Typically, ISO certifications are good for three years. However, the certification authority may carry out surveillance audits during this time to make sure that the criteria of the ISO standard are consistently being met.