Stage 2 Audit

The Stage 2 audit is where certification is decided. The auditor tests whether the controls described on paper are actually in place and working, by reviewing records, interviewing staff, and sampling evidence across the scope.

Any gaps are raised as nonconformities, which must be addressed before the certificate is issued. A successful Stage 2 leads to certification, typically valid for three years with surveillance audits in between.