Process · Reliability & Quality
Certification audit
The independent audit by an accredited certification body that decides whether a management system meets a standard such as ISO 9001 or IATF 16949, followed by surveillance audits and recertification to keep the certificate.
- Also known as
- Stage 1 audit, Stage 2 audit, Surveillance audit, Recertification audit
- Type
- Process
- Domain
- Reliability & Quality, Quality systems
Overview
Certification is carried out by a certification body accredited to audit management systems. The initial audit has two stages, and the certificate is then maintained by periodic surveillance audits and renewed by a recertification audit before it expires.
How it works
The first stage audit checks readiness: the scope, the documentation and whether internal audits and a management review have been done. The second stage audit, at the sites, tests whether the system is implemented and effective by sampling processes, records and people.
Nonconformities found must be corrected within the timescale the certification scheme sets, and the certification body then decides whether to issue the certificate.
Surveillance audits sample the system between certification and recertification and follow up earlier findings. Significant changes, such as new sites or a changed scope, are told to the certification body.
Examples
- A first stage audit that finds the scope statement needs correcting.
- A second stage audit sampling records at each site in scope.
- A surveillance audit following up a nonconformity from the year before.
- A recertification audit after a site was added to the scope.
Why it matters
Quality systems managers, process owners and audit and certification coordinators prepare for and host these audits. Customers often require a valid certificate from their suppliers, so the audits set key gates in the QMS lifecycle.
It matters most to: Audit and Certification Coordinator, Quality Management System Lead Auditor, Quality Systems Manager
Common confusions
- Not the same as Internal audit
- Internal audits are run by the organisation's own auditors to check and improve its system; a certification audit is run by an independent, accredited body and leads to the certificate.
Related standards
- ISO/IEC 17021-1 (requirements for bodies providing audit and certification of management systems)
- ISO 9001 (quality management systems requirements)
- IATF 16949 (automotive quality management system requirements)
Sources
- ISO/IEC 17021-1:2015 Conformity assessment: Requirements for bodies providing audit and certification of management systems, Part 1: Requirements (opens in a new tab), IEC (International Electrotechnical Commission) Webstore, 2026-11-10
- Rules 6th Edition FAQs (opens in a new tab), International Automotive Task Force (IATF), 2026-11-10
- Certification bodies under contract (opens in a new tab), International Automotive Task Force (IATF), 2026-11-10
Related terms
Part of the Reliability & Quality glossary, with every term in the topic and the lifecycles, tools and standards that use them.
Where it appears on the Hub
Used on 10 pages of the Hub. In each group, the pages that mention it most come first.
Lifecycle stages and gates
Skills
Suggest an improvement
Suggest an improvement to this entry
A clearer definition, an example, a correction or a source an editor can check. Editors review every suggestion before the entry changes.
Last reviewed . Written by The Semiconductor Hub editorial team. The full glossary