changesOn February 15, 2023, the International Accreditation Forum (IAF) released a new version of MD 26. This mandatory document from the IAF must be used by Brand Compliance, and all other Certifying Bodies, to ensure that the transition to ISO 27001:2022 is carried out in a consistent manner.


We hereby list the changes:

  • Transition period has been extended
    Initial audits and recertifications may be carried out six months longer, i.e. until May 1, 2024 instead of November 1, 2023
  • Extension of audit time
    When the transition audit is performed separately or linked to a surveillance audit, the audit time is now at least one day. Previously, half a day was calculated.
    When the transition audit is performed during recertification, the audit time is now at least half a day. Previously, no extra time was calculated.

Brand Compliance will plan and conduct transition audits in line with the new guidelines.


Do you have any questions about the changes or the transition process in general? Check out the frequently asked questions or our news item on accreditation. You can also contact Brand Compliance at or phone +31 (0)73 220 2000.