OrgXY is an ISO/IEC 27001-certified software development company. A year after being certified, OrgXY's top management informed the certification body that the company was not ready for conducting the

The correct answer is A. The certification is suspended. If an organization like OrgXY informs the certification body that it is not ready to conduct the surveillance audit as scheduled, the certification may be suspended. This is because the surveillance audit is a critical part of the ongoing certification maintenance, required to en

ISMS Audit Programme Management

Question

OrgXY is an ISO/IEC 27001-certified software development company. A year after being certified, OrgXY's top management informed the certification body that the company was not ready for conducting the surveillance audit. What happens in this case?

Options

AThe certification is suspended
BThe current certification is used until the next surveillance audit
COrgXY transfers its registration to another certification body

How the community answered

(48 responses)

A
88% (42)
B
4% (2)
C
8% (4)

Explanation

If an organization like OrgXY informs the certification body that it is not ready to conduct the surveillance audit as scheduled, the certification may be suspended. This is because the surveillance audit is a critical part of the ongoing certification maintenance, required to ensure continued compliance with the standard.

Topics

#surveillance audit#certification suspension#ISO 27001 certification#certification body

Community Discussion

No community discussion yet for this question.

Full LEAD-AUDITOR Practice