Internal audit and review by top management: Before a management system can be certified, it must have had at least one internal audit report and one management review. Usually, the minimum time required by the certification bodies is 3 months. Implementation of the management system: Before being audited, a management system must be in operation for some time.