Not surprisingly for a company so focussed on ISO27001, we have received many calls from our customers about their training requirements for the new ISO27001:2013 standard. Given that the new version of the standard completely replaces the old ISO27001:2005 version, surely the answer is obvious!
While ISO27001:2005 has been replaced by the new version, there is currently no ISO27001:2013 accredited certification scheme available in the world. In the UK, we estimate that the earliest any UKAS accredited Certification Body will have such a scheme available would be March-April 2014. The details and cost of the new ISO27001:2013 certification scheme are as yet unknown.
We are advising all of our training and consulting customers, that the existing ISO27001:2005 certification schemes are still currently the only available way of obtaining the ISO27001 standard. We are advising all organisations who wish to become certificated in the next 6-12 months to focus on satisfying the requirements of the ISO27001:2005 standard and to train their staff appropriately.
We are also advising organisations that they must understand the requirements of ISO27001:2013. Upon received their accreditation to ISO27001:2005, they will in the future be expected to meet the requirements of ISO 27001:2013 during regular CAV visits (every 6/12 months) and when they are re-audited after 3 years.
Organisations who know they will need a longer period of time (usually proportional to size and budgets) to certificate to ISO27001 will logically need to work on the requirements for ISO27001:2013.
To meet current and future needs, we have worked hard on a new ISO27001 training programme that supports the old (ISO27001:2005), the upgrade (transition from old to new) and the new (ISO27001:2013). OK, so you are thinking just three courses are required?. Well its a bit more complicated, as we have to support Foundation, Lead Implementer and Lead Auditor training courses and their respective examinations.
If you have suggestions on how we can improve this programme, please feel free to comment on this blog or contact me directly.
Marketing Manager – Training Services