Surveillance audit

The shorter audit a certification body carries out at least once a calendar year during the three-year certificate cycle to confirm the management system still works: internal audits, management review, handling of complaints and incidents, action on earlier nonconformities and a sample of controls. The first one must take place within twelve months of the certification decision. A recertification audit at the end of year three starts the cycle again.