Finnco, a subsidiary of a certification body, provided ISMS consultancy services to an organization. Considering this scenario, when can the certification body certify the organization?

The correct answer is C. If a minimum period of two years has passed since the last consulting activities. ISO/IEC 17021-1:2015 (Requirements for Certification Bodies) prohibits certification bodies from certifying organizations they have provided consultancy services to, unless a two-year separation period is maintained. This prevents conflicts of interest and ensures independent…

Managing an ISO/IEC 27001 Audit Program

Question

Options

AThere is no time constraint in such a situation
BThe certification body can certify the organization immediately after consulting services end
CIf a minimum period of two years has passed since the last consulting activities

How the community answered

(29 responses)

A
3% (1)
C
97% (28)

Explanation

ISO/IEC 17021-1:2015 (Requirements for Certification Bodies) prohibits certification bodies from certifying organizations they have provided consultancy services to, unless a two-year separation period is maintained. This prevents conflicts of interest and ensures independent certification audits.

Topics

#certification body independence#consulting conflict of interest#ISO/IEC 17021#impartiality

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice