Organisations with SAC accredited ISO/IEC 27001:2013 certification will be given three years to transit to the new ISO/IEC 27001:2022 (by 31 Oct 2025). All ISO/IEC 27001:2013 certifications shall expire or be withdrawn at the end of the transition period.
ISO/IEC 27001 certified organisations need to take the following actions prior to the transition audit:
Review the new editions and make relevant changes to address the new / updated requirements of ISO/IEC 27001:2022
Updating of the statement of applicability (SoA)
If applicable, updating of the risk treatment plan
The implementation and effectiveness of the new or changed controls chosen by the clients
Submit the revised documentations to TÜV SÜD
Conduct an internal audit and management review to the new edition
For any enquiries, please contact us here.