Any plans or updates regarding certification of ISO27001:2022?

[Paul Jentzsch]

Hello,

as a part of critical infrastructure it is a very important point that our software meets the requirement of being ISO 27001 certified.
As i found out, Jira Cloud is certified for ISO27001:2013.
Are there any plans to get certified for ISO27001:2022 in the near future?

Thank you!

[Andy Heinzer · Accepted solution]

Hi @Paul Jentzsch 

I reached out to my team and found this information related to your query:

The ISO 27001:2013 certification is valid for three years from the date of issue, but organizations must upgrade to ISO 27001:2022 before their next recertification or surveillance audit. The transition period began on October 31, 2022 and ends on October 31, 2025, after which certifications based on ISO 27001:2013 will expire or be withdrawn. We will have our *2022 certificate posted on the Trust Center by the end of January 2025.

So it seems there are plans to move to the newer 2022 cert, but I don't believe this is ready just yet.

I hope this helps.

Andy

[Rebekka Heilmann _viadee_]

Thanks Andy!

[Rebekka Heilmann _viadee_]

Hi @Paul Jentzsch and welcome to the Community,

according to this Community post, the certification is from 2022: FY23 ISO/IEC 27001 Certifications Update - Atlassian Community

If you follow the links in that article, it refers to ISO 27001:2022 already.

However, I can see that in the Trust Center they still refer to the 2013 standard. 

Let me escalate your question to the Atlassian Team and they may be able to help us out here!