SCAN Security Audit Cadence and Report Expiration Date| SCAN审核周期及报告有效期

1. SCAN Report Validity (请您根据需要下拉查看中文信息)

The SCAN onsite/immersive audit is valid for one year. To qualify for a 2-year audit cadence, the following criteria must be met:

• Associated with a SCAN Member in good standing at time of the original audit, AND
• A compliance score of 95% or higher, with all Corrective Actions addressed and approved by SCAN; OR a compliance score between 85% and 94%, provided the country security risk is Low, Guarded, or Elevated, and all Corrective Actions are addressed and approved by SCAN.
• In addition to the above requirements, 12 months from the day the onsite/immersive audit was conducted, the facility must complete a SCAN Supply Chain Security Audit (Year 2 Self Audit) assigned by SCAN Program Management Team. Failure to complete the Year 2 Self-Audit within the designated timeframe will trigger an onsite/immersive audit assignment immediately to commence in place of the self-audit.

Please note: Regardless of above criteria, the Year 2 Self Audit is subject to change to onsite/immersive audit based on the Country Security Threat Index at time of annual review, and vice versa.

Under any circumstance listed below, the facility will not be eligible for the 2-year audit cadence, and the audit will be valid for 1 year only:

• CAPAs are not completed or submitted, the report will be tagged “CAPAs: No response – Closed”.
• CAPA rejected due to the audited facility not submitting sufficient response based on SCAN requirements after 3 CAPA rounds. Your score for this question will remain unchanged and the report will be tagged “CAPAs: Partially addressed – Closed”.
• Selecting the option “Will not implement/will not comply with corrective action request” as this indicates acknowledgement of the non-compliance. Your score for this question will remain unchanged and your report will be tagged “CAPAs: Recommendations Rejected – Closed”.

Remark:

• Please contact [e-mail] if you need to know your current audit report validity or Country risk level of your location.
• In regard to the audit rating or audit result per specific member, please contact them directly for more information.

2. Audit Cadence: for SCAN Re-audit/Year 2 Self Audit

SCAN will process the Re-audit/Year 2 Self Audit 45-60 days prior to the audit expiration date on behalf of the SCAN Association. You can also apply for a re-audit earlier as needed by following the hyperlink Order a SCAN Audit to request the audit.

1. SCAN 报告有效期

SCAN现场/远程审核的有效期为一年。要获得两年审核周期的资格，必须满足以下标准：

• 首次审计时与拥有良好信誉的SCAN会员关联，并且
• 审核初始合规得分达到95%或以上，且被分配的所有整改措施已处理回应并获得SCAN批准的；或审核初始合规得分在85%至94%之间，但所在国家安全风险等级为低、一般或中等，且所有整改措施已处理回应并获得SCAN批准的。
• 除上述要求外，现场/远程审核完成后的12个月内，工厂必须完成由SCAN项目管理团队指定的SCAN线上供应链安全自我评估（SCAN Year 2 Self Audit）。若未在规定时间内完成第2年自我评估，将立即触发SCAN现场/远程审核安排以取代线上自我评估。

请注意：无论是否符合上述标准，第2年自我评估可能根据年度审核时的国家安全风险指数调整为现场/远程审核，反之亦然。

若出现以下任一情况，工厂将不具备两年审核周期的资格，审核有效期仅为一年：

• 若未完成或未提交被分配的整改措施，报告将被标记为“CAPAs：未响应——已关闭”。
• 若因被审核工厂未根据SCAN要求在3轮CAPA流程内提交充分回应导致CAPA被拒绝，该问题得分将维持不变，报告标记为“CAPAs：部分处理——已关闭”。
• 若选择“将不实施/不遵守纠正措施要求”选项，即表示承认不合规。该问题得分将维持不变，报告标记为“CAPAs：建议被拒绝——已关闭”。

备注：

• 如需了解当前审核报告的有效期或所在国家的风险等级，请联系[e-mail]。
• 关于每个特定SCAN会员的审核评级或审核结果，请直接联系他们以获取更多信息。

 2. SCAN复审/线上供应链安全自我评估周期

SCAN 将代表 SCAN 协会在审核到期日前45-60天发起复审/线上供应链安全自我评估。您也可以根据需要提前申请重新审核，方法是点击超链接 Order a SCAN Audit 来申请审核。