Security Compliance FAQs: How do I transfer my ISO 27001 certificate from one firm to another?

The world of information security and compliance can be complicated to navigate, leaving you with questions as you work to improve your organization’s security posture. In this series, Boulay’s Risk Advisory Team answers some of the most frequently asked questions (FAQs) about SOC 2 reports, ISO 27001 certifications, and other security compliance frameworks.

How do I transfer my ISO 27001 certificate from one firm to another?

Whether for better service, a closer working relationship, cost effectiveness, or another strategic business purpose, you may wish to transfer your ISO 27001 certification from one certification body (CB) to another in the middle of your ISO certification term. It is possible to transfer your ISO 27001 certificate; the main requirement is that both the original CB that issued the certificate, and the new CB you are looking to transfer to, should be accredited by a member of the International Accreditation Forum (IAF).

The IAF is a worldwide association of accreditation bodies that perform conformity assessments in the fields of management systems, including information security management systems. The full listing of IAF accreditation bodies can be found on the IAF website.

Boulay is accredited by the ANSI National Accreditation Board (ANAB), which is an IAF member accreditation body based in the United States. We therefore accept ISO 27001 certificate transfers from other ANAB accredited CBs as well as other CBs that are accredited by an IAF member.

To transfer your ISO 27001 certificate, the first step is to schedule a consultation with the new CB, who can discuss costs, technical considerations, and help you determine if the transfer is right for your organization. If you decide to proceed, the new CB will gather the information they need to start the transfer process, collaborating with both you and your former CB to ensure a smooth transition. Connect with Boulay to learn how we assist throughout the ISO 27001 certificate transfer process.

Helping You Get There…

Boulay’s Risk Advisory Team is here to answer your questions about ISO 27001 certificates, SOC 2 reports and other aspects of security compliance, so you can move forward with confidence. For more information regarding Boulay’s ISO 27001 certification services, connect with us today.

Boulay provides the information in this article for general guidance only, and does not constitute the provision of legal advice, tax advice, accounting services, investment advice, or professional consulting of any kind. The information provided herein should not be used as a substitute for consultation with professional tax, accounting, legal, or other competent advisers. Before making any decision or taking any action, you should consult a professional adviser who has been provided with all pertinent facts relevant to your particular situation. The information is provided “as is,” with no assurance or guarantee of completeness, accuracy, or timeliness of the information, and without warranty of any kind, express or implied, including but not limited to warranties of performance, merchantability, and fitness for a particular purpose.

Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to Our Newsletter

LOCATIONS

CONTACT

COMPANY

RESOURCES

Investment Advisory Services offered through Boulay Financial Advisors, LLC a SEC Registered Investment Advisor. Certain Third Party Money Management offered through Valmark Advisers, Inc. a SEC Registered Investment Advisor. Securities offered through Valmark Securities, Inc. Member FINRA, SIPC. Registered Representatives of Valmark Securities, Inc. are located at the Minneapolis/Eden Prairie office(s). See Valmark’s Form CRS.

Boulay PLLP and Boulay Financial Advisors, LLC are separate entities from Valmark Securities, Inc. and Valmark Advisers, Inc. FINRA | SEC | SIPC | ©2021-2024 Boulay | All rights reserved.