It is a requirement to undertake a surveillance audit (the frequency depends on the complexity and maturity of the system) to ensure a continuation of clients’ systems compliance with the standards.