We made the ISO 27001:2022 Transition – So What?

Hard on the heels of the success of our recertification audits for ISO 9001ISO 27001, and ISO 27701 back in March, today we received confirmation that we have successfully completely our ISO 27001:2022 transition – the latest version of the information security standard.

So What?

Good question. We understand that a ISO 27001:2022 transition may not be the most interesting topic of conversation. But in a world of ongoing headlines about cyber breaches and data loss, we feel it’s important to be able to reassure our clients and staff that we take the confidentiality, integrity, and security of their data seriously.

Chef with frown looking over prepared food |

Additionally, one of our overarching principles at Risk Evolves is that we will never ask a client to do something that we wouldn’t. After all, you wouldn’t go to a restaurant where the chef never eats his own meals, so why would you use a consultancy company that doesn’t practise what it preaches?

It also helps us to understand what our clients experience. Despite having been involved with 100’s of internal and external audits alongside our clients, we get nervous about our own external audit. Crazy, eh? Will we have a non-conformity? What OFI’s will be identified? What if we have forgotten something? What will the auditor be like? Did we give them the right address?

There was of course no need to panic. We were, as we always are, completely prepared and audit ready. The team at NQA (our external UKAS accredited certification body) are great, pragmatic, knowledgeable people who confirmed that we met the requirements of the standard and recommended us for certification.

Given the latest version of the standard was only released six months ago, we are extremely pleased with our achievement.

Want to know more?

ISO 27001 has seen a 24.7% increase in worldwide certificates over the last two years, and that growth sees no sign of slowing. The certification is suitable for organisations of any size, and in any sector. If you’d like to find out more about how we can help your organisation with the ISO 27001:2022 transition, get in touch.

MD for Risk Evolves, Helen has worked in the IT industry since 1986. Helen is a leader in the areas of risk management and operational improvement, and works with companies in senior governance, risk and compliance roles. She is a member of the British Standards Institute and is a member of the BSI Committee creating a new guidance standard to assist organisations on how to become cyber resilient. Helen and the team at Risk Evolves work with organisations to improve their resilience through stronger process implementation and better communication and education of staff.

Related Post