What Is a Surveillance Audit? ISO Certification After Year One
Learn why surveillance audits happen, what they cover and how they fit into the three-year management-system certification cycle.
Why surveillance audits exist
Management-system certification is maintained through continuing oversight, not a one-time inspection. Surveillance audits check whether the certified system remains implemented and effective after the initial decision.
What surveillance usually covers
The audit programme distributes relevant processes and requirements across the certification cycle. Each surveillance audit normally reviews essential system controls and selected operational areas, taking account of previous findings and changes.
- Internal audits and management review
- Progress against objectives
- Corrective action and previous findings
- Changes to scope, sites, people or processes
How surveillance differs from recertification
A surveillance audit is a periodic sample during the cycle. Recertification is a broader evaluation before the next certification cycle. The provider sets the programme and duration using the applicable certification requirements and information about the organization.
Preparing for surveillance
Keep the system current throughout the year. Report material scope or site changes, maintain internal evaluation, close corrective actions and retain evidence showing how the system is used to manage performance.
Common questions
Is a surveillance audit required every year?
Surveillance is normally conducted at least annually in a typical management-system certification cycle, subject to the certification programme and provider arrangements.
Can a certificate be suspended after surveillance?
Certification status can be affected where serious issues are not resolved under the certification body’s process.
Will every requirement be audited every year?
Not necessarily. Surveillance uses a planned sample, while the programme covers the management system across the cycle.
Checked against official source material. The applicable edition, transition rules and certification-body requirements should be confirmed for each application.
Research note: AI-assisted drafting was used to structure this article. Core claims and current standard editions were checked against the official references above.