RISQS does not end when the audit is complete.
Assurance is a continuing cycle, not a one-off documentation exercise.
Assurance is a cycle
A successful audit shows that your arrangements were working at that point. Buyers rely on them continuing to work. Treat the audit as one point in a continuing cycle of planning, doing, checking and improving, not as the end of a documentation exercise.
Harcon's illustrative maintain framework
The topics below are Harcon's illustrative maintain framework: areas an organisation may need to keep under review after initial assessment and audit. Which of them apply, and how often, depends on your scope and the requirements that apply to you.
Renewal and re-assessment
For suppliers subject to audit, the RISQS Scheme Rules describe a three-year audit cycle: an initial audit, then two annual surveillance audits, then a full re-assessment in the third year. Membership renewal is separate from this audit cycle.
When your business changes
If you add products or services, start new types of work or change how you operate, check whether your RISQS scope, and the arrangements behind it, need to change too.
Guidance on this page last reviewed: .
