Guest post Created: Jan 12, 2016 Last commented: Jan 12, 2016

Addres change after certification

Dear Dejan, what if a company gets the certification and relocates the company after two months? do we have to inspect again or just paperwork is enough? and my second question is for a server room, I adviced to my client to have a digital lock for server room but they are planning to move in 3 months, Is it ok IT manager keeps the server room key and keeps logs and signitures for key use?

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

Gokhan,

1) About company relocation - you should read the terms and conditions with your certification body and see what they require, but in most cases you would have to notify them of such change, and they would check whether you adapted your ISMS during their first surveillance visit. You would normally need to assess the risks again and implement all the new controls as identified during risk treatment.

2) If your risk assessment and treatment shows that by having a key instead of a digital lock sufficiently decreases the risks, than this is OK.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community