Management-system certification commonly follows a three-year cycle with surveillance between certification and recertification. Use the dates on your certificate and the programme agreed with its issuer. Maintaining certification depends on continued conformity and the certification body’s decisions; it is not a one-time purchase. Start with our guide to ISO certification cost and process in Iraq, or see ISO 9001 certification.
This guide covers the four questions certified companies in Iraq ask most: what the surveillance audit checks, what nonconformities mean, how renewal works at year three, and how to transfer a certificate to another body. IraqCert manages this cycle for its clients. Certificates are issued by our partner body AQSR, accredited by UAF, an IAF MLA signatory, and verifiable on IAF CertSearch. Consulting stays separate from the certification audit, as ISO/IEC 17021-1 requires.
What a Surveillance Audit Checks
Surveillance samples the certified management system, including relevant changes, previous findings and evidence that controls remain effective. Keep internal-audit, management-review and corrective-action records current. Confirm the visits and any additional assessment with the issuing body rather than assuming all schemes use identical schedules.
Assign responsibility for records and corrective actions throughout the year. Preparation support can help organize that work, but neither tidy records nor early booking guarantees a favourable audit result.
Failing an Audit: Minor and Major Nonconformities
The auditor records nonconformities, and the certification body determines the required response. Do not decide severity from a short example: a missing record may have different implications depending on the process and evidence. Obtain the finding, deadline and evidence requirements in writing.
Unresolved findings or missed required audits can affect certification status. The issuing body decides whether certification is maintained, suspended, restored, reduced in scope or withdrawn under its applicable rules. Corrective action does not restore a certificate until the body confirms its decision.
| Event | What happens | What you should do |
|---|---|---|
| Minor nonconformity | The body specifies the response and any effect on certification. | Submit the requested plan and evidence within the body’s deadline. |
| Major nonconformity | The body assesses the finding and may suspend certification. | Fix the root cause and send evidence before the deadline. |
| Missed surveillance audit | Failure to complete surveillance can lead to suspension or withdrawal. | Contact the certification body at once and book a new date. |
| Recertification at year three | Renewal needs successful assessment and a certification decision. | Allow time for the audit, corrective actions and decision before expiry. |
| Certificate transfer | The receiving body reviews eligibility and confirms the remaining cycle. | Confirm status, relevant accreditation and outstanding findings. |
Renewal at Year Three: The Recertification Audit
Plan recertification before the expiry date stated on the certificate. The body reviews continued conformity and performance across the cycle, including changes and unresolved findings. A visit alone is not renewal: required follow-up and the certification decision must also be completed.
Book early enough to allow assessment, corrective actions and the issuing body’s decision. IraqCert can help coordinate dates within the agreed support scope; it cannot guarantee uninterrupted validity. If a certificate expires, ask the issuer which restoration or reassessment route applies and describe the gap accurately to any buyer requiring a valid certificate.
Transferring Your Certificate to Another Certification Body
Ask the proposed receiving body to review the certificate, accreditation scope, audit reports, expiry date and open findings before agreeing a transfer. It should confirm eligibility, any additional work and the cycle it will retain. Do not assume that booking with a new provider automatically transfers certification.
If the existing certificate is not eligible for the proposed accredited transfer route, ask the receiving body to specify the assessment needed. IraqCert coordinates preparation; eligibility and certification remain the responsibility of the receiving body.
Sources
ISO: certification and accreditation