Last Updated on October 29, 2025 by Melissa Lazaro

Accreditation Is Only the Beginning

Getting accredited feels like reaching the finish line — but it’s actually the start of a new cycle.

I’ve seen Certification Bodies (CBs) celebrate their ISO/IEC 17021-1 accreditation, file away the documents, and then panic when their first surveillance visit comes around. The truth is, maintaining accreditation requires just as much discipline as earning it.

Surveillance visits are the accreditation body’s way of checking that you’re still operating with the same consistency, impartiality, and competence they approved. If you treat them as opportunities — not obstacles — they’ll keep your management system healthy and credible.

Let’s unpack what these visits involve, how to prepare, and how to stay compliant year-round.

What Surveillance Visits Are and Why They Matter

Surveillance visits are periodic check-ins by your accreditation body (AB). Their purpose? To make sure your Certification Body continues to meet ISO/IEC 17021-1 requirements after initial accreditation.

They’re not full re-assessments — more like progress reviews — but they’re still thorough. Assessors typically:

• Review how your system is being maintained.
• Verify competence records and impartiality oversight.
• Sample certification files and witness recent audits.

Most ABs conduct surveillance visits every 12 months after your accreditation decision.

Pro Tip: Treat every surveillance as a mini-reaccreditation. The mindset shift helps keep your documentation current and your team sharp.

Common Mistake: Assuming the surveillance will be easier than your first assessment. It’s not — assessors expect stronger maturity and fewer errors.

Understanding the Accreditation Maintenance Cycle

Think of accreditation as a rolling five-year cycle, not a one-time event.

Here’s what it usually looks like:

• Year 1: Initial accreditation granted.
• Year 2: First surveillance visit.
• Year 3: Second surveillance visit.
• Year 4-5: Full reassessment for renewal.

Your AB will define the exact schedule, but most follow this rhythm.

Example: If your CB was accredited in January 2025, expect your first surveillance around December 2025 or early 2026.

Pro Tip: Schedule your internal audit at least three months before the surveillance. That gives you time to fix findings before the AB sees them.

Common Mistake: Waiting for the AB to reach out. You should already have your next visit penciled into your compliance calendar.

What Accreditation Bodies Check During Surveillance Visits

Assessors don’t re-audit everything. Instead, they sample key processes to verify you’re still managing them effectively.

They usually focus on:

• Internal audits and management reviews — are they done, and are they useful?
• Impartiality committee activities — has it met, and are minutes recorded?
• Auditor competence maintenance — are refresher trainings documented?
• Certification process control — especially impartiality and decision-making.
• Implementation of new schemes or changes in scope.
• Closed-out corrective actions from previous findings.

Pro Tip: Go through your last assessment report line by line. If an old issue reappears, it raises questions about your internal follow-through.

Common Mistake: Forgetting to update your documentation when IAF MD documents or ISO standards change. Outdated references instantly trigger findings.

How to Prepare for a Surveillance Visit

Preparation makes the difference between a calm, professional visit and a stressful scramble.

Here’s how to stay ready:

1. Review your last AB report — close all pending actions.
2. Ensure competence and training records are complete for every auditor and decision maker.
3. Update your impartiality-committee meeting records and risk assessments.
4. Check your certification files for consistency and completeness.
5. Conduct a focused internal audit simulating the surveillance process.

Pro Tip: Keep a single “Surveillance Binder” (digital or physical). Store key documents like your latest audit schedule, management-review minutes, training logs, and updated procedures. It’s your one-stop evidence kit.

Common Mistake: Gathering evidence the night before. Assessors can always tell when your system is reactive, not proactive.

Managing Findings and Corrective Actions After the Visit

Almost every CB gets findings. What matters is how you respond.

After the surveillance, the AB sends you a report listing nonconformities, observations, or opportunities for improvement. You’ll typically have 30 days to respond with corrective actions and supporting evidence.

Here’s how to handle it well:

• Be prompt. Submit your CAPA (Corrective and Preventive Action) plan before the deadline.
• Be specific. Identify the root cause — not just the immediate fix.
• Be thorough. Attach updated procedures, meeting minutes, or training records as proof.

Pro Tip: Maintain a continuous CAPA log — one place where you track every internal and external finding, its root cause, action, and closure date. Assessors love seeing that level of control.

Common Mistake: Sending vague responses like “staff retrained.” Always show how you verified that the fix worked.

Staying Compliant Between Surveillance Visits

Surveillance success isn’t about short bursts of preparation — it’s about steady, ongoing compliance.

Keep your system alive by:

• Reviewing impartiality and risks quarterly.
• Holding management reviews at least once per year.
• Refreshing auditor competence annually.
• Updating documentation immediately after changes, not just before audits.

Example: One CB I worked with built a compliance dashboard tracking KPIs like audit completion rates and complaint resolution times. Their next surveillance had zero findings.

Pro Tip: Integrate reminders and task tracking into your QMS software. Automation keeps deadlines visible and accountability clear.

Common Pitfalls During Surveillance Assessments

Even experienced CBs can trip up on the same few issues:

• Missing competence evaluations for new auditors.
• Weak impartiality-committee oversight or missing meeting minutes.
• Outdated certification procedures.
• Poor evidence of decision-maker impartiality.

Pro Tip: Hold an internal “mock surveillance” every six months — it keeps your team aligned and builds confidence.

Common Mistake: Treating assessors as adversaries. They’re not there to fail you — they’re verifying consistency. When you collaborate openly, assessments go smoother.

FAQs — Maintaining ISO/IEC 17021-1 Accreditation

Q1. How often do surveillance visits happen?
Usually once a year, though high-risk scopes may have more frequent reviews.

Q2. What if we can’t complete surveillance on time?
Delays can lead to accreditation suspension. Always coordinate early if scheduling conflicts arise.

Q3. Can surveillance audits be remote?
Yes. Many ABs now combine remote document review with limited on-site verification.

Build Compliance Into Everyday Operations

Maintaining ISO/IEC 17021-1 accreditation isn’t about “passing” surveillance. It’s about embedding quality, impartiality, and consistency into your daily operations.

When your system runs smoothly year-round, surveillance visits become confirmations — not corrections.

If you want your CB to stay accreditation-ready 365 days a year, start now: strengthen your internal audits, track competence proactively, and document everything clearly.

Need help preparing for your next surveillance visit?
Contact QSE Academy for a ready-to-use Surveillance-Preparation Checklist and CAPA Tracker designed for ISO/IEC 17021-1 compliance.