ACCS 1:2025 Certification Scheme for Age Assurance Systems and Components 13.2-13.3: Undergo annual surveillance audits that confirm the practice statement, scope, indicators, change control and obligations are maintained

What does 13.2-13.3 require?

Certification is valid for at most three years subject to surveillance and recertification; surveillance audits run annually within 30 days either side of the decision anniversary and confirm the practice statement is current and consistent with operations, boundaries and contexts are unchanged or correctly updated, indicators of effectiveness are sustained, configuration management and change control work, privacy, security and acceptability obligations are kept and previous corrective actions are closed, sampling operational records, monitoring output and recent test results; findings are recorded in a surveillance report in the certification file.