Implementation Steps

1. Understanding the Standard:
   • Familiarize yourself with the requirements and guidelines of ISO 21001.
2. Gap Analysis:
   • Conduct a gap analysis to compare the current practices with the requirements of ISO 21001.
3. Planning:
   • Develop an implementation plan that addresses the gaps identified.
4. Training:
   • Train staff and stakeholders on the principles and requirements of ISO 21001.
5. Documentation:
   • Create or update the necessary documentation to comply with the standard.
6. Implementation:
   • Implement the required processes and procedures.
7. Internal Audit:
   • Conduct internal audits to ensure the EOMS is functioning effectively.
8. Management Review:
   • Perform management reviews to ensure the EOMS's suitability, adequacy, and effectiveness.
9. Certification Audit:
   • Undergo an external certification audit by an accredited certification body.

Certification Process

1. Pre-assessment:
   • Some organizations opt for a pre-assessment to identify any potential non-conformities before the formal audit.
2. Stage 1 Audit (Documentation Review):
   • The certification body reviews the organization’s documentation to ensure compliance with ISO 21001.
3. Stage 2 Audit (On-site Audit):
   • The certification body conducts an on-site audit to verify that the organization’s EOMS is effectively implemented and in accordance with ISO 21001.
4. Certification Decision:
   • Based on the audit findings, the certification body decides whether to grant certification.
5. Surveillance Audits:
   • Periodic surveillance audits are conducted to ensure ongoing compliance with ISO 21001.
6. Recertification:
   • The certification is typically valid for three years, after which a recertification audit is required.