AP Assessment & Certifications (APAAC) helps certified organizations plan for ongoing system maintenance between external audits. Certification requires continued operation: responsibilities, records, objectives, internal audits and management reviews should remain part of routine business management.
Staff turnover, new services, supplier changes, technology shifts and new locations can all affect conformity. Review significant changes early, update system controls where needed and confirm notification requirements with the certification body.
Keep the management system active after certification
Maintain certification by continuing to operate the system, monitoring objectives and controls, conducting internal audits, reviewing performance with leadership, and addressing nonconformities. Keep the certification scope and public claims accurate, notify the certification body about significant changes when required, and track surveillance and recertification arrangements. Treat audit findings as input for improvement rather than a once-a-year paperwork exercise.
Assign ongoing ownership to process leaders so system activities remain part of normal operations even when staff or business conditions change. Certification is subject to the certification body’s rules and continued evaluation; it is not permanent by default. APAAC supports organizations with maintenance planning, internal audit readiness and continual-improvement reviews.
What organizations should focus on
- Maintain a calendar for internal audits, management reviews and surveillance audits
- Monitor objectives, legal or customer obligations and process performance throughout the year
- Keep controlled documents and training records current after operational changes
- Investigate nonconformities and verify corrective-action effectiveness
- Confirm certificate status, scope and logo-use rules before external claims
How AP Assessment & Certifications supports this process
APAAC can help review a maintenance calendar, identify overdue system activities and prepare teams for surveillance or recertification readiness. The certification body controls its own audit programme and certification status; keep direct communication with the issuer for scheduling and formal requirements.
Maintaining ISO certification FAQs
What happens during a surveillance audit?
The certification body evaluates selected parts of the management system according to its audit programme and applicable rules. Organizations should confirm the audit scope and schedule with their certification body and maintain evidence of ongoing system operation.
Can a certificate be suspended or withdrawn?
Certification status is governed by the certification body’s rules and the organization’s continued conformity. Address findings promptly, communicate significant changes as required and verify certificate status before making public claims.
Practical takeaway
Between audits, use performance data and feedback to keep the system practical and current. This reduces last-minute evidence gathering and helps management see whether controls still support business objectives.
APAAC provides ongoing readiness and internal audit support for organizations maintaining ISO 9001, ISO 14001, ISO 45001, ISO/IEC 27001, ISO 22000 and other management-system certifications.