Glossary · Foundations
Recertification Audit
A full audit at the end of a certificate's cycle, usually every three years, to renew certification for another period.
Put the term into practice: Risk management software
Certificates such as ISO/IEC 27001 are typically valid for three years. Before they expire, a recertification audit reassesses the whole management system, similar in depth to the original Stage 2, to confirm it remains effective and to renew the certificate.
Recertification is an opportunity to review the scope and objectives as the organisation has changed, not just to repeat the previous audit.
