Introduction
ISO surveillance audit support helps organizations maintain their certification after the initial certification audit. Surveillance audits assess whether the management system continues to conform to the ISO standard, remains effectively implemented, and delivers the intended results.
ISO certificates are commonly maintained through a three-year certification cycle, with surveillance audits during the cycle and a recertification audit before expiry.
What surveillance audits review
A surveillance audit typically focuses on whether the organization has maintained and improved its management system since certification. Areas commonly reviewed include:
- Management-system performance and process controls
- Internal audit programme, findings, and completion of corrective actions
- Management review inputs, outputs, and follow-up actions
- Objectives, KPIs, monitoring, and measurement results
- Customer feedback, complaints, and satisfaction data
- Nonconformities, incidents, and corrective-action effectiveness
- Changes in scope, locations, processes, legal requirements, or organizational structure
- Document control, training, competence, and awareness
- Continual-improvement evidence and risk-based decision-making
Surveillance audits commonly review system performance, corrective and preventive actions, internal auditing, management reviews, customer satisfaction, and documentation updates.
How to prepare
Organizations can prepare for surveillance audits by maintaining a simple certification-maintenance calendar:
- Review the previous audit report: Confirm that all findings and improvement actions have been addressed.
- Check internal audits: Ensure audits are completed as planned, findings are documented, and corrective actions are closed with evidence.
- Review management minutes: Confirm management review is conducted regularly and covers required inputs and outputs.
- Update documents: Remove obsolete versions, approve changes, and ensure employees use current procedures.
- Verify training records: Update training matrices and maintain evidence for new employees, role changes, and procedural changes.
- Monitor KPIs: Keep objectives, performance data, customer feedback, complaints, and improvement actions current.
- Communicate changes: Notify the certification body of major changes in scope, sites, leadership, or business activities where required.
- Conduct a pre-surveillance review: Perform a mock audit or internal preparedness check to identify gaps before the external auditor arrives.
Common surveillance findings
Frequent issues include overdue internal audits, incomplete corrective-action evidence, outdated procedures, uncontrolled documents, weak objective tracking, unaddressed customer complaints, and management reviews that do not result in follow-up actions.
These findings can usually be prevented through regular internal reviews, clear ownership, and evidence-based corrective-action tracking.
Uplora Certifications surveillance support
Uplora Certifications can support organizations with surveillance preparedness assessments, internal audit review, documentation checks, KPI and management review guidance, corrective action validation, and mock surveillance audits.