To maintain certification, a company should have an annual audit which it must pass to retain certification. A full certification cycle is 3 years, with some companies issuing either an annual certification or a 3 year cycle certification, but both need an annual audit to retain certification of compliance.