An ISO 27001 certificate runs for three years, with surveillance audits in the years between the initial certification and recertification. A surveillance audit covers part of the system each time and can lead to suspension if major nonconformities are found.
See ISO 27001.
Read more
Related terms
- ISO 27001
- ISO/IEC 27001 is the international standard for an information security management system, certified by an accredited body on a three-year cycle.
- Nonconformity
- A nonconformity is a failure to meet a requirement of a management system standard or of the organization's own documented management system.
- Information security management system
- An information security management system is the set of policies, processes and responsibilities an organization uses to manage information security risk.