,"Approved by: Quality Manager",null,null,null,null,"Verified by: Technical Expert (if any)"]
[]
[]
[]
[]
["Name: ",null,null,"Name: ",null,null,null,null,"Name: "]
[]
[]
["TNV-F-002 IS- ISMS Contract Review Form",null,null,null,"Issue 02",null,"Issue Dt: 01st June 2022",null,null,"Rev 01",null,"Revision Dt: 01 May 2023"]

{"sheet":"TNV-F-001-A","index":5,"n_rows":109,"n_cols":13,"rows_kept":109,"cut":false,"hidden":true,"merged":[[108,0,108,2],[108,3,108,4],[108,5,108,7],[108,8,108,9],[108,10,108,12],[87,0,87,11],[88,0,88,11],[89,0,89,11],[90,0,90,11],[92,0,92,1],[92,2,92,5],[92,6,94,8],[92,9,94,12],[93,0,93,1],[93,2,93,5],[94,0,94,1],[94,2,94,5],[91,0,91,12],[95,0,95,12],[96,0,96,8],[96,9,96,10],[96,11,96,12],[97,0,97,8],[97,9,97,10],[86,0,86,11],[83,0,83,4],[83,5,83,12],[84,0,84,4],[84,5,84,12],[85,0,85,4],[85,5,85,12],[80,0,80,4],[80,5,80,12],[81,0,81,4],[81,5,81,12],[82,0,82,4],[82,5,82,12],[76,0,76,12],[77,0,77,12],[78,0,78,4],[78,5,78,12],[79,0,79,4],[79,5,79,12],[71,0,71,10],[72,0,72,10],[73,0,73,10],[74,0,74,10],[75,0,75,10],[66,0,66,12],[67,0,67,10],[68,0,68,10],[69,0,69,10],[70,0,70,10],[62,0,62,10],[62,11,62,12],[63,0,63,10],[64,0,64,10],[65,0,65,12],[58,0,58,10],[59,0,59,10],[60,0,60,10],[61,0,61,10],[54,0,54,12],[53,0,53,10],[55,0,55,10],[56,0,56,10],[57,0,57,10],[50,0,50,10],[50,11,50,12],[42,0,42,10],[51,0,51,12],[52,0,52,10],[46,0,46,10],[43,11,43,12],[47,0,47,12],[48,0,48,10],[49,0,49,10],[40,0,40,12],[41,0,41,12],[43,0,43,10],[44,0,44,10],[45,0,45,10],[37,11,37,12],[38,6,38,7],[38,8,38,10],[38,11,38,12],[39,6,39,7],[39,8,39,10],[39,11,39,12],[37,0,37,5],[38,0,38,5],[39,0,39,5],[37,6,37,7],[37,8,37,10],[35,0,35,12],[36,11,36,12],[36,8,36,10],[36,6,36,7],[36,0,36,5],[31,0,31,10],[32,0,32,10],[33,0,33,10],[34,0,34,10],[34,11,34,12],[28,0,28,10],[29,0,29,10],[24,11,24,12],[30,0,30,10],[30,11,30,12],[23,0,23,10],[24,0,24,10],[25,0,25,10],[26,0,26,10],[27,0,27,10],[22,11,22,12],[22,2,22,4],[22,5,22,7],[22,8,22,10],[22,0,22,1],[19,0,19,12],[20,0,20,10],[21,8,21,10],[21,5,21,7],[21,2,21,4],[21,0,21,1],[21,11,21,12],[16,0,16,4],[17,0,17,4],[18,0,18,4],[14,5,14,12],[15,5,15,12],[16,5,16,12],[17,5,17,12],[18,5,18,12],[0,0,0,12],[1,0,1,12],[2,1,2,12],[14,0,14,4],[15,0,15,4],[3,1,3,12],[4,1,4,4],[4,5,4,7],[4,8,4,12],[5,1,5,4],[5,5,5,7],[5,8,5,12],[6,1,6,12],[7,0,10,0],[7,1,7,2],[7,3,7,4],[7,5,7,6],[7,7,7,8],[7,9,7,10],[7,11,7,12],[8,1,8,2],[8,3,8,4],[8,5,8,6],[8,7,8,8],[8,9,8,10],[8,11,8,12],[9,1,9,2],[9,3,9,4],[11,0,11,4],[11,5,11,12],[12,5,12,12],[13,0,13,12],[9,5,9,6],[9,7,9,8],[9,9,9,10],[9,11,9,12],[10,1,10,2],[10,3,10,4],[10,5,10,6],[10,7,10,8],[10,9,10,10],[10,11,10,12],[12,0,12,4],[97,11,97,12],[98,0,98,8],[98,9,98,10],[98,11,98,12],[99,0,99,8],[99,9,99,10],[99,11,99,12],[100,0,100,8],[100,9,100,10],[100,11,100,12],[101,0,101,8],[101,9,101,10],[101,11,101,12],[105,0,105,1],[105,2,105,5],[105,6,105,8],[105,9,105,12],[102,0,102,8],[102,9,102,10],[102,11,102,12],[103,0,103,8],[103,9,103,10],[103,11,103,12],[104,0,104,12]]}
["Transfer Inquiry Form"]
["A. Basic Information"]
["Name of Company"]
["Postal Address"]
["Phone/ Mobile",null,null,null,null,"Website"]
["Email",null,null,null,null,"Legal Status"]
["Scope"]
["Standard(s)",{"$f":"'TNV-F-001'!B9","v":"Yes"},null,{"$f":"'TNV-F-001'!C9","v":0},null,{"$f":"'TNV-F-001'!D9","v":0},null,{"$f":"'TNV-F-001'!E9","v":0},null,{"$f":"'TNV-F-001'!F9","v":0},null,{"$f":"'TNV-F-001'!G9","v":0}]
[null,"ISO 9001:2015",null,"ISO 14001:2015",null,"ISO 45001:2018",null,"ISO 22000:2018",null,"ISO 27001:2013",null,"ISO 50001:2018"]
[null,{"$f":"'TNV-F-001'!H9","v":0},null,{"$f":"'TNV-F-001'!I9","v":0},null,{"$f":"'TNV-F-001'!J9","v":0},null,{"$f":"'TNV-F-001'!K9","v":0},null,{"$f":"'TNV-F-001'!L9","v":0},null,{"$f":"'TNV-F-001'!M9","v":0}]
[null,"ISO 37001:2016",null,"ISO 22301:2012",null,"ISO 13485:2016",null,"ISO 21001:2018",null,"ISO 29993:2017",null,"Other"]
["Statutory & Regulatory Requirements: (Related to the Nature Work & Management System Certification)"]
["Outsourced Process: if any; which effects the conformity of the product/service"]
["B. Certificate Information "]
["Reason for Seeking Transfer"]
["Availability of Last Assessment Report"]
["Detailed of Outstanding Nonconformity (ies)"]
["Complaint received & Action Taken"]
["Details of Outstanding Nonconformities"]
["C. Details of the current Certification"]
["Information of your current Certification",null,null,null,null,null,null,null,null,null,null,"Yes","No"]
["Certificate Number",null,"Status",null,null,"Issued By:",null,null,"Valid until"]
[]
["Attach a copy of your current accredited certification certificate, inclusive of all relevant annexes, and enter your registration number above."]
["Please confirm that we have your permission to contact your current registration body for:"]
["                  • Verification of the validity and scope of your current certification"]
["                  • Verification of the status of any outstanding corrective actions or other queries raised during our review."]
["If either permission is denied, please give the reason on a supporting sheet."]
["Please indicate the required scope of your certification below."]
["If there are no changes, please just state ‘as current certificate’. If changes are required then please note that if these changes are outside the scope of the existing certificate, additional audit may be required prior to acceptance of transfer. Changes that relate to non-permissible exclusions would prohibit acceptance of the transfer request."]
["Status of your current certification"]
["Our certification is currently in suspension"]
["Our certification is currently under threat of suspension"]
["Have any requests for transfer of this certification to any other accredited certification body been turned down or refused."]
["Note: If any of the answers given in response to this questions are ‘yes’ then please provide an explanation of the circumstances on a supporting sheet. Failure to do so could result in our being unable to progress your transfer."]
["D. Details of Certification Body audit visits"]
["Details of Certification Body audit visits",null,null,null,null,null,"Date",null,"Number of Auditors",null,null,"Duration"]
["Our initial assessment/latest re-assessment visit was conducted on:"]
["Our latest surveillance visit was conducted on:"]
["Interim surveillance visits were conducted on"]
["Note: TNV would normally continue the existing cycle of annual audits on transfer. Audits are normally annual Transfers where audits were previously conducted at intervals shorter than one year would revert to annual unless otherwise requested."]
["E. Status of Complaints & Nonconformities"]
["Status of Complaints & Nonconformities",null,null,null,null,null,null,null,null,null,null,"Yes","No"]
["Complaint"]
["Do you maintain an up-to-date record of all complaints received and relevant corrective and preventive actions taken?"]
["Have any complaints been received since the last audit visit by your accredited certifier?"]
["Do you have any outstanding complaints yet to be resolved?"]
["Note: Full details of any outstanding complaints recorded or known to be in progress at the date of application must be provided to TNV with this application. Further information may also be requested by TNV regarding any of the complaints recorded above."]
["Are there any outstanding nonconformities that have not been closed out by your current certification body?"]
["Are you in dispute with your current certification body over the classification or resolution of any ‘nonconformities’?"]
["Please state the number of nonconformities not closed out or are in dispute"]
["F. About your current Certification"]
["Sl.",null,null,null,null,null,null,null,null,null,null,"Yes","No"]
["Is this a Transfer for ISO Standards?"]
["Certification Transfer Review Checks"]
["Existing Certificate & Previous Certification Bodies Audit Reports Review available"]
["Client has provided previous audit report and findings for site and all remote and support functions (for past 3 years)"]
["All previous NCR’s resolved 100%"]
["Previous Document Review and Review of OFI’s completed"]
["Scope is unchanged on transfer"]
["Compliant to the Legal Requirement"]
["Is this scope is within the existing IAF recognized accredited scope?"]
["Previous Review was on-site or remote",null,null,null,null,null,null,null,null,null,null,"Onsite/remote"]
["Confirmed that certificate was not transferred within the last 3 years from another CB"]
["Have you ever violated the use of mark of the last CAB issued certificate to your organization?"]
["G. Checklist for mandatory Document to be attached with the application:"]
["This checklist is intended to indicate the documentation that TNV will review for a certification transfer. If you feel you have this information available and are ready, please submit it with the application."]
["Particular",null,null,null,null,null,null,null,null,null,null,"Yes","No"]
["A copy of your documentation/ Documented Information & procedure ( as applicable)"]
["A copy of your Compliance plan showing how you ensure compliance to the requirements"]
["A copy of the previous year’s internal Audits and a copy of the internal Audit plan for the next 12 months"]
["Copy of the previous Management Review and proposed date for the next one"]
["Details showing internal corrective actions having been closed"]
["Details of your documentation control process"]
["Evidence of the payment of Fees for application review"]
["Last assessment report (from previous CB)"]
["H. Consultant Information (if any):"]
["Please provide details below for Persons or organizations providing consultancy or acting on your behalf and has either provided consultancy related to your Management system under reference in the last 2 years and you authorize TNV and/or its associate companies to discuss your application"]
["Sl.",null,null,null,null,"Description"]
["Title",null,null,null,null,"Mr./Ms/Mrs."]
["Name"]
["Job Title"]
["Company Name"]
["Address"]
["Tel."]
["Mail"]
["The above person/organisation {delete as applicable}",null,null,null,null,null,null,null,null,null,null,null,"Check"]
["Is currently providing consultancy related to the QMS"]
["Has provided consultancy related to the QMS within the last 2 years but does not currently provide this service"]
["Is acting as your agent but is not providing any consultancy"]
["May be approached by TNV or its associate companies to discuss confidential aspects of your application"]
["Declaration: The information provide above is true to the best of our knowledge and Belief."]
["Name",null,null,null,null,null,"Signature:"]
["Designation"]
["Date"]
["For TNV System Certification Pvt Ltd Use Only:-"]
["Payment of Fees for application review received?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Accredited under an IAF arrangements?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Does the certificate is verified by CAB issued certificate?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Verified the Business registration details (if the business registration details are not valid then the transfer must be declined)",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Verified the physical location and management structure of the organizations  (if the organisation fails to provide details or access to its physical location or details of its management structure then the transfer must be declined)",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["TNV have advised past CAB of its intention to undertake transfer and provide details of the entity: Business registration, Physical location & Management structure.",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Does the management systems is validated?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Can the application be further processed?",null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Comment (if Any): "]
["Reviewed By:",null,null,null,null,null,"Date:"]
[]
[]
["TNV F- 001-A - Transfer Inquiry Form",null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-004","index":6,"n_rows":167,"n_cols":13,"rows_kept":167,"cut":false,"hidden":false,"merged":[[40,1,40,13],[46,1,46,13],[41,1,41,13],[42,1,42,13],[43,1,43,13],[45,1,45,13],[34,1,34,13],[16,2,18,3],[1,0,1,13],[2,0,2,13],[3,1,3,13],[4,0,4,13],[5,0,5,13],[6,2,6,13],[7,2,7,13],[8,1,8,13],[9,0,9,13],[12,1,13,1],[15,0,18,0],[24,1,24,13],[25,1,25,13],[39,1,39,13],[36,1,36,13],[37,1,37,13],[38,1,38,13],[31,1,31,13],[32,1,32,13],[33,1,33,13],[35,1,35,13],[26,1,26,13],[29,1,29,13],[30,1,30,13],[27,1,27,13],[28,1,28,13],[153,0,153,13],[156,1,159,6],[156,7,159,13],[87,1,87,13],[166,0,166,3],[166,4,166,5],[166,6,166,8],[166,9,166,10],[166,11,166,13],[160,1,160,6],[160,7,160,13],[161,2,161,6],[161,8,161,13],[162,2,162,6],[163,2,163,6],[162,8,162,13],[163,8,163,13],[154,0,163,0],[154,7,154,13],[154,1,154,6],[155,1,155,6],[155,7,155,13],[88,1,88,13],[89,1,89,13],[98,1,98,13],[91,1,91,13],[92,1,92,13],[93,1,93,13],[90,1,90,13],[70,1,70,13],[71,1,71,13],[72,1,72,13],[73,1,73,13],[74,1,74,13],[75,1,75,13],[76,1,76,13],[78,1,78,13],[79,1,79,13],[82,1,82,13],[83,1,83,13],[84,1,84,13],[85,1,85,13],[86,1,86,13],[80,1,80,13],[81,1,81,13],[58,1,58,13],[0,0,0,13],[11,4,11,13],[11,1,11,3],[22,1,22,13],[23,1,23,13],[19,0,19,13],[21,1,21,13],[20,1,20,13],[14,1,14,3],[12,2,12,5],[12,6,12,9],[13,2,13,5],[13,6,13,9],[12,10,12,13],[13,10,13,13],[10,1,10,3],[14,12,14,13],[12,0,13,0],[15,1,18,1],[15,2,15,3],[44,1,44,13],[10,4,10,8],[47,5,57,13],[102,1,102,13],[103,1,103,13],[104,1,104,13],[105,1,105,13],[106,1,106,13],[64,1,64,13],[60,1,60,13],[59,1,59,13],[61,1,61,13],[62,1,62,13],[63,1,63,13],[77,1,77,13],[65,1,65,13],[66,1,66,13],[67,1,67,13],[68,1,68,13],[69,1,69,13],[99,1,99,13],[100,1,100,13],[101,1,101,13],[94,1,94,13],[95,1,95,13],[96,1,96,13],[97,1,97,13],[113,1,113,13],[114,1,114,13],[116,1,116,13],[107,1,107,13],[108,1,108,13],[109,1,109,13],[110,1,110,13],[111,1,111,13],[115,1,115,13],[141,1,141,13],[142,1,142,13],[143,1,143,13],[135,1,135,13],[136,1,136,13],[150,1,150,13],[151,1,151,13],[152,1,152,13],[144,1,144,13],[145,1,145,13],[146,1,146,13],[147,1,147,13],[148,1,148,13],[149,1,149,13],[134,1,134,13],[123,1,123,13],[124,1,124,13],[125,1,125,13],[15,4,18,13],[137,1,137,13],[138,1,138,13],[139,1,139,13],[140,1,140,13],[126,1,126,13],[127,1,127,13],[128,1,128,13],[129,1,129,13],[130,1,130,13],[131,1,131,13],[133,1,133,13],[117,1,117,13],[118,1,118,13],[119,1,119,13],[120,1,120,13],[121,1,121,13],[122,1,122,13],[132,1,132,13],[112,1,112,13]]}
["AGREEMENT FOR CERTIFICATION SERVICES"]
["This Service Agreement is made between:"]
["First Party:"]
[null,"TNV System Certification Pvt. Ltd., a Company registered under the Indian Companies Act, 2013 having registered office at 537- B/187-B, Amber Vihar, Nr. CBI, Keshav Nagar, Lucknow Pin-226020 UP (India) hereinafter referred to as ‘TNV’ which expression shall, unless it be repugnant to the subject or context thereof, include its successors and assigns of the first part;"]
["and"]
["Second Party:"]
[null,"Name:",{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[null,"Address:",{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[null,"hereinafter referred to as ‘Client’ which expression shall, unless it be repugnant to the subject or context thereof, include its successors and assigns of the other part. Whereas this agreement is made to arrange and observe all the necessary rights and duties to each of them in performing certification audit applied for the following certification by Client:"]
["Technical Information of Services:"]
[1,"Reference Number (unique ID Allotted)",null,null,{"$f":"'TNV-F-002'!D3","v":0},null,null,null,null,"Date:"]
[2,"Name of Company",null,null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address","Head Office",null,null,null,"Main Site",null,null,null,"Additional Site (if any)"]
[null,null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"},null,null,null,{"$f":"'TNV-F-001'!B18","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"},null,null,null,{"$f":"'TNV-F-001'!F18","v":0}]
[4,"Total Man-days",null,null,"Initial ",{"$f":"'TNV-F-002'!A77","v":0},"Year 1",{"$f":"'TNV-F-002'!I77","v":0},"Year 2",{"$f":"'TNV-F-002'!I77","v":0},"Total MD in 3 Year",null,{"$f":"'TNV-F-002'!L77","v":0}]
[5,"Standard(s)",{"$f":"'TNV-F-001'!B9","v":"Yes"}]
[null,null,"ISO 27001:2022"]
[]
[]
["Whereas this agreement is made to arrange and observe all the necessary rights and duties to each of them in performing certification audit applied by Client.\n\nTNV is in to the activity of Certification & Auditing Services as defined in Agreement for Certification Services(s) (TNV-F-004). Certification services are provided subject to standard-specific accredited certification rules, attached hereto and to the following general terms and conditions to be followed before and after certification. The purpose of the contract is to arrange and observe all the necessary rights and duties to each of them in performing certification audit applied by Client. This agreement is valid till the expiry of the certification issued i.e. normally 3 (three) years. Now, therefore the parties have entered into this Agreement, as per the terms and conditions set forth."]
["Clause","Subject (Terms & Conditions)"]
[1,"General requirements"]
[1.1000000000000001,"Certification Audit of Client’s management system shall be performed on the basis of the requirements of applicable standards."]
[1.2,"The audit program shall include a two-stage initial audit, surveillance audits in the first and second years, and a recertification audit in the third year prior to expiration of certificate."]
[1.3,"Client shall maintain documented system as required by the standard for which certification is required and all necessary arrangements for the conduct of the audits, including provision for examining documentation and access to all processes and areas, records and personnel for the purpose of initial certification, surveillance, recertification and resolution of complaints."]
[1.4,"A documented report is provided after each audit"]
[1.5,"An audit plan is established for each audit in contract with the Client."]
[1.6,"Client shall make provisions, where applicable, to accommodate the presence of observers (e.g. accreditation auditors or trainee auditors)."]
[1.7,"Client shall comply with certification requirements"]
[1.8,"Your registered e-mail and mobile number shall only be used to deliver requested information or to give you access to your profile of subscriptions."]
[1.9,"Client do and hereby subscribe to get e-mail notification and mobile alert from the TNV and its overseas office location for Alerts, Bulletin, information related to application, acknowledgment, agreement, Notice, Information, change, newsletter and alerts in relation to the certification services as provided by the TNV. Second party subscribes to newly available update, speeches, articles and reports in the TNV Bulletin, press releases, and other items (greetings and general communication). The message provides a brief description and a link to the recent posting and documents."]
[1.1000000000000001,"To subscribe, all you need is a valid e-mail address & mobile number. Your e-mail will only be used to deliver the requested information or to give you access to the information, documents, report, invoice and confirmation alerts along with seasonal greetings unless your subscription preferences indicate otherwise."]
[1.1100000000000001,"TNV provides the Quotation, Agreement, Invoices, Brief of Audit reports (along with NCs), Certificates and other related documents to Clients on the MIS of the TNV by log in to MIS and it is already communicated to client only in English language but client may choose in any other possible mean like by mail or courier facility if available with TNV or at its Franchisee. But translated report in local language may be made available at extra cost. Log in details available on registration at www.tnvgroup.in or at log in link available on the website of the TNV."]
[1.1200000000000001,"If Stage-1 and stage 2 are planned together, but in any case, if there are any finding in the stage-1 which led a situation where stage 2 cannot conducted, Client shall be liable to pay full audit fees for the cancellation of the audit plan and other associated expenses for the travel and conveyance."]
[2,"Public Notice"]
[null,"TNV maintains a list of its Certified Organizations. The information in the list is available to the public on its website i.e. www.tnvgroup.org. Updates to the list will be performed on daily basis. Certificate accredited by accreditation board where certificate need to be updated on the register, shall be updated as per procedure of TNV-P-15 or as per requirement of the accreditation board and same may be available for verification to public, except in case client specifically request not to publish its information on public."]
[3,"Responsibility of TNV"]
[null,"This agreement shall become a contract between the Organization and upon its acceptance, in TNV the space below by TNV and the Organizations' authorized representative. This agreement, upon such acceptance, is mutually agreed to contain all and the only agreements between TNV and the Organization, and that no representative or representative from either party has made any statements, representations or arguments, verbal or written, which contradicts or adds to this agreement.\nTNV reserves the right to make revisions to the contract and to issue a new agreement, which will become a contract between the Organization and  TNV when accepted by both parties. Except as otherwise provided herein, both TNV and the Organization may terminate this agreement without cause upon written notice of such termination within thirty days prior to the date of such termination with the exception that accrued fees shall be payable in accordance with the terms contained herein. As a party to this agreement, TNV is responsible for conducting the assessments and providing certification in accordance with the current issue of TNV Quality Management Systems Certification Scheme Regulations to ISO series of standards which forms an integral part of this Agreement. . TNV as an accredited TNV does not provide any consultancy or internal audit services or assistance in the implementation of documented quality system to any organization preparatory to its assessment for certification. TNV will keep the Organization updated on changing certification requirements, Certification process, surveillance, re-certification and Resolution of complaints, if any."]
[4,"Responsibility of TNV"]
[4.0999999999999996,"As a part to this agreement, the ‘Client’ agrees to provide TNV with all documents, information and facilities at sites as required, to enable TNV to provide its services under this Agreement and sites will be audited as per the sample plan prepared by TNV. And that the ‘Client’ shall clarify all safety norms & shall ensure the safety for the Auditor/Lead Auditor/Technical Expert or any other person (including but not limited to Representative or accreditation) accompanying with the Auditor. The TNV don’t not presuppose a particular manner of implementation of standard or a particular format for documentation, documented information and records. TNV shall focus on establishing that a client’s documents, documented information meets the\nrequirements as specified in certifiable standard.\nThe applicant agrees that TNV (i.e. TNV), in performance of duties under this agreement, does not assume or undertake to discharge any responsibility to any other party or parties. The applicant acknowledges that the opinions and findings of TNV represent its judgement given with due consideration to the necessary limitations of practical operation and in accordance with performance of its duties and agrees that TNV does not warrant or guarantee the correctness of its opinions or that its findings will be recognized or accepted by a third party. The applicant agrees that the distribution (meaning sale, lease or gift) or promotion of any product utilizing a marking or description referring to TNV would mislead the public if such a product is not eligible  to use the marking or description or does not comply with the requirements of TNV or if TNV certification is used in any other way than as herein provided, and that breach of this contract in this respect could not adequately be compensated for in money damages. For these and other reasons, the applicant agrees that in the event of the violation of any of the terms and conditions of this Agreement, a temporary injunction may be issued at the insistence of TNV restraining the Applicant from further use of TNV certification or any other reference to TNV in any manner whatsoever, and from any further distribution or promotion of said products bearing TNV certification or any other reference to TNV and any other relief which may be deemed appropriate. Such temporary injunction shall not, however, restrain the distribution of products already utilizing TNV certificate which have been previously found to be in compliance with the requirements of TNV at the time. The granting or issuance of such temporary injunctions shall not affect the right of TNV to compensatory and punitive damages for the misuse of its TNV certification or its name, abbreviations, or symbol and shall be in addition to, and not in lieu of, any other rights and remedies provided by this Agreement. The Applicant agrees to hold TNV harmless and to defend and indemnify TNV against any loss, expense, liability or damage, including reasonable attorney's fees, arising out of any misuse by the applicant of TNV certification or arising out of any violation by the Applicant of the terms and conditions of this Agreement. In the event that TNV notifies all those it has sent the then most recent issue of the Certification Directory of any incorrect certification published therein, or elsewhere, Applicant agrees not to hold TNV liable in any way for any damage caused by such incorrect published certification, unless such damage was the result of an intentional tort, a\nwillful act or gross negligence by TNV."]
[4.2,"In case of transfer of certificate, client shall give access to accreditation board to visit the client site to verify the location."]
[4.3,"In case of any scope is reduced or disallowed by the accreditation board, certified client agrees to accept the certification on TNV Logo and agrees to surrender original certificate which is found beyond the scope of the accreditation. In case where client fails to surrender the certificate, TNV shall have right to withdraw such accredited certificate after giving 30 days’ notice and with no liability."]
[4.4000000000000004,"Certified Client is required and hereby confirm that:"]
[null,"a) Confirms to the requirements of TNV when making reference to its certification status in communication media such as the internet, brochures or advertising, or other documents,\nb) Does not make or permit any misleading statement regarding its certification,\nc) Does not use or permit the use of certification document or any part thereof in a misleading manner,\nd) Upon withdrawal of its certification, discontinues its use of all advertising matter that contains a reference to certification, as directed by TNV (Please refer TNV’s procedure).\ne) Amends all advertising matter when the scope of certification has been reduced,\nf) Does not allow reference to its management system certification to be used in such a way as to imply that TNV certifies a product (including services) or processes,\ng) Does not imply that the certification applies to activities that are outside the scope of certification,\nh) Does not use its certification in such a manner that would bring TNV and/or certification system into disrepute and lose public trust.\ni) If certified client use accreditation logo, Certified client stop using logo of accreditation board or any other logo which authorization comes due to accreditation, as soon TNV inform the same to client by newsletter or in any other mean."]
[4.5,"Certified Client is required to inform TNV in writing:"]
[null,"Certified client informs TNV, without delay, of matters that may affect the capability of the management system to continue to fulfil the requirements of the standard used for certification. These include changes relating to\n• Change in legal commercial, organizational status or ownership.\n• Organization and management (e. g. key managerial, decision-making or technical staff),\n• Contract address and sites\n• Scope of operations under the certified management system, and\n• Major changes to the management system and processes.\nAnd authorize TNV to provide access, facility and reimbursement of the fees to verify the continuity of the requirement of the standards after such changes to the certified client."]
[5,"Financial Terms"]
[null,"Subject of Fees","Mandays","Rate","Fees in INR"]
[null,"Stage-1 Audit Fees"]
[null,"Stage-2 Audit Fees"]
[null,"Registration Fees"]
[null,"Surv-1 Audit Fees"]
[null,"Annual Registration Fees"]
[null,"Surv-2 Audit Fees"]
[null,"Annual Registration Fees"]
[null,"Total Man-days for Certification Cycle",{"$f":"SUM(C49:C55)","v":0}]
[null,"Total Professional Fees for 3 Years*",null,null,{"$f":"SUM(E49:E56)","v":0}]
[null,"*GST Extra (%)",null,18,{"$f":"E57*D58%","v":0}]
[5.0999999999999996,"Invoices / Performa Invoices for services rendered in accordance with certification services agreement upon the basis of the Application Form for Registration duly signed by the Organization & shall be submitted to the organization. Charges and fees shall be based on TNV's Schedule of Fees effective at the time when agreement is accepted or as amended and agreed to by both parties."]
[5.2,"Postponement of confirmed on-site audit dates may result in charges up to 50 percent of scheduled on-site assessment plus all pre-paid expenses."]
[5.3,"In the event an account is not paid or otherwise resolved within 30 days (in your case its 15 days) after the date of invoice, Thereafter, interest will be become chargeable on the outstanding amount @ 18% per annum.\nTNV may at its option:\n• Refuse any further consideration of the agreement,\n• Not issue a certification document or\n• Terminate this agreement with reasons in writing"]
[5.4,"Fees and expenses incurred by TNV in connection with collecting past due accounts shall be the responsibility of the Organization."]
[5.5,"Certificate of Registration will only be issued upon successful assessment and when the outstanding invoices have been settled."]
[5.6,"Part of the Contract review form of the TNV which is used to determine the Audit time and the justification to the your organization is attached as annexure of this agreement and by signing this contract Client organization acknowledged that it have received and agreed with the method to determine the audit man-days and audit man-days too. Copy of the same may be available to the client upon request at any time during the contract period upon payment of the administration fees of INR 1,000 plus applicable Taxes plus courier charge to be invoiced on actual basis."]
[6,"Special Visit"]
[null,"Fees for special Surveillance visits, as and when, required to be made to the Organizations premises, will be specifically quoted and charged, separately.\nFailing to allow special visit may be ground for suspension and subsequently certification may be withdrawn."]
[7,"Pre Certification Terms and Conditions"]
[7.1,"The Organization agrees to comply with relevant provisions of applicable ISO standard requirements, with the requirements for certification-granting, maintaining, reducing, extending, suspending, withdrawing certification and recertification as specified in Certification Rules. If the organization has multiple sites the agreement shall cover all the sites covered by the scope of the certification."]
[7.2,"The accreditation body can select any accredited client for witness audit. The client shall permit for the witness audit and allow the accreditation body assessor's to assess the competency of the TNV auditor. There shall be no additional charges for witness audit and logistic expenses shall be borne by TNV."]
[7.3,"Due to any circumstances whatsoever, TNV can visit the client any time and if this visit is not for the purpose of Surveillance or follow-up audit, then fee based on the man-day, travel and lodging will be charged to the client."]
[7.4,"When requested, Organization shall make available all documents including complaint and related matters to TNV within 7 days from the date of request. TNV may make un-notified / surprise visit to the client place or any of its site covered under the management system certification and client shall permit representative of TNV or accreditation board."]
[7.5,"TNV shall not be liable for any loss or damage due to any failure or delay in performance of this agreement resulting from any cause beyond our reasonable control, compliance with applicable regulations or directive of national, state or local governments is the responsibility of the client."]
[7.6,"Client will agree to ensure that the auditors/ assessors are properly briefed about health, safety and other necessary safety hazards that they may encounter during the audits. Client will be responsible for providing them with the personnel protective / safety equipment during the audits."]
[7.7,"Any statutes of limitations notwithstanding, the Organization agrees that its right to bring or assert against TNV any and all claims, demands, or proceedings, whether in arbitration or otherwise, shall be waived unless notice is received by TNV within thirty days after the Organization has taken notice of or should reasonably have been expected to have had notice of the basis for such claims; but it should be within ninety days of the service provided by TNV. Any arbitration or legal proceedings shall be treated as time barred/null and void if notice is not received by TNV within 90 days of its providing service on the basis."]
[7.8,"Travel expenses of Assessment staff will be charged at actual from our nearest office. Boarding and lodging expenses shall be charged at actual where the assessment staff is required to travel overnight."]
[7.9,"The Certification process shall be initiated after the acceptance of this agreement."]
[7.1,"For the scopes not available with TNV, the validity of certificate is contingent upon the organization agreeing and meeting the requirements specified in Certification Rules as given in our website and this agreement. The conformity with the requirements for certification is the responsibility of the organization. TNV shall issue a non-accredited certificate. As per the terms mutually agreed a fresh accredited certificate may be issued as and when the activity is accredited by Accreditation Body. In the event the client is issued a non-accredited certificate, TNV can provide an accredited certificate only after doing a fresh audit as per the terms mutually agreed. In case any change of rules or methodology is advised by the accreditation body, the same shall be applicable for TNV and the client for maintaining the validity of Certificate."]
[7.11,"After the acceptance of TNV-F-004, if the applicant wishes to cancel it, the advance or any other charges paid shall not be refundable. Liability of TNV is limited to a maximum of amount equivalent to the fees paid by the client. The offer given in TNV-F-004 is valid for 60 days from the date of issuance."]
[7.12,"This Agreement will be governed exclusively by the laws prevailing under the jurisdiction of Lucknow, UP courts only. In the event of any dispute the client/ organization and TNV agreed to submit exclusively to the jurisdiction of the courts located at Lucknow, UP for resolution of any dispute arising out of or in connection with this agreement."]
[7.13,"Having read and understood the terms of this agreement both the parties have entered into this agreement."]
[7.14,"The client shall agree allow and give access to Auditors and /or personnel from Accreditation Body to witness the audit carried out TNV."]
[7.15,"Where a multi site offer is made, TNV multi site offer is based on the information supplied by the client & includes the multi site criteria of the accreditation rules according to IAF MD:1 latest edition. Where any subsquent audit information supplied by the client is found to be accurate, TNV reserve the right to amend & correct its offer and / or the agreement accordingly to ensure the rules are complied with."]
[8,"Post Certification Terms and Conditions"]
[8.1,"Certificates: Certificates of conformity issued by TNV shall be the property of TNV and that these shall be returned to TNV if and when the certificate is withdrawn."]
[8.1999999999999993,"Use of Logos and Marks: Right to use Logo is granted and the use of the logo is subject to restrictions. The use of logo / marks does not imply that product / service is Marks certified. Logo and shall not be used during the period of suspension / withdrawal of certificate."]
[8.3000000000000007,"Voluntary withdrawal: Client may request for suspension / withdrawal of certificate on temporary basis if they feel that their existing system does not comply / conform to the requirements of the standard."]
[8.4,"Suspension and withdrawal: TNV will impose the suspension based on the conditions defined in the certification rules which is provided to the client. TNV will Suspend and / or Withdraw the certificate if the client fails to meet the requirements of the Standard or Criteria, fees and / or expenses incurred by TNV are not paid / cleared and also in the opinion of the auditor that the terms of business of TNV you are complying with, is not established. The reasons which caused suspension shall be complied within 6 months after this the suspended certificate will be withdrawn. Under the withdrawal of certification the organization shall return the original certification and other related documents."]
[8.5,"The client shall agree to inform TNV any changes with respect to Management System, Organizational change including personnel, change of location or address and any additional or deletion of processes / activities."]
[8.6,"Certification is granted and maintained based on the limited sampling audit and TNV shall not be responsible for the client's failure to maintain the implemented documented system."]
[8.6999999999999993,"Complaints and appeals: You have the right to complain against assessment / findings on decisions taken by TNV auditor / independent auditor. The complaint shall be in writing and an independent investigation shall be carried out TNV and the findings of the complaint will be intimated to you. You will also have the right to appeal against any decision taken. Any complaints received from third party will be forwarded to you. The actions taken by you on these complaints shall be notified and communicated to TNV."]
[9,"Fundamental Terms"]
[9.1,"The Organization hereby warrants and covenants with TNV that it will, at all times, during the subsistence of the Agreement comply with all TNV requirements necessary for the issuance of the Certificate of Registration including (but without prejudice to the generality thereof) all statutes, rules, regulations issued by any statutory or other competent authority, all recommendations, codes and similar matters issued by any authority, pursuant to which in compliance of which or for the purpose of which the Certificate of Registration is issued or such other reasonable requirements of TNV as are Necessary to enable the Certificate of Registration to be issued and maintained in force in conformity with TNV's Accredited Quality System Certification Scheme Regulations."]
[9.1999999999999993,"As a mandatory requirement for continued validity of an Accredited Certificate of Registration, issued by TNV, the Organization, hereby, agrees to its certification or surveillance audit scheduled by TNV, to be witnessed by TNV's Accreditation bodies who’s Auditors may accompany TNV audit team as and when required."]
[9.3000000000000007,"The Organization hereby warrants the completeness and accuracy of all documents and accuracy of all information supplied to TNV for the purposes of this Agreement."]
[9.4,"The organization shall ensure that the information provided to TNV by the organization, relevant to its management system is kept updated and it shall promptly notify TNV of any intended change in its Management system which would significantly affect the effective implementation of its management system. Changes such as contact address and sites, legal status, scope of Certification, organizational structural changes needs to be communicated to the TNV. Also the organization is bound to inform TNV in without delay, of any significant events including, but not limited to fatal incidents, serious injuries, occupational disease or legal action by a regulatory authority and inform the OHS related findings by any third party at surveillance or recertification audit."]
[9.5,"TNV shall inform the client, in advance, of the information it intends to place in the public domain."]
[9.6,"All other information, except for information that is made publicly accessible by the client, will be considered confidential by TNV."]
[9.6999999999999993,"Except as required in this International Standard, is information about a particular client or individual disclosed to a third party without the written consent of the client or individual concerned. Will not be disclosed by TNV."]
[9.8000000000000007,"TNV have a policy governing any mark that it authorizes certified clients to use. It shall be provided with the certificate."]
[9.9,"Certified organization shall not apply marks to laboratory test, calibration or inspection reports such reports are deemed to be products in this context."]
[10,"Significant Changes:\nIn the event of any significant change affecting the activity and operation of the organization, TNV may require to conduct a reassessment for further validity of the certification."]
[10.1,"Organization shall conform to the requirements of the TNV when making the references to its certification status in communication with media through internet, brochures or advertising, or other documents."]
[10.199999999999999,"Organization shall not use or present the use of certification document in a misleading manner or make such statements."]
[10.3,"Upon suspension and withdrawal of certification, the Organization shall discontinue its use of all advertising matter that contains reference to certification as directed by TNV."]
[10.4,"Organization shall amend all advertising matter when the sector and scope of certification has been reduced, amended or modified."]
[10.5,"Organization shall not allow reference to its management system certification to be used in such a way, as to imply that TNV has certified a product or services or process."]
[10.6,"Organization shall not imply that the certification applies to activities that are outside the sector and scope of certification."]
[10.7,"Organization shall not use its certification in such a manner that would bring TNV and/for certification system into disrepute or loose public trust."]
[10.8,"TNV shall exercise proper control of ownership and shall take action to deal with incorrect references to certification status or misleading use of certification document marks and audit reports. TNV actions include request for correction and corrective action, suspension, withdrawal of  certification, publication of the transgression and it necessary, legal action."]
[10.9,"TNV shall provide information of client’s, address standard and scope in public domain."]
[10.1,"Only to claim that they are certified with respect to those activities for which it has been granted certification. In case of Test & calibration laboratory management system certification is not equivalent to accreditation (as per ISO/ IEC 17025) of the testing or calibration laboratory and no such claim shall be made."]
[10.11,"Not to use certification/ Accreditation logos in such manner as to bring TNV Accreditation Body into disrepute and not to make any misleading or unauthorized statement or incorrect references (such as claiming certification of locations/ activities/ sites not covered in the scope) with respect to their certification. The customer shall ensure compliance to these requirements while making reference to its registration or use of certification logo/ mark in communication media such as Documents, brochures or advertising. The customer shall follow the logo rules which be supplied along with the certificate, if issued."]
[10.119999999999999,"To discontinue the use of all material containing any reference to their certification, if at any time the certification is suspended or cancelled."]
[10.130000000000001,"Not to use certification/ accreditation logos to indicate that the product or service is certified by TNV."]
[10.14,"TNV may at any time, refuse to issue a certificate or suspend or cancel such certificate in circumstances where, in TNV’s opinion, compliance with the specified standard/ specification (including not meeting the regulatory requirements) is not maintained on continuous basis or conditions of this contract are not met. In case of cancellation, the customer’s name shall be removed from the register of certified companies and such information may be available to public."]
[10.15,"In case of ISO 27001, Organization shall inform to TNV when any changes happens related to Statement of Applicability (SOA) Document to decide if the change requires an update of the certification document."]
[11,"Liability"]
[11.1,"Except, in the case of deliberate neglect on the part of TNV, its employees, servants or agents, TNV shall not be liable for any loss or damage sustained by any person due to any act of omission or error whatsoever or howsoever caused during the performance of its assessment, certification or other services."]
[11.2,"In the case of neglect, as aforesaid, the limit of any loss, damage or otherwise TNV liability will be limited to an amount not exceeding the maximum fee (if any) charged by TNV for the particular service in respect of which the neglect arose. While the restrictions on liability herein contained are considered by the parties to be reasonable in all the circumstances, if such restrictions taken together or any one of them shall be judged to be unlawful or unenforceable then said restriction shall apply with such words deleted or amended or added."]
[11.3,"The provision of this clause shall not apply to any death or personal injury but the Organization shall maintain at all time adequate insurance sufficient to cover all liability that may arise as a result of any matter arising in pursuant to this Agreement."]
[12,"Force Majeure"]
[null,"TNV shall not be liable in any respect, should it be prevented from discharging such obligations as a result of any matter beyond its control which could\nnot be reasonably foreseen"]
[13,"Confidentiality and Fundamentals"]
[13.1,"Except as may be required by Law, TNV and the Organization will treat as strictly confidential and will not disclose to any third party without prior written consent of the other, any information which comes into their possession, the possession of their employees, agents or others by virtue of this Agreement."]
[13.2,"TNV shall, through legally enforceable agreements, follow policy to safeguard the confidentiality of the information obtained or created during the performance of certification activities at all levels of its structure, including committees and external bodies or individuals acting on our behalf."]
[13.3,"TNV shall inform the Organization; of any information other then brief particulars of the organization about that TNV shall place them, as per then existing practice covering name, relevant nominative document, scope and geographical locations in public domain. All other information, except for information that is made publically accessible by the Organization, shall be considered confidential."]
[13.4,"Except as required by the Accreditation Body information of the Organization or any individual shall not be disclosed to a third party without the written consent of the Organization or individual concerned."]
[13.5,"Where TNV is required by law to release confidential information to a third party, Organization or individual concerned shall, unless regulated by law, be notified in advance of the information provided."]
[13.6,"Information about the Organization from sources other than Organization i.e. complaints and regulators shall be treated as confidential, consistent with TNV’s policy."]
[13.7,"Personnel, including any committee members, contractors, personnel of external bodies or individuals acting on the TNV’s behalf, shall keep confidential all information obtained or created during the performance of the TNV’s activities."]
[13.8,"TNV shall ensure the secure handling of all confidential information including documents and records held by it."]
[13.9,"When any confidential information is to be made available to any external bodies’ i.e. accreditation body, agreement group of per assessment scheme, TNV shall keep the organization informed."]
[14]
[null,"TNV shall provide detailed description of the initial and continuing certification activity, including the application, initial audits, surveillance audits, and the process for granting, maintaining, reducing, extending, suspending, withdrawing certification and recertification and the normative requirements for certification; in its website www.tnvgroup.org"]
[15]
[null,"TNV shall information about the fees for application, initial certification and continuing certification in its Quotation."]
[16,"Client organization which is being audited shall"]
[16.100000000000001,"Comply with certification requirements, make all necessary arrangements for the conduct of the audits, including provision for examining documentation and the access to all processes and areas, records and personnel for the purposes of initial certification, surveillance, recertification and resolution of complaints, and to make provisions, where applicable, to accommodate the presence of observers (e.g. accreditation auditors or trainee auditors);"]
[16.2,"TNV shall provide documents describing the rights and duties of certified clients, including requirements, when making reference to its certification in communication of any kind in line with the requirements in 8.4 ISO 17021 (Reference to certification and use of marks)"]
[16.3,"TNV will make publicly available the information on procedures for handling complaints and appeals."]
[16.399999999999999,"TNV will give its certified clients due notice of any changes to its requirements for certification and it will verify that each certified client complies with the new requirements"]
[16.5,"TNV with legally enforceable arrangements to ensures that the certified client informs TNV, without delay, of matters that may affect the capability of the management system to continue to fulfil the requirements of the standard used for certification. These include, for example, changes relating to the legal, commercial, organizational status or ownership, organization and management (e.g. key managerial, decision-making or technical staff), contact address and sites, scope of operations under the certified management system, and major changes to the management system and processes"]
[16.600000000000001,"Allow the Accreditation Board Assessors with or without TNV Audit Team to verify the relevant documents and records maintained for particular Management System Certification, the information about the audit will be provided well in advance."]
[17,"Disputes"]
[17.100000000000001,"Any disputes or differences arising between the parties to this agreement, other than the payment of agreed fees and expenses chargeable by TNV for its services shall be dealt with in accordance with the Appeals & Complaints procedure incorporated in the TNV's Accredited Management Systems Certification Scheme Regulations and is publically available in the web site. In case(s) of disputes(s) which may arise between the parties with respect to the execution, interpretation and performance of this Agreement, both parties shall do their best to settle in an amicable manner."]
[17.2,"Organization The justification to determine the effective number of personnel shall be available to the client organization and to the Accreditation Body for review during their assessments and on request from the Accreditation Body."]
[17.3,"In case of any legal dispute the jurisdiction will be Lucknow Courts Only. The arbitrator shall be appointed by the Managing Director and the whole decision of the arbitrator shall be binding on both the parties."]
[18,"Certification Recommendation"]
[18.100000000000001,"In the event of major non-conformities being, Follow Up Audit will be conducted and the organization need to submit a Corrective action plan within 2 weeks. The corrective actions being verified onsite and closed out through a Follow Up Audit within 4 weeks of the assessment date, before certification is granted, or as decided by CEO, TNV. Recommendation for certification is made subject to successful closure of Major Non-conformity after the follow up audit."]
[18.2,"Where the audit has revealed only minor non-conformities which need to be addressed through corrective actions, the certification may be recommended subject to the Corrective Action Plan being submitted by the company within 2 weeks together with objective evidences of the corrective actions taken. The corrective actions plan is required to be closed out upon physical verification of the satisfactory implementation at the first subsequent surveillance audit."]
[18.3,"In the case of where “opportunities for improvement having been recorded during the certification audit, the actions, as applicable, are observed for effectiveness at the subsequent audit visit."]
[18.399999999999999,"TNV may perform additional full audit, an additional limited audit, or documented evidence (to be confirmed during future surveillance audits) to verify effective correction and corrective actions."]
[18.5,"I, as an authorized signatory for and on behalf of the client; hereby declare that I have carefully read all the terms and conditions etc. of this agreement for certification services, for which I have signed and submitted this agreement. I undertake that out organization shall faithfully comply with all the terms and conditions of the tender document and are fully acceptable to me and I shall abide by the terms and conditions of this documents."]
["Acceptance:"]
[null,"For and on behalf of TNV",null,null,null,null,null,"For and on behalf of the Client"]
[null,"TNV System Certification Pvt. Ltd.",null,null,null,null,null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[]
[]
[]
[]
[null,"Signature with Company Seal",null,null,null,null,null,"Signature with Company Seal"]
[null,"Name:",null,null,null,null,null,"Name:",{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
[null,"Designation:",null,null,null,null,null,"Designation:",{"$f":"'TNV-F-001'!C70","v":"CEO"}]
[null,"Date:",null,null,null,null,null,"Date:"]
[]
[]
["TNV-F-004- Client Agreement",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 03",null,"Revision Dt: 01 June 2022"]

{"sheet":"TNV-F-010","index":7,"n_rows":57,"n_cols":16,"rows_kept":57,"cut":false,"hidden":false,"merged":[[24,2,24,9],[25,2,25,9],[18,0,18,15],[19,0,19,15],[26,0,26,15],[30,0,30,15],[41,2,41,9],[44,0,44,15],[48,0,48,15],[0,0,0,15],[1,0,1,15],[2,4,2,15],[3,4,3,15],[4,4,4,15],[22,2,22,9],[23,2,23,9],[27,2,27,9],[28,2,28,9],[29,2,29,9],[31,2,31,9],[33,2,33,9],[53,2,53,6],[50,2,50,9],[49,2,49,9],[46,2,46,9],[34,0,34,15],[39,2,39,9],[32,2,32,9],[43,2,43,9],[45,2,45,9],[56,0,56,3],[56,4,56,5],[56,6,56,8],[53,0,53,1],[35,2,35,9],[36,2,36,9],[37,2,37,9],[38,2,38,9],[47,2,47,9],[40,0,40,15],[52,2,52,9],[53,7,53,15],[51,0,51,15],[56,9,56,11],[56,12,56,15],[42,2,42,9],[13,1,13,10],[2,1,2,3],[4,1,4,3],[12,1,12,10],[3,1,3,3],[6,1,6,3],[7,1,7,3],[5,4,5,15],[6,4,6,15],[7,4,7,15],[8,4,8,15],[9,1,9,3],[9,4,9,15],[16,1,16,10],[17,1,17,10],[21,0,21,15],[20,2,20,9],[5,1,5,3],[10,0,10,15],[11,0,11,15],[14,1,14,10],[15,1,15,10]]}
[" AUDIT PROGRAMME\n"]
["A. Client Information"]
["Sl.","Subject",null,null,"Information"]
[1,"Client Name",null,null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[2,"Address",null,null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[3,"Audit Standards",null,null,{"$f":"'TNV-F-008'!D9","v":0}]
[4,"Initial Audit Plan"]
[5,"1st Year Surveillance Audit Plan"]
[6,"2nd year surveillance audit plan"]
[7,"Recertification Audit Plan"]
["B. Client Sites"]
["Identify and indicate where a site visit was conducted (If Any):"]
["Site No.","Sites details (if any)",null,null,null,null,null,null,null,null,null,"Stage-1","Stage-2","Year-01","Year-02","Recert"]
[1]
[2]
[3]
[4]
[5]
["C. Audit Programme:"]
["Identified audit plans for this programme (M stand for mandatory at every audit)"]
["Sl.","Clause","Activity",null,null,null,null,null,null,null,"M","Stage-1","Stage-2","Year-01","Year-02","Recert"]
["4- Context of the organization"]
[1,4.0999999999999996,"Understanding the organization and its context"]
[2,4.2,"Understanding needs & expectations of interested parties"]
[3,4.3,"Determining the scope                                     ",null,null,null,null,null,null,null,"M"]
[4,4.4000000000000004,"Management System and its processes"]
["5- Leadership"]
[5,5.0999999999999996,"Leadership and commitment"]
[6,5.2,"Policy",null,null,null,null,null,null,null,"M"]
[7,5.3,"Organizational roles, responsibilities and authorities",null,null,null,null,null,null,null,"M"]
["6- Planning "]
[8,6.1,"Actions to address risks and opportunities",null,null,null,null,null,null,null,"M"]
[9,6.2,"Objectives and planning to achive them",null,null,null,null,null,null,null,"M"]
[10,6.3,"Planning of Changes"]
["7- Support"]
[10,7.1,"Resources"]
[11,7.2,"Competence",null,null,null,null,null,null,null,"M"]
[12,7.3,"Awareness"]
[13,7.4,"Communication"]
[14,7.5,"Documented information",null,null,null,null,null,null,null,"M"]
["8- Operation"]
[15,8.1,"Operational Planning and control",null,null,null,null,null,null,null,"M"]
[16,8.1999999999999993,"Information Security Risk Assessment",null,null,null,null,null,null,null,"M"]
[17,8.3000000000000007,"Information Security Risk Treatment",null,null,null,null,null,null,null,"M"]
["9- Performance Evaluation"]
[18,9.1,"Monitoring, measurement, analysis and evaluation",null,null,null,null,null,null,null,"M"]
[19,9.1999999999999993,"Internal Audit",null,null,null,null,null,null,null,"M"]
[20,9.3000000000000007,"Management Review",null,null,null,null,null,null,null,"M"]
["10- Improvement"]
[21,10.1,"Nonconformity and corrective action"]
[22,10.199999999999999,"Continual improvement"]
["Annex-A"]
[23,"Annex-A","Information Security Controls"]
["Date:"]
[]
[]
["TNV-F-010- Audit Programme",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 01",null,null,"Revision Dt: 01 May 2023"]

{"sheet":"TNV-F-008","index":8,"n_rows":38,"n_cols":17,"rows_kept":38,"cut":false,"hidden":false,"merged":[[21,12,21,13],[21,1,21,11],[20,1,20,11],[20,12,20,13],[28,2,28,5],[28,6,28,9],[28,10,28,13],[26,1,26,11],[27,1,27,11],[27,12,27,13],[26,12,26,13],[28,0,28,1],[37,0,37,3],[37,4,37,5],[37,6,37,8],[37,9,37,10],[14,4,14,7],[15,1,15,3],[15,4,15,7],[17,1,17,4],[17,5,17,13],[16,0,16,13],[37,11,37,13],[18,1,18,4],[25,1,25,11],[24,1,24,11],[22,1,22,11],[19,0,19,13],[11,1,11,3],[11,4,11,7],[0,0,0,13],[3,1,3,2],[3,3,3,13],[4,1,4,2],[1,0,1,13],[2,0,2,13],[6,1,6,2],[9,3,9,13],[7,1,7,2],[10,0,10,13],[11,8,11,10],[11,11,11,13],[8,1,8,2],[9,1,9,2],[13,1,13,3],[12,11,12,13],[13,11,13,13],[14,11,14,13],[12,4,12,7],[13,4,13,7],[12,1,12,3],[14,1,14,3],[12,8,12,10],[13,8,13,10],[14,8,14,10],[15,8,15,10],[15,11,15,13],[5,1,5,2],[33,0,33,1],[33,2,33,5],[33,6,33,9],[33,10,33,13],[29,6,32,9],[29,10,32,13],[29,0,32,1],[29,2,32,5],[23,1,23,11],[22,12,22,13],[23,12,23,13],[24,12,24,13],[25,12,25,13]]}
["Audit Intimation- Stage 1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes"]
["To,\nAll the concern,\n\nThis is to inform that proposed constitution of the audit team and client organization is disclosed to all related parties for their disclosure of the interest or any conflict of interest.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No"]
["1. Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5","v":"03 10 45 40 01"}]
[5,"Standards"]
[6,"Scope of the Audit",null,{"$f":"'TNV-F-002'!C14","v":0}]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,{"$f":"'TNV-F-002'!B80","v":0},null,null,"Lead Auditor"]
[2,"NA",null,null,"Auditor"]
[3,"NA",null,null,"Technical Expert"]
[4,"NA",null,null,"Other (Observer / Translator etc.)"]
["3. Proposed Audit Schedule:"]
["Sl.","Subject",null,null,null,"Audit Date"]
[1,"Stage-1 Audit "]
["4. Terms of reference for acceptance by Audit Team & Client:"]
["Sl.","Comment",null,null,null,null,null,null,null,null,null,null,"Acceptance"]
[1,"I am aware of facts which should influence my independence and objectiveness against the auditee. Information and data, which I will collect during audit conduction, neither I will provide to third parties nor I will use them for my benefits."]
[2,"As a part of Audit Team, I do hereby confirm & declare that I have no conflict of interest in accepting the assignment of the said company."]
[3,"As a part of Audit Team, I do hereby confirm that I have no vested interest in the said company and I am eligible and fit and proper person to be part of the audit team for said audit."]
[4,"I do hereby declare, and I reconfirm and abide with the confidentiality agreement as signed initially and I reassure that I shall not disclose any information of the client obtained during the audit except to the CAB unless required by under the law of land."]
[5,"I hereby confirm my agreement of appointment for the position as Lead Auditor/Auditor/Technical Expert for conducting of stated audit for the tentative date of audit for the said client and I shall ensure my availability for the said audit for stage-1 and stage-2"]
[6,"Kindly confirm acceptance of the schedule and auditor confirmation of not received would he considered that schedule and auditors are acceptable."]
[7,"Terms to accept the terms and to declare the impartiality if any, in case of no response received in 2 working days, same shall be treated as accepted and no partiality exists."]
["Acceptance by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:"]
[]
[]
["TNV-F-008- Client Intimation",null,null,null,"Issue 02",null,"Issue Dt: 15 Sep 2018",null,null,"Rev 01",null,"Revision Dt: 25 Oct 2019"]

{"sheet":"TNV-F-005 St1","index":9,"n_rows":53,"n_cols":39,"rows_kept":53,"cut":false,"hidden":false,"merged":[[15,1,15,2],[15,3,15,13],[12,1,12,2],[12,3,12,13],[13,1,13,2],[13,3,13,13],[14,1,14,2],[14,3,14,13],[9,1,9,2],[9,3,9,13],[10,1,10,13],[11,1,11,2],[11,3,11,13],[0,0,0,13],[1,0,1,13],[2,1,2,2],[3,3,3,13],[3,1,3,2],[2,3,2,13],[4,3,4,13],[7,1,7,2],[8,1,8,2],[4,1,4,2],[5,3,5,13],[5,1,5,2],[6,3,6,13],[6,1,6,2],[7,3,7,13],[8,3,8,13],[28,0,28,1],[28,2,28,13],[30,0,30,1],[31,6,31,11],[16,0,16,13],[18,0,18,13],[19,1,19,3],[19,4,19,7],[19,8,19,10],[19,11,19,13],[17,1,17,13],[22,1,22,3],[22,4,22,7],[22,8,22,10],[22,11,22,13],[23,1,23,3],[23,4,23,7],[23,8,23,10],[23,11,23,13],[27,0,27,13],[24,0,24,13],[25,1,25,4],[25,5,25,13],[26,1,26,4],[42,6,42,11],[31,4,31,5],[41,6,41,11],[30,6,30,11],[31,0,31,1],[31,2,31,3],[29,0,29,13],[30,4,30,5],[30,2,30,3],[40,6,40,11],[31,12,31,13],[30,12,30,13],[52,0,52,3],[52,4,52,5],[52,6,52,8],[52,9,52,10],[52,11,52,13],[20,1,20,3],[20,4,20,7],[20,8,20,10],[20,11,20,13],[21,1,21,3],[21,4,21,7],[21,8,21,10],[21,11,21,13],[37,4,37,5],[42,4,42,5],[37,6,37,11],[38,4,38,5],[38,6,38,11],[39,4,39,5],[39,6,39,11],[41,4,41,5],[39,2,39,3],[41,2,41,3],[40,4,40,5],[48,0,48,1],[48,2,48,5],[48,6,48,9],[48,10,48,13],[43,0,43,1],[44,0,47,1],[44,2,47,5],[44,6,47,9],[44,10,47,13],[43,2,43,5],[43,6,43,9],[43,10,43,13]]}
["Audit Plan St-1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"On-Site Audit"]
["1. Client Information:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Remote Audit"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5","v":"03 10 45 40 01"}]
[5,"Standards",null,{"$f":"'TNV-F-008'!D9","v":0}]
[6,"Scope of the Audit",null,{"$f":"'TNV-F-008'!D10","v":0}]
[7,"Type of Audit",null,"On-Site Audit"]
[8,"In Case of Remote Audit, Please provide:"]
[8.1,"ICT Tool Name (Zoom, WebEx, Microsoft Teams, Google Meet etc.)"]
[8.1999999999999993,"Suitability of Audit Timing (IST, GMT or Local Time)"]
[8.3000000000000007,"Internet Connectivity Status"]
[8.4,"Documents Sharing Platform"]
[8.5,"Infrastruction Availability (Notebook, PC, Headphones etc.)"]
["Audit Objective for Stage-1 Audit:"]
[null,"i. Assess your Documented Management System\nii. Evaluate your Locations and any site-specific conditions\niii. Assess your understanding of the requirements of the standard\niv. Agree the scope of your Documented Management System, processes and location(s) and related statutory and regulatory aspects and associated risks\nv. Plan the Stage 2 Audit and establish your planning arrangements for Internal Audits and Management Reviews\nvi. Determine your readiness for a Stage 2 Audit\nvii. Identify any areas for potential Improvement of the Management System"]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,{"$f":"'TNV-F-002'!B80:D80","v":0},null,null,"Lead Auditor"]
[2,"NA",null,null,"Auditor"]
[3,"NA",null,null,"Technical Expert"]
[4,"NA",null,null,"Other (Observer / Translator etc.)"]
["3. Proposed Audit Schedule:"]
["Sl.","Subject",null,null,null,"Audit Date"]
[1,"Stage-1 Audit ",null,null,null,{"$f":"'TNV-F-008'!F19","v":"00:00:00"}]
["Clauses to be covered under stage-1 Audit:"]
["ISO 27001:2022",null,"4.1, 4.2, 4.3, 4.4, 5.1, 5.2, 5.3, 6.1, 6.2, 7.1, 7.2, 7.3, 7.4, 7.5, 8.1, 8.2, 8.3, 9.1 9.2, 9.3, 10.1, 10.2, Annex-A"]
["4. Audit Plan for Stage-1"]
["Date & Time (From-To)",null,"Clause",null,"Audited By",null,"Process",null,null,null,null,null,"Process Owner"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Prepared by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:"]
[]
[]
["TNV-F-005- Audit Plan",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 03",null,"Revision Dt: 01 May 2023"]

{"sheet":"TNV-F-014 ABMS","index":10,"n_rows":142,"n_cols":13,"rows_kept":142,"cut":false,"hidden":true,"merged":[[12,1,12,2],[12,3,12,13],[18,3,18,13],[14,3,14,4],[14,5,14,7],[14,8,14,9],[15,3,15,4],[15,5,15,7],[14,10,14,13],[15,8,15,9],[15,10,15,13],[14,1,15,2],[16,3,16,13],[17,7,17,9],[17,3,17,6],[17,10,17,13],[17,1,17,2],[18,1,18,2],[141,0,141,3],[141,4,141,5],[141,6,141,8],[141,9,141,10],[141,11,141,13],[131,7,131,13],[131,1,131,6],[131,0,138,0],[136,7,136,13],[136,1,136,6],[132,7,135,13],[132,1,135,6],[137,2,137,6],[137,8,137,13],[138,2,138,6],[138,8,138,13],[130,0,130,13],[127,0,127,10],[128,0,128,10],[129,0,129,10],[126,0,126,13],[127,11,127,13],[128,11,128,13],[129,11,129,13],[124,0,124,13],[125,0,125,13],[117,0,117,13],[118,0,118,5],[118,6,118,13],[119,0,119,5],[119,6,119,13],[121,6,121,13],[122,6,122,13],[123,6,123,13],[120,6,120,13],[120,0,120,5],[121,0,121,5],[122,0,122,5],[123,0,123,5],[112,1,112,5],[113,1,113,5],[114,1,114,5],[115,1,115,5],[116,1,116,5],[108,12,108,13],[109,12,109,13],[110,0,110,13],[111,1,111,5],[111,6,111,9],[111,10,111,13],[108,3,108,11],[109,3,109,11],[115,6,115,9],[115,10,115,13],[116,6,116,9],[116,10,116,13],[112,6,112,9],[112,10,112,13],[113,6,113,9],[113,10,113,13],[114,6,114,9],[114,10,114,13],[100,12,100,13],[101,12,101,13],[102,12,102,13],[103,12,103,13],[104,12,104,13],[105,12,105,13],[106,12,106,13],[107,12,107,13],[102,3,102,11],[103,3,103,11],[104,3,104,11],[105,3,105,11],[106,3,106,11],[107,3,107,11],[106,1,106,2],[107,1,107,2],[108,1,108,2],[109,1,109,2],[96,3,96,11],[97,3,97,11],[98,3,98,11],[99,3,99,11],[100,3,100,11],[101,3,101,11],[100,1,100,2],[101,1,101,2],[102,1,102,2],[103,1,103,2],[104,1,104,2],[105,1,105,2],[93,0,93,13],[94,1,94,2],[94,3,94,11],[94,12,94,13],[95,1,95,2],[98,12,98,13],[99,12,99,13],[98,1,98,2],[99,1,99,2],[96,12,96,13],[97,12,97,13],[96,1,96,2],[97,1,97,2],[95,12,95,13],[95,3,95,11],[92,1,92,4],[92,5,92,11],[92,12,92,13],[90,1,90,4],[90,5,90,11],[90,12,90,13],[91,1,91,4],[91,5,91,11],[91,12,91,13],[88,1,88,4],[88,5,88,11],[88,12,88,13],[89,1,89,4],[89,5,89,11],[89,12,89,13],[86,1,86,4],[86,5,86,11],[86,12,86,13],[87,1,87,4],[87,5,87,11],[87,12,87,13],[84,1,84,4],[84,5,84,11],[84,12,84,13],[85,1,85,4],[85,5,85,11],[85,12,85,13],[82,1,82,4],[82,5,82,11],[82,12,82,13],[83,1,83,4],[83,5,83,11],[83,12,83,13],[80,1,80,4],[80,5,80,11],[80,12,80,13],[81,1,81,4],[81,5,81,11],[81,12,81,13],[78,1,78,4],[78,5,78,11],[78,12,78,13],[79,1,79,4],[79,5,79,11],[79,12,79,13],[76,1,76,4],[76,5,76,11],[76,12,76,13],[77,1,77,4],[77,5,77,11],[77,12,77,13],[74,1,74,4],[74,5,74,11],[74,12,74,13],[75,1,75,4],[75,5,75,11],[75,12,75,13],[72,1,72,4],[72,5,72,11],[72,12,72,13],[73,1,73,4],[73,5,73,11],[73,12,73,13],[70,1,70,4],[70,5,70,11],[70,12,70,13],[71,1,71,4],[71,5,71,11],[71,12,71,13],[67,1,67,13],[68,0,68,13],[69,12,69,13],[69,5,69,11],[69,1,69,4],[62,1,62,13],[63,1,63,13],[64,1,64,13],[65,1,65,13],[66,1,66,13],[60,12,60,13],[61,0,61,13],[56,10,56,11],[57,10,57,11],[58,10,58,11],[59,10,59,11],[60,10,60,11],[60,7,60,9],[56,4,56,6],[57,4,57,6],[58,4,58,6],[59,4,59,6],[60,4,60,6],[56,1,56,3],[57,1,57,3],[58,1,58,3],[59,1,59,3],[60,1,60,3],[51,12,51,13],[52,12,52,13],[53,12,53,13],[54,12,54,13],[55,12,55,13],[56,7,56,9],[57,7,57,9],[58,7,58,9],[59,7,59,9],[51,10,51,11],[52,10,52,11],[53,10,53,11],[54,10,54,11],[55,10,55,11],[51,7,51,9],[52,7,52,9],[53,7,53,9],[54,7,54,9],[55,7,55,9],[56,12,56,13],[57,12,57,13],[58,12,58,13],[59,12,59,13],[51,4,51,6],[52,4,52,6],[53,4,53,6],[54,4,54,6],[55,4,55,6],[50,4,50,6],[51,1,51,3],[52,1,52,3],[53,1,53,3],[54,1,54,3],[55,1,55,3],[47,12,47,13],[1,0,1,13],[48,0,48,13],[50,7,50,9],[50,10,50,11],[50,12,50,13],[49,10,49,13],[49,0,49,9],[50,1,50,3],[40,12,40,13],[41,12,41,13],[42,12,42,13],[43,12,43,13],[44,12,44,13],[45,12,45,13],[34,12,34,13],[35,12,35,13],[36,12,36,13],[37,12,37,13],[38,12,38,13],[39,12,39,13],[28,12,28,13],[29,12,29,13],[42,1,42,2],[43,1,43,2],[44,1,44,2],[45,1,45,2],[46,1,46,2],[44,3,44,11],[45,3,45,11],[46,3,46,11],[46,12,46,13],[38,0,41,0],[28,1,28,2],[29,1,29,2],[30,1,30,2],[31,1,31,2],[32,1,32,2],[33,1,33,2],[30,12,30,13],[31,12,31,13],[32,12,32,13],[33,12,33,13],[47,3,47,11],[22,1,22,2],[22,3,22,11],[23,1,23,2],[25,1,26,2],[27,1,27,2],[38,3,38,11],[39,3,39,11],[40,3,40,11],[41,3,41,11],[42,3,42,11],[43,3,43,11],[32,3,32,11],[33,3,33,11],[34,3,34,11],[35,3,35,11],[36,3,36,11],[37,3,37,11],[47,1,47,2],[34,1,34,2],[35,1,35,2],[36,1,36,2],[37,1,37,2],[38,1,41,2],[27,3,27,11],[28,3,28,11],[29,3,29,11],[30,3,30,11],[31,3,31,11],[24,12,24,13],[25,12,25,13],[26,12,26,13],[27,12,27,13],[19,1,19,2],[19,3,19,13],[25,0,26,0],[22,12,22,13],[23,3,23,11],[24,3,24,11],[25,3,25,11],[24,1,24,2],[26,3,26,11],[20,1,20,2],[20,3,20,13],[21,0,21,13],[23,12,23,13],[14,0,15,0],[0,0,0,13],[6,1,6,2],[6,3,6,13],[9,1,9,2],[10,1,10,2],[11,1,11,2],[13,1,13,2],[16,1,16,2],[2,1,2,2],[2,3,2,13],[3,1,3,2],[3,3,3,13],[4,1,4,2],[4,3,4,13],[5,1,5,2],[5,3,5,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[9,3,9,13],[10,3,10,13],[11,3,11,13]]}
["ABMS ISO 37001:2016 STAGE-1 AUDIT REPORT"]
["Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Site Address (If Any)",null,{"$f":"'TNV-F-001'!F18","v":0}]
[5,"No. of Employees",null,{"$f":"'TNV-F-002'!C45","v":5}]
[6,"Email","Email",{"$f":"'TNV-F-001'!B6","v":"contact@high-jack.fr"}]
[7,"Contact Person",null,{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
[8,"Phone/ Mobile",null,{"$f":"'TNV-F-001'!B5","v":"03 10 45 40 01"}]
[9,"Scope",null,{"$f":"'TNV-F-002'!C14","v":0}]
[10,"Revised scope (if any change)",null,"Nil"]
[11,"Technical Area"]
[12,"Audit Team",null,"Lead Auditor:",null,{"$f":"'TNV-F-002'!B80","v":0},null,null,"Auditor:",null,{"$f":"'TNV-F-002'!B81","v":0}]
[null,null,null,"Technical Expert:",null,{"$f":"'TNV-F-002'!B82","v":0},null,null,"Observor:",null,{"$f":"'TNV-F-002'!B83","v":0}]
[13,"Audit Man-days",null,{"$f":"'TNV-F-002'!#REF!","v":{"$error":"#REF!"}}]
[14,"Stage of Audit",null,"Stage-1 Audit",null,null,null,"Audit Date:",null,null,{"$f":"'TNV-F-008'!F19","v":"00:00:00"}]
[15,"Brief about the organization",null,"ABC PVT LTD situated at lucknow doing business of manufacturing."]
[16,"Audit Guidance",null,"To evaluate the client's documented system/ Prevent, detect and address bribery by implementing controls and instill an anti-bribery culture in the organization,  location & site-specific conditions and gather other details through discussions with the client's personnel to determine the organization’s readiness for the   Stage 2 Audit for Certification. "]
[17,"Audit Objective",null,"The purpose of the Stage 1 audit is to evaluate the effective implementation of the client’s management system. As a minimum you must audit the following and your report must show clear audit evidence against these requirements.\n1. to audit the client’s management system documentation and some management processes;\n2. to evaluate the client’s location and site-specific conditions and to undertake discussions with the client’s personnel to determine the preparedness for the stage 2 audit;\n3. to review the client’s status and understanding regarding requirements of  the standard, in particular with respect to the identification of key performance, processes, objectives and operation of the management system;\n4. to collect necessary information regarding the scope of the management  system, processes and any statutory regulations; \n5. to review the allocation of resources for stage 2 audit and agree with the client on the details of the stage 2 audit;\n6. to evaluate if the internal audits and management review are being planned and performed, and that the level of implementation of the management system substantiates that the client is ready for the stage 2 audit; \n7. to verify all information previously supplied is still correct and relevant and any changes required to the number of days for stage 2 must be agreed before the audit report is completed; "]
["Guidance Note for Opening Meeting Agenda:"]
["Sl.","Topics",null,"Particular",null,null,null,null,null,null,null,null,"Completed"]
[1,"Thanks",null,"Give an expression of thanks to the auditee for Choosing TNV.",null,null,null,null,null,null,null,null," "]
[2,"Attendance",null,"Request attendees to record their attendance ",null,null,null,null,null,null,null,null," "]
[3,"Introduction",null,"Remind timeline to close opening meeting in 15/30 minutes.",null,null,null,null,null,null,null,null," "]
[null,null,null,"Request to give brief introduction with brief roles (participants, observers, guides & Translators)",null,null,null,null,null,null,null,null," "]
[4,"Scope/Summary",null,"Confirmation of the audit objectives (Assessment for ISO 37001:2016), scope and criteria; ",null,null,null,null,null,null,null,null," "]
[5,"Changes",null,"Changes in documents/ Fact to the Application",null,null,null,null,null,null,null,null," "]
[6,"Plan",null,"Confirmation of the audit plan and other relevant arrangements with the auditee, such as the date and time for the closing meeting, any interim meetings between the audit team and the auditee’s management, and any late changes;",null,null,null,null,null,null,null,null," "]
[7,"Method",null,"Methods of Audit: Review of Documents & Records, Interview, Physical evidence.",null,null,null,null,null,null,null,null," "]
[8,"Sampling",null,"Advise auditee that the audit is sample basis and findings will be based on a sample of the information selected;",null,null,null,null,null,null,null,null," "]
[9,"Communication Channel",null,"Confirmation of formal communication channels between the audit team and the auditee; identify the facilitators.",null,null,null,null,null,null,null,null," "]
[10,"Language",null,"Confirmation of the language to be used during the audit;",null,null,null,null,null,null,null,null," "]
[11,"Development",null,"Confirmation that, during the audit, the auditee will be kept informed of audit progress;",null,null,null,null,null,null,null,null," "]
[12,"Resource",null,"Confirmation that the resources and facilities needed by the audit team are available; like Guide, Interpreters, Facility etc.",null,null,null,null,null,null,null,null," "]
[13,"Confidentiality",null,"Confirmation of matters relating to confidentiality and information security;",null,null,null,null,null,null,null,null," "]
[14,"Safeguard",null,"Confirmation of relevant health and safety, emergency and security procedures for the audit team;",null,null,null,null,null,null,null,null," "]
[15,"Reporting of Findings",null,"NC may be against a clause of the standard i.e. ISO 37001, it’s not against any person or department.",null,null,null,null,null,null,null,null," "]
[null,null,null,"Method of reporting audit findings & grading (Major, Minor & Observation) ",null,null,null,null,null,null,null,null," "]
[null,null,null,"Time for corrective action (Minor/15 Days, Major/60 Days)",null,null,null,null,null,null,null,null," "]
[null,null,null,"Report time: Finding will be discussed at closing meeting and report will be given within 2 working days.",null,null,null,null,null,null,null,null," "]
[16,"Termination",null,"Information about conditions under which the audit may be terminated;",null,null,null,null,null,null,null,null," "]
[17,"Audit Declaration",null,"Verify that all members of the organization know what is happening;",null,null,null,null,null,null,null,null," "]
[18,"Union/Problem",null,"As certain union relations or any potential problems;",null,null,null,null,null,null,null,null," "]
[19,"Confidentiality",null,"Remind the auditee that the audit is confidential",null,null,null,null,null,null,null,null," "]
[20,"Closing Meeting",null,"Timing of closing meeting; Participation of the Top Management & where appropriate, those responsible for the functions or processes which have been audited in the closing meeting.",null,null,null,null,null,null,null,null," "]
[21,"Appeals / Complaint",null,"Information about any system for feedback from the auditee on the findings or conclusions of the audit, including complaints or appeals",null,null,null,null,null,null,null,null," "]
["Recording of Attendance:"]
["Audit Attendance Sheet",null,null,null,null,null,null,null,null,null,"Record Attendance (by LA)"]
["Sl.","Name",null,null,"Position",null,null,"Department",null,null,"Opening",null,"Closing"]
[1]
[2]
[3]
[4]
[5]
[6]
[7]
[8]
[9]
[10]
["Area of Concern which may be Identified as Non Conformities during Stage 2 Audit:"]
["Sl.","Particular"]
[1]
[2]
[3]
[4]
[5]
["Audit Report:"]
["Sl.","Requirement",null,null,null,"Comment",null,null,null,null,null,null," C/N/O/NA"]
[1,"Does the Anti Bribery Management Systems address the key areas of client’s business? ABMS Manual Reference If any and process description. Context of organization has been understood and addressed by determining external and internal issues. Monitoring and review system and records reference available? Needs and expectations of interested parties understood? Risk based approach adopted? Opportunities identification approach?"]
[2,"Are processes for ABMS identified and their sequence & interaction defined?"]
[3,"Is scope of ABMS Included in Manual or defined otherwise? Shall determine the boundaries and applicability of the ABMS to establish its scope. Does the Scope is appropriate to the organizational activities?"]
[4,"Do manual or Other documents include Details of Justifications?"]
[5,"Are all 7(4, 5, 6,7,8,9 and 10) elements of ABMS addressed in Anti Bribery Management Systems Manual or addressed in other organizational documents? (Context of organization, leadership, Planning, Support, Operation, Performance Evaluation, Improvement)"]
[6,"Does the organization have site-specific activities – top level process review"]
[7,"Does organization have identified and complied with the appropriate regulatory and legal requirements; applicable to the product / Services?"]
[8,"Is there a documented statement of ABMS Policy? And is appropriate to the purpose and context of the organization, prohibits bribery, requires compliance with anti-bribery laws that are applicable to the organization; and supports its strategic direction and be available to relevant interested parties, as appropriate. "]
[9,"Have ABMS objectives been established at relevant functions, levels and processes needed for the ABMS. And objectives shall be: Consistent with ABMS Policy, be measurable, monitored, communicated and updated as appropriate And records reference of the achievements provided?"]
[10,"Are the 7 mandatory documented clauses and related records references available? (Any other organizational document/ procedure need to be referred)?"]
[11,"Are there established bribery risk assessment procedures?"]
[12,"Are there established disciplinary action procedures?"]
[13,"Are there established Bribery Risk Management procedures?"]
[14,"Are there established training procedures?"]
[15,"Are there established anti-bribery controls procedures?"]
[16,"Are there established anti-bribery commitments procedures?"]
[17,"Are there established prevent the offering, provision or acceptance of gifts, hospitality similar benefits procedures?"]
[18,"Are there established Raising concerns procedures?"]
[19,"Are there established Investigating and dealing with bribery procedures?"]
[20,"Are Internal audits conducted as planned?"]
[21,"Date of Last Internal Audit?"]
[22,"Are Management reviews conducted as planned?"]
[23,"Date of Last MRM?"]
["Guidance Note for Closing Meeting Agenda:"]
["Sl.","Topics",null,"Particular",null,null,null,null,null,null,null,null,"Completed"]
[1,"Introduction ",null,"Particularly if anybody not present at the opening meeting"]
[2,"Thank to company",null,"Thanks to your Team for cooperation during the audit and arrangements for the Audit."]
[3,"Reaffirmation of Scope",null,"Reconfirm scope of activities assessed"]
[4,"Confirm confidentially",null,"Reassure the confidentiality for any information assessed during the audit."]
[5,"Appreciation",null,"Comment on good points within the organisation"]
[6,"Disclaimer",null,"This was audit on sample basis, and it should not mean, that other deficiencies do not exist."]
[7,"Audit Team Comment",null,"Summary of individual findings from each auditor (if audit team consist more then 1)"]
[8,"Decision",null,"Significance of categories of non-compliance and summary of findings, Summary of overall findings and recommendation/Decision"]
[9,"Acknowledgment",null,"Assure that client acknowledge the NCs."]
[10,"Future Plan",null,"If any NC is identified, Submitting plan for corrective action together with the objective evidences."]
[11,"Follow-up action ",null,"Where do we go from here? emphasizing that the final decision regarding certification will be taken by TNV"]
[12,"Surveillance Audit ",null,"An explanation of the continual Audit (surveillance) procedure and other future actions"]
[13,"Appeal",null,"Explain the Appeal & Complaint option available to the client against any decision of the Audit team."]
[14,"Invite questions",null,"Invite questions, clarification from company (But no Consultancy)"]
[15,"Signature",null,"Obtain company representative's signature on report to acknowledge receipt."]
["Recommendation for Stage-2 Audit: I have checked, examined and discussed and confirm the following: Mark “X” where applicable:"]
["Sl.","Validation of Critical Points",null,null,null,null,"Applicability",null,null,null,"Comment of the Auditor (If any)"]
[1,"Relevance of the ABMS documentation with activities of the client?"]
[2,"Scope applied are justified with the present activities of the Clients?"]
[3,"Any Change in scope needed?"]
[4,"Suitability of Audit Timing?"]
[5,"Process and element of the ISO 37001 in Stage-1 audit addresses?"]
["Additional Verification:"]
["Audit Duration for Stage 2 Audit?"]
["Are quoted man-days adequate?"]
["Any change in employee detail?"]
["Any Change in Scope?"]
["Any Additional information?"]
["Is there any requirement of verifying the night shift in stage-2 audit?"]
["Audit Summary (Including General Observations/Comments)"]
[]
["Recommendation (Mark “X” where applicable)"]
["Recommended for Proceeding to Stage 2"]
["Not Recommend proceeding to stage 2 until objective evidence has been submitted to TNV showing that the concerns raised by the auditor (s) have been rectified. A date for stage 2 will then be agreed. (within 60 days from this audit date)"]
["Not Recommend proceeding without a further stage 1 Audit due to the severity of the concerns raised by the audit team"]
["Acceptance:"]
[null,"For and on behalf of TNV",null,null,null,null,null,"For and on behalf of the Client"]
[]
[]
[]
[]
[null,"Signature",null,null,null,null,null,"Signature"]
[null,"Name of Auditor:",{"$f":"'TNV-F-002'!B80","v":0},null,null,null,null,"Name:",{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
[null,"Date:",null,null,null,null,null,"Date:"]
[]
[]
["TNV-F-014- Stage 1 Report",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-014 ISMS","index":11,"n_rows":95,"n_cols":39,"rows_kept":95,"cut":false,"hidden":false,"merged":[[89,1,89,2],[89,4,89,5],[90,0,90,2],[90,3,90,5],[91,0,91,2],[91,3,91,5],[86,1,86,2],[86,4,86,5],[87,1,87,2],[87,4,87,5],[88,1,88,2],[88,4,88,5],[83,0,83,5],[84,1,84,2],[84,4,84,5],[85,1,85,2],[85,4,85,5],[24,2,24,5],[25,2,25,5],[27,0,27,5],[74,0,74,2],[74,3,74,5],[75,0,78,2],[75,3,78,5],[63,0,63,5],[70,0,70,5],[71,1,71,4],[72,1,72,4],[73,1,73,4],[64,4,69,5],[5,2,5,5],[0,0,0,5],[1,0,1,5],[2,0,2,5],[3,2,3,5],[4,2,4,5],[15,2,15,5],[9,2,9,5],[10,2,10,5],[11,2,11,5],[12,2,12,5],[6,2,6,5],[7,2,7,5],[8,2,8,5],[13,2,13,5],[14,2,14,5],[94,0,94,1],[28,0,28,3],[28,4,28,5],[26,2,26,5],[16,2,16,5],[18,2,18,5],[21,2,21,5],[22,2,22,5],[23,2,23,5],[19,0,20,0],[19,1,20,1],[79,1,79,2],[79,4,79,5],[80,1,80,2],[80,4,80,5],[17,2,17,5]]}
["Stage- 1 Report",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes"]
["Information Security Managment System",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No"]
["Client Information:"]
["Sl.","Subject","Particular"]
[1,"Reference Number (unique ID Allotted)",{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address of the Client",{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Sita Address (If Any)",{"$f":"'TNV-F-001'!F18","v":0}]
[5,"No. of Employees",5]
[6,"No. of Users",1]
[7,"No. of Server",2]
[8,"No. of work stations",31]
[9,"No. of Application Development and Maintenance staff",2]
[10,"Email",{"$f":"'TNV-F-001'!B6","v":"contact@high-jack.fr"}]
[11,"Contact Person",{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
[12,"Phone/ Mobile",{"$f":"'TNV-F-001'!B5","v":"03 10 45 40 01"}]
[13,"Scope",{"$f":"'TNV-F-002'!C14","v":0}]
[14,"Revised scope (if any change)","Nil"]
[15,"Technical Area",{"$f":"'TNV-F-002'!#REF!","v":{"$error":"#REF!"}}]
[16,"Audit Team","Lead Auditor:","Giuseppe Izzo","Auditor:","-"]
[null,null,"Technical Expert:","Giuseppe Izzo","Observor:","-"]
[17,"Audit Man-days","1   5"]
[18,"Audit Date ","2025-03-28"]
[19,"Brief about the organization","High Jack protects the sustainability of companies by providing them with innovative solutions and cybersecurity training, in order to strengthen their resilience against digital threats and build a secure and sustainable professional environment."]
[20,"Type of Audit"]
[21,"Extent of Remote Audit (If Applicable)"]
[22,"Audit Objective","The purpose of the Stage 1 audit is to evaluate the effective implementation of the client’s management system. As a minimum you must audit the following and your report must show clear audit evidence against these requirements.\n1. to audit the client’s management system documentation and some management processes;\n2. to evaluate the client’s location and site-specific conditions and to undertake discussions with the client’s personnel to determine the preparedness for the stage 2 audit;\n3. to review the client’s status and understanding regarding requirements of  the standard, in particular with respect to the identification of key performance, processes, objectives and operation of the management system;\n4. to collect necessary information regarding the scope of the management  system, processes and any statutory regulations; \n5. to review the allocation of resources for stage 2 audit and agree with the client on the details of the stage 2 audit;\n6. to evaluate if the internal audits and management review are being planned and performed, and that the level of implementation of the management system substantiates that the client is ready for the stage 2 audit; \n7. to verify all information previously supplied is still correct and relevant and any changes required to the number of days for stage 2 must be agreed before the audit report is completed; "]
["Recording of Attendance:"]
["Audit Attendance Sheet",null,null,null,"Record of Attendance (by LA)"]
["Sl.","Name","Position","Department","Opening","Closing"]
[1,"Adrien Jannel","CEO","HIGH JACK"]
[2,"Cyrille Elsen","CIO","HIGH JACK"]
[3,"Florent Curtet","CTO","HIGH JACK"]
[4,"Alexis Mathieu","Network and cybersecurity administrator","HIGH JACK"]
[5,"Giuseppe Izzo","Lead Auditor","UESE ITALIA SPA"]
[]
[]
[null,null,null,null,null,null,null,null,null,"Finding"]
[null,null,null,null,null,null,null,null,null,"Confirm"]
["Sl.","Clause","Subject","Reference / Evidence","Finding","Reviewer Comment (To be filled by Technical Review Team)",null,null,null,"Non-Conformity"]
[1,null,"ISMS Manual Reference",null,null,null,null,null,null,"Observation"]
[2,"Clause 5.2 & 6.2","Is Information Security Policy and Objectives Designed, documented and Approved? \n(includes framework of Objective, Legal, statutory and contractual requirements, aligned with Risk Management and  criteria of Risk Evaluation)","Information Security Policy Doc ISP-001, Objectives Sheet OBJ-001","Confirm","Policy and objectives are documented, aligned with risk framework, legal and contractual obligations, and approved by top management."]
[3,"Clause 4.3","Is scope of ISMS Included in Manual and having boundaries?","ISMS Manual, Scope Statement Document ","Confirm","Scope clearly defines physical, organizational, and process boundaries. Boundaries are consistent with organization’s context."]
[4,null,"Does manual include Details of exclusions with justifications?","ISMS Manual","Confirm","No there’s no exclusions."]
[5,"Clause 6.1.2","Is Information Security Risk Assessment process defined?\n(Method , Identification of assets, threats and vulnerabilities,  Impact on organization  CIA, owner, Risk Register, Acceptable Risk level, Method of selection of Control)","Risk Assessment Procedure, Risk Register, Asset Inventory","Confirm","Risk assessment methodology is well-defined."]
[6,"Clause 6.1.3","Is Information Security Risk Treatment process prepared drafted and approved?\n(Report and plan no. date)","Risk Treatment Plan","Confirm","Treatment plan aligns with assessment results; includes responsible owners and deadlines. Reviewed and approved by management."]
[7,"Clause 8.2 & 8.3","The results of the information security risk assessments and risk treatment documented?            ","ISMS Manual, Risk Register","Confirm","Results of risk assessments and treatments are documented, traceable, and stored in the central ISMS repository."]
[8,null,"Are other procedure or control in support of ISMS are defined and documented?\n(Incident Management, Business Continuity Plan etc","Incident Management Procedure, Business Continuity Plan, Access Control Policy","Confirm","Supporting controls and processes are available and maintained as part of the management system documentation."]
[9,null,"Are records required by ISO 27001:2022 are documented, implemented and maintained.\n(User ID Authorization, Security Logs etc)","Security Log Samples, Monitoring Reports","Confirm","Required records are maintained and accessible. Evidence of logging and access control reviewed and verified."]
[10,"Clause 6.1.3 d","Is Statement of Applicability documented, implemented and maintained?\n(version, date, control points and exclusion)","SoA Document","Confirm","SoA Document"]
[11,"Clause 9.2","Are Internal audits conducted as planned and evidence of the audit programme(s) and the audit results available?\n(Frequency, Date of Last Internal Audit, Conducted by)","Internal Audit Plan 2025, Last Internal Audit Report ","Confirm","Internal audit programme is defined and executed as planned. Evidence of latest audit and corrective actions reviewed and available."]
[12,null,"Are Management reviews conducted as planned?\n(Frequency, Date of Last MRM , Chaired by, Agenda)","Management Review Meeting Minutes ","Confirm","MRM conducted annually as per schedule. Reviewed agenda includes policy review, objectives, risks, SoA, incidents, and improvements."]
[13,"Clause10.1","Evidence of the nature of nonconformities identified and any subsequent actions taken and corrective actions available.","Nonconformity Register, Corrective Action Reports","Confirm","Nonconformities are recorded with documented root cause analysis and corrective actions. Closure evidence available and verified."]
[14,"Clause 9.1","Are evidences of the monitoring and measurement results documented?","ISMS KPI Dashboard, Monthly Security Report, Log Review Reports","Confirm","Monitoring results are tracked using defined KPIs. Measurement data supports ongoing effectiveness evaluation of the ISMS."]
[15,null,"Are information security Incidents recorded? Is there evidence of resolving the same?","Incident Register, Incident Reports","Confirm","All incidents are recorded and resolved with closure evidence. Escalation procedure is in place and followed."]
[16,null,"Are there any open Information Security Incidents?  ","Incident Register","Confirm","No open incidents "]
[17,"Clause 7.2","Is evidence of the competence of the information security resources available?","Training Records, Competency Matrix","Confirm","Personnel qualifications and competency evidence available and aligned with job roles and ISMS requirements."]
[18,"Clause 8.1","Is Operational planning and control information documented?","Operational Procedures","Confirm","Operational procedures are clearly defined, controlled, and implemented."]
[19,"Clause 7.5.1b","Is Documented Information determined as necessary for the effectiveness of the ISMS?","Documented Information Register, ISMS Document Control Procedure ","Confirm","Required documented information identified and controlled as per ISO requirements. Version control and access restrictions applied."]
[20,null,"Are all requirements for documented information, Implemented and maintained?",null,"Confirm","Yes"]
[21,null,"Is there any outsourced process Which is not covered in the scope but effecting the organization and is controlled by organisation?","Vendor Risk Assessment, SLA Agreements","Confirm","NO"]
[22,null,"Any Statutory and/or regulatory requirements applicable to organization or technical area identified and complied with?",null,"Confirm","All applicable legal/regulatory obligations identified and tracked."]
["Findings of the Stage 1 Audit:"]
["The auditor has pointed out following areas of nonconformity and potential improvements for the documentation of effective management system. The organisation has an opportunity to rectify the identified deficiencies prior to the Stage 2 audit. Organisation is expected to confirm that they have addressed the findings & submit evidence within 30 days/prior to stage-2 audit."]
["Sl","Findings","Clause","Response of the client"]
[1]
[]
[]
[]
[]
["Recommendation (Mark “X” where applicable)"]
[1,"Recommended for Proceeding to Stage 2",null,null,null,"Yes"]
[2,"Not Recommend proceeding to stage 2 until objective evidence has been submitted to TNV showing that the concerns raised by the auditor (s) have been rectified. A date for stage 2 will then be agreed. (within 60 days from this audit date)"]
[3,"Not Recommend proceeding without a further stage 1 Audit due to the severity of the concerns raised by the audit team"]
["For Behalf of TNV ",null,null,"For and on behalf of the Client"]
[]
[]
[]
[]
["Auditor:","Giuseppe Izzo",null,"Name:",{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
["Date:","2025-03-28",null,"Date:","2025-03-28"]
[]
[]
["Review of Stage-01 Audit Report (To be Filled by TNV Only)"]
["Sl.","Particular",null,"Confirming","Comment (If Any)"]
[1,"Does the auditor verified all the necessary information which gives confidence for proceeding to stage-2 audit?",null,"Yes"]
[2,"Does the audit plan covered all the functional units & processes?",null,"Yes"]
[3,"Does the Statutory & Regulatory Requirements are properly addressed?",null,"Yes"]
[4,"Any changes required in Stage-2 audit plan?",null,"No"]
[5,"Any addition of man-days required for stage-2 audit?",null,"No"]
["Reviewed By:",null,null,"Nitin Tripathi"]
["Date:"]
[]
[]
["TNV-F-014-I Stage 1 ISMS",null,"Issue 01","Issue Dt: 01st July 2017","Rev 01","Revision Dt: 01 May 2023"]

{"sheet":"TNV-F-008 (2)","index":12,"n_rows":38,"n_cols":17,"rows_kept":38,"cut":false,"hidden":false,"merged":[[4,1,4,2],[4,3,4,13],[0,0,0,13],[1,0,1,13],[2,0,2,13],[3,1,3,2],[3,3,3,13],[11,1,11,3],[11,4,11,7],[11,8,11,10],[11,11,11,13],[5,1,5,2],[5,3,5,13],[6,1,6,2],[6,3,6,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[9,1,9,2],[9,3,9,13],[10,0,10,13],[12,1,12,3],[12,4,12,7],[12,8,12,10],[12,11,12,13],[13,1,13,3],[13,4,13,7],[13,8,13,10],[13,11,13,13],[19,0,19,13],[14,1,14,3],[14,4,14,7],[14,8,14,10],[14,11,14,13],[15,1,15,3],[15,4,15,7],[15,8,15,10],[15,11,15,13],[16,0,16,13],[17,1,17,4],[17,5,17,13],[18,1,18,4],[20,1,20,11],[20,12,20,13],[21,1,21,11],[21,12,21,13],[22,1,22,11],[22,12,22,13],[23,1,23,11],[23,12,23,13],[24,1,24,11],[24,12,24,13],[25,1,25,11],[25,12,25,13],[26,1,26,11],[26,12,26,13],[27,1,27,11],[27,12,27,13],[28,0,28,1],[28,2,28,5],[28,6,28,9],[28,10,28,13],[29,0,32,1],[29,2,32,5],[29,6,32,9],[29,10,32,13],[33,0,33,1],[33,2,33,5],[33,6,33,9],[33,10,33,13],[37,0,37,3],[37,4,37,5],[37,6,37,8],[37,9,37,10],[37,11,37,13]]}
["Audit Intimation- Stage 2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes"]
["To,\nAll the concern,\n\nThis is to inform that proposed constitution of the audit team and client organization is disclosed to all related parties for their disclosure of the interest or any conflict of interest.",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No"]
["1. Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Contact Details",null,{"$f":"'TNV-F-008'!D8","v":"03 10 45 40 01"}]
[5,"Standards",null,{"$f":"'TNV-F-008'!D9","v":0}]
[6,"Scope of the Audit",null,{"$f":"'TNV-F-008'!D10","v":0}]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,{"$f":"'TNV-F-002'!B80:D80","v":0},null,null,"Lead Auditor"]
[2,{"$f":"'TNV-F-002'!B81:D81","v":0},null,null,"Auditor"]
[3,{"$f":"'TNV-F-002'!B82:D82","v":0},null,null,"Technical Expert"]
[4,{"$f":"'TNV-F-002'!B83","v":0},null,null,"Other (Observer / Translator etc.)"]
["3. Proposed Audit Schedule:"]
["Sl.","Subject",null,null,null,"Audit Date"]
[1,"Stage-2 Audit "]
["4. Terms of reference for acceptance by Audit Team & Client:"]
["Sl.","Comment",null,null,null,null,null,null,null,null,null,null,"Acceptance"]
[1,"I am aware of facts which should influence my independence and objectiveness against the auditee. Information and data, which I will collect during audit conduction, neither I will provide to third parties nor I will use them for my benefits."]
[2,"As a part of Audit Team, I do hereby confirm & declare that I have no conflict of interest in accepting the assignment of the said company."]
[3,"As a part of Audit Team, I do hereby confirm that I have no vested interest in the said company and I am eligible and fit and proper person to be part of the audit team for said audit."]
[4,"I do hereby declare, and I reconfirm and abide with the confidentiality agreement as signed initially and I reassure that I shall not disclose any information of the client obtained during the audit except to the CAB unless required by under the law of land."]
[5,"I hereby confirm my agreement of appointment for the position as Lead Auditor/Auditor/Technical Expert for conducting of stated audit for the tentative date of audit for the said client and I shall ensure my availability for the said audit for stage-1 and stage-2"]
[6,"Kindly confirm acceptance of the schedule and auditor confirmation of not received would he considered that schedule and auditors are acceptable."]
[7,"Terms to accept the terms and to declare the impartiality if any, in case of no response received in 2 working days, same shall be treated as accepted and no partiality exists."]
["Acceptance by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:"]
[]
[]
["TNV-F-008- Client Intimation",null,null,null,"Issue 02",null,"Issue Dt: 15 Sep 2018",null,null,"Rev 01",null,"Revision Dt: 25 Oct 2019"]

{"sheet":"TNV-F-005 St2","index":13,"n_rows":65,"n_cols":39,"rows_kept":65,"cut":false,"hidden":false,"merged":[[21,11,21,13],[22,1,22,3],[22,4,22,7],[22,8,22,10],[22,11,22,13],[29,0,29,1],[29,2,29,13],[36,2,36,3],[30,0,30,13],[24,8,24,10],[32,0,32,1],[26,1,26,4],[26,5,26,13],[27,1,27,4],[25,0,25,13],[24,11,24,13],[21,1,21,3],[21,4,21,7],[21,8,21,10],[24,4,24,7],[28,0,28,13],[32,6,32,11],[32,12,32,13],[32,2,32,3],[6,1,6,2],[6,3,6,13],[16,0,16,13],[17,1,17,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[18,1,18,13],[9,1,9,2],[9,3,9,13],[10,1,10,13],[11,1,11,2],[11,3,11,13],[12,1,12,2],[12,3,12,13],[13,1,13,2],[13,3,13,13],[14,1,14,2],[14,3,14,13],[15,1,15,2],[15,3,15,13],[64,0,64,3],[64,4,64,5],[64,6,64,8],[64,9,64,10],[64,11,64,13],[19,0,19,13],[20,1,20,3],[20,4,20,7],[20,8,20,10],[20,11,20,13],[23,1,23,3],[23,4,23,7],[23,8,23,10],[23,11,23,13],[24,1,24,3],[51,0,51,1],[51,2,51,5],[51,6,51,9],[51,10,51,13],[46,0,46,1],[46,2,46,5],[46,6,46,9],[46,10,46,13],[47,0,50,1],[0,0,0,13],[1,0,1,13],[2,1,2,2],[2,3,2,13],[3,1,3,2],[3,3,3,13],[4,1,4,2],[4,3,4,13],[5,1,5,2],[5,3,5,13],[32,4,32,5],[31,0,31,13],[53,0,54,13],[47,2,50,5],[47,6,50,9],[47,10,50,13],[33,0,33,1],[33,2,33,3],[33,4,33,5],[42,6,42,11],[33,6,33,11],[41,6,41,11],[34,2,34,3],[40,2,40,3],[43,6,43,11],[34,6,34,11],[35,6,35,11],[36,6,36,11],[39,6,39,11],[40,6,40,11],[44,6,44,11],[45,6,45,11],[35,2,35,3],[42,2,42,3],[61,0,61,6],[61,7,61,13],[55,1,55,5],[55,7,55,13],[56,1,56,5],[57,1,57,5],[58,1,58,5],[60,1,60,5],[56,7,56,13],[57,7,57,13],[58,7,58,13],[60,7,60,13],[59,1,59,5],[59,7,59,13]]}
["Audit Plan St-2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"On-Site Audit"]
["1. Client Information:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Remote Audit"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5","v":"03 10 45 40 01"}]
[5,"Standards",null,{"$f":"'TNV-F-008'!D9","v":0}]
[6,"Scope of the Audit",null,{"$f":"'TNV-F-002'!C14","v":0}]
[7,"Type of Audit",null,"On-Site Audit"]
[8,"In Case of Remote Audit, Please provide:"]
[8.1,"ICT Tool Name (Zoom, WebEx, Microsoft Teams, Google Meet etc.)"]
[8.1999999999999993,"Suitability of Audit Timing (IST, GMT or Local Time)"]
[8.3000000000000007,"Internet Connectivity Status"]
[8.4,"Documents Sharing Platform"]
[8.5,"Infrastruction Availability (Notebook, PC, Headphones etc.)"]
["Audit Objectives for Stage-2: "]
[null,"The purpose of the stage two audit is to evaluate the effective implementation of the client’s management system. As a minimum you must audit the following and your report must show clear audit evidence against these requirements. Audit evidence is documents and records that you have seen, staff/employees that you have spoken to, part numbers or project numbers that you looked at, equipment serial numbers, activities that you observed, or any other evidence that you verify during the audit."]
[null,"a) Context of organization and scope, information and evidence about conformity to all requirements of the applicable QMS, EMS, OHSMS standard or other normative document;\nb)  performance monitoring, measuring, reporting and reviewing against key QMS, EMS, OHSMS performance objectives and targets (consistent with the expectations in the applicable QMS, EMS, OHSMS standard or other normative document);\nc) the client's management system, Leadership & commitment of top management, performance as regards  compliance obligation;\nd) operational control of the client's processes, Risk and opportunities for improvements\ne) internal auditing and management review;\nf) management responsibility for the client's policies and interested parties;\ng) Links between the normative requirements, policy-Direction of Organization, performance objectives and targets (consistent with the expectations in the applicable Environmental management system standard or other normative document), responsibilities, competence of personnel, operations, procedures, QMS, EMS, OHSMS Performance, Characteristics of QMS, EMS, OHSMS and related data analysis."]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,{"$f":"'TNV-F-002'!B80:D80","v":0},null,null,"Lead Auditor"]
[2,{"$f":"'TNV-F-002'!B81:D81","v":0},null,null,"Auditor"]
[3,{"$f":"'TNV-F-002'!B82:D82","v":0},null,null,"Technical Expert"]
[4,{"$f":"'TNV-F-002'!B83:D83","v":0},null,null,"Other (Observer / Translator etc.)"]
["3. Proposed Audit Schedule:"]
["Sl.","Subject",null,null,null,"Audit Date"]
[1,"Stage-2 Audit ",null,null,null,{"$f":"'TNV-F-008 (2)'!F19:N19","v":"00:00:00"}]
["Clauses to be covered under stage-2 Audit:"]
["ISO 27001:2022",null,"4.1, 4.2, 4.3, 4.4, 5.1, 5.2, 5.3, 6.1, 6.2, 7.1, 7.2, 7.3, 7.4, 7.5, 8.1, 8.2, 8.3, 9.1 9.2, 9.3, 10.1, 10.2, Annex-A"]
["*Note: All clauses of audited standard shall be audited by audit team. Audit Team may identify clauses for enhanced focus during audit."]
["4. Audit Plan for Stage-2"]
["Date & Time (From-To)",null,"Clause",null,"Audited By",null,"Process",null,null,null,null,null,"Process Owner"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Prepared by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:"]
["Audit Plan Approval from TNV:"]
[]
["Sl.","Particular",null,null,null,null,"Yes","Comment (if Any)"]
[1,"Is the audit plan, planned as per allocated man-days?"]
[2,"Is the audit plan addressed the requirement of site/temporary site, if applicable?"]
[3,"Is the audit plan needs to cover remote audit requirements?"]
[4,"Is the audit plan for stage-2 audit required addition in man-days, if applicable?"]
[5,"Any other product/processes need to be verified?"]
["Audit Plan approved by:"]
[]
[]
["TNV-F-005- Audit Plan",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 03",null,"Revision Dt: 01 May 2023"]

{"sheet":"TNV-F-015 ABMS","index":14,"n_rows":177,"n_cols":13,"rows_kept":177,"cut":false,"hidden":true,"merged":[[13,0,14,0],[13,1,14,2],[13,3,13,4],[13,5,13,7],[13,8,13,9],[13,10,13,13],[14,3,14,4],[14,5,14,7],[14,8,14,9],[14,10,14,13],[163,1,163,13],[164,1,164,13],[165,0,165,13],[166,0,173,0],[176,0,176,3],[176,4,176,5],[176,6,176,8],[176,9,176,10],[176,11,176,13],[171,1,171,6],[171,7,171,13],[172,2,172,6],[172,8,172,13],[173,2,173,6],[173,8,173,13],[166,1,166,6],[166,7,166,13],[167,1,170,6],[167,7,170,13],[154,0,154,10],[154,11,154,13],[156,0,156,10],[156,11,156,13],[151,0,151,10],[151,11,151,13],[152,0,152,10],[152,11,152,13],[153,0,153,10],[153,11,153,13],[155,0,155,13],[157,0,157,10],[157,11,157,13],[158,0,158,10],[158,11,158,13],[159,0,159,10],[159,11,159,13],[160,0,160,13],[161,1,161,13],[162,1,162,13],[147,11,147,13],[148,11,148,13],[149,0,149,13],[150,0,150,10],[150,11,150,13],[145,0,145,10],[146,0,146,10],[147,0,147,10],[148,0,148,10],[141,0,141,13],[143,11,143,13],[144,11,144,13],[145,11,145,13],[146,11,146,13],[139,1,139,13],[140,0,140,13],[142,0,142,10],[142,11,142,13],[143,0,143,10],[144,0,144,10],[133,0,133,13],[134,1,134,13],[135,1,135,13],[136,1,136,13],[137,1,137,13],[138,1,138,13],[131,1,131,2],[131,3,131,11],[131,12,131,13],[132,1,132,2],[132,3,132,11],[132,12,132,13],[129,1,129,2],[129,3,129,11],[129,12,129,13],[130,1,130,2],[130,3,130,11],[130,12,130,13],[127,1,127,2],[127,3,127,11],[127,12,127,13],[128,1,128,2],[128,3,128,11],[128,12,128,13],[125,1,125,2],[125,3,125,11],[125,12,125,13],[126,1,126,2],[126,3,126,11],[126,12,126,13],[123,12,123,13],[124,12,124,13],[123,1,123,2],[123,3,123,11],[124,1,124,2],[124,3,124,11],[121,12,121,13],[122,12,122,13],[121,1,121,2],[121,3,121,11],[122,1,122,2],[122,3,122,11],[119,12,119,13],[120,12,120,13],[119,1,119,2],[119,3,119,11],[120,1,120,2],[120,3,120,11],[117,12,117,13],[118,12,118,13],[117,1,117,2],[117,3,117,11],[118,1,118,2],[118,3,118,11],[115,2,115,6],[115,7,115,11],[115,12,115,13],[116,0,116,13],[114,2,114,6],[114,7,114,11],[114,12,114,13],[113,1,113,13],[111,2,111,6],[111,7,111,11],[111,12,111,13],[112,2,112,6],[112,7,112,11],[112,12,112,13],[110,2,110,6],[110,7,110,11],[110,12,110,13],[88,1,88,13],[97,1,97,13],[108,1,108,13],[109,2,109,6],[109,7,109,11],[109,12,109,13],[106,2,106,6],[106,7,106,11],[106,12,106,13],[107,2,107,6],[107,7,107,11],[107,12,107,13],[104,2,104,6],[104,7,104,11],[104,12,104,13],[105,2,105,6],[105,7,105,11],[105,12,105,13],[102,2,102,6],[102,7,102,11],[102,12,102,13],[99,2,99,6],[99,7,99,11],[99,12,99,13],[96,2,96,6],[96,7,96,11],[96,12,96,13],[103,2,103,6],[103,7,103,11],[103,12,103,13],[100,2,100,6],[100,7,100,11],[100,12,100,13],[101,2,101,6],[101,7,101,11],[101,12,101,13],[95,2,95,6],[95,7,95,11],[95,12,95,13],[93,2,93,6],[93,7,93,11],[93,12,93,13],[98,2,98,6],[98,7,98,11],[98,12,98,13],[94,2,94,6],[94,7,94,11],[94,12,94,13],[83,1,83,13],[86,1,86,13],[91,2,91,6],[91,7,91,11],[91,12,91,13],[87,2,87,6],[87,7,87,11],[87,12,87,13],[85,2,85,6],[85,7,85,11],[85,12,85,13],[84,2,84,6],[84,7,84,11],[84,12,84,13],[92,2,92,6],[92,7,92,11],[92,12,92,13],[89,2,89,6],[89,7,89,11],[89,12,89,13],[90,2,90,6],[90,7,90,11],[90,12,90,13],[80,2,80,6],[80,7,80,11],[80,12,80,13],[81,2,81,6],[81,7,81,11],[81,12,81,13],[82,2,82,6],[82,7,82,11],[82,12,82,13],[77,2,77,6],[77,7,77,11],[77,12,77,13],[78,2,78,6],[78,7,78,11],[78,12,78,13],[79,1,79,13],[76,2,76,6],[76,7,76,11],[76,12,76,13],[74,1,74,13],[75,1,75,13],[69,2,69,6],[69,7,69,11],[69,12,69,13],[70,2,70,6],[70,7,70,11],[70,12,70,13],[65,0,65,13],[66,0,66,13],[67,2,67,6],[67,7,67,11],[67,12,67,13],[68,1,68,13],[73,2,73,6],[73,7,73,11],[73,12,73,13],[71,2,71,6],[71,7,71,11],[71,12,71,13],[72,2,72,6],[72,7,72,11],[72,12,72,13],[60,1,60,9],[60,10,60,13],[61,1,61,9],[62,1,62,9],[63,1,63,9],[64,1,64,9],[61,10,61,13],[62,10,62,13],[63,10,63,13],[64,10,64,13],[58,1,58,3],[58,4,58,6],[58,7,58,9],[58,10,58,11],[58,12,58,13],[59,0,59,13],[56,1,56,3],[56,4,56,6],[56,7,56,9],[56,10,56,11],[56,12,56,13],[57,1,57,3],[57,4,57,6],[57,7,57,9],[57,10,57,11],[57,12,57,13],[54,1,54,3],[54,4,54,6],[54,7,54,9],[54,10,54,11],[54,12,54,13],[55,1,55,3],[55,4,55,6],[55,7,55,9],[55,10,55,11],[55,12,55,13],[52,1,52,3],[52,4,52,6],[52,7,52,9],[52,10,52,11],[52,12,52,13],[53,1,53,3],[53,4,53,6],[53,7,53,9],[53,10,53,11],[53,12,53,13],[50,1,50,3],[50,4,50,6],[50,7,50,9],[50,10,50,11],[50,12,50,13],[51,1,51,3],[51,4,51,6],[51,7,51,9],[51,10,51,11],[51,12,51,13],[48,1,48,3],[48,4,48,6],[48,7,48,9],[48,10,48,11],[48,12,48,13],[49,1,49,3],[49,4,49,6],[49,7,49,9],[49,10,49,11],[49,12,49,13],[45,1,45,2],[45,3,45,11],[45,12,45,13],[46,0,46,13],[47,0,47,9],[47,10,47,13],[43,1,43,2],[43,3,43,11],[43,12,43,13],[44,1,44,2],[44,3,44,11],[44,12,44,13],[41,1,41,2],[41,3,41,11],[41,12,41,13],[42,1,42,2],[42,3,42,11],[42,12,42,13],[38,12,38,13],[39,3,39,11],[39,12,39,13],[40,1,40,2],[40,3,40,11],[40,12,40,13],[35,1,35,2],[35,3,35,11],[35,12,35,13],[36,0,39,0],[36,1,39,2],[36,3,36,11],[36,12,36,13],[37,3,37,11],[37,12,37,13],[38,3,38,11],[33,1,33,2],[33,3,33,11],[33,12,33,13],[34,1,34,2],[34,3,34,11],[34,12,34,13],[31,1,31,2],[31,3,31,11],[31,12,31,13],[32,1,32,2],[32,3,32,11],[32,12,32,13],[29,1,29,2],[29,3,29,11],[29,12,29,13],[30,1,30,2],[30,3,30,11],[30,12,30,13],[27,1,27,2],[27,3,27,11],[27,12,27,13],[28,1,28,2],[28,3,28,11],[28,12,28,13],[25,1,25,2],[25,3,25,11],[25,12,25,13],[26,1,26,2],[26,3,26,11],[26,12,26,13],[23,0,24,0],[23,1,24,2],[23,3,23,11],[23,12,23,13],[24,3,24,11],[24,12,24,13],[21,1,21,2],[21,3,21,11],[21,12,21,13],[22,1,22,2],[22,3,22,11],[22,12,22,13],[19,0,19,13],[20,1,20,2],[20,3,20,11],[20,12,20,13],[17,1,17,2],[17,3,17,13],[18,1,18,2],[18,3,18,13],[15,1,15,2],[15,3,15,13],[16,1,16,2],[16,3,16,6],[16,7,16,9],[16,10,16,13],[10,1,10,2],[10,3,10,13],[11,1,11,2],[11,3,11,13],[12,1,12,2],[12,3,12,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[9,1,9,2],[9,3,9,13],[4,1,4,2],[4,3,4,13],[5,1,5,2],[5,3,5,13],[6,1,6,2],[6,3,6,13],[0,0,0,13],[1,0,1,13],[2,1,2,2],[2,3,2,13],[3,1,3,2],[3,3,3,13]]}
["ABMS ISO 37001:2016 STAGE-2 AUDIT REPORT"]
["Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-014 ABMS'!D5:N5","v":"HIGH JACK"}]
[3,"Address of the Client",null,{"$f":"'TNV-F-014 ABMS'!D6:N6","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Sita Address (If Any)",null,{"$f":"'TNV-F-014 ABMS'!D7:N7","v":0}]
[5,"No. of Employees",null,{"$f":"'TNV-F-014 ABMS'!D8:N8","v":5}]
[6,"Email","Email",{"$f":"'TNV-F-014 ABMS'!D9:N9","v":"contact@high-jack.fr"}]
[7,"Contact Person",null,{"$f":"'TNV-F-014 ABMS'!D10:N10","v":"Adrien Jannel"}]
[8,"Phone/ Mobile",null,{"$f":"'TNV-F-014 ABMS'!D11:N11","v":"03 10 45 40 01"}]
[9,"Scope",null,{"$f":"'TNV-F-014 ABMS'!D12:N12","v":0}]
[10,"Technical Area",null,{"$f":"'TNV-F-014 ABMS'!D14","v":0}]
[11,"Audit Team",null,"Lead Auditor:",null,{"$f":"'TNV-F-002'!B80","v":0},null,null,"Auditor:",null,{"$f":"'TNV-F-002'!B81","v":0}]
[null,null,null,"Technical Expert:",null,{"$f":"'TNV-F-002'!B82","v":0},null,null,"Observor:",null,{"$f":"'TNV-F-002'!B83","v":0}]
[12,"Audit Man-days",null,{"$f":"'TNV-F-002'!F77","v":0}]
[13,"Stage of Audit",null,"Stage-2 Audit",null,null,null,"Audit Date:",null,null,{"$f":"'TNV-F-008 (2)'!F19","v":"00:00:00"}]
[14,"Brief about the organization",null,{"$f":"'TNV-F-014 ABMS'!D19:N19","v":"ABC PVT LTD situated at lucknow doing business of manufacturing."}]
[15,"Audit Objective",null,"The purpose of the stage two audit is to evaluate the effective implementation of the client’s management system. As a minimum you must audit the following and your report must show clear audit evidence against these requirements. Audit evidence is documents and records that you have seen, staff/employees that you have spoken to, part numbers or project numbers that you looked at, equipment serial numbers, activities that you observed, or any other evidence that you verify during the audit. \na) Information and evidence about conformity to all requirements of the applicable management system standard or other normative document;\nb) Performance monitoring, measuring, reporting and reviewing against key performance objectives and targets (consistent with the expectations in the applicable Anti-bribery management systems standard  or other normative document);\nc) The client's management system and performance as regards legal compliance;\nd) operational control of the client's processes;\ne) Internal auditing and management review;\nf) management responsibility for the client's policies;\ng) Links between the normative requirements, policy, performance objectives and targets (consistent with the expectations in the applicable Anti-bribery management systems standard or other normative document), any applicable legal requirements, responsibilities, competence of personnel, operations, procedures, performance data and internal audit findings and conclusions.\nh) Leadership and involvement in the management system Implementation\ni) Risk-based thinking\nj) Ensure the reflection of the needs of all relevant interested parties \nk) Opportunities for improvements\nl)  For each process audited the notes under the diagram must show that you took a process approach to the audit."]
["Guidance Note for Opening Meeting Agenda:"]
["Sl.","Topics",null,"Particular",null,null,null,null,null,null,null,null,"Completed"]
[1,"Thanks",null,"Give an expression of thanks to the auditee for Choosing TNV.",null,null,null,null,null,null,null,null," "]
[2,"Attendance",null,"Request attendees to record their attendance ",null,null,null,null,null,null,null,null," "]
[3,"Introduction",null,"Remind timeline to close opening meeting in 15/30 minutes.",null,null,null,null,null,null,null,null," "]
[null,null,null,"Request to give brief introduction with brief roles (participants, observers, guides & Translators)",null,null,null,null,null,null,null,null," "]
[4,"Scope/Summary",null,"Confirmation of the audit objectives (Assessment for ISO 37001:2016), scope and criteria; ",null,null,null,null,null,null,null,null," "]
[5,"Changes",null,"Changes in documents/ Fact to the Application",null,null,null,null,null,null,null,null," "]
[6,"Plan",null,"Confirmation of the audit plan and other relevant arrangements with the auditee, such as the date and time for the closing meeting, any interim meetings between the audit team and the auditee’s management, and any late changes;",null,null,null,null,null,null,null,null," "]
[7,"Method",null,"Methods of Audit: Review of Documents & Records, Interview, Physical evidence.",null,null,null,null,null,null,null,null," "]
[8,"Sampling",null,"Advise auditee that the audit is sample basis and findings will be based on a sample of the information selected;",null,null,null,null,null,null,null,null," "]
[9,"Communication Channel",null,"Confirmation of formal communication channels between the audit team and the auditee; identify the facilitators.",null,null,null,null,null,null,null,null," "]
[10,"Language",null,"Confirmation of the language to be used during the audit;",null,null,null,null,null,null,null,null," "]
[11,"Development",null,"Confirmation that, during the audit, the auditee will be kept informed of audit progress;",null,null,null,null,null,null,null,null," "]
[12,"Resource",null,"Confirmation that the resources and facilities needed by the audit team are available; like Guide, Interpreters, Facility etc.",null,null,null,null,null,null,null,null," "]
[13,"Confidentiality",null,"Confirmation of matters relating to confidentiality and information security;",null,null,null,null,null,null,null,null," "]
[14,"Safeguard",null,"Confirmation of relevant health and safety, emergency and security procedures for the audit team;",null,null,null,null,null,null,null,null," "]
[15,"Reporting of Findings",null,"NC may be against a clause of the standard i.e. ISO 37001, it’s not against any person or department.",null,null,null,null,null,null,null,null," "]
[null,null,null,"Method of reporting audit findings & grading (Major, Minor & Observation) ",null,null,null,null,null,null,null,null," "]
[null,null,null,"Time for corrective action (Minor/15 Days, Major/60 Days)",null,null,null,null,null,null,null,null," "]
[null,null,null,"Report time: Finding will be discussed at closing meeting and report will be given within 2 working days.",null,null,null,null,null,null,null,null," "]
[16,"Termination",null,"Information about conditions under which the audit may be terminated;",null,null,null,null,null,null,null,null," "]
[17,"Audit Declaration",null,"Verify that all members of the organization know what is happening;",null,null,null,null,null,null,null,null," "]
[18,"Union/Problem",null,"As certain union relations or any potential problems;",null,null,null,null,null,null,null,null," "]
[19,"Confidentiality",null,"Remind the auditee that the audit is confidential",null,null,null,null,null,null,null,null," "]
[20,"Closing Meeting",null,"Timing of closing meeting; Participation of the Top Management & where appropriate, those responsible for the functions or processes which have been audited in the closing meeting.",null,null,null,null,null,null,null,null," "]
[21,"Appeals / Complaint",null,"Information about any system for feedback from the auditee on the findings or conclusions of the audit, including complaints or appeals",null,null,null,null,null,null,null,null," "]
["Recording of Attendance:"]
["Audit Attendance Sheet",null,null,null,null,null,null,null,null,null,"Record Attendance (by LA)"]
["Sl.","Name",null,null,"Position",null,null,"Department",null,null,"Opening",null,"Closing"]
[1]
[2]
[3]
[4]
[5]
[6]
[7]
[8]
[9]
[10]
["Verification of the Plan and Last Audit "]
["Sl.","Particular",null,null,null,null,null,null,null,null,"Remark"]
[1,"Any deviation from the audit plan & their reasons"]
[2,"Any significant issues impacting on its audit plan"]
[3,"Significant changes that affect the management system of the client after audit took place"]
[4,"Any unresolved issue"]
["Audit Report:"]
["VERIFICATION OF RECORDS AS PER STD REQUIREMENT\n(C- Conformity, NC-Non Conformity, O-Observation)"]
["Cl. No.","Requirements ","Reference",null,null,null,null,"Records & Evidences",null,null,null,null,"C/O/NC"]
[4,"Context of the organization"]
[4.0999999999999996,"Understanding the organization and its context","Reference How has the organization determined external and internal issues that are relevant to its purpose and that affect its ability to achieve the objectives of its anti-bribery management system?\nAre issues the size, structure and delegated decision-making authority of the organization; operates or anticipates operating; the nature, scale and complexity of the organization’s activities and operations; the organization’s business model; organization has control and entities which exercise control over the organization; the organization’s business associates; the nature and extent of interactions with public officials &\napplicable statutory, regulatory, contractual and professional obligations and duties?"]
[4.2,"Understanding the needs and expectations of stakeholders","Are monitor and review the stakeholders that are relevant to the anti-bribery management system; the relevant requirements of these stakeholders?\nIs identifying the requirements of stakeholders, an organization can distinguish between mandatory requirements and the non-mandatory expectations of, and voluntary commitments to, stakeholders?"]
[4.3,"Determining the scope of the  anti-bribery management system","Is the scope of the anti-bribery management system clear and documented? \nHave the external and internal issues and the results of the bribery risk assessment?"]
[4.4000000000000004,"Anti-bribery management system ","Have  the established, documented, implemented, maintained and continually review and, where necessary, improve an anti-bribery management system and its including the processes needed and their interactions, in accordance with the requirements of this document?\nDoes anti-bribery management system contain measures designed to identify and evaluate the risk of, and to prevent, detect and respond to, bribery?\nDoes it is not possible to completely eliminate the risk of bribery, and no anti-bribery management system will be capable of preventing and detecting all bribery?\nAre  anti-bribery management system reasonable and proportionate, taking into account the factors?"]
[4.5,"Bribery risk assessment","Does organization undertake regular bribery risk assessment?\nAre identify the bribery risks the organization might reasonably anticipate, given the factors?\nIs analyse, assess and prioritize the identified bribery risks?\n Are evaluating the suitability and effectiveness of the organization’s existing controls to mitigate the assessed bribery risks?\n Have organization established criteria for evaluating its level of bribery risk, and take into account the organization’s policies and objectives?\nAre there bribery risk assessment reviewed on a regular basis so that changes and new information can be properly assessed based on timing and frequency defined by the organization; and in the event of a significant change to the structure or activities of the organization?\nAre there established bribery risk assessment procedures?"]
[5,"Leadership"]
[5.0999999999999996,"Leadership and Commitment"]
["5.1.1","Governing body","Does top management demonstrate leadership and commitment with respect to the anti-bribery management system & approving the organization’s anti-bribery policy, strategy and anti-bribery policy are aligned at planned intervals, receiving and reviewing information about the content and operation of the organization’s anti-bribery management system?\nHave requiring that adequate and appropriate resources needed for effective operation of the antibribery management system are allocated and assigned?\nAre exercising reasonable oversight over the implementation of the organization’s anti-bribery management system by top management and its effectiveness. These activities shall be carried out by top management if the organization does not have a governing body(eg. board of directors or supervisory board)?"]
["5.1.2","Top management","Have top management made a statement to staff and in the public domain to demonstrate its support for the anti-bribery policy and the ABMS?\nIs there encouraging the use of reporting procedures for suspected and actual bribery and ensuring that no personnel suffer retaliation, discrimination or disciplinary action for reports made in good faith, or on the basis of a reasonable belief of violation or suspected violation of the organization’s anti-bribery policy, or for refusing to engage in bribery?"]
[5.2,"Anti-bribery policy","Is there an established ABMS policy that is appropriate, maintained, communicated, and documented? \nIs top management establish, maintain and review an anti-bribery policy that prohibits bribery, requires compliance with anti-bribery laws that are applicable to the organization; provides a framework for setting, reviewing and achieving anti-bribery objectives includes a commitment to satisfy anti-bribery management system requirements, encourages raising concerns in good faith, or on the basis of a reasonable belief in confidence, without fear of reprisal includes a commitment to continual improvement of the anti-bribery management system; & explains the authority and independence of the anti-bribery compliance function and  consequences of not complying with the anti-bribery policy.\nIs anti-bribery policy available as documented information; and communicated in appropriate languages within the organization and to business associates who pose more than a low risk of bribery & available to relevant stakeholders, as appropriate."]
[5.3,"Organizational roles, responsibilities and authorities"]
["5.3.1","Roles and responsibilities","Is responsibilities and authorities for relevant roles are assigned and communicated within the organization?\n Is top management assign the responsibility and authority for managers at every level and responsible for requiring that the anti-bribery management system requirements are applied and complied with in their department or function?\nAre the governing body (if any), top management and all other personnel responsible for understanding, complying with and applying the anti-bribery management system requirements, as they relate to their role in the organization?"]
["5.3.2","Anti-bribery compliance function","Have top management assign to an anti-bribery compliance function the responsibility and authority for overseeing the design and implementation by the organization of the anti-bribery management system; Are  providing advice and guidance to personnel on the anti-bribery management system and issues relating to bribery, If the business comprises of more than one independently managed component organization, are there competent managers appointed in each component organization to oversee compliance with the ABMS? \nIs there a competent Compliance Manager in place to implement the ABMS, with access to top management, and provide advice and guidance to staff relating to bribery and can assign some or all of the anti-bribery compliance function to persons external to the organization? \nIf it does, top management ensures that specific personnel have responsibility for and authority over, those externally assigned parts of the function?"]
["5.3.3","Delegated decision-making","Does top management delegates to personnel the authority for the making of decisions in relation to which there is more than a low risk of bribery?\nIs organization established and maintained a decision-making process or set of controls which requires that the decision process and the level of authority of the decision-maker(s) are appropriate and free of actual or potential conflicts of interest?\nDoes top management ensure that these processes are reviewed periodically as part of its role and responsibility for implementation of, and compliance with, the anti-bribery management system outlined in 5.3.1.?\nAre delegation of decision-making does not exempt top management or the governing body (if any) of their duties and responsibilities as described in 5.1.1, 5.1.2 and 5.3.1, nor does it necessarily transfer to the delegated personnel potential legal responsibilities?"]
[6,"Planning"]
[6.1,"Actions to address risks and opportunities","Have planning for the anti-bribery management system, the risks identified and opportunities for improvement give reasonable assurance that the anti-bribery management system can achieve its objectives?\nAre preventing, or reduce, undesired effects relevant to the anti-bribery policy and objectives?\nAre monitoring the effectiveness of the anti-bribery management system and achieve continual improvement?\nIs organization has plan for actions to address these bribery risks and opportunities for improvement and how to integrate and implement these actions into its anti-bribery management system processes; — evaluate the effectiveness of these actions?"]
[6.2,"Anti-bribery objectives and planning to achieve them","Does anti-bribery management system objectives consistent with the anti-bribery policy, be measurable (if practicable),take into account applicable factors referred to in 4.1, the requirements referred to in 4.2 and the bribery risks identified in 4.5,be achievable, be monitored, be communicated in accordance with 7.4, g) be updated as appropriate?\nDoes organization retain documented information on the anti-bribery management system objectives? \nWhen planning how to achieve its anti-bribery management system objectives?"]
[7,"Support"]
[7.1,"Resources","Have resources (people, funding, equipment, materials, training etc.) been provided to implement the ABMS?"]
[7.2,"Competence"]
["7.2.1","General","Does organization determine the necessary competence of person doing work under its control that affects its anti bribery performance and ensure competent person on the basis of appropriate education, training, or experience?\nWhere applicable, take actions to acquire and maintain the necessary competence, and evaluate the effectiveness of the actions taken and retain appropriate documented information as evidence of competence."]
["7.2.2","Employment process","Are there established anti-bribery employment procedures?\nHave organization implement conditions of employment require personnel to comply with the anti-bribery policy and antibribery management system, and give the organization the right to discipline personnel in the event of non-compliance, within a reasonable period of their employment commencing, personnel receive a copy of, or are provided with access to, the anti-bribery policy and training in relation to that policy? \nAre there established disciplinary action procedures?\nAre there established Bribery Risk Management procedures?"]
[7.3,"Awareness and training","Are there established training procedures?\nNote: The awareness and training requirements for business associates can be communicated through contractual or similar requirements, and be implemented by the organization, the business associate or by other parties appointed for that purpose."]
[7.4,"Communication","Does organization determine the internal and external communications relevant to the antibribery management system?\nIs anti-bribery policy made available to all the personnel and business associates, be communicated directly to both personnel and business associates who pose more than a low risk of bribery?\nAre published through the organization’s internal and external communication channels, as appropriate?"]
[7.5,"Documented information"]
["7.5.1","General","Documentation information is needed as per the document and effectiveness and check the documentation needs as per the size, activity, processes and their interations, complexities of processes and competency of the person."]
["7.5.2","Creating and updating","Appropriate identification& description, format &media, review & approval for adequacy"]
["7.5.3","Control of documented information","Information is available and suitable for use, adequately protected\nDistribution, access, retrieval & use storage and preservation, including preservation of legibility, control of changes Retention and disposition."]
[8,"Operation"]
[8.1,"Operational planning and control","Does organization plan, implement, review and control the processes needed to meet requirements of the anti-bribery management system, and to implement the actions determined in 6.1?\nHas establishing criteria for the processes, implementing control of the processes in accordance with the criteria; keeping documented information to the extent necessary to have confidence that the processes have been carried out as planned?\nIs these processes include the specific controls are due diligence , financial controls, non-financial controls, business associates, anti-bribery commitments, Gifts, hospitality, donations and similar benefits, Managing inadequacy of anti-bribery controls, Raising concerns, Investigating and dealing with bribery?\n Have organization control planned changes and review the consequences of unintended changes, taking action to mitigate any adverse effects, as necessary?\nIs organization ensuring that outsourced processes controlled?\nNOTE: The core text of ISO management system standards contains a requirement in relation to outsourcing, which is not used in this document, as outsourcing providers are included within the definition of business associate."]
[8.1999999999999993,"Due diligence","Is organization conducted bribery risk assessment?\nDoes  assessed a more than low bribery risk in relation to specific categories of transactions, projects or activities, planned or on-going relationships with specific categories of business associates, specific categories of personnel in certain positions (see 7.2.2.2)?\nIs organization  assess the nature and extent of the bribery risk in relation to specific transactions, projects, activities, business associates and personnel falling within those categories?\nIs due diligence necessary to obtain sufficient information to assess the bribery risk and updated at a defined frequency, so that changes and new information can be properly taken into account?"]
[8.3000000000000007,"Financial controls","Does organization implement financial controls that manage bribery risk?"]
[8.4,"Non-financial controls","Does organization implement non-financial controls that manage bribery risk with respect to such areas as procurement, operational, sales, commercial, human resources, legal and regulatory activities?\nNote:  Any particular transaction, activity or relationship can be subject to financial as well as non-financial controls."]
[8.5,"Implementation of anti-bribery controls by controlled organizations and by business associates","Are there established anti-bribery controls procedures?\nDoes anti –bribery procedure implement the organization’s anti-bribery management system or implement their own anti-bribery controls, in each case only to the extent that is reasonable and proportionate with regard to the bribery risks faced by the controlled organizations, taking into account the bribery risk assessment conducted?\nDoes organization determine whether the business associate place anti-bribery controls which manage the relevant bribery risk?\nDoes organization require the business associate to implement antibribery controls in relation to the relevant transaction, project or activity?\nIs business associate to implement anti-bribery controls, and their factor taken into account in evaluating the bribery risk of the relationship with this business associate?"]
[8.6,"Anti-bribery commitments","Are there established anti-bribery commitments procedures?\nDoes business associates commit to preventing bribery by, on behalf of, or for the benefit of the business associate in connection with the relevant transaction, project, activity, or relationship?\nDoes organization able to terminate the relationship with the business associate in the event of bribery by, on behalf of, or for the benefit of the business associate in connection with the relevant transaction, project, activity, or relationship?\nIs factor taken into account in evaluating the bribery risk of the relationship with this business associate and the way in which the organization manages such risks?"]
[8.6999999999999993,"Gifts, hospitality, donations and similar benefits","Are there established prevent the offering, provision or acceptance of gifts, hospitality similar benefits procedures?"]
[8.8000000000000007,"Managing inadequacy of anti-bribery controls","Does due diligence conducted on a specific transaction, project, activity or relationship with a business associate establishes that the bribery risks cannot be managed by existing antibribery controls?\n\nDoes organization not wish to implement additional or enhanced anti-bribery controls or take other appropriate steps (such as changing the nature of the transaction, project, activity or relationship) to enable the organization to manage the relevant bribery risks?\n\nIs  the case of an existing transaction, project, activity or relationship, take steps appropriate to the bribery risks and the nature of the transaction, project, activity or relationship to terminate, discontinue, suspend or withdraw from it as soon as practicable?\n\n Is the case of a proposed new transaction, project, activity or relationship, postpone or decline to continue with it?"]
[8.9,"Raising concerns","Are there established Raising concerns procedures?\nHave organization ensure that all personnel are aware of the reporting procedures and are able to use them, and are aware of their rights and protections under the procedures?\nIs procedures can be the same as, or form part of, those used for the reporting of other issues of concern (e.g. safety, malpractice, wrongdoing or other serious risk)?\nDoes organization can use a business associate to manage the reporting system on its behalf?\n Are jurisdictions are prohibited by law. In these cases, the organization documents its inability to comply?"]
["8.10","Investigating and dealing with bribery","Are there established Investigating and dealing with bribery procedures?\nIs require assessment and, where appropriate, investigation of any bribery, or violation of the antibribery policy or the anti-bribery management system, which is reported, detected or reasonably suspected?\nIs require appropriate action in the event that the investigation reveals any bribery, or violation of the anti-bribery policy or the anti-bribery management system and empower and enable investigators?\nIs requiring co-operation in the investigation by relevant personnel and also require that the status and results of the investigation are reported to the anti-bribery compliance function and other compliance functions, as appropriate?\nIs require that the investigation is carried out confidentially and that the outputs of the investigation are confidential?\nAre investigations carried out by, and reported to, personnel who are not part of the role or function being investigated?\nIs organization  appoint a business associate to conduct the investigation and report the results to personnel who are not part of the role or function being investigated?"]
[9,"Performance Evaluation"]
[9.1,"Monitoring, measurement, analysis and evaluation","Does the Compliance Manager assess whether the ABMS is adequately maintained and being effectively implemented?\nDoes the Compliance Manager report through to top management at planned intervals, on the adequacy of implementation of the ABMS?\nIs there an audit process that checks for any indication of bribery, suspicion of bribery and non compliance with the ABMS?"]
[9.1999999999999993,"Internal Audit","Are audits carried out at regular planned intervals by independent staff as defined in a documented procedure?\nIs internal audit covered  bribery or suspected bribery, violation of the anti-bribery policy or anti-bribery management system requirements, failure of business associates to conform to the applicable anti-bribery requirements of the organization, weaknesses in, or opportunities for improvement to, the anti-bribery management system?\nDoes independent function or personnel established or appointed for this process and the anti-bribery compliance function (unless the scope of the audit includes an evaluation of the anti-bribery management system itself, or similar work for which the anti-bribery compliance function is responsible)?\nDoes appropriate person from a department or function other than the one being audited; and appropriate third party; or a group comprise any?\nDoes organization ensure that no auditor is auditing his or her own area of work?"]
[9.3000000000000007,"Management review","Does the top management or sub-committee review the Compliance Manager assessments and reports, audits, personnel reports and incidents/ weaknesses to the ABMS?\nIs  governing body (if any)  undertake periodic reviews of the anti-bribery management system based on information provided by top management and the anti-bribery compliance function and any other information that the governing body requests or obtains?\nDoes organization retain summary documented information as evidence of the results of governing body reviews?"]
[9.4,"Review by anti-bribery compliance function","Are anti-bribery compliance function assess on a continual basis whether the anti-bribery management system?\nIs adequate to manage effectively the bribery risks faced by the organization and effectively implemented?\nDoes anti-bribery compliance function report at planned intervals, and on an ad hoc basis, as appropriate, to the governing body (if any) and top management, or to a suitable committee of the governing body or top management, on the adequacy and implementation of the anti-bribery management system, including the results of investigations and audits?\nNOTE 1 The frequency of such reports depends on the organization’s requirements, but is recommended to be at least annually. \nNOTE 2 The organization can use a business associate to assist in the review, as long as the business associate’s observations are appropriately communicated to the anti-bribery compliance function, top management and, as appropriate, the governing body (if any)."]
[10,"Improvement"]
[10.1,"Nonconformity and corrective action","Have react promptly to the nonconformity, and as applicable take action to control and correct it, deal with the consequences, evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere, by: reviewing the nonconformity, determining the causes of the nonconformity;  determining if similar nonconformities exist, or could potentially occur; c) implement any action needed; review the effectiveness of any corrective action taken; e) make changes to the anti-bribery management system, if necessary?\nDoes Corrective actions appropriate to the effects of the nonconformities encountered?\n Does organization retain documented information as evidence of: — the nature of the nonconformities and any subsequent actions taken; — the results of any corrective action?"]
[10.199999999999999,"Continual improvement","Do the reviews result in an improvement to the antibribery management system?"]
["Guidance Note for Closing Meeting Agenda:"]
["Sl.","Topics",null,"Particular",null,null,null,null,null,null,null,null,"Completed"]
[1,"Introduction ",null,"Particularly if anybody not present at the opening meeting"]
[2,"Thank to company",null,"Thanks to your Team for cooperation during the audit and arrangements for the Audit."]
[3,"Reaffirmation of Scope",null,"Reconfirm scope of activities assessed"]
[4,"Confirm confidentially",null,"Reassure the confidentiality for any information assessed during the audit."]
[5,"Appreciation",null,"Comment on good points within the organisation"]
[6,"Disclaimer",null,"This was audit on sample basis, and it should not mean, that other deficiencies do not exist."]
[7,"Audit Team Comment",null,"Summary of individual findings from each auditor (if audit team consist more then 1)"]
[8,"Decision",null,"Significance of categories of non-compliance and summary of findings, Summary of overall findings and recommendation/Decision"]
[9,"Acknowledgment",null,"Assure that client acknowledge the NCs."]
[10,"Future Plan",null,"If any NC is identified, Submitting plan for corrective action together with the objective evidences."]
[11,"Follow-up action ",null,"Where do we go from here? emphasizing that the final decision regarding certification will be taken by TNV"]
[12,"Surveillance Audit ",null,"An explanation of the continual Audit (surveillance) procedure and other future actions"]
[13,"Appeal",null,"Explain the Appeal & Complaint option available to the client against any decision of the Audit team."]
[14,"Invite questions",null,"Invite questions, clarification from company (But no Consultancy)"]
[15,"Signature",null,"Obtain company representative's signature on report to acknowledge receipt."]
["Findings:"]
["Sl.","NCs/Observations"]
[1]
[2]
[3]
[4]
[5]
["Summary of the Audit Team:"]
["A. Stage of Audit: (Mark which is applicable)"]
["Initial Certification"]
["Follow Up Audit"]
["Surveillance Cum Transfer"]
["Modification"]
["Renewal"]
["Upgrade From"]
["Other:"]
["B. Recommendation: (Mark which is applicable)"]
["Issuance of Certificate"]
["Refusal of the Certificate"]
["Follow Up audit"]
["Modification of the current certificate (registration no. and expiration date remain unchanged)"]
["Other:"]
["C. Reason: (Mark which is applicable)"]
["The ABMS system complies with the requirements of the reference standard: Congratulations, on the basis of the above summary, Lead Auditor is pleased to put forward a recommendation for issuance of certificate."]
["The ABMS system complies with the requirements of the reference standard with exception of minor NC: Congratulations, Lead Auditor is pleased to put forward a recommendation for Certification upon off-site verification of closure of all issues, the NC closure need to be submitted along with the Corrective Action Plan and objective evidence with 15 days from the stage 2 audit but not later than60 days from the date of Stage 2 audit.  If all non-conformances are not closed within 60 days, a full reassessment may be required."]
["Evidence of major non conformities: Organization is not recommended for Certification. A follow-up assessment will be scheduled to allow for on-site verification and closure of all issues within 60 days from the date of Stage 2 audit. If all non-conformances are not closed within 60 days, a full reassessment may be required."]
["Not Recommended: Organization is not recommended for certification, a Stage 2 audit will be required.To progress your application for registration, please respond to each non-conformances, with a plan showing proposed actions, timescales and responsibilities for resolution. The organization should consider the root cause of the non-conformance and the potential for related issues in other parts of your system."]
["Condition of Audit Report:"]
["Sl.","Condition of the Audit report "]
["A","This is to state that this audit report or any information in this report is based on a sampling process of the available information to the certification body. Further to advise that audit recommendations are subject to an independent review prior to a decision concerning the awarding or renewal of certification."]
["B","This is to state that the audited organization is effectively controlling the use of the certification documents and marks if applicable."]
["C","This report itself does not allow the client / applicants to use logo of the certification body or accreditation board, use of logo govern as per certification body rule. Please refer the terms of use of logo as available on the website of the certification body."]
["Acceptance:"]
[null,"For and on behalf of TNV",null,null,null,null,null,"For and on behalf of the Client"]
[]
[]
[]
[]
[null,"Signature",null,null,null,null,null,"Signature"]
[null,"Name of Auditor:",{"$f":"'TNV-F-002'!B80","v":0},null,null,null,null,"Name:",{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
[null,"Date:",null,null,null,null,null,"Date:"]
[]
[]
["TNV-F-015- Stage 2 Report",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-015 ISMS","index":15,"n_rows":185,"n_cols":10,"rows_kept":185,"cut":false,"hidden":false,"merged":[[5,2,5,5],[6,2,6,5],[7,2,7,5],[8,2,8,5],[13,2,13,5],[9,2,9,5],[10,2,10,5],[11,2,11,5],[12,2,12,5],[0,0,0,5],[1,0,1,5],[2,0,2,5],[3,2,3,5],[4,2,4,5],[14,2,14,5],[15,2,15,5],[16,2,16,5],[17,2,17,5],[26,0,26,5],[23,2,23,5],[24,2,24,5],[27,0,27,3],[27,4,27,5],[18,1,19,1],[20,2,20,5],[21,2,21,5],[22,2,22,5],[25,2,25,5],[145,3,145,4],[146,3,146,4],[116,2,123,2],[147,3,147,4],[148,3,148,4],[116,4,123,4],[133,4,134,4],[149,3,149,4],[150,3,150,4],[153,0,153,3],[154,0,154,3],[155,0,155,3],[156,0,156,3],[157,0,157,3],[158,0,158,3],[159,0,159,3],[161,0,161,3],[162,0,162,3],[163,0,163,3],[164,0,164,3],[165,0,165,3],[167,0,167,3],[176,4,181,4],[168,0,168,3],[169,0,169,3],[170,0,170,3],[171,0,171,4],[172,1,172,4],[75,3,81,3],[75,4,81,4],[45,2,49,2],[45,3,49,3],[45,4,49,4],[50,2,53,2],[50,3,53,3],[50,4,53,4],[45,5,49,5],[50,5,53,5],[65,5,73,5],[75,5,81,5],[83,5,84,5],[92,5,98,5],[100,5,102,5],[116,5,123,5],[126,5,128,5],[100,2,102,2],[100,3,102,3],[100,4,102,4],[116,3,123,3],[126,3,128,3],[92,2,98,2],[92,3,98,3],[92,4,98,4],[55,4,56,4],[125,2,129,2],[125,4,126,4],[127,4,128,4],[184,0,184,1],[173,1,173,4],[174,1,174,4],[176,0,179,1],[176,2,179,3],[83,2,84,2],[83,3,84,3],[83,4,84,4],[65,2,73,2],[65,3,73,3],[65,4,73,4],[75,2,81,2]]}
["Stage- 2 Report"]
["Information Security Managment System"]
["Client Information:"]
["Sl.","Subject","Particular"]
[1,"Reference Number (unique ID Allotted)",{"$f":"'TNV-F-014 ISMS'!C5:F5","v":0}]
[2,"Name of the Client",{"$f":"'TNV-F-014 ISMS'!C6:F6","v":"HIGH JACK"}]
[3,"Address of the Client",{"$f":"'TNV-F-014 ISMS'!C7:F7","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[4,"Sita Address (If Any)",{"$f":"'TNV-F-014 ISMS'!C8:F8","v":0}]
[5,"No. of Employees",{"$f":"'TNV-F-014 ISMS'!C9:F9","v":5}]
[6,"No. of Users",{"$f":"'TNV-F-014 ISMS'!C10:F10","v":1}]
[7,"No. of Server",{"$f":"'TNV-F-014 ISMS'!C11:F11","v":2}]
[8,"No. of work stations",{"$f":"'TNV-F-014 ISMS'!C12:F12","v":31}]
[9,"No. of Application Development and Maintenance staff",{"$f":"'TNV-F-014 ISMS'!C13:F13","v":2}]
[10,"Email",{"$f":"'TNV-F-014 ISMS'!C14:F14","v":"contact@high-jack.fr"}]
[11,"Contact Person",{"$f":"'TNV-F-014 ISMS'!C15:F15","v":"Adrien Jannel"}]
[12,"Phone/ Mobile",{"$f":"'TNV-F-014 ISMS'!C16:F16","v":"03 10 45 40 01"}]
[13,"Scope",{"$f":"'TNV-F-014 ISMS'!C17:F17","v":0}]
[14,"Technical Area",{"$f":"'TNV-F-014 ISMS'!C19:F19","v":{"$error":"#REF!"}}]
[15,"Audit Team","Lead Auditor:","Giuseppe Izzo","Auditor:",{"$f":"'TNV-F-002'!B81","v":0}]
[null,null,"Technical Expert:","Giuseppe Izzo","Observor:",{"$f":"'TNV-F-002'!B83","v":0}]
[16,"Audit Man-days","1  5"]
[17,"Audit Date ","31/03/2025-03/04/2025"]
[18,"Brief about the organization",{"$f":"'TNV-F-014 ISMS'!C24","v":"High Jack protects the sustainability of companies by providing them with innovative solutions and cybersecurity training, in order to strengthen their resilience against digital threats and build a secure and sustainable professional environment."}]
[19,"Type of Audit"]
[20,"Extent of Remote Audit (If Applicable)"]
[21,"Audit Objective","To Evaluate and Ensure that the clients’ management system documentation meets the requirements of the standard/ specification and to conform that the client organization adheres to its own policies, objectives and procedure & all the requirement of the ISMS standard and other normative documents and to verify the implementation of the Information Security Management System as per the Standards Requirement, verification of records for the conformity of the implementation."]
["Recording of Attendance:"]
["Audit Attendance Sheet",null,null,null,"Record of Attendance (by LA)"]
["Sl.","Name","Position","Department","Opening","Closing"]
[1,"Adrien Jannel","CEO","HIGH JACK"]
[2,"Cyrille Elsen","CIO","HIGH JACK"]
[3,"Florent Curtet","CTO","HIGH JACK"]
[4,"Alexis Mathieu","Network and cybersecurity administrator","HIGH JACK"]
[5,"Giuseppe Izzo","Lead Auditor","UESE ITALIA SPA"]
[]
[]
[]
[null,null,null,null,null,null,null,null,null,"Confirm"]
["Clause","Subject","Reference / Evidence","Finding","Reviewer Comment (To be filled by Technical Review Team)","Reviewer Decision",null,null,null,"Non-Conformity"]
[4,"Context of the Organization",null,null,null,null,null,null,null,"Observation"]
[4.0999999999999996,"Understanding the Organization and its context"]
[null,"A.      Has the external and internal issues relevant to the information security management system been identified?","MAN 27001","Confirm","The organization has effectively identified and documented internal and external issues relevant to ISMS objectives."]
[null,"B.       Has the organization's context been identified to establish its information security management system (ISMS)","MAN 27001","Confirm","Stakeholder expectations are properly identified and regularly updated. Legal and regulatory needs are well managed."]
[null,"C.       Has the internal issues that are relevant to the organization's purpose been identified and the influence these issues could have on its ability to achieve the outcomes that its ISMS intends to achieve been documented?","MAN 27001","Confirm","ISMS boundaries and applicability are clearly defined. External dependencies are also considered and documented."]
[null,"Has the organization :-"]
[null,"a)        Determined the influence the internal stakeholders could have?","MAN 27001","Confirm","The organization has addressed all internal contextual factors, including governance, stakeholder impact, culture, capabilities, and contractual obligations. These aspects are integrated into the ISMS context analysis as per MAN 27001."]
[null,"b)       Determined the influence the approach to governance could have?"]
[null,"c)        Determined the influence the organization's capabilities could have?"]
[null,"d)       Determined the influence the organization's culture could have?"]
[null,"e)        Determined the influence the organization's contracts could have?"]
[null,"f)        Identified the external issues that are relevant to the organization's purpose and considered the influence these issues could have on its ability to achieve the outcomes that its ISMS intends to achieve?","MAN 27001","Confirm","The organization has taken into account external contextual elements including environmental factors, key trends, external stakeholders, and strategic drivers. These are documented in the context section of MAN 27001 and appropriately reflected in the ISMS implementation."]
[null,"g)       Determined the influence environmental conditions could have?"]
[null,"h)       Determined the influence key trends and drivers could have?"]
[null,"i)         Determined the influence external stakeholders could have?"]
[4.2,"Understanding the needs and expectations of interested parties"]
[null,"a)        Has the organization determined all the parties that have an interest in the organization's ISMS?","MAN 27001","Confirm","The organization has identified all relevant interested parties (internal and external) and assessed their expectations and requirements as part of the ISMS framework. This analysis is clearly described and maintained in MAN 27001."]
[null,"b)       Has the organization identified the requirements of the parties including their needs and expectations?","MAN 27001","Confirm"]
[4.3,"Determining the scope of the information security management system"]
[null,"a)        Determined boundaries and applicability of the ISMS?","MAN 27001\t","Confirm","The organization has clearly defined the boundaries and applicability of the ISMS in its documentation."]
[null,"b)       Is ISMS Policy available as documented information?","MAN 27001\t","Confirm","The ISMS Policy is available as documented information and properly maintained.\t"]
[null,"c)        Has the Organization considered; external and internal issues, requirements of interested parties, interface and dependencies between activities performed by the Organization and those performed by other organizations?","MAN 27001\t","Confirm","The organization has addressed internal/external issues, interested parties' requirements, and interfaces with third-party activities."]
[4.4000000000000004,"Information security management system"]
[null,"Has the Organization documented the process to establish, implement, maintain and continually improve the ISMS?","MAN 27001","Confirm","The organization has documented a structured and detailed process for establishing, implementing, maintaining, and continually improving the ISMS."]
[5,"Leadership"]
[5.0999999999999996,"Leadership and commitment"]
[null,"Has the Management:-","PROC-620 Objectives, MAN 27001, MOD-520 Information Security Policy ","Confirm","Management has aligned ISMS objectives with strategy, ensured integration and resources, communicated its importance, supported involved personnel, and promoted continual improvement.\n"]
[null,"a) Established policy and objectives in line with strategic direction? "]
[null,"b) Ensured integration with organizations processes?"]
[null,"c)  Ensured resources?"]
[null,"d) Communicated importance of management and conformity?"]
[null,"e)  Ensured ISMS achieves intended outcomes?"]
[null,"f) Directed and supported persons involved in the ISMS?"]
[null,"g)  Promoted continual improvement?"]
[null,"h)  Supported other relevant managers?"]
[5.2,"Policy(Verify Documented ISMS Policy)"]
[null,"a)     Is the policy appropriate to the purpose of the Organization?","MOD-520 Information Security Policy","Confirm","The ISMS policy is well aligned with the organization's purpose and strategic direction. It outlines information security objectives and includes clear commitments to meet applicable requirements and ensure continual improvement. The policy is documented (ref. MOD-520), effectively communicated within the organization, and accessible to relevant interested parties.\n"]
[null,"b)     Does the policy include information security objectives or provides the framework for setting information security objectives?"]
[null,"c)     Does the policy includes a commitment to satisfy applicable requirements related o information security?"]
[null,"d)     Does the policy include a commitment to continual improvement of the information security management system?"]
[null,"e)     Is the policy available as documented information? (Give reference of Policy Number)"]
[null,"f)      Is the policy communicated within the organization?"]
[null,"g)     Is the policy Available to interested parties?"]
[5.3,"Organizational roles, responsibilities and authorities"]
[null,"a)        Are Roles and authorities assigned and communicated?","ISMS Manual, Organizational Chart, Role Descriptions","Confirm","Roles and responsibilities related to the ISMS are clearly defined, assigned, and communicated. Top management has designated specific individuals to ensure ISMS compliance and to report on its performance.\t"]
[null,"b)       Has top management assigned responsibilities for; ensuring the ISMS which conform to the standard, reporting on the performance to top management?"]
[6,"Planning"]
[6.1,"Actions to address risks and opportunities"]
["6.1.1","General"]
[null,"a)        Has the management considered: context of the Organization, needs and expectations of interested parties?\nb)       Determined the risks and opportunities that need to be addressed; ISMS achieves intended outcomes, prevents or reduces undesired effects and achieves continual improvement?\nc)        Has the Organization planned; actions to address risks and opportunities and how to; integrate and implement actions into its ISMS and evaluate the effectiveness?","MAN 27001, PROC-400, MOD-400-A, MOD-400-B","Confirm","The organization has identified risks and opportunities based on its context and stakeholder expectations. Planning is in place to address them, integrating actions into the ISMS and evaluating their effectiveness."]
["6.1.2","Information security risk assessments(Verify Documented Information on the Risk Assessment Process)"]
[null,"a)        Has the Organization defined and applied a risk assessment approach that; establishes and maintains risk acceptance criteria and criteria for performing risk assessments?\nb)       Ensured repeatability producing consistent, valid and comparable results?\nc)        Has the security risks associated with loss of Confidentiality, Integrity and Availability along with Risk Owners identified?\nd)       Has the risks analysis been done and potential consequences, realistic likelihood, levels of risk been identified?\ne)        Have the risks been evaluated, compared and priorities been assigned?\nf)        Has the documented information been retained by the organization?","Risk Assessment Report, Risk Assessment Methodology Document","Confirm","The organization has defined and applied a structured risk assessment methodology. Criteria for risk acceptance and assessment are established, risks are consistently analyzed and evaluated, and results are retained as documented evidence."]
["6.1.3","Information security risk treatment(Verify Documented Information on the Risk Treatment Process& the Statement of Applicability)"]
[null,"a)        Has the Organization defined and applied Information security risk treatment process to: select treatment options?","Risk Treatment Plan, SoA (Statement of Applicability), Risk Treatment Procedure","Confirm","The organization has defined and applied a structured risk treatment process. Controls have been selected and compared with Annex A, the SoA has been produced, treatment plans are documented, approved by owners, and all relevant information is retained."]
[null,"b)       Determined controls “from any source”?"]
[null,"c)        Compared controls with Annex A?"]
[null,"d)       Produced a Statement of Applicability?"]
[null,"e)        Formulated a treatment plan?"]
[null,"f)        Obtained owners approval of treatments and residual risks?"]
[null,"g)       Retained documented information?"]
[6.2,"Information security objectives and planning to achieve them(Verify Documented Information on the Information Security Objectives)"]
[null,"a)        Has the Organization established objectives “at relevant functions and levels”?","PROC-620, MOD-620-A, MOD-620-B, MAN 27001","Confirm","The organization has established measurable and consistent information security objectives across relevant levels. Documented plans include responsibilities, timelines, required resources, and evaluation methods."]
[null,"b)       Are these objectives consistent, measurable (where practicable), take into account requirements, assessment and treatments, communicated, updated?"]
[null,"c)        Has the Organization retained documented information such as what will be done, what resources will be required, who will be responsible, when it will be completed and how results will be evaluated?"]
[6.3,"Planning of Changes"]
[null,"How the organization determines the need for changes to the information security management system and are the changes carried out in a planned manner?","PROC-620, MOD-620-A, MOD-620-B, MAN 27001","Confirm","The organization determines the need for changes to the ISMS based on internal reviews, risk assessments, and business needs. All changes are planned, documented, and implemented in a controlled and systematic manner.\t"]
[7,"Support"]
[7.1,"Resources"]
[null,"Has the Organization provided enough resources to achieve information security?","Resource Planning Document, ISMS Manual, Budget Allocation Records","Confirm","The organization has allocated sufficient resources (human, technical, and financial) to support the effective implementation and maintenance of the ISMS."]
[7.2,"Competence(Verify Documented Information for the Evidence of the Competence)"]
[null,"Has the organizations determined the necessary competence and ensure it, take actions to acquire, retain documentation?","Training Records, Job Descriptions, Competence Matrix","Confirm","\tThe organization has identified the necessary competences for information security roles, ensured appropriate training, and retains documented evidence of skills and qualifications."]
[7.3,"Awareness"]
[null,"a)        Persons shall be aware of: the ISMS policy, their contributions to the ISMS, consequence of not conforming\nb)       Make sure that the people who work for the organization \nunderstand and are aware of its information security policy.\nc)        Make sure that the people who work for the organization understand \nhow they can support and help enhance the effectiveness of the ISMS.","Training Materials, Awareness Programs, Internal Communications, ISMS Policy","Observation","It’s advisable to implement the policy internal communication system and related personnel’s awareness"]
[7.4,"Communication"]
[null,"Has the Organization determined the need for internal and external communication?","MAN 27001, PROC-740","Confirm","The organization has defined internal and external communication requirements, including what will be communicated, when, by whom, and through which channels."]
[7.5,"Documented information"]
["7.5.1","General"]
[null,"a)        Has the organizations ISMS included the documented information required by the standard?","ISMS Manual, Documented Information Procedure, Document Register","Confirm","The organization has established, created, updated, and controlled documented information as required by the ISMS standard. All documents are appropriately identified, reviewed, approved, and maintained, including external documents treated consistently with internal ones."]
[null,"b)       Information deemed by the Organization as required"]
["7.5.2","Creating and updating"]
[null,"When creating documented information; has the Organization ensured appropriateness; identification and description, format, review and approval requirement?"]
["7.5.3","Control of documented information"]
[null,"a)        Has the documented information controlled to ensure; availability"]
[null,"b)       Has the Organization addressed; distribution"]
[null,"c)       Has the External documents, Documented Information of External Origin controlled as other Documented Information?"]
[8,"Operation","MAN 27001 ,PROC-810, MOD-610-A"]
[8.1,"Operational planning and control(Verify Documented Information “evidencing Process Execution” as Planned)",null,"Confirm","The organization has effectively planned, implemented, and controlled its processes to achieve ISMS objectives. Changes are managed, and outsourced processes are identified and controlled."]
[null,"a)        Has the Organization planned, implemented and controlled all the processes?\nb)       Has the Organization implemented plans to achieve objectives?\nc)        Has the Organization controlled planned changes and review consequences of unplanned changes?\nd)       Has the Organization ensured that the outsourced processes are determined and controlled?",null,"Confirm"]
[8.1999999999999993,"Information security risk assessments (Verify Documented Information on Risk Assessment)",null,null,"Risk assessments are conducted at defined intervals and in response to significant changes. All assessments are documented and maintained as required."]
[null,"a)        Has the Organization performed risk assessments at planned intervals or at significant changes?\nb)       Has the Organization retained documented information?"]
[8.3000000000000007,"Information security risk treatment (Verify Documented Information on Results of Risk Treatment)"]
[null,"Has the Organization implemented risk treatment plan and retain documentation?","Risk Treatment Plan, SoA, Risk Treatment Records","Confirm","The organization has implemented the risk treatment plan effectively. All actions are documented, and results are retained as required."]
[9,"Performance evaluation","MAN 27001, PROC-910-, MOD-910, MOD-910-H"]
[9.1,"Monitoring, measurement, analysis and evaluation(Verify Documented Information on Evidence of Monitoring and Measuring)","OK","Confirm","The organization monitors, measures, analyzes, and evaluates the ISMS performance in line with planned objectives and requirements."]
[9.1999999999999993,"Internal audit(Verify Documented Information on Internal Audit Program & result)","OK","Confirm","Internal audits are conducted regularly by competent and impartial auditors. The audit process is effective and ensures compliance and continual improvement."]
[null,"Has the Organization conducted internal audits and auditors selected to conduct audits “that ensure the objectivity and impartiality of the audit process”?","OK","Confirm"]
[9.3000000000000007,"Management review(Verify Documented Information on the result of Management Review)","OK","Confirm"]
[null,"Has the Top management reviewed the ISMS at planned intervals and recorded the actions which include\na.        Status of actions from previous meetings\nb.        External and internal changes\nc.        Feedback on performance\nd.        Non-conformities and corrective actions\ne.        Monitoring and measurement\nf.         Audit results\ng.        Fulfillment of objectives\nh.        Feedback from interested parties\ni.         Results of risk assessments and treatment plans\nj.         Opportunities for continuous improvement.","OK","Confirm","Top management reviews the ISMS at planned intervals. Reviews cover all required inputs, including performance, audit results, objectives, risk treatment, and opportunities for improvement."]
[10,"Improvements","MAN 27001, PROC-1010, MOD-1010-A, MOD-1010-B"]
[10.1,"Nonconformity and corrective actions(Verify Documented Information on non conformance& corrective action)"]
[null,"a) Has the Organization reacted to nonconformities, evaluated the need for actions and implemented actions?\nb) Does the documented procedures for corrective actions define requirements for:\ni. Identifying non-conformities\nii. Determining the causes of non-conformities\niii. Evaluating the need for actions to ensure that non-conformities do not recur\niv. Determining and implementing the corrective action needed\nv. Recording results of action taken and Reviewing of corrective action taken","OK","Confirm","The organization has defined and applied procedures for identifying, evaluating, and addressing nonconformities. Corrective actions are documented, implemented, and reviewed effectively."]
[10.199999999999999,"Continual improvement"]
[null,"Does the Organization continually improve the effectiveness of the ISMS through the use of the:        * Information security policy & objectives\n* Audit results & analysis of monitored events\n* Corrective & preventive actions\n* Management review?","ISMS Objectives, Audit Reports, Management Review Records","Confirm","The organization demonstrates continual improvement of the ISMS using audit findings, objective monitoring, corrective actions, and management reviews."]
["*","Details of Vulnerability / Penetration Testing ","OK",null,"Regular vulnerability and penetration testing is conducted. Results are analyzed and used to support risk treatment and system hardening."]
["*","Details of Cryptographic Controls & Key Management for Cryptographic Controls","OK",null,"Cryptographic controls and key management practices are clearly defined and implemented in accordance with the organization’s ISMS and applicable standards."]
["Findings of the Stage 2 Audit:"]
["Sl","Findings","Clause","Response of the client"]
[1]
[2]
[3]
[4]
[5]
["Summary of the Audit Team:"]
["A. Stage of Audit: (Mark which is applicable)"]
["Initial Certification",null,null,null,"YES"]
["Follow Up Audit"]
["Surveillance Cum Transfer"]
["Modification"]
["Renewal"]
["Upgrade From"]
["Other "]
["B. Recommendation: (Mark which is applicable)"]
["Issuance of Certificate",null,null,null,"YES"]
["Refusal of the Certificate"]
["Follow Up audit"]
["Modification of the current certificate (registration no. and expiration date remain unchanged)"]
["Other:"]
["C. Reason: (Mark which is applicable)"]
["ISMS complies with the requirements of the Reference Standard. \nCongratulations, on the basis of the above summary, Lead Auditor is pleased to put forward a Recommendation for Issuance of Certificate.",null,null,null,"X"]
["The information system complies with the requirements of the reference standard with exception of minor NC: Congratulations, Lead Auditor is pleased to put forward a recommendation for Certification upon off-site verification of closure of all issues, the NC closure need to be submitted along with the Corrective Action Plan and objective evidence with 15 days from the stage 2 audit but not later than60 days from the date of Stage 2 audit.  If all non-conformances are not closed within 60 days, a full reassessment may be required."]
["Evidence of major non conformities: Organization is not recommended for Certification. A follow-up assessment will be scheduled to allow for on-site verification and closure of all issues within 60 days from the date of Stage 2 audit. If all non-conformances are not closed within 60 days, a full reassessment may be required."]
["Not Recommended: Organization is not recommended for certification, a Stage 2 audit will be required. To progress your application for registration, please respond to each non-conformances, with a plan showing proposed actions, timescales and responsibilities for resolution. The organization should consider the root cause of the non-conformance and the potential for related issues in other parts of your system."]
["Condition of the Audit Report:"]
["A","This is to state that this audit report or any information in this report is based on a sampling process of the available information to the certification body. Further to advise that audit recommendations are subject to an independent review prior to a decision concerning the awarding or renewal of certification."]
["B","This is to state that the audited organization is effectively controlling the use of the certification documents and marks if applicable."]
["C","This report itself does not allow the client / applicants to use logo of the certification body or accreditation board, use of logo govern as per certification body rule. Please refer the terms of use of logo as available on the website of the certification body."]
["For Behalf of TNV:",null,"For and on behalf of the Client:"]
[]
[]
[]
[]
["Auditor:",{"$f":"'TNV-F-014 ISMS'!D20","v":"Giuseppe Izzo"},"Name:",{"$f":"'TNV-F-001'!C69","v":"Adrien Jannel"}]
["Date:","2025-04-03","Date:","2025-04-03"]
[]
[]
["TNV-F-015-I Stage 2 ISMS",null,"Issue 01","Issue Dt: 01st July 2017","Rev 02","Revision Dt: 01 May 2023"]

{"sheet":"Addiontal Notes","index":16,"n_rows":99,"n_cols":15,"rows_kept":99,"cut":false,"hidden":false,"merged":[]}
[null,"Subject","Control Verification","Applicability","Verification","Comment (In case of finding)",null,null,null,null,null,null,null,"Verification","Applicability"]
["Additional Notes for ISMS (Verification of Controls)",null,null,null,null,null,null,null,null,null,null,null,null,"Adequate","Applicable"]
[5,"Organizational controls",null,"Applicable","Adequate",null,null,null,null,null,null,null,null,"Inadequate","Not-Applicable"]
[5.0999999999999996,"Policies for information security","Information security policy and topic-specific policies shall be defined, approved by management, published, communicated to and acknowledged by relevant personnel and relevant interested parties, and reviewed at planned intervals and if significant changes occur.","Applicable","Adequate",null,null,null,null,null,null,null,null,null,"Partially Applicable"]
[5.2,"Information security roles and\nresponsibilities","Information security roles and responsibilities shall be defined and allocated according to the organization needs.","Applicable","Adequate"]
[5.3,"Segregation of duties","Conflicting duties and conflicting areas of responsibility shall be segregated.","Applicable","Adequate"]
[5.4,"Management responsibilities","Management shall require all personnel to apply information security in accordance with the established information security policy, topic- specific policies and procedures of the organization.","Applicable","Adequate"]
[5.5,"Contact with authorities","The organization shall establish and maintain contact with relevant  authorities.","Applicable","Adequate"]
[5.6,"Contact with special interest\ngroups","The organization shall establish and maintain contact with special interest groups or other specialist security forums and professional associations.","Applicable","Adequate"]
[5.7,"Threat intelligence","Information relating to information security threats shall be collected and analysed to produce threat intelligence","Applicable","Adequate"]
[5.8,"Information security in project\nmanagement","Information security shall be integrated into project management","Applicable","Adequate"]
[5.9,"Inventory of information and\nother associated assets","An inventory of information and other associated assets, including owners, shall be developed and maintained.","Applicable","Adequate"]
["5.10","Acceptable use of information\nand other associated assets","Rules for the acceptable use and procedures for handling information and other associated assets shall be identified, documented and implemented","Applicable","Adequate"]
["5.11","Return of assets","Personnel and other interested parties as appropriate shall return all the organization’s assets in their possession upon change or termination of their employment, contract or agreement","Applicable","Adequate"]
["5.12","Classification of information","Information shall be classified according to the information security  needs of the organization based on confidentiality, integrity, availability and relevant interested party requirements","Applicable","Adequate"]
["5.13","Labelling of information","An appropriate set of procedures for information labelling shall be developed and implemented in accordance with the information classification scheme adopted by the organization.","Applicable","Adequate"]
["5.14","Information transfer","Information transfer rules, procedures, or agreements shall be in place for all types of transfer facilities within the organization and between the organization and other parties.","Applicable","Adequate"]
["5.15","Access control","Rules to control physical and logical access to information and other associated assets shall be established and implemented based on business and information security requirements.","Applicable","Adequate"]
["5.16","Identity management","The full life cycle of identities shall be managed.","Applicable","Adequate"]
["5.17","Authentication information","Allocation and management of authentication information shall be controlled by a management process, including advising personnel on appropriate handling of authentication information.","Applicable","Adequate"]
["5.18","Access rights","Access rights to information and other associated assets shall be provisioned, reviewed, modified and removed in accordance with the organization’s topic-specific policy on and rules for access control.","Applicable","Adequate"]
["5.19","Information security in supplier\nrelationships","Processes and procedures shall be defined and implemented to manage the information security risks associated with the use of supplier’s products or services.","Applicable","Adequate"]
["5.20","Addressing information security\nwithin supplier agreements","Relevant information security requirements shall be established and agreed with each supplier based on the type of supplier relationship","Applicable","Adequate"]
["5.21","Managing information security in the information and communication technology (ICT) supply chain","Processes and procedures shall be defined and implemented to manage the information security risks associated with the ICT products and services supply chain","Applicable","Adequate"]
["5.22","Monitoring, review and change management of supplier services","The organization shall regularly monitor, review, evaluate and manage change in supplier information security practices and service delivery","Applicable","Adequate"]
["5.23","Information security for use of cloud services","Processes for acquisition, use, management and exit from cloud services shall be established in accordance with the organization’s information security requirements","Applicable","Adequate"]
["5.24","Information security incident\nmanagement planning and preparation","The organization shall plan and prepare for managing information security incidents by defining, establishing and communicating information security incident management processes, roles and responsibilities.","Applicable","Adequate"]
["5.25","Assessment and decision on information\nsecurity events","The organization shall assess information security events and decide if they are to be categorized as information security incidents.","Applicable","Adequate"]
["5.26","Response to information security incidents","Information security incidents shall be responded to in accordance with the documented procedures","Applicable","Adequate"]
["5.27","Learning from information security\nincidents","Knowledge gained from information security incidents shall be used to strengthen and improve the information security controls.","Applicable","Adequate"]
["5.28","Collection of evidence","The organization shall establish and implement procedures for the identification, collection, acquisition and preservation of evidence related to information security events.","Applicable","Adequate"]
["5.29","Information security during disruption","The organization shall plan how to maintain information security at an appropriate level during disruption.","Applicable","Adequate"]
["5.30","ICT readiness for business continuity","ICT readiness shall be planned, implemented, maintained and tested based on business continuity objectives and ICT continuity requirements","Applicable","Adequate"]
["5.31","Legal, statutory, regulatory and contractual requirements","Legal, statutory, regulatory and contractual requirements relevant to information security and the organization’s approach to meet these  requirements shall be identified, documented and kept up to date.","Applicable","Adequate"]
["5.32","Intellectual property rights","The organization shall implement appropriate procedures to protect intellectual property rights","Applicable","Adequate"]
["5.33","Protection of records","Records shall be protected from loss, destruction, falsification, unauthorized access and unauthorized release.","Applicable","Adequate"]
["5.34","Privacy and protection of personal\nidentifiable information (PII)","The organization shall identify and meet the requirements regarding the preservation of privacy and protection of PII according to applicable laws and regulations and contractual requirements.","Applicable","Adequate"]
["5.35","Independent review of information\nsecurity","The organization’s approach to managing information security and its implementation including people, processes and technologies shall be reviewed independently at planned intervals, or when significant\nchanges occur.","Applicable","Adequate"]
["5.36","Compliance with policies, rules and standards for information security","Compliance with the organization’s information security policy, topic- specific policies, rules and standards shall be regularly reviewed.","Applicable","Adequate"]
["5.37","Documented operating procedures","Operating procedures for information processing facilities shall be documented and made available to personnel who need them","Applicable","Adequate"]
["6","People controls",null,"Applicable","Adequate"]
["6.1","Screening","Background verification checks on all candidates to become personnel shall be carried out prior to joining the organization and on an ongoing basis taking into consideration applicable laws, regulations and ethics\nand be proportional to the business requirements, the classification of the information to be accessed and the perceived risks","Applicable","Adequate"]
["6.2","Terms and conditions of employment","The employment contractual agreements shall state the personnel’s and the organization’s responsibilities for information security.","Applicable","Adequate"]
["6.3","Information security awareness, education and training","Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education and training and regular updates of the organization's information security policy,\ntopic-specific policies and procedures, as relevant for their job function.","Applicable","Adequate"]
["6.4","Disciplinary process","A disciplinary process shall be formalized and communicated to take actions against personnel and other relevant interested parties who have committed an information security policy violation","Applicable","Adequate"]
["6.5","Responsibilities after termination\nor change of employment","Information security responsibilities and duties that remain valid after termination or change of employment shall be defined, enforced and\ncommunicated to relevant personnel and other interested parties","Applicable","Adequate"]
["6.6","Confidentiality or non-disclosure\nagreements","Confidentiality or non-disclosure agreements reflecting the organization’s needs for the protection of information shall be identified, documented, regularly reviewed and signed by personnel and other relevant interested parties.","Applicable","Adequate"]
["6.7","Remote working","Security measures shall be implemented when personnel are working remotely to protect information accessed, processed or stored outside the organization’s premises.","Applicable","Adequate"]
["6.8","Information security event reporting","The organization shall provide a mechanism for personnel to report observed or suspected information security events through appropriate channels in a timely manner.","Applicable","Adequate"]
["7","Physical controls",null,"Applicable","Adequate"]
["7.1","Physical security perimeters","Security perimeters shall be defined and used to protect areas that contain information and other associated assets.","Applicable","Adequate"]
["7.2","Physical entry ","Secure areas shall be protected by appropriate entry controls and access points.","Applicable","Adequate"]
["7.3","Securing offices, rooms and facilities","Physical security for offices, rooms and facilities shall be designed and implemented.","Applicable","Adequate"]
["7.4","Physical security monitoring","Premises shall be continuously monitored for unauthorized physical  access.","Applicable","Adequate"]
["7.5","Protecting against physical and\nenvironmental threats","Protection against physical and environmental threats, such as natural disasters and other intentional or unintentional physical threats to infrastructure shall be designed and implemented.","Applicable","Adequate"]
["7.6","Working in secure areas","Security measures for working in secure areas shall be designed and implemented","Applicable","Adequate"]
["7.7","Clear desk and clear screen","Clear desk rules for papers and removable storage media and clear screen rules for information processing facilities shall be defined and appropriately enforced.","Applicable","Adequate"]
["7.8","Equipment siting and protection","Equipment shall be sited securely and protected.","Applicable","Adequate"]
["7.9","Security of assets off-premises","Off-site assets shall be protected","Applicable","Adequate"]
["7.10","Storage media","Storage media shall be managed through their life cycle of acquisition, use, transportation and disposal in accordance with the organization’s  classification scheme and handling requirements","Applicable","Adequate"]
["7.11","Supporting utilities","Information processing facilities shall be protected from power failures and other disruptions caused by failures in supporting utilities.","Applicable","Adequate"]
["7.12","Cabling security","Cables carrying power, data or supporting information services shall be protected from interception, interference or damage.","Applicable","Adequate"]
["7.13","Equipment maintenance","Equipment shall be maintained correctly to ensure availability, integrity and confidentiality of information.","Applicable","Adequate"]
["7.14","Secure disposal or re-use of\nequipment","Items of equipment containing storage media shall be verified to ensure that any sensitive data and licensed software has been removed or securely overwritten prior to disposal or re-use.","Applicable","Adequate"]
["8","Technological controls",null,"Applicable","Adequate"]
["8.1","User end point devices","Information stored on, processed by or accessible via user end point devices shall be protected.","Applicable","Adequate"]
["8.2","Privileged access rights","The allocation and use of privileged access rights shall be restricted and managed.","Applicable","Adequate"]
["8.3","Information access restriction","Access to information and other associated assets shall be restricted in accordance with the established topic-specific policy on access control","Applicable","Adequate"]
["8.4","Access to source code","Read and write access to source code, development tools and software  libraries shall be appropriately managed.","Applicable","Adequate"]
["8.5","Secure authentication","Secure authentication technologies and procedures shall be implemented based on information access restrictions and the topic-specific policy on access control.","Applicable","Adequate"]
["8.6","Capacity management","The use of resources shall be monitored and adjusted in line with current and expected capacity requirements","Applicable","Adequate"]
["8.7","Protection against malware","Protection against malware shall be implemented and supported by appropriate user awareness.","Applicable","Adequate"]
["8.8","Management of technical vulnerabilities","Information about technical vulnerabilities of information systems in use shall be obtained, the organization’s exposure to such vulnerabilities\nshall be evaluated and appropriate measures shall be taken.","Applicable","Adequate"]
["8.9","Configuration management","Configurations, including security configurations, of hardware, software, services and networks shall be established, documented, implemented,\nmonitored and reviewed.","Applicable","Adequate"]
["8.10","Information deletion","Information stored in information systems, devices or in any other storage media shall be deleted when no longer required.","Applicable","Adequate"]
["8.11","Data masking","Data masking shall be used in accordance with the organization’s topic-specific policy on access control and other related topic-specific policies, and business requirements, taking applicable legislation intoconsideration.","Applicable","Adequate"]
["8.12","Data leakage prevention","Data leakage prevention measures shall be applied to systems, networks and any other devices that process, store or transmit sensitive information.","Applicable","Adequate"]
["8.13","Information backup","Backup copies of information, software and systems shall be maintained and regularly tested in accordance with the agreed topic-specific policy\non backup.","Applicable","Adequate"]
["8.14","Redundancy of information processing\nfacilities","Information processing facilities shall be implemented with redundancy sufficient to meet availability requirements","Applicable","Adequate"]
["8.15","Logging","Logs that record activities, exceptions, faults and other relevant events shall be produced, stored, protected and analysed.","Applicable","Adequate"]
["8.16","Monitoring activities","Networks, systems and applications shall be monitored for anomalous behaviour and appropriate actions taken to evaluate potential information security incidents","Applicable","Adequate"]
["8.17","Clock synchronization","The clocks of information processing systems used by the organization shall be synchronized to approved time sources.","Applicable","Adequate"]
["8.18","Use of privileged utility programs","The use of utility programs that can be capable of overriding system and application controls shall be restricted and tightly controlled","Applicable","Adequate"]
["8.19","Installation of software on operational\nsystems","Procedures and measures shall be implemented to securely manage software installation on operational systems.","Applicable","Adequate"]
["8.20","Networks security","Networks and network devices shall be secured, managed and controlled to protect information in systems and applications","Applicable","Adequate"]
["8.21","Security of network services","Security mechanisms, service levels and service requirements of network services shall be identified, implemented and monitored.","Applicable","Adequate"]
["8.22","Segregation of networks","Groups of information services, users and information systems shall be segregated in the organization’s networks.","Applicable","Adequate"]
["8.23","Web filtering","Access to external websites shall be managed to reduce exposure to malicious content.","Applicable","Adequate"]
["8.24","Use of cryptography","Rules for the effective use of cryptography, including cryptographic key management, shall be defined and implemented.","Applicable","Adequate"]
["8.25","Secure development life cycle","Rules for the secure development of software and systems shall be established and applied.","Applicable","Adequate"]
["8.26","Application security requirements","Information security requirements shall be identified, specified and approved when developing or acquiring applications","Applicable","Adequate"]
["8.27","Secure system architecture and\nengineering principles","Principles for engineering secure systems shall be established, documented, maintained and applied to any information system development activities.","Applicable","Adequate"]
["8.28","Secure coding","Secure coding principles shall be applied to software development.","Applicable","Adequate"]
["8.29","Security testing in development\nand acceptance","Security testing processes shall be defined and implemented in the development life cycle.","Applicable","Adequate"]
["8.30","Outsourced development","The organization shall direct, monitor and review the activities related to outsourced system development.","Applicable","Adequate"]
["8.31","Separation of development, test and production environments","Development, testing and production environments shall be separated and secured.","Applicable","Adequate"]
["8.32","Change management","Changes to information processing facilities and information systems shall be subject to change management procedures","Applicable","Adequate"]
["8.33","Test information","Test information shall be appropriately selected, protected and managed.","Applicable","Adequate"]
["8.34","Protection of information systems\nduring audit testing","Audit tests and other assurance activities involving assessment of operational systems shall be planned and agreed between the tester and appropriate management","Applicable","Adequate"]

{"sheet":"TNV-F-011","index":17,"n_rows":52,"n_cols":12,"rows_kept":52,"cut":false,"hidden":true,"merged":[[51,0,51,3],[51,4,51,5],[51,6,51,8],[51,9,51,10],[51,11,51,13],[44,0,44,13],[45,0,47,13],[48,0,48,1],[48,2,48,6],[48,7,48,8],[48,9,48,13],[43,0,43,1],[43,2,43,6],[43,7,43,8],[43,9,43,13],[27,0,27,13],[28,0,30,13],[31,0,31,13],[32,0,34,13],[35,0,35,6],[35,7,35,13],[36,0,37,6],[36,7,37,13],[38,0,38,5],[38,6,38,9],[38,10,38,13],[39,0,42,13],[24,0,26,13],[10,0,10,2],[10,3,10,13],[11,0,11,2],[11,3,11,13],[12,0,12,13],[13,0,16,13],[17,0,17,6],[17,7,17,13],[18,0,22,6],[18,7,22,13],[23,0,23,13],[7,0,7,2],[7,3,7,13],[8,0,8,2],[8,3,8,13],[9,0,9,2],[9,3,9,13],[4,0,4,2],[4,3,4,13],[5,0,5,2],[5,3,5,13],[6,0,6,2],[6,3,6,13],[3,0,3,2],[3,3,3,13],[0,0,0,13],[1,0,1,2],[1,3,1,13],[2,0,2,2],[2,3,2,13]]}
["AUDITOR FINDING ACTION REPORT (NC)"]
["Particular",null,null,"Information"]
["AFAR No.",null,null,"NA"]
["Company Name",null,null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
["Address",null,null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
["Scope",null,null,{"$f":"'TNV-F-001'!B7","v":"Information systems security audit"}]
["Audit Date",null,null,{"$f":"'TNV-F-008 (2)'!$F$19","v":"00:00:00"}]
["Standard",null,null,"ISO 9001:2015"]
["Clause"]
["Process"]
["Auditor Name"]
["NC Category"]
["Nonconformity Observed(incl. objective evidence):"]
[]
[]
[]
[]
["Auditor Signature:",null,null,null,null,null,null,"Auditee Acceptance (Signature):"]
[]
[]
[]
[]
[]
["Root Cause analysis:"]
[]
[]
[]
["Correction:"]
[]
[]
[]
["Corrective Action:"]
[]
[]
[]
["Responsibility:",null,null,null,null,null,null,"Proposed Implementation Date:"]
[]
[]
["Corrective Action Plan",null,null,null,null,null,"Accepted",null,null,null,"Rejected"]
[]
[]
[]
[]
["Assessed By: ",null,null,null,null,null,null,"Date: "]
["Verification of Onsite Closure (to be verified in the next assessment cycle):"]
[]
[]
[]
["Assessed By: ",null,null,null,null,null,null,"Date: "]
[]
[]
["TNV-F-011- AFAR",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-037","index":18,"n_rows":84,"n_cols":18,"rows_kept":84,"cut":false,"hidden":false,"merged":[[78,1,78,2],[78,4,78,7],[78,9,78,13],[66,1,66,9],[66,10,66,13],[67,1,67,9],[67,10,67,13],[68,1,68,9],[68,10,68,13],[72,0,72,13],[73,0,77,2],[73,3,77,7],[73,8,77,13],[69,1,69,9],[69,10,69,13],[70,1,70,9],[70,10,70,13],[71,1,71,9],[71,10,71,13],[83,0,83,3],[83,4,83,5],[83,6,83,8],[83,9,83,10],[83,11,83,13],[79,0,79,2],[79,3,79,7],[79,8,79,13],[80,1,80,2],[62,1,62,9],[62,10,62,13],[63,0,63,13],[64,1,64,9],[64,10,64,13],[65,1,65,9],[65,10,65,13],[59,1,59,9],[59,10,59,13],[60,1,60,9],[60,10,60,13],[61,1,61,9],[61,10,61,13],[58,1,58,9],[58,10,58,13],[52,0,52,13],[53,1,53,9],[53,10,53,13],[54,1,54,9],[54,10,54,13],[55,1,55,9],[55,10,55,13],[46,1,46,6],[46,7,46,8],[46,9,46,13],[47,1,47,6],[47,7,47,8],[47,9,47,13],[56,1,56,9],[56,10,56,13],[57,1,57,9],[57,10,57,13],[48,1,48,6],[48,7,48,8],[48,9,48,13],[49,1,49,6],[49,7,49,8],[49,9,49,13],[50,1,50,6],[50,7,50,8],[50,9,50,13],[51,1,51,6],[51,7,51,8],[51,9,51,13],[42,1,42,6],[42,7,42,8],[42,9,42,13],[43,1,43,6],[43,7,43,8],[43,9,43,13],[45,1,45,6],[45,7,45,8],[45,9,45,13],[44,1,44,6],[44,7,44,8],[44,9,44,13],[41,1,41,6],[41,7,41,8],[41,9,41,13],[35,1,35,6],[35,7,35,8],[35,9,35,13],[40,1,40,6],[40,7,40,8],[40,9,40,13],[36,1,36,6],[36,7,36,8],[36,9,36,13],[38,1,38,6],[38,7,38,8],[38,9,38,13],[39,1,39,6],[39,7,39,8],[39,9,39,13],[37,1,37,6],[37,7,37,8],[37,9,37,13],[34,1,34,6],[34,7,34,8],[34,9,34,13],[31,1,31,6],[31,7,31,8],[31,9,31,13],[32,1,32,6],[32,7,32,8],[32,9,32,13],[26,9,26,13],[23,1,23,6],[23,7,23,8],[23,9,23,13],[27,1,27,6],[27,7,27,8],[27,9,27,13],[29,0,29,13],[33,1,33,6],[33,7,33,8],[33,9,33,13],[30,1,30,6],[30,7,30,8],[30,9,30,13],[28,1,28,6],[28,7,28,8],[28,9,28,13],[25,1,25,6],[21,1,21,6],[21,7,21,8],[21,9,21,13],[19,1,19,6],[19,7,19,8],[19,9,19,13],[20,1,20,6],[20,7,20,8],[20,9,20,13],[22,1,22,6],[22,7,22,8],[22,9,22,13],[24,0,24,13],[25,7,25,8],[25,9,25,13],[26,1,26,6],[26,7,26,8],[6,1,6,5],[7,1,7,5],[8,1,8,5],[9,1,9,5],[17,1,17,6],[17,7,17,8],[17,9,17,13],[18,1,18,6],[18,7,18,8],[18,9,18,13],[15,1,15,6],[15,7,15,8],[15,9,15,13],[16,1,16,6],[16,7,16,8],[16,9,16,13],[0,0,0,13],[1,0,1,13],[2,1,2,5],[2,6,2,13],[3,1,3,5],[12,6,12,13],[13,0,13,13],[14,9,14,13],[14,1,14,6],[14,7,14,8],[3,6,3,13],[4,6,4,13],[5,6,5,13],[6,6,6,13],[7,6,7,13],[8,6,8,13],[9,6,9,13],[10,6,10,13],[11,6,11,13],[10,1,10,5],[11,1,11,5],[12,1,12,5],[4,1,4,5],[5,1,5,5]]}
["Certification Issue Checklist",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"Yes"]
["Part-1 Basic Information:",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"No"]
["Sl.","Requirements  ",null,null,null,null,"Comment",null,null,null,null,null,null,null,null,null,null,"NA"]
[1,"Company Name",null,null,null,null,{"$f":"'TNV-F-001'!B3","v":"HIGH JACK"}]
[2,"Address",null,null,null,null,{"$f":"'TNV-F-001'!B4","v":"74, rue du Docteur Lemoine, F-51100 REIMS (France)"}]
[3,"Technical Area",null,null,null,null,{"$f":"'TNV-F-002'!#REF!","v":{"$error":"#REF!"}}]
[4,"Review conducted by:"]
[5,"Does the services of Expert used?"]
[6,"Review Team"]
[6.1,"Prepared by:"]
[6.2,"Checked by:"]
[6.3,"Verified by:"]
[6.4,"Technical Expert:"]
["Part-2 Admin Review:"]
["Sl.","Requirements",null,null,null,null,null,"Confirming",null,"Comment"]
[1,"Does the Application is properly filled?"]
[2,"Does the agreement is properly filled?"]
[3,"Application review is appropriate?"]
[4,"Does the format used in client file is latest?"]
[5,"Does the Scope is correctly defined?"]
[6,"Does the Scope falls in the Scope of Accreditation?"]
[7,"TNV’s Process followed?"]
[8,"Time taken for Certification process is within limit set by client in TNV-F-01 (If any)"]
[9,"Does the Financial term clear?"]
["Verification of additional points in case of Re-Certification"]
[10,"The results of the review of the system over the period of certification verified?"]
[11,"Complaints received against the client?"]
[12,"Does the complaint is duly addressed?"]
[13,"Any reported misuse of Logo of CB/AB/IAF-MLA?"]
["Part-3 Technical Review:"]
["Sl.","Requirements",null,null,null,null,null,"Confirming",null,"Comment"]
[1,"Closure of Finding of Stage-1"]
[2,"Closure of Finding of Stage-2"]
[3,"Follow up audit Status (if any)"]
[4,"Is application review team competent?"]
[5,"Is certification Decision team competent?"]
[6,"Statutory requirements are adequately addressed?"]
[7,"Seasonality Factor considered if applicable?"]
[8,"Additional Travel Time requirement followed?"]
[9,"Temporary Site visited if required?"]
[10,"Information verified is in line with the scope?"]
[11,"Monitoring of the product are checked?"]
[12,"Client Competence is verified by the assessors?"]
[13,"Objective are properly defined?"]
[14,"Does the Audit team is fairly constituted & impartial?"]
[15,"Process & Elements of applicable standard reviewed properly?"]
[16,"Does the Audit Man-days appropriate?"]
[17,"Does the client falls in the TNV restricted list?"]
[18,"Is the details of SOA version correct?"]
[19,"Are the audit plans identified all the functional units/processes which needs to be audited?"]
[20,"Effectiveness of Internal audit for ISO 27001 checked & verified?"]
[21,"Effectiveness of MRM for ISO 27001 checked & verified?"]
["Part-4 Ground for Certification Decision by certification committee:"]
["Sl.","Certification Committee confirm:",null,null,null,null,null,null,null,null,"Acceptance"]
[1,"That the information provided by the audit team is sufficient with respect to the certification requirements and the scope for certification;"]
[2,"That it has reviewed, accepted and verified the effectiveness of correction and corrective actions, for all major nonconformities"]
[3,"That we have reviewed and accepted the client's plan for correction and corrective action for any minor non-conformity."]
[4,"Please Confirm that following information received from Audit Team:"]
[4.0999999999999996,"The audit reports"]
[4.2,"Comments on the nonconformities and, where applicable, the correction and corrective actions taken by the client,"]
[4.3,"Confirmation of the information provided to the certification body used in the application review,"]
[4.4000000000000004,"Confirmation that the audit objectives have been achieved,"]
[4.5,"a recommendation whether or not to grant certification, together with any conditions or observations."]
["Part-5 Recommendation of certification committee:"]
["Sl.","Particular",null,null,null,null,null,null,null,null,"Mark bold which is applicable"]
[1,"Continued with recommendation of Audit Team",null,null,null,null,null,null,null,null,"Issue Certificate"]
[2,"Additional information required",null,null,null,null,null,null,null,null,"Information collected shall be given in reviewer comment."]
[3,"Recommended follow up audit",null,null,null,null,null,null,null,null,"Specify the reason"]
[4,"Addition of Man-Day in Next audit",null,null,null,null,null,null,null,null,"Specify the reason"]
[5,"Training recommended to Audit Team",null,null,null,null,null,null,null,null,"Specify the clause & requirement"]
[6,"Certificate can’t be issued to client",null,null,null,null,null,null,null,null,"Specify the reason in seprate sheet & include comment on auditing process/ lack of evidence"]
[7,"Schedule special audit",null,null,null,null,null,null,null,null,"Please specify the reason & clauses need to be verified in special audit"]
["Part-6 Approval of Certification Decision"]
[]
[]
[]
[]
[]
["Name:",null,null,"Name:",null,null,null,null,"Name:"]
["QM",null,null,"CEO",null,null,null,null,"Expert"]
["Date:",null,null,"Date:",null,null,null,null,"Date:"]
[]
[]
["TNV-F-037 Checklist",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 06",null,"Revision Dt: 30 Apr 2024"]

{"sheet":"TNV-F-037-Z","index":19,"n_rows":58,"n_cols":4,"rows_kept":58,"cut":false,"hidden":false,"merged":[[56,0,56,1],[57,0,57,1],[0,0,0,3],[1,0,1,3],[14,0,14,3],[49,0,49,1],[37,0,37,1],[48,0,48,3],[54,0,54,2]]}
["Administrative Checklist before issuance of certificate"]
["Part A: Date Validation"]
["Sl.","Subject","Check","Comments written by Reviewer"]
[1,"Application Date",{"$f":"'TNV-F-001'!C71","v":"2025-03-28"}]
[2,"Application acceptance date ",{"$f":"'TNV-F-001'!J84","v":"00:00:00"}]
[3,"Contract Review Date",{"$f":"'TNV-F-002'!K3","v":"00:00:00"}]
[4,"Agreement Date ",{"$f":"'TNV-F-004'!K11","v":"00:00:00"}]
[5,"Verification of Conflict date- Stage 1",{"$f":"'TNV-F-008'!B35","v":"00:00:00"}]
[6,"Stage-1 Audit Plan Date ",{"$f":"'TNV-F-005 St1'!B50","v":"00:00:00"}]
[7,"Stage-1 Audit Date"]
[8,"Verification of Conflict date- Stage 2",{"$f":"'TNV-F-008 (2)'!B35","v":"00:00:00"}]
[9,"Stage-2 Audit Plan Date ",{"$f":"'TNV-F-005 St2'!B53","v":"00:00:00"}]
[10,"Stage-2 Audit Date"]
[11,"Certification Decision Date",{"$f":"'TNV-F-037'!E81","v":"00:00:00"}]
["Part B: Verification of Effectiveness"]
[1,"Clarity of Scope"]
[2,"Appropriateness of No. of Employees"]
[3,"Appropriateness of No. of Man-days"]
[4,"Audit programme available & appropriate"]
[5,"Verification of Temporary site"]
[6,"Verification of non-applicable clause (Exclusion)"]
[7,"Quality of Brief of the organisation"]
[8,"Auditee language"]
[9,"Auditor language"]
[10,"Participation of related person in audit (Top Management, HSE Representative, Doctor etc.)"]
[11,"Findings raised in Stage-1 "]
[12,"Findings raised in Stage-2"]
[13,"Grading of Findings"]
[14,"Effectiveness of Closure of Stage 2 findings"]
[15,"Quality of overall audit documentation"]
[16,"Any impartiality exist with business associate?"]
[17,"Additional control designed in TNV-F-02 are effective?"]
[18,"Involvement of any agent / solicitor"]
[19,"Role of such agent / solicitor"]
[20,"Control system established to ensure impartiality in certification process?"]
[21,"Any partiality exist with audit team?"]
[22,"Does the audit was re-constituted to eliminate partiality?"]
["Part C: Applicable only in case of Government Client",null,"Yes/No","Verification & Information"]
[1,"Does the work allocated directly to TNV?"]
[2,"Was there any involvement of any Agent / Consultant ? provide details if an."]
[3,"Tender allocated to:"]
[4,"Tender Amount"]
[5,"Amount Paid to TNV"]
[6,"Fees paid to Auditor"]
[7,"Date of Fees payment to Auditor"]
[8,"Evidence of Fees paid to the auditor"]
[9,"TNV-F-04 Agreement Signed with TNV or not? And physical copy available."]
[10,"Was the issuance of the certification process was impartial?"]
["Note: If there have been more than 1 auditor, payment evidence of all the auditor shall be maintained, but if inhouse auditor have been used for the auditing, no record need to be maintained regarding payment."]
["Part D: Input from Checklist",null,"Yes/No","Comments written by Reviewer"]
[1,"Any clause need special attention in upcoming audit?","No"]
[2,"Any addition of man-days recommended?","No"]
[3,"Any training need?","No"]
[4,"Any incident requires re-evaluation of the certification personnel/audit team member?","No"]
["Date:"]
[]
["TNV-F-037-Z Administrative Checklist",null,"Issue 01 ","Issue Date: 01 Apr 2020"]
["Revision No.: Nil",null,"Revision Date: Nil"]

{"sheet":"Final Certificate copy","index":20,"n_rows":26,"n_cols":3,"rows_kept":26,"cut":false,"hidden":false,"merged":[]}
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[null,null," "]

{"sheet":"TNV-F-001-KYC","index":21,"n_rows":44,"n_cols":13,"rows_kept":44,"cut":false,"hidden":true,"merged":[[43,4,43,5],[43,6,43,8],[43,9,43,10],[43,11,43,13],[43,0,43,3],[4,1,4,5],[4,6,4,10],[4,11,4,13],[5,1,5,5],[5,6,5,10],[5,11,5,13],[9,1,9,5],[9,6,9,10],[9,11,9,13],[12,1,12,5],[12,6,12,10],[12,11,12,13],[13,1,13,13],[10,1,10,5],[10,6,10,10],[10,11,10,13],[11,1,11,5],[11,6,11,10],[11,11,11,13],[0,0,0,13],[1,0,1,13],[2,1,2,5],[2,6,2,10],[2,11,2,13],[3,1,3,5],[3,6,3,10],[3,11,3,13],[8,1,8,5],[8,6,8,10],[8,11,8,13],[6,1,6,5],[6,6,6,10],[6,11,6,13],[7,1,7,5],[7,6,7,10],[7,11,7,13],[20,0,20,13],[17,1,17,5],[17,6,17,13],[18,1,18,5],[18,6,18,13],[19,1,19,5],[19,6,19,13],[14,1,14,5],[14,6,14,13],[15,1,15,5],[15,6,15,13],[16,1,16,5],[16,6,16,13],[21,0,21,1],[22,0,22,1],[23,0,23,1],[24,0,24,1],[25,0,25,1],[26,0,26,13],[24,2,24,5],[24,6,24,9],[24,10,24,13],[25,2,25,5],[25,6,25,9],[25,10,25,13],[21,2,21,5],[21,6,21,9],[21,10,21,13],[22,2,22,5],[22,6,22,9],[22,10,22,13],[23,2,23,5],[23,6,23,9],[23,10,23,13],[31,2,31,5],[31,6,31,9],[31,10,31,13],[27,0,27,1],[28,0,28,1],[29,0,29,1],[30,0,30,1],[31,0,31,1],[29,2,29,5],[29,6,29,9],[29,10,29,13],[30,2,30,5],[30,6,30,9],[30,10,30,13],[27,2,27,5],[27,6,27,9],[27,10,27,13],[28,2,28,5],[28,6,28,9],[28,10,28,13],[32,0,32,13],[33,0,33,2],[34,0,34,2],[35,0,35,2],[36,0,36,13],[33,3,33,6],[33,7,35,9],[33,10,35,13],[34,3,34,6],[35,3,35,6],[39,10,39,11],[39,12,39,13],[38,0,38,9],[39,0,39,9],[40,0,40,13],[37,3,37,6],[37,7,37,9],[37,10,37,13],[37,0,37,2],[38,10,38,11],[38,12,38,13]]}
["Annual KYC Update Form (for surveillance)"]
["A. Change information"]
["Sl.","Subject",null,null,null,null,"Information",null,null,null,null,"Particular"]
[1,"Certificate Number"]
[2,"Standards"]
[3,"Name of the company"]
[4,"Any change in the address or site"]
[5,"Any Change in the Scope"]
[6,"Change in legal commercial, organizational status or ownership"]
[7,"Any change in key managerial, decision-making or technical staff"]
[8,"Changes to legal requirements"]
[9,"Major changes to the management system and processes"]
[10,"Information on Complaint"]
[11,"Change in contact details: required (only if there is change)"]
[null,"Name of Contact personal"]
[null,"Address"]
[null,"Phone"]
[null,"Mail"]
[null,"Mobile"]
[null,"Website"]
["B. *Audit Location & Activities thereat (Inform the change)"]
[null,null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Address",null," "]
["Activities"]
["Core Process"]
["Support Process"]
["Total No. of Employee: (For multi-site, indicate all sites to be covered under certification) (Only if there is change)"]
[null,null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Full time",null," "]
["Part Time"]
["Shift"]
["Similar work"]
["Declaration: The information provide above is true to the best of our knowledge and Belief."]
["Name",null,null,null,null,null,null,"Signature:"]
["Designation"]
["Date"]
["For TNV System Certification Pvt Ltd Use Only:-"]
["Reviewed By:",null,null,null,null,null,null,"Date:"]
["Does man-days allocated are adequate",null,null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Change required in the audit program?",null,null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Comment (if Any): "]
[]
[]
["TNV F- 001-S - KYC Form",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-008-Surv 1","index":22,"n_rows":41,"n_cols":13,"rows_kept":41,"cut":false,"hidden":true,"merged":[[40,0,40,3],[40,4,40,5],[40,6,40,8],[40,9,40,10],[40,11,40,13],[4,1,4,2],[4,3,4,13],[0,0,0,13],[1,0,1,13],[2,0,2,13],[3,1,3,2],[3,3,3,13],[11,1,11,3],[11,4,11,7],[11,8,11,10],[11,11,11,13],[5,1,5,2],[5,3,5,13],[6,1,6,2],[6,3,6,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[9,1,9,2],[9,3,9,13],[10,0,10,13],[12,1,12,3],[12,4,12,7],[12,8,12,10],[12,11,12,13],[13,1,13,3],[13,4,13,7],[13,8,13,10],[13,11,13,13],[14,1,14,3],[14,4,14,7],[14,8,14,10],[14,11,14,13],[15,1,15,3],[15,4,15,7],[15,8,15,10],[15,11,15,13],[19,0,19,13],[20,1,20,13],[21,1,21,13],[22,0,22,13],[16,0,16,13],[17,1,17,4],[17,5,17,13],[18,1,18,4],[18,5,18,13],[23,1,23,11],[23,12,23,13],[24,1,24,11],[24,12,24,13],[25,1,25,11],[25,12,25,13],[26,1,26,11],[26,12,26,13],[27,1,27,11],[27,12,27,13],[28,1,28,11],[28,12,28,13],[32,0,35,1],[32,2,35,5],[32,6,35,9],[32,10,35,13],[29,1,29,11],[29,12,29,13],[30,1,30,11],[30,12,30,13],[31,0,31,1],[31,2,31,5],[31,6,31,9],[31,10,31,13],[36,0,36,1],[36,2,36,5],[36,6,36,9],[36,10,36,13],[37,3,37,5],[37,7,37,9],[37,11,37,13]]}
["Audit Intimation"]
["To,\nAll the concern,\n\nThis is to inform that proposed constitution of the audit team and client organization is disclosed to all related parties for their disclosure of the interest or any conflict of interest."]
["1. Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3:G3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001-KYC'!G6:K6","v":{"$error":"#VALUE!"}}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001-KYC'!G7:K7","v":{"$error":"#VALUE!"}}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5:E5","v":0}]
[5,"Standards",null,{"$f":"'TNV-F-001-KYC'!G5:K5","v":{"$error":"#VALUE!"}}]
[6,"Scope of the Audit",null,{"$f":"'TNV-F-001-KYC'!G8:K8","v":{"$error":"#VALUE!"}}]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,null,null,null,"Lead Auditor"]
[2,null,null,null,"Auditor"]
[3,null,null,null,"Technical Expert"]
[4,null,null,null,"Other (Observer / Translator etc.)"]
["3. Proposed Audit Schedule:"]
["Sl.","Subject",null,null,null,"Proposed Date"]
[1,"First Surveillance Audit "]
["4. Subject: Management System Certification Audit:"]
[null,"Audit Objective for Surveillance Audit:"]
[null,"i. Ensure your Management System has continued to fulfil requirements between Audits\nii. Ensure Internal Audits and Management Review have been performed to programme\niii. Review actions taken on nonconformities identified during previous Audits\niv. Evaluate your handling of any complaints\nv. Evaluate the continued effectiveness of the management system, regarding achieving your objectives\nvi. Evaluate your legal compliance and performance\nvii. Evaluate your progress of planned activities aimed at continual improvement\nviii. Ensure continuing operational control\nix. Review any changes to your organisation since the previous Audit\nx. Ensure that TNV and the Accreditation Body marks are being used correctly\nxi. Identify any areas for potential Improvement of the Management System"]
["5. Terms of reference for acceptance by Audit Team & Client:"]
["Sl.","Comment",null,null,null,null,null,null,null,null,null,null,"Acceptance"]
[1,"I am aware of facts which should influence my independence and objectiveness against the auditee. Information and data, which I will collect during audit conduction, neither I will provide to third parties nor I will use them for my benefits."]
[2,"As a part of Audit Team, I do hereby confirm & declare that I have no conflict of interest in accepting the assignment of the said company."]
[3,"As a part of Audit Team, I do hereby confirm that I have no vested interest in the said company and I am eligible and fit and proper person to be part of the audit team for said audit."]
[4,"I do hereby declare, and I reconfirm and abide with the confidentiality agreement as signed initially and I reassure that I shall not disclose any information of the client obtained during the audit except to the CAB unless required by under the law of land."]
[5,"I hereby confirm my agreement of appointment for the position as Lead Auditor/Auditor/Technical Expert for conducting of stated audit for the tentative date of audit for the said client and I shall ensure my availability for the said audit for stage-1 and stage-2"]
[6,"Kindly confirm acceptance of the schedule and auditor confirmation of not received would he considered that schedule and auditors are acceptable."]
[7,"Terms to accept the terms and to declare the impartiality if any, in case of no response received in 2 working days, same shall be treated as accepted and no partiality exists."]
["Acceptance by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:",null,"Date:",null,null,null,"Date:",null,null,null,"Date:"]
[]
[]
["TNV-F-008- Client Intimation",null,null,null,"Issue 02",null,"Issue Dt: 15 Sep 2018",null,null,"Rev 01",null,"Revision Dt: 25 Oct 2019"]

{"sheet":"TNV-F-005 Surv 1","index":23,"n_rows":52,"n_cols":12,"rows_kept":52,"cut":false,"hidden":true,"merged":[[51,0,51,3],[51,4,51,5],[51,6,51,8],[51,9,51,10],[51,11,51,13],[4,1,4,2],[4,3,4,13],[5,1,5,2],[5,3,5,13],[6,1,6,2],[6,3,6,13],[9,0,9,13],[10,1,10,3],[10,4,10,7],[10,8,10,10],[10,11,10,13],[13,1,13,3],[13,4,13,7],[13,8,13,10],[13,11,13,13],[14,1,14,3],[14,4,14,7],[14,8,14,10],[14,11,14,13],[0,0,0,13],[1,0,1,13],[2,1,2,2],[2,3,2,13],[3,1,3,2],[3,3,3,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[11,1,11,3],[11,4,11,7],[11,8,11,10],[11,11,11,13],[12,1,12,3],[12,4,12,7],[12,8,12,10],[12,11,12,13],[15,0,15,13],[16,0,16,1],[16,2,16,3],[16,4,16,5],[16,6,16,13],[17,0,17,1],[17,2,17,3],[17,4,17,5],[17,6,17,13],[20,0,20,1],[20,2,20,3],[20,4,20,5],[20,6,20,13],[21,0,21,1],[21,2,21,3],[21,4,21,5],[21,6,21,13],[18,0,18,1],[18,2,18,3],[18,4,18,5],[18,6,18,13],[19,0,19,1],[19,2,19,3],[19,4,19,5],[19,6,19,13],[24,0,24,1],[24,2,24,3],[24,4,24,5],[24,6,24,13],[25,0,25,1],[25,2,25,3],[25,4,25,5],[25,6,25,13],[22,0,22,1],[22,2,22,3],[22,4,22,5],[22,6,22,13],[23,0,23,1],[23,2,23,3],[23,4,23,5],[23,6,23,13],[28,0,28,1],[28,2,28,3],[28,4,28,5],[28,6,28,13],[29,0,29,1],[29,2,29,3],[29,4,29,5],[29,6,29,13],[26,0,26,1],[26,2,26,3],[26,4,26,5],[26,6,26,13],[27,0,27,1],[27,2,27,3],[27,4,27,5],[27,6,27,13],[32,0,32,1],[32,2,32,3],[32,4,32,5],[32,6,32,13],[33,0,33,1],[33,2,33,3],[33,4,33,5],[33,6,33,13],[30,0,30,1],[30,2,30,3],[30,4,30,5],[30,6,30,13],[31,0,31,1],[31,2,31,3],[31,4,31,5],[31,6,31,13],[36,0,36,1],[36,2,36,3],[36,4,36,5],[36,6,36,13],[37,0,37,1],[37,2,37,3],[37,4,37,5],[37,6,37,13],[34,0,34,1],[34,2,34,3],[34,4,34,5],[34,6,34,13],[35,0,35,1],[35,2,35,3],[35,4,35,5],[35,6,35,13],[40,0,40,1],[40,2,40,3],[40,4,40,5],[40,6,40,13],[41,0,41,1],[41,2,41,3],[41,4,41,5],[41,6,41,13],[38,0,38,1],[38,2,38,3],[38,4,38,5],[38,6,38,13],[39,0,39,1],[39,2,39,3],[39,4,39,5],[39,6,39,13],[47,0,47,1],[47,2,47,5],[47,6,47,9],[47,10,47,13],[48,3,48,5],[48,7,48,9],[48,11,48,13],[42,0,42,1],[42,2,42,5],[42,6,42,9],[42,10,42,13],[43,0,46,1],[43,2,46,5],[43,6,46,9],[43,10,46,13]]}
["Audit Plan of First Surveillance "]
["1. Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3:G3","v":0}]
[2,"Name of the Client",null,{"$f":"'TNV-F-001-KYC'!G6:K6","v":{"$error":"#VALUE!"}}]
[3,"Address of the Client",null,{"$f":"'TNV-F-001-KYC'!G7:K7","v":{"$error":"#VALUE!"}}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5:E5","v":0}]
[5,"Standards",null,{"$f":"'TNV-F-001-KYC'!G5:K5","v":{"$error":"#VALUE!"}}]
[6,"Scope of the Audit",null,{"$f":"'TNV-F-001-KYC'!G8:K8","v":{"$error":"#VALUE!"}}]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,{"$f":"'TNV-F-008-Surv 1'!B13:D13","v":0},null,null,"Lead Auditor"]
[2,{"$f":"'TNV-F-008-Surv 1'!B14:D14","v":0},null,null,"Auditor"]
[3,{"$f":"'TNV-F-008-Surv 1'!B15:D15","v":0},null,null,"Technical Expert"]
[4,{"$f":"'TNV-F-008-Surv 1'!B16:D16","v":0},null,null,"Other (Observer / Translator etc.)"]
["2. Audit Plan for First Surveillance"]
["Date & Time (From-To)",null,"Clause",null,"Audited By",null,"Process"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Acceptance by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:",null,"Date:",null,null,null,"Date:",null,null,null,"Date:"]
[]
[]
["TNV-F-005- Audit Plan",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-065 Surv 1","index":24,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":true,"merged":[]}

{"sheet":"Annual KYC-2","index":25,"n_rows":44,"n_cols":13,"rows_kept":44,"cut":false,"hidden":true,"merged":[[43,0,43,3],[43,4,43,5],[43,6,43,8],[43,9,43,10],[43,11,43,13],[0,0,0,13],[1,0,1,13],[2,1,2,5],[2,6,2,10],[2,11,2,13],[3,1,3,5],[3,6,3,10],[3,11,3,13],[6,1,6,5],[6,6,6,10],[6,11,6,13],[7,1,7,5],[7,6,7,10],[7,11,7,13],[4,1,4,5],[4,6,4,10],[4,11,4,13],[5,1,5,5],[5,6,5,10],[5,11,5,13],[10,1,10,5],[10,6,10,10],[10,11,10,13],[11,1,11,5],[11,6,11,10],[11,11,11,13],[8,1,8,5],[8,6,8,10],[8,11,8,13],[9,1,9,5],[9,6,9,10],[9,11,9,13],[15,1,15,5],[15,6,15,13],[16,1,16,5],[16,6,16,13],[17,1,17,5],[17,6,17,13],[12,1,12,5],[12,6,12,10],[12,11,12,13],[13,1,13,13],[14,1,14,5],[14,6,14,13],[18,1,18,5],[18,6,18,13],[19,1,19,5],[19,6,19,13],[20,0,20,13],[21,0,21,1],[21,2,21,5],[21,6,21,9],[21,10,21,13],[24,0,24,1],[24,2,24,5],[24,6,24,9],[24,10,24,13],[25,0,25,1],[25,2,25,5],[25,6,25,9],[25,10,25,13],[22,0,22,1],[22,2,22,5],[22,6,22,9],[22,10,22,13],[23,0,23,1],[23,2,23,5],[23,6,23,9],[23,10,23,13],[29,0,29,1],[29,2,29,5],[29,6,29,9],[29,10,29,13],[30,0,30,1],[30,2,30,5],[30,6,30,9],[30,10,30,13],[26,0,26,13],[27,0,27,1],[27,2,27,5],[27,6,27,9],[27,10,27,13],[28,0,28,1],[28,2,28,5],[28,6,28,9],[28,10,28,13],[31,0,31,1],[31,2,31,5],[31,6,31,9],[31,10,31,13],[32,0,32,13],[33,0,33,2],[33,3,33,6],[33,7,35,9],[33,10,35,13],[34,0,34,2],[40,0,40,13],[38,0,38,9],[38,10,38,11],[38,12,38,13],[39,0,39,9],[39,10,39,11],[39,12,39,13],[34,3,34,6],[35,0,35,2],[35,3,35,6],[36,0,36,13],[37,0,37,2],[37,3,37,6],[37,7,37,9],[37,10,37,13]]}
["Annual KYC Update Form (for surveillance)"]
["A. Change information"]
["Sl.","Subject",null,null,null,null,"Information",null,null,null,null,"Particular"]
[1,"Certificate Number"]
[2,"Standards"]
[3,"Name of the company"]
[4,"Any change in the address or site"]
[5,"Any Change in the Scope"]
[6,"Change in legal commercial, organizational status or ownership"]
[7,"Any change in key managerial, decision-making or technical staff"]
[8,"Changes to legal requirements"]
[9,"Major changes to the management system and processes"]
[10,"Information on Complaint"]
[11,"Change in contact details: required (only if there is change)"]
[null,"Name of Contact personal"]
[null,"Address"]
[null,"Phone"]
[null,"Mail"]
[null,"Mobile"]
[null,"Website"]
["B. *Audit Location & Activities thereat (Inform the change)"]
[null,null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Address",null," "]
["Activities"]
["Core Process"]
["Support Process"]
["Total No. of Employee: (For multi-site, indicate all sites to be covered under certification) (Only if there is change)"]
[null,null,"Main Site",null,null,null,"Additional Site (if any)",null,null,null,"Temporary Site (if any)"]
["Full time",null," "]
["Part Time"]
["Shift"]
["Similar work"]
["Declaration: The information provide above is true to the best of our knowledge and Belief."]
["Name",null,null,null,null,null,null,"Signature:"]
["Designation"]
["Date"]
["For TNV System Certification Pvt Ltd Use Only:-"]
["Reviewed By:",null,null,null,null,null,null,"Date:"]
["Does man-days allocated are adequate",null,null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Change required in the audit program?",null,null,null,null,null,null,null,null,null,"Yes ",null,"No "]
["Comment (if Any): "]
[]
[]
["TNV F- 001-S - KYC Form",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-008-Surv 2","index":26,"n_rows":41,"n_cols":13,"rows_kept":41,"cut":false,"hidden":true,"merged":[[40,0,40,3],[40,4,40,5],[40,6,40,8],[40,9,40,10],[40,11,40,13],[4,1,4,2],[4,3,4,13],[0,0,0,13],[1,0,1,13],[2,0,2,13],[3,1,3,2],[3,3,3,13],[11,1,11,3],[11,4,11,7],[11,8,11,10],[11,11,11,13],[5,1,5,2],[5,3,5,13],[6,1,6,2],[6,3,6,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[9,1,9,2],[9,3,9,13],[10,0,10,13],[12,1,12,3],[12,4,12,7],[12,8,12,10],[12,11,12,13],[13,1,13,3],[13,4,13,7],[13,8,13,10],[13,11,13,13],[14,1,14,3],[14,4,14,7],[14,8,14,10],[14,11,14,13],[15,1,15,3],[15,4,15,7],[15,8,15,10],[15,11,15,13],[24,1,24,11],[24,12,24,13],[16,0,16,13],[17,1,17,4],[17,5,17,13],[18,1,18,4],[18,5,18,13],[19,0,19,13],[20,1,20,13],[21,1,21,13],[22,0,22,13],[23,1,23,11],[23,12,23,13],[25,1,25,11],[25,12,25,13],[26,1,26,11],[26,12,26,13],[27,1,27,11],[27,12,27,13],[28,1,28,11],[28,12,28,13],[29,1,29,11],[29,12,29,13],[30,1,30,11],[30,12,30,13],[31,0,31,1],[31,2,31,5],[31,6,31,9],[31,10,31,13],[32,0,35,1],[32,2,35,5],[32,6,35,9],[32,10,35,13],[36,0,36,1],[36,2,36,5],[36,6,36,9],[36,10,36,13],[37,3,37,5],[37,7,37,9],[37,11,37,13]]}
["Audit Intimation"]
["To,\nAll the concern,\n\nThis is to inform that proposed constitution of the audit team and client organization is disclosed to all related parties for their disclosure of the interest or any conflict of interest."]
["1. Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3:G3","v":0}]
[2,"Name of the Client",null,{"$f":"'Annual KYC-2'!G6:K6","v":{"$error":"#VALUE!"}}]
[3,"Address of the Client",null,{"$f":"'Annual KYC-2'!G7:K7","v":{"$error":"#VALUE!"}}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5:E5","v":0}]
[5,"Standards",null,{"$f":"'Annual KYC-2'!G5:K5","v":{"$error":"#VALUE!"}}]
[6,"Scope of the Audit",null,{"$f":"'Annual KYC-2'!G8:K8","v":{"$error":"#VALUE!"}}]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,null,null,null,"Lead Auditor"]
[2,null,null,null,"Auditor"]
[3,null,null,null,"Technical Expert"]
[4,null,null,null,"Other (Observer / Translator etc.)"]
["3. Proposed Audit Schedule:"]
["Sl.","Subject",null,null,null,"Proposed Date"]
[1,"Second Surveillance Audit "]
["4. Subject: Management System Certification Audit:"]
[null,"Audit Objective for Surveillance Audit:"]
[null,"i. Ensure your Management System has continued to fulfil requirements between Audits\nii. Ensure Internal Audits and Management Review have been performed to programme\niii. Review actions taken on nonconformities identified during previous Audits\niv. Evaluate your handling of any complaints\nv. Evaluate the continued effectiveness of the management system, regarding achieving your objectives\nvi. Evaluate your legal compliance and performance\nvii. Evaluate your progress of planned activities aimed at continual improvement\nviii. Ensure continuing operational control\nix. Review any changes to your organisation since the previous Audit\nx. Ensure that TNV and the Accreditation Body marks are being used correctly\nxi. Identify any areas for potential Improvement of the Management System"]
["5. Terms of reference for acceptance by Audit Team & Client:"]
["Sl.","Comment",null,null,null,null,null,null,null,null,null,null,"Acceptance"]
[1,"I am aware of facts which should influence my independence and objectiveness against the auditee. Information and data, which I will collect during audit conduction, neither I will provide to third parties nor I will use them for my benefits."]
[2,"As a part of Audit Team, I do hereby confirm & declare that I have no conflict of interest in accepting the assignment of the said company."]
[3,"As a part of Audit Team, I do hereby confirm that I have no vested interest in the said company and I am eligible and fit and proper person to be part of the audit team for said audit."]
[4,"I do hereby declare, and I reconfirm and abide with the confidentiality agreement as signed initially and I reassure that I shall not disclose any information of the client obtained during the audit except to the CAB unless required by under the law of land."]
[5,"I hereby confirm my agreement of appointment for the position as Lead Auditor/Auditor/Technical Expert for conducting of stated audit for the tentative date of audit for the said client and I shall ensure my availability for the said audit for stage-1 and stage-2"]
[6,"Kindly confirm acceptance of the schedule and auditor confirmation of not received would he considered that schedule and auditors are acceptable."]
[7,"Terms to accept the terms and to declare the impartiality if any, in case of no response received in 2 working days, same shall be treated as accepted and no partiality exists."]
["Acceptance by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:",null,"Date:",null,null,null,"Date:",null,null,null,"Date:"]
[]
[]
["TNV-F-008- Client Intimation",null,null,null,"Issue 02",null,"Issue Dt: 15 Sep 2018",null,null,"Rev 01",null,"Revision Dt: 25 Oct 2019"]

{"sheet":"TNV-F-005 Surv 2","index":27,"n_rows":52,"n_cols":12,"rows_kept":52,"cut":false,"hidden":true,"merged":[[51,0,51,3],[51,4,51,5],[51,6,51,8],[51,9,51,10],[51,11,51,13],[4,1,4,2],[4,3,4,13],[5,1,5,2],[5,3,5,13],[6,1,6,2],[6,3,6,13],[9,0,9,13],[10,1,10,3],[10,4,10,7],[10,8,10,10],[10,11,10,13],[13,1,13,3],[13,4,13,7],[13,8,13,10],[13,11,13,13],[14,1,14,3],[14,4,14,7],[14,8,14,10],[14,11,14,13],[0,0,0,13],[1,0,1,13],[2,1,2,2],[2,3,2,13],[3,1,3,2],[3,3,3,13],[7,1,7,2],[7,3,7,13],[8,1,8,2],[8,3,8,13],[11,1,11,3],[11,4,11,7],[11,8,11,10],[11,11,11,13],[12,1,12,3],[12,4,12,7],[12,8,12,10],[12,11,12,13],[15,0,15,13],[16,0,16,1],[16,2,16,3],[16,4,16,5],[16,6,16,13],[17,0,17,1],[17,2,17,3],[17,4,17,5],[17,6,17,13],[20,0,20,1],[20,2,20,3],[20,4,20,5],[20,6,20,13],[21,0,21,1],[21,2,21,3],[21,4,21,5],[21,6,21,13],[18,0,18,1],[18,2,18,3],[18,4,18,5],[18,6,18,13],[19,0,19,1],[19,2,19,3],[19,4,19,5],[19,6,19,13],[24,0,24,1],[24,2,24,3],[24,4,24,5],[24,6,24,13],[25,0,25,1],[25,2,25,3],[25,4,25,5],[25,6,25,13],[22,0,22,1],[22,2,22,3],[22,4,22,5],[22,6,22,13],[23,0,23,1],[23,2,23,3],[23,4,23,5],[23,6,23,13],[28,0,28,1],[28,2,28,3],[28,4,28,5],[28,6,28,13],[29,0,29,1],[29,2,29,3],[29,4,29,5],[29,6,29,13],[26,0,26,1],[26,2,26,3],[26,4,26,5],[26,6,26,13],[27,0,27,1],[27,2,27,3],[27,4,27,5],[27,6,27,13],[32,0,32,1],[32,2,32,3],[32,4,32,5],[32,6,32,13],[33,0,33,1],[33,2,33,3],[33,4,33,5],[33,6,33,13],[30,0,30,1],[30,2,30,3],[30,4,30,5],[30,6,30,13],[31,0,31,1],[31,2,31,3],[31,4,31,5],[31,6,31,13],[36,0,36,1],[36,2,36,3],[36,4,36,5],[36,6,36,13],[37,0,37,1],[37,2,37,3],[37,4,37,5],[37,6,37,13],[34,0,34,1],[34,2,34,3],[34,4,34,5],[34,6,34,13],[35,0,35,1],[35,2,35,3],[35,4,35,5],[35,6,35,13],[40,0,40,1],[40,2,40,3],[40,4,40,5],[40,6,40,13],[41,0,41,1],[41,2,41,3],[41,4,41,5],[41,6,41,13],[38,0,38,1],[38,2,38,3],[38,4,38,5],[38,6,38,13],[39,0,39,1],[39,2,39,3],[39,4,39,5],[39,6,39,13],[47,0,47,1],[47,2,47,5],[47,6,47,9],[47,10,47,13],[48,3,48,5],[48,7,48,9],[48,11,48,13],[42,0,42,1],[42,2,42,5],[42,6,42,9],[42,10,42,13],[43,0,46,1],[43,2,46,5],[43,6,46,9],[43,10,46,13]]}
["Audit Plan of Second Surveillance "]
["1. Client Information:"]
["Sl.","Subject",null,"Particular"]
[1,"Reference Number (unique ID Allotted)",null,{"$f":"'TNV-F-002'!D3:G3","v":0}]
[2,"Name of the Client",null,{"$f":"'Annual KYC-2'!G6:K6","v":{"$error":"#VALUE!"}}]
[3,"Address of the Client",null,{"$f":"'Annual KYC-2'!G7:K7","v":{"$error":"#VALUE!"}}]
[4,"Contact Details",null,{"$f":"'TNV-F-001'!B5:E5","v":0}]
[5,"Standards",null,{"$f":"'Annual KYC-2'!G5:K5","v":{"$error":"#VALUE!"}}]
[6,"Scope of the Audit",null,{"$f":"'Annual KYC-2'!G8:K8","v":{"$error":"#VALUE!"}}]
["2. Constitution of the Audit team:"]
["Sl.","Name",null,null,"Role in Audit ",null,null,null,"Impartial",null,null,"Comment (If Any)"]
[1,{"$f":"'TNV-F-008-Surv 2'!B13:D13","v":0},null,null,"Lead Auditor"]
[2,{"$f":"'TNV-F-008-Surv 2'!B14:D14","v":0},null,null,"Auditor"]
[3,{"$f":"'TNV-F-008-Surv 2'!B15:D15","v":0},null,null,"Technical Expert"]
[4,{"$f":"'TNV-F-008-Surv 2'!B16:D16","v":0},null,null,"Other (Observer / Translator etc.)"]
["2. Audit Plan for Second Surveillance"]
["Date & Time (From-To)",null,"Clause",null,"Audited By",null,"Process"]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
["Acceptance by Lead Auditor",null,"Acceptance by Auditor (If Any)",null,null,null,"Acceptance by Technical Expert (If Any)",null,null,null,"Acceptance by Client"]
[]
[]
[]
[]
["Signature",null,"Signature",null,null,null,"Signature",null,null,null,"Signature"]
["Date:",null,"Date:",null,null,null,"Date:",null,null,null,"Date:"]
[]
[]
["TNV-F-005- Audit Plan",null,null,null,"Issue 01",null,"Issue Dt: 01st July 2017",null,null,"Rev 00",null,"Revision Dt: NA"]

{"sheet":"TNV-F-065 Surv 2","index":28,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":true,"merged":[]}

{"sheet":"IMAGES","index":29,"n_rows":39,"n_cols":5,"rows_kept":39,"cut":false,"hidden":true,"merged":[]}
[1,"J76","J78","C:\\TNV_AUDIT\\client.png","TNV-F-001"]
[2,"B84","B85","C:\\TNV_AUDIT\\busassoc.png","TNV-F-001"]
[3,"A94","A97","C:\\TNV_AUDIT\\assmentmgr.png","TNV-F-002"]
[4,"D94","D97","C:\\TNV_AUDIT\\qualitymgr.png","TNV-F-002"]
[5,"I94","I97","C:\\TNV_AUDIT\\techexp.png","TNV-F-002"]
[6,"J93","J95","C:\\TNV_AUDIT\\client.png","TNV-F-001-A"]
[7,"B156","B159","C:\\TNV_AUDIT\\company.png","TNV-F-004"]
[8,"H156","H159","C:\\TNV_AUDIT\\client.png","TNV-F-004"]
[9,"A30","A33","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-008"]
[10,"C30","C33","C:\\TNV_AUDIT\\audit.png","TNV-F-008"]
[11,"G30","G33","C:\\TNV_AUDIT\\techexp1.png","TNV-F-008"]
[12,"K30","K33","C:\\TNV_AUDIT\\client.png","TNV-F-008"]
[13,"A30","A33","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-008 (2)"]
[14,"C30","C33","C:\\TNV_AUDIT\\audit1.png","TNV-F-008 (2)"]
[15,"G30","G33","C:\\TNV_AUDIT\\techexp1.png","TNV-F-008 (2)"]
[16,"K30","K33","C:\\TNV_AUDIT\\client.png","TNV-F-008 (2)"]
[17,"A46","A49","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-005 St1"]
[18,"C46","C49","C:\\TNV_AUDIT\\audit1.png","TNV-F-005 St1"]
[19,"G46","G49","C:\\TNV_AUDIT\\techexp.png","TNV-F-005 St1"]
[20,"K46","K49","C:\\TNV_AUDIT\\client.png","TNV-F-005 St1"]
[21,"B133","B136","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-014 ABMS"]
[22,"H133","H136","C:\\TNV_AUDIT\\client.png","TNV-F-014 ABMS"]
[23,"A140","A143","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-014 IMS"]
[24,"D140","D143","C:\\TNV_AUDIT\\client.png","TNV-F-014 IMS"]
[25,"A64","A67","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-005 St2"]
[26,"C64","C67","C:\\TNV_AUDIT\\audit.png","TNV-F-005 St2"]
[27,"G64","G67","C:\\TNV_AUDIT\\techexp.png","TNV-F-005 St2"]
[28,"K64","K67","C:\\TNV_AUDIT\\client.png","TNV-F-005 St2"]
[29,"A74","A77","C:\\TNV_AUDIT\\company.png","TNV-F-014 ISMS"]
[30,"D74","D77","C:\\TNV_AUDIT\\client.png","TNV-F-014 ISMS"]
[31,"A171","A174","C:\\TNV_AUDIT\\company.png","TNV-F-015 ISMS"]
[32,"C171","C174","C:\\TNV_AUDIT\\client.png","TNV-F-015 ISMS"]
[33,"A19","A23","C:\\TNV_AUDIT\\111.png","TNV-F-011"]
[34,"H19","H23","C:\\TNV_AUDIT\\112.png","TNV-F-011"]
[35,"A70","A73","C:\\TNV_AUDIT\\qualitymgr.png","TNV-F-037"]
[36,"D70","D73","C:\\TNV_AUDIT\\techexp1.png","TNV-F-037"]
[37,"I70","I73","C:\\TNV_AUDIT\\techexp1.png","TNV-F-037"]
[38,"A134","A137","C:\\TNV_AUDIT\\leadaudit.png","TNV-F-015 IMS"]
[39,"C134","D137","C:\\TNV_AUDIT\\client.png","TNV-F-015 IMS"]