VAP Glossary and FAQ

Additional resources and information about the Validated Assessment Process.

VAP Glossary and FAQ

Validated Assessment Process Glossary

The Validated Assessment Process (VAP) has been created to increase efficiency and reduce redundancy of onsite CSR compliance assessments in the electronics industry supply chain. Below is a glossary of commonly used VAP terminology.

AMA

AQM

Auditee

Auditee Managed Assessment

Audit Quality Manager

CAP

Corrective Action Plan

CMA

Customer Managed Assessment

EICC

 

EICC Administrator

First Party Audit

Follow Up Validated Assessment

IRCA

Second Party Assessment

Third Party Assessment

Third Party Supplier

VA

VA CAP

Validated Assessment

 

Validated Assessment Corrective Action Plan

Validated Assessment Process

Validated Assessment Process Operations Management Team

Validated Assessment Report

VAP

VAP CAP Advisory Committee

VAP OMT

VAR

 

AMA: Auditee Managed Assessment

AQM: Audit Quality Manager

Auditee: Company whose facility site is the subject of the on-site assessment.

Auditee Managed Assessment: Assessment overseen by the auditee

Audit Quality Manager: Role assigned to the technical assessment program management services support entity.

CAP: Corrective Action Plan

CMA: Customer Managed Assessment

Corrective Action Plan: Plan approved by the APM to close non-conformances identified during the initial assessment.

Customer Managed Assessment: Assessment of a facility overseen by one of the facility's customers.

EICC: Electronic Industry Citizenship Coalition

EICC Administrator: EICC staff.

First Party Audit: An audit usually performed by the company or department within a company upon itself. A first party audit is usually conducted by the organization’s internal audit group, however employees within a department or company may also conduct an assessment similar to a first party audit. In such an instance this "audit" is generally referred to as a "self assessment”. 1st Party Audits are excellent tools for gauging an organization’s continuous improvement efforts as well as measuring the return on investment for sustaining that effort.

Follow Up Validated Assessment: A follow up audit to a full VA typically covers a subset of previous nonconformance items with the intent to verify status of improvements as defined in an approved VA CAP.

IRCA: International Register of Certified Auditors

Second Party Audit: An audit of another organization’s program not under the direct control or within the organizational structure of the auditing organization. Second party audits are usually performed by the customer upon its suppliers (or potential suppliers) to ascertain whether or not the supplier can meet existing or proposed contractual requirements.

Third Party Audit: An objective assessment of an organization’s system conducted by an independent, outside auditor or team of auditors. The term "third party" is synonymous with the VAP APM and VAP audit firms whose primary responsibility is to assess an organization’s system for conformance to the Code.

Third Party Supplier: Firms in addition to the “Supplier”, the EICC legal counsel, the EICC Administrator engaged to provide VAP support, and third party Audit Firms.

VA: Validated Assessment

VA CAP: Validated Assessment Corrective Action Plan

Validated Assessment: EICC-approved, third-party onsite assessment managed in accordance with approved quality processes and overseen by the selected Assessment Program Management firm to meet “EICC Validated Assessment Process Quality Requirements.”

Validated Assessment Corrective Action Plan: Corrective action plan completed by the Auditee in the process of improving practices identified as non-conforming in a full VA.

Validated Assessment Process: The EICC onsite compliance verification program that results in a ‘Validated’ Assessment Report.

Validated Assessment Process Operations Management Team: EICC management team responsible for supporting and guiding the VAP to ensure program success. The VAP OMT includes one member of the EICC Board of Directors at a minimum.

Validated Assessment Report: Assessment report with third-party quality control and validation by the EICC AQM.

VAP: Validated Assessment Process

VAP CAP Advisory Committee: Designated EICC group to act as a VAP escalation arbiter. Participants must possess adequate knowledge and experience and represent a balance between organizational entity types across the supply chain. Outside experts may be utilized as approved by the VAP OMT.

VAP OMT: Validated Assessment Process Operations Management Team

VAR: Validated Assessment Report

Validated Assessment Process (VAP) FAQ

  1. What is the EICC?
  2. What is the Validated Assessment Process (VAP)?
  3. How does the VAP process work?
  4. What is the scope of a Validated Assessment?
  5. Who owns the Validated Assessment Report?
  6. Can the Validated Assessment Report be shared with multiple customers?
  7. How is confidential information protected?
  8. Who pays for the Validated Assessment?
  9. How much does a Validated Assessment cost?
  10. What are the payment terms for a Validated Assessment?
  11. How long will an assessment of a facility take?
  12. How long is the Validated Assessment Report valid?
  13. When can I purchase or request a Validated Assessment?
  14. In which countries can Validated Assessments be conducted?
  15. When will the assessment date be scheduled?
  16. What level of quality can be expected from a Validated Assessment?
  17. How are the independent third-party auditors that conduct the EICC VAP certified?
  18. Will a certificate be issued once all the corrective actions have been adequately addressed?
  19. Who are the VAP contacts?
  20. What are the roles and related EICC contracts of the parties in the VAP?
  21. Who administers the VAP?
  22. Where can I obtain a copy of the EICC Insurance Certificate?
  23. How many companies have undergone a Validated Assessment?
  24. I have more questions about the VAP; who should I contact?

What is the EICC?

The Electronic Industry Citizenship Coalition (EICC) is a group of companies working together to create a comprehensive set of tools and methods that support credible implementation of the EICC Code of Conduct throughout the electronics industry supply chain.

What is the Validated Assessment Process (VAP)?

The Validated Assessment Process is an industry solution for improving business practices by providing companies assurance in identifying risks and driving improvements and robust management systems for labor, ethics, health, safety and environmental conditions in the Information Communication Technology supply chain. It is a third-party Validated Assessment Process that provides an independent onsite assessment of a supplier, potential supplier, and/or a company’s own facilities.

The end-to-end process and the audit firm are independently managed by the EICC Audit Quality Manager (AQM) to ensure process integrity and adherence to the EICC VAP Quality Management Guidelines. The Auditee is required to provide necessary Corrective Action Plans following the release of the Validated Assessment Report (VAR) and undergo a closure assessment as needed.

How does the VAP process work?

There are five primary steps to the EICC VAP process, all of which are guided by the APM.

  • Step 1: Initiate Request - company requests an onsite assessment of a supplier or it's own facility and get started with contracts.
  • Step 2: Scheduling - finalize cost and scheduling with a selected audit firm.
  • Step 3: On site assessment
  • Step 4: Report - ensure quality assurance and the release of the VAR. This step covers planning for Corrective Action Plan (CAP) management.
  • Step 5: Follow Up - CAP management and Closure assessment verification.

Additional detail is available on the main VAP page.

What is the scope of a Validated Assessment?

The scope of a Validated Assessment includes all common and customer-specific areas of a facility or portions as agreed to by the APM and the Auditee.

Who owns the Validated Assessment Report?

The VAR is always owned by the Auditee. The Auditee Agreement obligates the Auditee to provide access to and distribution of the VAR to interested Audit Buyers who are approved by the Auditee and to ensure the VAR results are available for industry-wide aggregation and reporting. The Auditee is free to provide the VAR to additional customers at no cost beyond the initial cost of the assessment.

See the main VAP page to view the Auditee Agreement.

Can the Validated Assessment Report be shared with multiple customers?

By design the VAP provides for sharing of the VAR at the discretion of the Auditee. There are three primary functions that allow for this:

  • EICC VAP Contract agreements ensure approved customers will receive the VAR.
  • EICC VAP Quality Management guideline ensures that a confidentiality review is conducted as part of the quality assurance process.
  • The scope of the VAP audit is arranged by the VAP APM and the Auditee to ensure it covers areas of a facility that are appropriate to the Auditee’s customers.

How is confidential information protected?

All parties in the VAP will sign a non-disclosure agreement, known as the Agreement for the Exchange of Confidential Information (AECI), with the EICC. The Assessment Program Manager and the Audit Firms are under the same confidentiality agreements with the EICC and are the only parties with access to confidential information required throughout the VAP. Information will be available as defined by the VAP contracts and existing business agreements. Any sensitive information will be protected in compliance with all applicable legislation.

See the main VAP page to view the AECI.

Who pays for the Validated Assessment?

There are two primary ways in which Validated Assessment Reports are generated based on who the Audit Buyer is:

  • Scenario One: Audit Buyer is the Auditee
  • Scenario Two: Audit Buyer(s) is a customer

The Audit Buyer will pay the cost of services (Validated Assessments, CAP Management, and/or Validated Closure Assessments) in advance of the assessments being conducted. This may require audit buyers to get special permission from their purchasing and procurement departments.

How much does a Validated Assessment cost?

The fee includes Assessment Program Management and the third-party onsite assessment cost. Costs vary due to the size and complexity of a specific facility. Details will be provided as your company engages with the APM.

What are the payment terms for a validated assessment?

Audit buyers will be invoiced for the VAP assessment as a part of the contracting process before the assessment is scheduled. Payment terms are 60 days. Assessments can be scheduled and conducted once the contracting is completed, but the final assessment report will not be released until payment has been received.

How long will an assessment of a facility take?

The duration of a facility VA depends on the size (geographic and number of workers) and complexity (processes) of a facility, and may range from 2 to 12 person days onsite depending on the specific factors of a site. The actual planned time onsite is determined by the APM once a completed Self Assessment Questionnaire from the Auditee has been received.

How long is the Validated Assessment Report valid?

A VAR is valid up to two years. Typically a new VA would be driven by a customer risk assessment and/or significant changes in a facility such as in size or by adding additional processes, new management, etc. The reports can be obtained directly from the Auditee. The APM will ensure Audit Buyers get access to the VARs they have purchased. The APM may provide a validation check with the final released report as requested.

When can I purchase or request a Validated Assessment?

Validated Assessments can be requested at any time by contacting the APM.

In which countries can Validated Assessments be conducted?

Validated Assessments are conducted globally according to the availability of EICC-approved auditors. Contact the APM for specific regional details.

When will the assessment date be scheduled?

Once a validated assessment is requested, it is up to the audit firm assigned by the APM and the auditee to confirm a mutually agreeable date. An interested customer of the auditee may request a specific target date up front directly to the auditee. Confirming the schedule is a part of the contracting process managed by the APM.

What level of quality can be expected from a Validated Assessment?

The Validated Assessment Process provides the highest quality information gathering and analysis of working conditions at a facility within the industry. In order to ensure this consistent level of quality, the EICC has implemented the following key components of its program:

Independent selection and allocation of qualified third -party audit firms and overall quality review through an expert Assessment Program Manager

Consistent governance based on the EICC Code of Conduct and the VAP Operations Manual

Independent performance review of each audit firm and qualified/certified auditor participating in the Validated Assessment Process

Assurance of sufficient time on site with a minimum of two auditors to ensure the integrity and depth of information gathering

Optimized scope of coverage for seamless sharing of the resulting Validated Assessment Report to multiple site customers at the Auditee’s discretion

IRCA Recognized Labor and Ethics Auditor Training certification program for lead auditors

Independent management of the VAP Corrective Action program

Commitment to quality and continuous improvement per the Service Level and Quality Statement

Expert helpdesk on EICC Code of Conduct provisions and interpretation available to auditees, auditors, and EICC members throughout the process

Contact the Assessment Program Manager for the detailed VAP Quality Management Guidelines.

How are the independent auditors used by the EICC VAP certified?

The AQM uses a rigorous process to select the current auditors based on training and experience. The EICC has contracted with Verité to provide preparatory auditor certification training for Labor & Ethics. Information and class availability is posted on the EICC events page. Individual auditors may begin the process of obtaining EICC Certification for Labor & Ethics through the International Registrar of Certificated Auditors (IRCA) after having completed the Labor and Ethics Auditor Training. In parallel the VAP continues to ensure all of the selected audit firms have received VAP training from the Assessment Program Manager until the necessary number of third-party auditors have been certified by IRCA.

Will a certificate be issued once all the corrective actions have been adequately addressed?

The VAP Operations Management Team (VAP OMT) is currently working to develop performance recognition such as a certificate of performance. This is not available at this time but will be communicated to VAP participants once finalized.

Who are the VAP contacts?

See the main VAP page for contact information.

What are the roles and related EICC contracts of the parties in the VAP?

See the main VAP page for information about contractual documents. 

Who administers the VAP?

The EICC is the independent administrator and central contracting organization of the VAP. Audit Buyers execute contracts with the EICC to purchase validated assessments. The EICC contracts with the AQM and the independent third-party audit firms to run the VAP. Auditees execute the Auditee Agreement. 

Where can I obtain a copy of the EICC Insurance Certificate?

The EICC Insurance Certificate is available upon request from the APM.

How many companies have undergone a Validated Assessment?

EICC members have undergone more than 2,500 VAP onsite compliance assessments by independent third-party audit firms approved by the EICC.

I have more questions about the VAP; who should I contact?

Please see the main VAP page for additional information and contact details.