Information Security Management Systems (ISMS) Program Update

Joanne HurstISMS, Scheme / Program Update

ISO/IEC 27001: 2022 Update Highlights

New Edition Release:

  • The latest edition of ISO/IEC 27001 was released in October 2022
  • You can purchase a copy of the revised standard now from your preferred online standards supplier.

Transition Period:

  • There is a three-year transition period for currently-certified companies after the publication of the new edition. This allows organizations to adapt and implement the updated requirements.

Certification Deadlines:

  • All new certifications and renewals must be issued in conformity with the ISO/IEC 27001:2022 standard by May 2024. This means that that the last day for certification or recertification to ISO/IEC 27001:2013 is April 30th, 2024.
  • The last day of validity for certificates issued under ISO/IEC 27001:2013 will be October 31st, 2025.

Importance of ISO 27001 Certification:

  • ISO 27001 certification demonstrates an organization’s commitment to information security management.
  • Certification provides a competitive advantage in the market.
  • The process of certification encourages companies to proactively identify and address weaknesses in their information security management systems, thereby enhancing data security and ensuring compliance obligations are met. 
  • Organizations are encouraged to become risk-aware and proactively identify and address weaknesses in their information security management systems.

For more information:

  • If you are already certified to ISO/IEC 27001 with Global-Mark, then your Client Manager will be in touch to discuss the transition pathway for the 2022 standard, or you can contact them directly.
  • If you have any questions or would like to talk to the team please contact our office.