Certification lasts at most three years with an annual surveillance audit within 30 days either side of the anniversary of the certification decision and a recertification audit before expiry; each reviews the current boundaries, contexts of use, changes to the item and evidence of continued conformity. Where technically feasible the client supports automated continuous monitoring of use and effectiveness (performance and error telemetry, effectiveness across demographics, anomaly and adverse event detection, logging of updates and reconfiguration). The client tells the conformity assessment body about every material change (major version upgrades, components added or removed, changes to boundaries or contexts of use), and the body decides whether an intervening audit, possibly limited to the change, is needed. A minor change leaves the declared accuracy level and indicators of effectiveness, the methods, the boundaries and contexts, and the privacy, security and acceptability characteristics unaltered and may be implemented and reviewed at the next surveillance; anything else is a major change to be notified within 30 days. Failing to notify a major change, or changes that have compromised conformity, can lead to suspension, reduction or withdrawal of certification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.