The standard itself undergoes revisions periodically (typically every 5-10 years). Certified organizations usually undergo surveillance audits annually, with a recertification audit every three years.