Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

Minimum of three months for records for certification audit

One of our Customer insist there is a minimum of three months for records to be presented in an auditory. I don't find any clause where this period is mentioned.

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

It is true that ISO 27001 does not require the minimum period of records (i.e. minimum period of the ISMS operation before the certification), however some certification bodies do have such requirements and some don't. Therefore, you should speak to the certification body you have chosen and see what criteria do they have.

This article may also help you: How to choose a certification body https://advisera.com/blog/2021/01/11/how-to-choose-an-iso-certification-body/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community