The ongoing management of a certification and compliance architecture as a live, demonstrable state between surveillance assessments and recertification cycles.