How to Raise a CMA as an Auditor

In this guide, we will outline a comprehensive, step-by-step process for auditors with “Audit Firm Admin” or “Technical Advisor” rights to initiate a CMA for a facility that is not yet registered on RBA Online. Carefully follow the instructions below to ensure a smooth submission.

Step 1: Log in to RBA Online

To start the process, navigate to the RBA Online using a web browser. Once there, you will be prompted to enter your login credentials. Ensure that you input the correct username and password associated with your account. After entering your details, proceed to log in. As an auditor with Audit Firm Admin rights, you will have access to specific functionalities and features that are essential for conducting your CMA audits effectively. Make sure you are familiar with the platform's layout and tools to maximize your efficiency while performing your duties.

Step 2: Navigate to the CMAs Section

After successfully logging into your account, direct your attention to the menu on the left side of the homepage. Once there, click on the option labeled “Audit”  from this menu, and select "My CMAs" to proceed with your tasks.

Step 3: Download the Facility Template

In the My CMAs section of the application, you will find an option prominently labeled "Download Facility Template." 

By clicking on this option, you will initiate the download of an Excel template specifically designed to assist you. This template systematically collects and organizes all relevant details pertaining to the facility or facilities for which a CMA is to be raised. Utilizing this template will streamline the process, ensuring that all critical information is gathered efficiently and accurately, making it easier for you to complete your CMA submission confidently.

Step 4: Complete the Facility Template

Disclaimer

To maintain data integrity and prevent inconsistencies in reporting, auditors must always use the available dropdown menus on the form when selecting options. Manual text entry should be avoided unless no dropdown option exists. Using standardized dropdown selections ensures uniformity across all assessments and supports accurate data analysis. 

In this step, you will complete the CMA template, which captures the core details of the facility, audit scope, and audit engagement. Accurate and complete information is critical, as the details entered here are used to validate the assessment scope, assign the correct audit type, and ensure the CMA is routed and reviewed appropriately.

Please review the definitions and instructions below carefully before submitting the template. Incomplete or incorrect entries may delay processing.

CMA Template Field Definitions and Instructions

Open the downloaded Excel template and fill in the required information for each facility as follows:

  1. Facility Name: Enter the official registered name of the facility being assessed. This should match the name used in RBA‑Online records and audit documentation.
  2. Facility Local Name: Enter the facility name in the local language, if applicable. If the local name matches the facility name, you may repeat it here.
  3. Parent Company Name: Enter the legal name of the parent company that owns or controls the facility. This should reflect the corporate entity responsible for the site.
  4. Address Line 1: Enter the primary street address of the facility (e.g., building number and street name).
  5. Address Line 2: Optional field. Use this to enter additional address details, such as floor number, suite, or building designation, if applicable. 
  6. City: Enter the city where the facility is physically located.
  7. State / Province / Region: Enter the applicable state, province, or administrative region for the facility’s location.
  8. Postal / Zip Code: Enter the official postal or ZIP code associated with the facility address.
  9. Country or Region: Select the country or region from the dropdown list.

Note: Always use the dropdown options rather than free‑text entries to ensure proper system recognition.

 

10. Audit Category: Select one of the following options from the dropdown:

  • VAP (Validated Assessment Program): Select this option for manufacturing facilities that fall under the standard RBA VAP audit program. This category is intended for production sites directly involved in manufacturing activities.
  • Indirect Spend VAP: Select this option for non‑manufacturing service providers that support operations but do not directly manufacture products (e.g., cleaning, logistics, IT services).

Recommendation:

  • Use VAP for manufacturing sites.
  • Use Indirect Spend VAP for service providers supporting operations.

 

11. Business Type: This dropdown is dynamic and depends on the selected Audit Category.

  • For VAP audits: Manufacturer (only available option)
  • For Indirect Spend VAP audits: Select the business type that best describes the services provided:
    • Cleaning and janitorial services
    • Logistics/distribution
    • Building and facility maintenance and repair
    • Cafeteria
    • Construction
    • Material packing and handling
    • Environmental‑related services (business process)
    • IT services
    • HR support
    • Freelancer

Select the option that most accurately reflects the primary service performed at the site.

12. Audit Scope: This field applies only to Manufacturer business types. Select one of the following based on the total worker population:

  • Small – Fewer than 50 workers
  • Medium – 50 to fewer than 250 workers
  • Large – 250 or more workers

 

13. Audit Type: Select the audit type applicable to the CMA. Ensure this aligns with the engagement details and audit planning.

14. Are all production buildings in the facility included in the assessment? (Yes / No): Indicate whether all production buildings at the site are included within the assessment scope.

  • Select Yes if all production buildings are covered
  • Select No if one or more production buildings are excluded

15. Is the assessment limited to customer production lines? (Yes / No): Indicate whether the assessment scope is restricted to specific customer production lines only.

  • Select Yes if the audit is limited to customer‑specific lines
  • Select No if the audit covers broader site operations

16. Audit Firm: Enter the full legal name of the audit firm conducting the assessment.

17. Audit Firm Office: Enter the specific office location of the audit firm responsible for this audit.

18. Audit Firm Office POC Email: Enter the primary point‑of‑contact email address for the audit firm office managing this assessment. This email will be used for audit‑related communications.

Final Check

Before submitting the CMA template, ensure that:

  • All required fields are completed
  • Dropdown selections are used where provided
  • Information is accurate and consistent with audit documentation

Completing this step correctly helps prevent delays and ensures timely CMA review and processing.

 

Step 5: Save and Upload the Completed Template

Upon completing the template, save the Excel file securely on your computer to preserve the information you entered. Once you have saved the file, navigate back to the RBA Online platform. On the platform, locate the 'My CMAs' section and click 'Initiate CMAs' to begin the process

It is important to note that this option is available only to auditors with Audit Firm Admin rights, underscoring the need for appropriate access permissions to effectively undertake these actions.

Step 6: Submit the CMA Request

A pop-up window will appear, prompting you to enter your details. Provide the name of the requesting company. Upload the completed Facility Template from your device. After entering all required information and uploading the file, click on 'Initiate' to proceed with submitting the CMA request.

 

The result will be successful if no errors,The result will be successful if no errors occur; otherwise, the prompt will indicate that an error has occurred. Otherwise, the prompt will indicate that an error has occurred. 

 

Downloading the results will yield the failed reasons, which could be either:

  • The company already exists
  • The trading relationship already exists
  • Trading Relationship Required
  • etc.

 

Following these outlined steps will enable auditors to effectively raise a CMA for any facility that is not registered on RBA Online. Should you have any questions or require further assistance during this process, do not hesitate to reach out for support. |