On February 15, 2023, the International Accreditation Forum (IAF) released a new version of MD 26. This mandatory document from the IAF must be used by Brand Compliance, and all other Certifying Bodies, to ensure that the transition to ISO 27001:2022 is carried out in a consistent manner.
We hereby list the changes:
Transition period has been extended Initial audits and recertifications may be carried out six months longer, i.e. until May 1, 2024 instead of November 1, 2023
Extension of audit time When the transition audit is performed separately or linked to a surveillance audit, the audit time is now at least one day. Previously, half a day was calculated.
When the transition audit is performed during recertification, the audit time is now at least half a day. Previously, no extra time was calculated.
Brand Compliance will plan and conduct transition audits in line with the new guidelines.