How long is a ISO/IEC 27001 certificate valid for?
• •An accredited certificate is valid for three years after which the organisation can choose to have its ISMS re-certified. • •During the three year period the certification body will under take a number of surveillance audits to check that the ISMS is being maintain and updated to an effective level of information security.