Customer Managed Audits (CMAs)
Learn what a CMA is, and how it is conducted.
Customer Managed Audits (CMAs) are audits that are paid for and overseen by a Customer of an Auditee. CMAs follow a similar process to VAP audits. They are performed by audit firms expected to conduct the audit in accordance with the expectations defined within the VAP Operations Manual; VAP audits are the preferred audits for RBA Membership Compliance.
A CMA may be initiated within RBA-Online by an RBA Member for their supplier, or by the Supplier themselves. Only Company Administrators have the ability to perform this action.
Navigate to Audit > Supplier CMAs (Customer) or Audit > My CMAs (Supplier), then click on [Initiate CMA Audit] to get started.
If you are initiating the CMA for your supplier, your company will automatically be identified as the Requesting Company. You will need to choose the Company Name and Facility of your supplier, and complete all other required fields. Clicking [Initiate] will send a CMA audit request to your supplier.
You will notice the status of the audit is “Audit Requested”:
Your supplier will need to log into RBA-Online, click [Claim] under their Available Tasks, then submit their approval to move forward with the CMA:
Once the CMA has been fully initiated, either Supplier or Customer may select the Audit Firm and Auditor to perform the assessment. Both will have a To-Do notification on their dashboard:
Clicking on the To-Do will take you to the page to select the Audit Firm, Auditor(s) and other audit related information. Click [Submit] once you have completed all required fields (the Audit Firm will then be notified):
Audit Firm contracting for CMAs is completed outside of the RBA-Online system by the managing party (Customer or Supplier).
Auditors will receive a notification that they are able to enter data via the Report tab:
