What Happens During an ISO Certification Audit?
The audit is usually the straightforward part — it's the preparation beforehand that takes the real effort. Here's what to expect.
The Audit Is the Easy Part
If your management system has been properly developed and implemented, the certification audit should feel like a structured conversation — not an interrogation. Auditors are not there to catch you out. Their role is to assess whether your documented processes are being followed in practice.
The harder work is in the preparation stages — building the system, training your team, and generating the records that demonstrate your system is active and effective.
CERTIFICATION AUDIT
The Two Stages
Certification audits conducted by bodies accredited through JAS-ANZ are carried out in two distinct stages.
Stage 1 – Documentation Review
A review of your management system documentation to confirm the system is broadly ready for the on-site audit. Typically conducted off-site or remotely.
Stage 2 – On-Site Audit
A comprehensive on-site assessment verifying that your documented processes are implemented and effective across your organisation.
STAGE 1
Documentation Review
What's involved
The Stage 1 audit is typically conducted off-site (or remotely) and involves a review of your management system documentation — including your policies, procedures, objectives, and supporting records.
The purpose is to confirm that your system is sufficiently developed and broadly ready for the on-site Stage 2 audit. If any significant gaps are identified, they can be addressed before the auditor arrives on-site — helping prevent major surprises during the certification audit itself.
Think of Stage 1 as a readiness check — it's designed to set you up for success in Stage 2, not to catch you off guard.
STAGE 2
On-Site Certification Audit
What's involved
The Stage 2 audit is conducted on-site at your workplace. The auditor is verifying that the processes documented in your management system are genuinely implemented and being followed in day-to-day operations.
The on-site audit typically includes:
Staff interviews are conversational — auditors ask workers to describe what they do day-to-day. If people are following the system, the answers come naturally.
ON-SITE
Physical Inspections
- Site safety controls and procedures
- Personal protective equipment (PPE)
- Safety signage and labelling
- Hazardous chemicals storage and management
- Emergency equipment and evacuation plans
The scope of physical inspections varies by industry and standard. Not all audits include an extensive site walkthrough.
RESULTS
Closing Meeting & Findings
What happens at the end
At the conclusion of the Stage 2 audit, the auditor holds a closing meeting with your management team. During this meeting, the auditor presents their findings and provides an overall summary of the audit outcome.
Common types of findings:
- Observations — areas for improvement that don't prevent certification
- Minor nonconformances — gaps that require a corrective action plan. You'll need to develop an action plan promptly, but the actual closeout is typically verified at your next surveillance audit (within twelve months)
Minor nonconformances are common and do not prevent certification. While you'll need to submit a corrective action plan relatively quickly, the full implementation and closeout of minor findings is usually verified at your next surveillance audit — typically twelve months later. Major nonconformances are rare when proper preparation has been undertaken.
AFTER CERTIFICATION
Surveillance Audits
Maintaining your certification
Once certified, your organisation will undergo annual surveillance audits in years two and three of the certification cycle. These are shorter than the initial certification audit and do not include a separate Stage 1 review.
Surveillance audits focus on verifying that your management system continues to be implemented effectively and that continual improvement is occurring. At the end of the three-year cycle, a recertification audit is conducted to renew your certification.
| Year | Audit Type | Scope |
|---|---|---|
| Year 1 | Initial Certification (Stage 1 + 2) | Full |
| Year 2 | Surveillance Audit | Partial |
| Year 3 | Surveillance Audit | Partial |
| Year 4 | Recertification Audit | Full |
For more detail on audit fees across the certification cycle, see our ISO Certification Cost Guide.
Prepare Before Your Audit
Use our free ISO gap analysis tool to check your readiness before the audit. Identify gaps early so there are no surprises on the day.
FAQS
Common Questions
Frequently Asked Questions
Can't find what you're looking for? Our team is ready to help with any questions about ISO certification.
Contact Our TeamWhat Our Clients Say
Collaborative Health
4 months ago
Nathan has provided us with an excellent integrated management system aligned with ISO45001, ISO9001, and ISO14001. The system is comprehensive, well-structured, and easy to follow, making it clear that a lot of expertise has gone into developing it. It's practical, user-friendly, and gives real confidence that everything is covered across safety, quality, and environmental requirements. Highly recommend Nathan's services to anyone looking for a professional and reliable management system solution.
Sophie McKenna
a month ago
This company provided a great service for iso certification iso45001.
Steve Jordan
a month ago
Great company, helped us get ISO certified.
Ready for Your Certification Audit?
Contact us for a no-obligation discussion about audit preparation and what to expect.