Skip to content

Certification Audit

What is Certification Audit?

A formal assessment conducted by an accredited certification body to determine whether an organisation's management system meets the requirements of a standard such as ISO 27001, ISO 9001, or ISO 22301.

Audit

Each of these is named in at least one of the same controls as certification audit. The number is how many controls name both.

What the standards actually require on certification audit

Requirements naming certification audit across 6 standards, quoted from the control text.

On top of ISO/IEC 17021-1:2015, 9.3, stage 1 obtains the ISMS design documentation, including what ISO/IEC 27001 requires, and gives the body enough understanding of the ISMS in the client's context, how it assesses and treats risk (and the controls it has cho...

iso-iec-27006-1-2024::9.3.2 · Initial certification audit →

The procedure for the initial certification audit: general (A.3.1), the factors that adjust the audit time up or down (A.3.2) and the on-site audit time (A.3.3), with Table A.1 for the calculation.

iso-iec-42006-2025::A.3 · A.3 Procedure for determining audit time for the initial certification audit →

A provider registered for any class assessed by certification undergoes a mid-term certification audit by an approved quality auditor starting within 18 months of the start of its registration period (or later if the Commissioner allows), covering the Core mod...

australia-ndis-provider-registration-rules-2018::s13B · Rules s 13B Mid-term certification audit within 18 months →

The company must have a documented supplier approval procedure ensuring suppliers of raw materials and primary packaging manage risk and operate traceability, based on risk and using valid certification to a BRCGS or GFSI-benchmarked standard covering the mate...

brcgs-global-standard-for-food-safety-issue-9::3.5.1.2 · 3.5.1.2 A risk-based supplier approval procedure: certification, audit or, for low-risk suppliers only, questionnaires →

ISO 19011:2018, 5.4.3 is followed, and the extent of an ISMS audit programme can include the size of the ISMS (how many people work under the organization's control, its relationships with contractors and interested parties relevant to the ISMS, how many infor...

iso-iec-27007-2020::5.4.3 · Establishing extent of the audit programme →

Senior site management sets a policy statement committing all site managers to supplying safe food, building and keeping a food safety culture, establishing and continually improving the food safety management system, and meeting customer and regulatory requir...

sqf-code-edition-9-safe-quality-food::2.1.1 · 2.1.1 Management Responsibility (Mandatory) →

Questions people ask about certification audit

What is Certification Audit?
A formal assessment conducted by an accredited certification body to determine whether an organisation's management system meets the requirements of a standard such as ISO 27001, ISO 9001, or ISO 22301.
Why is Certification Audit important for compliance?
Certification Audit is a key concept in Audit. Understanding certification audit helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Certification Audit?
Certification Audit appears in the requirement text of ISO/IEC 27006-1:2024, ISO/IEC 42006:2025, Australia NDIS Provider Registration Rules 2018, BRCGS Global Standard for Food Safety Issue 9, ISO/IEC 27007:2020. Across these standards we have identified 16 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Certification Audit?
Explore our compliance framework pages to see how certification audit applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Certification Audit applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.