Skip to content

Surveillance Audit

What is Surveillance Audit?

A periodic audit conducted between certification and recertification to verify that a certified management system continues to meet the standard's requirements.

Audit

Related terms

CertificationAudit

Frameworks that govern surveillance audit

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on surveillance audit

Requirements naming surveillance audit across 6 standards, quoted from the control text.

ISO/IEC 27006:20241 control

Perform annual surveillance covering changes, incidents, internal audit, and selected controls.

27006-7.5 · Surveillance Audits →
GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v62 controls

GLOBALG.A.P. IFA v6 certification + audit + compliance architecture. CERTIFICATION BODIES (CBs): ~140 accredited CBs operating in 130+ countries; CBs must hold ISO/IEC 17065 product certification accreditation + meet GLOBALG.A.P.

GGAP-Certification-CB-Auditing-MajorMinorMust · GLOBALG.A.P. IFA v6 Certification Bodies, Audit Lifecycle and Compliance Categories →
FSSC 22000 - Food Safety System Certification1 control

FSSC 22000 certification + audit process. CERTIFICATION BODY (CB) accreditation: CBs must be accredited under ISO/IEC 17021-1 + ISO 22003 + the FSSC 22000 scheme requirements; major CBs include SGS + Bureau Veritas + DNV + DEKRA + TUV SUD + LRQA + others.

FSSC-Audit-Certification-3PAO · FSSC 22000 Audit, Certification Cycle, Unannounced Audits and 3PAO Auditor Competency →
IATF 16949:2016 - Quality Management System for Automotive Production1 control

IATF 16949:2016 Quality Management System for Automotive Production and Relevant Service Parts Organizations - published October 2016 by International Automotive Task Force (IATF) - sector-specific extension of ISO 9001:2015 for automotive supply chain.

IATF16949-Scope-IATF-Members-ISO9001-Annex-SL-Sector-CSR · IATF 16949:2016 - Scope + IATF Member OEMs + ISO 9001:2015 Annex SL Integration + Automotive Sector + Customer Specific Requirements →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds MS11.13 Security Awareness and Insider Risk - mandatory annual cyber security awareness training for all personnel + Senior Manager Function holders + Board + role-based deep training for IT + security + claims handlers + underwriters + actuaries + fina...

LLOYDS-MS11-Security-Awareness-Insider-Risk-Penetration-Testing-Independent-Assurance-MS11-13-16 · Lloyds MS11 Security Awareness + Insider Risk + Pen Testing + Assurance + MS11.13-16 →
MTCS (Singapore)1 control

Implement Logging and Monitoring + Compliance and Audit + Cloud Configuration Management + Cloud Security Monitoring + SLA Management per MTCS SS 584.

MTCS-Logging-Monitoring-Compliance-Audit-SLA-Configuration-SIEM-SOAR-Cloud-Monitoring-CSPM · MTCS Logging + Monitoring + Compliance + Audit + SLA + Configuration + SIEM + SOAR + CSPM →

Questions people ask about surveillance audit

What is Surveillance Audit?
A periodic audit conducted between certification and recertification to verify that a certified management system continues to meet the standard's requirements.
Why is Surveillance Audit important for compliance?
Surveillance Audit is a key concept in Audit. Understanding surveillance audit helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
What concepts are related to Surveillance Audit?
Key concepts related to Surveillance Audit include Certification, Audit. Understanding these interconnected concepts provides a more comprehensive view of Audit requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Surveillance Audit?
Surveillance Audit appears in the requirement text of ISO/IEC 27006:2024, GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6, FSSC 22000 - Food Safety System Certification, IATF 16949:2016 - Quality Management System for Automotive Production, Lloyd's Minimum Standards - Cyber Security. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Surveillance Audit?
Explore our compliance framework pages to see how surveillance audit applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Surveillance Audit applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.