FAQs Archive

Q: Does ViaSyst provide system monitoring and logging capabilities?

Yes, at multiple levels. ViaSyst applies a zero-tolerance security and confidentiality policy regarding IT security and data protection. At the infrastructure level, hosting is provided by ISO 27001-certified providers, which mandates continuous monitoring, incident management, and logging controls as part of their certification scope. At the application level, ViaSyst includes a notifications and alerts system (e.g., triggered during CAPA/NC validation, audit validation, and other workflow events), as well as performance dashboards enabling real-time monitoring of platform activity. CB Admins have access to comprehensive data extraction capabilities covering audits, findings, certificates, and qualifications, providing an auditable trail of all platform activity.

Q: What authentication controls does ViaSyst enforce?

ViaSyst enforces password-based authentication for all user types, combined with a formal password policy. New users receive a secure email invitation to generate their own password directly, eliminating the need to share credentials via email. Each user can reset their password at any time from the login page. Password policies are enforced platform-wide. Inactivating a user account immediately and automatically blocks their access. For further details on current password complexity requirements, please contact ViaSyst directly or refer to the user guide. ⚠️ Note for internal review: The public documentation does not explicitly detail password complexity rules (e.g., minimum length, character classes) or account lockout thresholds after failed attempts. If the client requires confirmation of these specific controls, it is recommended to request a technical security sheet from the ViaSyst team directly.

Q: Is data transmitted over ViaSyst encrypted?

Yes. ViaSyst is a SaaS platform accessed exclusively via the web (HTTPS), ensuring that all data exchanged between users and the platform is encrypted in transit using standard TLS protocols. The platform supports secured data exchange and storage, eliminating the need for email-based file transfers. Hosting is provided by professional, ISO 27001-certified providers located in Switzerland and/or Western Europe, ensuring that infrastructure-level security controls, including encryption standards, are subject to independent certification and audit.

Q: Which types of data analysis is it possible to perform through the ViaSyst platform?

The ViaSyst platform empowers Certification Bodies with robust data extraction capabilities. Through the dedicated admin tab (strictly for CB admins), you can extract all audit data, findings, certificates, and auditor qualification data. This information is available in versatile formats such as Excel or CSV files, providing you with raw data to process as needed. The ability to extract comprehensive data is incredibly useful for a variety of critical functions, enhancing performance monitoring, efficiency and decision-making. For instance, this data can be effectively used for: Preparing auditor training sessions. Assessing auditor performance, such as identifying which auditors raise findings or not, and against which clauses (e.g. formal rather than substantive issues). Pinpointing common challenges for clients, by analyzing which clauses present the most complexity or difficulties in implementation. Scan the resources to identify gaps in terms of auditors’ qualification. This data-driven approach is at the heart of ViaSyst's design, based on maximized dematerialization. This means transforming traditional files and documents into structured, digital data. The core belief is that "with files you cannot. With data you can", allowing for far greater processing capabilities and insights compared to static documents.

Q: Does ViaSyst support scoring and grading?

Does the system allow for the implementation of a scoring or grading system within the audit process, being able to assign a numerical score or grade to audit findings or overall audit performance? Answer: Yes the ViaSyst checklist tool can be very flexibly configured in all kinds of manners to support scoring or grading systems that reflect customer’s model, with automatic scores or % calculation. The scorings or gradings are entered within the checklist, and a summarise is automatically generated within the audit report. This feature supports as well CB’s internal or scheme owner’s scoring or grading methods.