Auditing or regular surveillance of management systems is an essential feature and a requirement of all ISO standards. External auditing must be carried out by your certification agency but it is permissible and often a cost-effective approach to outsource internal auditing or surveillance.  45001smc can assist you with internal auditing to ensure that your certified management systems (or the system you are seeking to have certified meets the requirements of the system.