NABL surveillance audit checklist and the 4-year cycle

What is a NABL surveillance audit?

A surveillance audit is a shorter check of an accredited lab, held between full assessments. NABL 100B (Amendment 03, 27 August 2025) clause 6.3 says it "is aimed at evaluating continued compliance to the relevant international standard, specific criteria (wherever applicable) and NABL Policies". NABL's documents call it a surveillance assessment; most labs say "audit". It is the same thing.

It sits between other kinds of assessment:

Two rules in NABL 100B affect how you plan around a surveillance:

• an application for scope extension "will not be accepted at the time of scheduled assessment (Surveillance assessment and Re-assessment)" (clause 6.7.1), so apply separately;
• changes in methods, equipment and key personnel that you report to NABL during the year are verified at the next on-site assessment (clauses 6.8 and 6.9).

How does the NABL 4-year accreditation cycle work?

NABL accreditation is now valid for four years. NABL 100B clause 8 says the certificate "is valid for a period of 4 years", and NABL announced the change from two years to four on 16 October 2024. NABL's assessment programme of 24 June 2026 sets out what happens inside the cycle, counted from the effective date of grant or renewal:

The programme also allows enhanced monitoring. Based on findings, complaints, changes in operations or adverse information, NABL "may increase the frequency of surveillance up to four assessments per year (quarterly)". It may also run additional on-site or remote assessments, or unannounced ones.

NABL 131 (Amendment 04, 23 January 2026) clause 16 adds a limit on the gap between on-site assessments: "The assessment (onsite) interval shall not exceed 24 months and in case if exceeds, then it will be treated afresh."

Some NABL documents have not caught up yet. NABL 100B still describes the old programme of annual on-site surveillance and reassessment every two years (clauses 2.8, 6.3 and 6.4). NABL 163 still asks for a two-year PT plan. The June 2026 programme is the newer document. Certificates issued before the change can also carry two-year validity: NABL's list of labs whose cycle has been extended (14 October 2026) includes certificates issued in September 2024 and valid to September 2026. Go by the dates on your own certificate, and ask NABL if your schedule is unclear.

A worked example: one four-year cycle

Take a lab whose accreditation is granted with effect from 1 November 2026. Counting months from that date, its cycle looks like this:

The annual accreditation fee is due in advance every year as well. In practice, this lab can expect an assessment every year, usually in the same few months. Put the dates in the lab calendar the day the certificate arrives.

What is the mid-cycle assessment?

The mid-cycle assessment is on site for every lab, "without exception", with a lead assessor and technical assessors. For testing and calibration labs it covers "all relevant groups within the accredited scope". NABL 100A adds a mid-cycle fee, paid at the end of the second year (see the fee table below).

Is NABL surveillance desktop or onsite?

On site, for most labs. The June 2026 programme allows Surveillance-1 and Surveillance-2 to be desktop assessments only for labs that have:

• "Maintained continuous NABL accreditation for at least ten years without interruption"; and
• "Not been subjected to any adverse accreditation decision during the preceding accreditation cycle".

A lab with a break in accreditation, or with an adverse decision such as suspension or scope reduction in the last cycle, should plan for on-site surveillance.

For Surveillance-1 and Surveillance-2, the programme says a lead assessor "shall normally be deputed". NABL may add technical assessors depending on the complexity of the scope, findings from earlier assessments, complaints, the results of unannounced assessments and other risks.

Desktop surveillance is a review of documents. The preface to NABL 218 explains how it works:

• the lab sends the information NABL 218 asks for;
• the NABL secretariat evaluates it, and if it conforms, the lab keeps its accreditation;
• if it is "insufficient to establish the continued compliance", NABL may conduct an on-site assessment;
• the information "is subject to verification at onsite surveillance (if conducted) or in subsequent reassessment visit", and "Any wrong information provided may lead to adverse decision by NABL."

What does a lab submit for NABL desktop surveillance?

A lab submits the NABL 218 form, filled in for the period since its last assessment, with annexures and the fee payment details. NABL 218 (Issue 03, Amendment 07, 7 January 2026) asks for:

1. Corrective actions from the last on-site assessment. A table of each non-conformity, a summary of the action taken and "Evidence of continued compliance of corrective actions (as on date)".
2. The last internal audit. Scope and plan, frequency under your procedure, dates of the last two audits, and each auditor's qualification, affiliation and training. It also asks whether independence was maintained, whether all activities, sites and requirements of the standard were covered, how many NCs were raised and whether they were closed on time.
3. The last management review. Its date, whether all agenda points including quality policy and objectives were covered, whether minutes and action points were recorded and actions implemented. The minutes go as an annexure.
4. Complaints. Each complaint with its investigation, corrective action and status.
5. Internal quality control. Which checks you use, from certified reference materials and control charts to replicate tests and retesting of retained items. You also send your IQC plan and sample IQC data for each discipline, with frequency and acceptance criteria, and say whether the criteria were met.
6. Proficiency testing and interlaboratory comparisons. Whether you have a PT plan as NABL 163 requires and followed it, with lapses explained. Results are listed by provider, programme number, parameter and z-score or En value, with root cause analysis for any unsatisfactory result.
7. Equipment and reference materials. Each reference standard, CRM and item of equipment, with its date of calibration or validity and its traceability or calibration agency.
8. Training. Whether training needs are identified, an annual plan is made and implemented, and its effectiveness is evaluated.
9. Changes since the last assessment. Legal status, ownership, top management, key personnel, policies, resources, premises, major equipment and the people declared to report, review and authorise results. NABL notes that these should already have been reported within 15 days under NABL 131, and that the declaration "cannot be considered as an application for change".
10. The desktop surveillance fee. Transaction details and the amount paid.
11. Two self-declarations on letterhead. One confirms the calibration status of equipment and reference standards and compliance with NABL 142, with a technical justification for any calibration interval you have extended. The other, from the head of the lab, confirms continued compliance since the last on-site assessment.

The head of the lab signs the form, confirming that wrong information "may lead to adverse actions by NABL".

Send it on time. NABL 216 lists "Failure to submit the documents for the desktop surveillance for more than 30 days beyond the scheduled due date" as a reason for suspension.

What is on the NABL surveillance audit checklist?

The NABL surveillance audit checklist is NABL 218A, "Checklist for Annual Surveillance", Issue 01 dated 6 August 2025, which NABL posted on 7 August 2025. Assessors fill it in; most rows end in an "Assessor Remark" column. Its sections follow NABL 218, and it adds a check of issued reports and of NABL's policies.

The NABL 133 part is detailed. The assessor verifies a few reports and checks whether any report was issued during a break in accreditation. They verify your agreement with NABL if you use the combined ILAC MRA mark, and follow up any earlier finding or complaint about misuse of the symbol. They are also told to "Check the website and promotional materials of the CAB". Under NABL 131, the assessor checks that the copy of each report you keep is an exact copy of what was issued. For the rules on the symbol and on amended reports, see our guide to the NABL test report format.

The checklist ends with two forms:

• NAF 4A records each non-conformity against a clause of the standard, NABL 133 or the specific criteria. Your representative signs acceptance or non-acceptance, and you propose correction and corrective action.
• NAF 6A is the summary. It notes whether NCs from the earlier visit have been discharged, counts the new NCs under ISO/IEC 17025 clauses 4 to 8, comments on NABL 133, 142, 143 and 163, and records the team's recommendation. "Only if accreditation is recommended", it sets the date for your corrective action: "Max. 30 days".

For the findings that come up when an assessor traces a report, see common NABL non-conformities. For the clause behind each row, see the ISO 17025 requirements checklist.

What happens after a NABL surveillance audit?

You have 30 days to close the findings. NABL 131 clause 37 says the lab "shall take all necessary actions and discharge all non-conformities raised during the assessment within 30 days to avoid any adverse decisions against it as detailed in 'NABL 216'". NAF 6A sets the same maximum.

Each response needs a root cause and evidence of the correction and corrective action; NAF 4A asks for the root cause analysis to be "submitted along with the evidences". ISO/IEC 17025 clause 8.7 sets the steps, from correcting the problem to reviewing whether the action worked.

The next surveillance comes back to the same findings. NABL 218 and NABL 218A both ask whether last time's corrective actions still work "as on date". A finding closed with a one-off fix will be looked at again a year later.

What happens if surveillance is missed or findings stay open?

NABL 216 (Issue 07, Amendment 02, 1 June 2021) sets out NABL's adverse decisions. Before acting, NABL issues a show-cause notice, which the lab must answer within 10 days. These are the conditions that touch surveillance:

Suspension is serious. Under NABL 216 clause 4.4:

• the lab must stop using the NABL symbol and claiming accreditation;
• suspension lasts at least three months and at most six;
• NABL publishes it, takes the lab's certificate off its website and removes the lab from its directory;
• NABL stops processing any application the lab has submitted;
• after three months, the lab can report its corrective actions, ask for an assessment and pay the charges and dues; suspension continues until NABL decides;
• if accreditation is restored, the new certificate keeps the earlier validity.

NABL 131 clause 41 adds that a suspended lab "shall forthwith discontinue claim of accreditation in any form in all advertising material". For a lab whose customers ask for accredited reports, that means at least three months without them.

A scope reduction removes specific tests from the scope. NABL issues a revised scope and updates its website, and the lab can apply to restore those tests after three months (NABL 216, 4.3).

How much does NABL surveillance cost?

NABL 100A, the fee document amended on 31 August 2026, has no separate surveillance fee line for testing labs in India. A surveillance is charged like other assessments, and the yearly fees run alongside it:

Forensic, software and IT testing, and integrated-assessment labs pay more under some of these heads.

For desktop surveillance, NABL 218 asks for "Desktop surveillance fee details" with the amount paid, and NABL 131 clause 30 lists desktop surveillance among the assessments a lab pays for. We did not find a separate amount for it in NABL 100A, so confirm the amount with NABL before you pay.

From 1 October 2026, NABL's upfront payment system applies (announcement of 9 September 2026). NABL raises "A single consolidated invoice for all applicable charges for the year" once scrutiny is complete. It covers honorarium, overhead and the annual fee, to be paid "before the proposed date". Travel, boarding and lodging are still invoiced after the assessment. The announcement does not deal with surveillance separately, so check what your own invoice covers.

A worked example of surveillance charges

Suppose NABL sends one lead assessor for a one-day on-site surveillance of a lab accredited in chemical and biological testing.

Travel and lodging come on top. A technical assessor for the same day would add ₹5,000 plus ₹900 GST. NABL decides the team size and days, so use this only as a way to read the fee table. Pay on time: an unpaid invoice older than three months is itself a reason for suspension.

How do labs lose time and money before surveillance?

The biggest cost of surveillance is often not NABL's invoice. It is the time spent getting ready, because records that should have been kept as the work happened get rebuilt in a hurry. These are the usual pressure points.

Rebuilding the equipment list. NABL 218A asks for an equipment list with model, serial number, range, last calibration, due date and who calibrated it, plus a reference-material list with expiry and traceability. When the register lives in stickers, certificate files and a spreadsheet updated now and then, someone rebuilds it the week before the visit.

Calibration catch-up. Rebuilding the list is also when an overdue instrument can turn up. If its calibration then shows it had drifted, ISO/IEC 17025 clause 6.4.9 requires the lab to examine the effect on past results under its nonconforming work procedure. That can mean reviewing months of reports. Sending many instruments out in the same month also leaves the bench short of equipment. Our guide to instrument calibration in a testing lab covers intervals and intermediate checks.

PT that cannot be rushed. PT rounds run on the provider's calendar. If the Form 18 plan promised a round in a group that nobody booked, it cannot be fixed in the month before surveillance. A poor result needs corrective action within one month (NABL 163, 3.6), and two in a row lead to scope reduction.

Findings closed only on paper. Both NABL 218 and NABL 218A ask for evidence that corrective actions still work "as on date". A retraining record from last year does not show that. Records made since the change do.

Audit and review in the same month. NABL 161 (Amendment 02, 21 January 2026) says each element of the management system should be audited at least once a year, and management reviews held at least once a year. When both are squeezed into the month before surveillance, there is no time to act on what they find, and NABL 218A asks whether review actions were completed to target.

Reports that can't be produced as issued. The assessor picks issued reports. NABL 131 clause 26 requires the copy you keep to be "an exact replica of the report issued to the customer", including header, footer and NABL symbol. A report regenerated from an edited Word template is not that copy.

None of this calls for more compliance paperwork. What labs need is a fast way of doing the daily work that keeps the records organised as a side effect. For the wider cost of running a lab on spreadsheets, see the hidden cost of Excel in labs.

How can a lab be ready for surveillance any day?

Treat NABL 218 as a file you keep up all year, not a form you fill once. Its sections turn into a routine. The frequencies below are a suggested routine, not NABL rules, except where a document is named.

Three habits help most:

• Keep one surveillance file. One section for each NABL 218 heading, each holding the latest evidence. When NABL schedules the visit, the file is already complete.
• Give it an owner. NABL 131 clause 33 requires the lab to "always have a dedicated person responsible for implementation of Management System". Make the routine part of that person's month.
• Close findings with evidence that lasts. Change the procedure, form or system, then keep the records made since the change. That answers the "as on date" question a year later.