ISO Surveillance Audit in Bangladesh preparation should begin while the management system is operating, not only when the next visit is announced. This guide explains seven practical checks, a record preparation worksheet and common questions for certified manufacturers, exporters and service companies.
For initial assessment, read our Stage 1 and Stage 2 audit guide. For the wider journey, see the ISO certification in Bangladesh guide.
What is a surveillance audit?
An ISO Surveillance Audit in Bangladesh is a continuing assessment activity used within the relevant certification programme. Its purpose is to evaluate whether the certified management system continues to meet applicable requirements between wider reassessments. The exact scope and methods depend on the standard, scheme and issuer’s programme.
Surveillance is different from the initial Stage 1 and Stage 2 process and from recertification. Confirm the dates, covered sites, selected processes and required access with your certification body. Do not rely only on the expiry date printed on the certificate when planning continuing obligations.
1. Confirm the programme and responsibilities
Keep the agreed assessment schedule and identify a coordinator who can organize access, records and relevant staff. Discuss dates early enough to resolve production peaks, planned shutdowns or other practical constraints. A requested date change is not automatically an approved change.
Ask the issuer to explain deadlines and the effect of postponement. NQA’s published certification process describes annual surveillance within its certification cycle. Use your own issuer’s written programme to establish the arrangements applicable to your organization.
2. Review changes since the previous audit
List changes to activities, sites, ownership arrangements, significant processes and outsourced interfaces. Identify changes to customer requirements, staffing and equipment that affect the system. Check which matters need notification to the certification body.
Prepare an accurate account of what changed and how controls were adapted. A new production location should not be assumed to fall within an existing certificate. Our scope guide helps organize questions about activities and sites.
3. Check previous findings and corrective actions
Retrieve the previous audit report and related action records. Confirm which actions were accepted, which remain open and what follow-up evidence is needed. Assign responsible owners to unresolved matters before the visit.
Check whether implemented actions actually addressed the issue. A revised procedure may show a change was made, while later operating records show whether it worked. Avoid closing an item solely because a form was signed. Refer to our nonconformity response guide for practical action tracking.
4. Prepare current operating evidence
Organize records that show how relevant controls have worked since the last assessment. Depending on the system and scope, examples may include process results, complaints, supplier reviews, competence checks and maintenance records. Use the audit plan to identify likely process owners and access needs.
Do not build an artificial audit folder disconnected from normal work. Staff should be able to retrieve current information and explain their actual responsibilities. Use genuine records with appropriate identification, and protect confidential information during review.
5. Connect internal audit and management review
Prepare the internal evaluation records required by the applicable system. Check the audit programme, findings and follow-up rather than relying only on a completed checklist. Have evidence of relevant leadership decisions and progress against agreed actions available.
Your internal audits and management reviews should inform everyday management. If they reveal recurring issues, explain what the organization is doing about them and which resources or decisions remain outstanding.
6. Review certificate claims and document control
Check public references to certification, including website wording, proposals and printed materials. Ensure the organization, standard and scope are represented accurately. Confirm any rules for use of certification marks with the issuer.
Check whether obsolete instructions remain at workstations and whether current records can be retrieved. A recent document change can provide a useful test across relevant departments or shifts. See our document control guide for a practical register structure.
7. Agree and track post-audit follow-up
At the closing discussion, clarify the findings, response expectations and next steps. Retain the report and assign owners and dates to actions. Use the issuer’s procedure for factual questions, appeals or complaints where necessary.
An audit visit’s completion does not automatically resolve every certification condition. Confirm the formal outcome and any continuing requirements. Update the assessment calendar and action register so the business maintains the system after the auditor leaves.
ISO Surveillance Audit in Bangladesh: evidence worksheet
Use this suggested structure to locate information and assign responsibility. It is a planning aid, not a complete list of standard requirements. Adapt it to your scope and agreed audit plan.
| Area | Information to prepare | Question to resolve |
|---|---|---|
| Previous actions | Report, response and later verification evidence | Did the action work? |
| Changes | Site, process and activity changes | Was the issuer notified where required? |
| Performance | Relevant results and objectives | What trends need attention? |
| Internal evaluation | Audit and management review outputs | Are decisions and follow-up traceable? |
| Information control | Current instructions and retrievable records | Can users obtain the right version? |
| Certification claims | Website and proposal references | Do claims match the certified scope? |
Practical example: checking a previous packing issue
Imagine a hypothetical exporter whose earlier audit identified a weakness in communicating revised packing instructions. The business updates responsibilities, controls printed copies and briefs relevant staff. Before the next surveillance visit, it examines later orders across the affected shifts.
The team retains evidence showing whether the revised method is being used and investigates remaining failures. It can explain both progress and unresolved issues during assessment. This example is illustrative, not a Technotex client case or a prediction of an audit outcome.
Common preparation mistakes
- Assuming certificate expiry is the only date that matters.
- Leaving previous findings without effectiveness checks.
- Failing to communicate significant site or activity changes.
- Creating records shortly before the visit that do not reflect actual work.
- Making certification claims broader than the assessed scope.
Plan continuing costs and responsibilities with the renewal guide. NQA’s certification guidelines illustrate why following the required assessment programme and responding to findings matter. Confirm the actual terms with your intended issuer; another body’s publication does not establish Technotex’s service terms.
Frequently asked questions
Is a surveillance audit the same as renewal?
No. Surveillance forms part of continuing assessment, while recertification or renewal involves the relevant cycle-end process. Confirm the specific programme with your issuer.
How often are surveillance audits held?
Annual surveillance is common in management system certification programmes, but the precise schedule and applicable deadlines should be confirmed in the certification body’s written arrangements.
What records should we prepare?
Use the audit plan and applicable criteria. Relevant evidence may include previous action follow-up, process results, complaints, internal audits, management review and changes since the previous visit.
Can we skip surveillance because the certificate has not expired?
Do not assume the printed expiry date removes continuing assessment obligations. Discuss the programme and any proposed rescheduling directly with the issuer.
Does every surveillance audit assess every department?
The coverage follows the certification programme and audit plan. Do not assume each surveillance visit is identical to a full initial or recertification assessment.
Does completing the visit guarantee continued certification?
The outcome depends on the findings and the issuer’s applicable review and follow-up arrangements. Confirm the formal result and any outstanding conditions.
Organize your next assessment
For ISO Surveillance Audit in Bangladesh preparation, keep the programme, previous report, current scope and action records together. Discuss your needs with Technotex and confirm the available support, issuer responsibilities and required arrangements. Assign owners to outstanding work and maintain reliable evidence throughout the year.
