IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes
The mandatory accreditation rules for using information and communication technology in audits and assessments: security and privacy, prior agreement and fallback, risk assessment, infrastructure checks, planning the extent of remote work, team competence, time, reporting and virtual sites.
IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes is a compliance framework from International (IAF MLA and Global ACI Arrangement signatories) with 2 domains and 10 controls. The largest domains are Clause 4.2: Process requirements – IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes (7 controls), Clause 4.1: Security and confidentiality – IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (2)
Clause 4.1: Security and confidentiality – IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes
| Code | Title |
|---|---|
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.1.1 | Protect the security, confidentiality and privacy of information handled through ICT |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.1.2 | Agree the use of ICT with the assessed body in advance, under information security and data protection rules |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.1.3 | Use other methods where the security measures are not met or no agreement is reached |
Clause 4.2: Process requirements – IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes
| Code | Title |
|---|---|
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.1 | Identify, document and manage the risks and opportunities of using ICT, including technology selection |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.2 | Check at application review that every party has the infrastructure for the proposed ICT |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.3 | State in the assessment plan how and how far ICT will be used |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.4 | Ensure team members and others involved are competent in the ICT used and aware of its risks |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.5 | Count ICT use within the total assessment time and allow for the extra planning |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.6 | Record in reports the extent and effectiveness of ICT use |
| iaf-md-4-global-aci-tech-3-003-use-of-ict-for-conformity-assessment-purposes::4.2.7 | Note virtual sites in the documentation and identify the activities performed there |
What is IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes and who does it apply to?
IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes is a compliance framework from International (IAF MLA and Global ACI Arrangement signatories) with 2 domains and 10 controls. The mandatory accreditation rules for using information and communication technology in audits and assessments: security and privacy, prior agreement and fallback, risk assessment, infrastructure checks, planning the extent of remote work, team competence, time, reporting and virtual sites. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes actually require?
IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes has 10 controls organised across 2 domains. The largest domains are Clause 4.2: Process requirements – IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes (7 controls), Clause 4.1: Security and confidentiality – IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes do I already cover?
IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes?
Start your IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about IAF MD 4 / Global ACI TECH-3-003 Use of ICT for Conformity Assessment Purposes requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 10 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required