Guest
Minimum of three months for records for certification audit
One of our Customer insist there is a minimum of three months for records to be presented in an auditory. I don't find any clause where this period is mentioned.
Assign topic to the user
It is true that ISO 27001 does not require the minimum period of records (i.e. minimum period of the ISMS operation before the certification), however some certification bodies do have such requirements and some don't. Therefore, you should speak to the certification body you have chosen and see what criteria do they have.
This article may also help you: How to choose a certification body https://advisera.com/blog/2021/01/11/how-to-choose-an-iso-certification-body/
Comment as guest or Sign in
Jan 12, 2016
Jan 12, 2016
Jan 12, 2016