Congratulations on achieving certification! But the journey does not end here. ISO certifications run on a three-year cycle, and keeping your certification active requires ongoing attention. Here is what to expect.
The Three-Year Certification Cycle
ISO certifications follow a standard cycle:
Year 1 — Initial certification audit. This is the full two-stage audit you have just been through. Once you pass, your certificate is issued and valid for three years.
Years 2 and 3 — Surveillance audits. These are shorter, less intensive audits conducted annually by your certification body. They check that your management system is still functioning and that you are continuing to meet the requirements. Not every clause will be reviewed — the auditor focuses on key areas and any issues raised previously.
Year 4 — Recertification audit. At the end of the three-year cycle, you go through a full recertification audit. This is similar to the initial audit but takes into account how your system has matured. Passing this starts a new three-year cycle.
How Be Certified Helps You Stay Certified
Your Be Certified account remains active so you can maintain your management system year-round. Here is how to use it between audits:
• Keep your responses current. If your business processes change, update the relevant clauses in Be Certified. This ensures your system reflects what you are actually doing, which is exactly what auditors want to see.
• Upload fresh evidence. Replace outdated documents with newer versions. Surveillance auditors will want to see recent evidence, not just what you submitted at the initial audit.
• Use Check My Answer before surveillance audits. Run your updated responses through the AI tool to make sure they still meet the requirements.
• Track your progress. The dashboard shows which clauses you have completed and which may need reviewing, making it easy to prepare for each surveillance audit.
Tips for Ongoing Maintenance
1. Schedule a quarterly review. Set a reminder every three months to log into Be Certified and review your management system. Small, regular updates are much easier than a last-minute scramble before a surveillance audit.
2. Address non-conformities promptly. If your previous audit flagged any minor non-conformities, make sure these are resolved and documented in Be Certified before your next surveillance audit.
3. Keep your team involved. Certification is a team effort. Make sure new starters are added to the platform and understand their role in maintaining the management system.
4. Consider adding more certifications. Once you have achieved one certification, adding another is often faster because many ISO standards share common requirements. You can add new certifications from the Be Certified website at any time.
Tip: Do not wait until audit season to update your management system. The most successful businesses treat certification as a living process, not an annual event.
What If My Certification Lapses?
If you miss a surveillance audit or your certificate expires, you may need to go through the full certification process again. Your Be Certified account and all your data will still be there, so you will not be starting from scratch — but it is best to stay on top of your audit schedule to avoid any gaps.
Need Help?
If you have questions about maintaining your certification or preparing for a surveillance audit, contact our team via the chat widget or email [email protected]. You can also revisit our "Preparing for Your Audit" article for a refresher on what to expect.
