Certification Decision Outcomes

Based on the review, the Certificate Decision Maker may decide to:

• Grant Certification - when all applicable ISO/IEC 27001 requirements are met
• Renew Certification - following successful completion of recertification audit
• Maintain Certification - when continued conformity is demonstrated
• Suspend Certification - due to unresolved major nonconformities or significant issues
• Withdraw Certification - for serious or persistent nonconformity  
  

Each certification decision is formally documented, justified, and communicated to the client in writing.

Ampcus Cyber does not outsource certification decisions under any circumstances.

In addition to the above, the following certification decision outcomes may apply:  

• Refusal of Certification - Certification may be refused where audit results do not demonstrate conformity with applicable requirements or where identified nonconformities are not satisfactorily addressed within the specified timeframe. Applicants will be informed of the reasons for refusal.
• Restoration of Certification - Certification that has been suspended may be restored once the certification body has verified that the conditions leading to suspension have been effectively resolved. Restoration may require additional audit or review activities, as applicable.
• Expansion of Scope of Certification - Certified clients may request an expansion of the scope of certification. Such requests are subject to review by the CDM and may require additional audit activities to verify conformity with the expanded scope.
• Reduction of Scope of Certification - The scope of certification may be reduced at the request of the client or by the certification body where conformity is no longer demonstrated for part of the certified scope. Any reduction in scope is formally documented and communicated to the client.