A surveillance Audit is a periodic audit performed by an external auditor to ensure that an organization still meets BCM or ISO standard requirements. Surveillance audits are required after year two and year three of the completion of the ISO 22301 year one audit.