It will be necessary for anyone who holds an ISO 27001:2013 certification to transition to the new standard. The most recent version of ISO 27001 should be implemented by those who have just begun to implement it or who want to do so in the near future.

The deadline for ISO 27001:2022 transition is October 2025. Even if it might seem far off, in order to keep ahead of the game, we advise you to start the procedure today. In 2025, there will definitely be a high demand for transition audits from Certification Bodies, so it might be difficult to secure a slot in advance.

Your certification as an ISO 27001 will expire if you don’t make the switch by October 2025. until that, as certification organisations won’t be able to certify you using the 2013 version of ISO 27001 until 2025, you’ll need to do another Stage 1 and 2 Assessment against the most recent version of the standard.

Ready to upgrade your ISO 27001 to the latest standard? Here’s a step-by-step guide to get you started:

1. Get familiar with the changes: Purchase a copy of the ISO 27001:2022 standard to understand the updated requirements.
2. Identify any gaps: Conduct a gap analysis to see where your current system needs adjustments to comply with the new standard.
3. Update your documentation: Refine your policies, procedures, and statement of applicability to reflect the 2022 version and address any gaps identified.
4. Adapt your internal audits: Review your internal audit schedule and update it to assess your system against the changes in ISO 27001:2022.
5. Keep management informed: Update your management review agenda to include a section on the ISO 27001 changes and how you plan to communicate them to the organization.
6. Schedule your transition audit: Once you’ve implemented the updates, contact your certification body to schedule a transition visit to verify your compliance.

Feeling overwhelmed? We can help! Our comprehensive ISO 27001 Transition Programme offers all the support you need to ensure a smooth and successful upgrade.

Our Transition Programme suggests completing the process in 5-7 days spread over 4-6 months.

It should be noted that until October 2023, numerous Certification Bodies will not be able to certify against ISO 27001:2022 standards.

To find out when you might be able to carry out the transition visit, get in direct contact with your Certification Body. You could choose to combine them if your yearly surveillance visit falls in the latter part of 2023 in order to reduce expenses.

As of right now, Certification Bodies estimate that this will take an extra half-day, albeit each CB may experience this differently.