The standard changes. Your evidence has to follow.

Three ways you hear about it

1. 1
   A notice in the dashboardThe most targeted route: you see changes only for the frameworks you subscribe to. No noise about everything else, and the notice sits where you already work.
2. 2
   The newsletterFor everyone not in the portal daily — management, data protection, procurement. One-click unsubscribe, no advertising in between.
3. 3
   News on sightadel.comPublicly readable without an account. For colleagues who hold no licence, and for linking in internal communication.

What a notice contains

1. 1
   What changedThe change in plain words, with reference and date. Not a link to an 80-page PDF and an invitation to search it yourself.
2. 2
   What it means for your checkpointsWhich points are affected, whether evidence has to be produced again, and whether a point is added or removed.
3. 3
   By when something has to be doneThe deadline, and where a transition period applies, when it ends. Without a date a notice is just news.

New versions cost nothing extra here

When a new edition of a framework you subscribe to appears, it is available on your running subscription at no extra charge — with the new structure, and your existing evidence mapped onto the new requirements.

That is deliberate. A change to a standard is not an occasion for an invoice; it is the moment that shows whether a tool does its job. The migration work stays yours — charging you twice for it would be an imposition.

Transition periods: what to watch

For certifiable standards the International Accreditation Forum sets how long certificates to the old edition remain valid — typically three years from publication. After that they lapse, regardless of when your own three-year cycle ends.

The practical advice: fold the transition into a regular surveillance or recertification audit. Waiting until just before the deadline means a special audit, and certification bodies where everyone is asking at once.

Staying informed

Changes to ISO 27001, ISO 9001, NIS2, DORA and the other frameworks, put in context rather than forwarded — as often as there is something to report, and no more. Tell us if you would like these notices.