Guest user Created: Dec 31, 2019 Last commented: Dec 31, 2019

Calculating audit days

How can I calculate the ISO 27001 certification renewal audit date for my company? I know that according to the employee number. however, how can I evaluate whether the day number is fair or not? for 21 employees, they specified as 4 days. the quality system is the same, people are the same, no major change for ISO 27001...

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Dec 31, 2019

The main criteria are a number of employees and an audit complexity.

Without more detailed information we cannot provide a precise answer, but this document can give you a good insight if the defined day are fair considering your context:

IAF MD 5:2015 "Determination of Audit Time of Quality and Environmental Management Systems" https://www.iaf.nu/upFiles/IAFMD5QMSEMSAuditDurationIssue311062015.pdf

Although its title refers to QMS and EMS it also can be applied to estimate audit days for an ISMS certification audit.

Additionally, should consider asking for quotes from a couple of certification bodies, so that you can compare the numbers they offer.

This article will provide you further explanation about certification audit:
- Which questions will the ISO 27001 certification auditor ask? https://advisera.com/27001academy/blog/2015/07/20/which-questions-will-the-iso-27001-certification-auditor-ask/

Quote

1 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Dec 31, 2019

Expert Advice Community