In light of the launch of the updated ISO 37001:2025 standard, which succeeds the 2016 iteration, and in alignment with the directives issued under IAF MD 30:2025 by the International Accreditation Forum, a strict 24-month adaptation window has been declared. The implementation roadmap is governed by the following provisions:
KEY DEADLINES & REQUIREMENTS
Cut-off for Initial Assessments: Organizations are permitted to undergo first-time registration audits under the legacy ISO 37001:2016 standard only until August 30, 2026. Effective from August 31, 2026 onwards, all newly initiated certification audits must strictly comply with the revised ISO 37001:2025 guidelines.
Validity of Legacy Certificates: The official decommissioning date for the old scheme is set for February 28, 2027. Upon reaching this milestone, any remaining active certificates tied to the 2016 version will automatically become void, resulting in their formal suspension or withdrawal.
Expiration Constraints & Migration Paths: Regardless of the standard three-year lifespan typically granted to certifications, any documentation issued under ISO 37001:2016 during this interim phase must clearly state February 28, 2027, as its final expiration date. Certified entities are encouraged to seamlessly transfer their management systems to the 2025 framework during their scheduled yearly surveillance visits, provided they submit a formal written request to our office beforehand.
LiberoAssurance remains dedicated to facilitating a smooth regulatory shift. We will continuously deliver updates regarding the new standard’s deployment alongside a comprehensive suite of professional training courses tailored to ISO 37001:2025.