Member support to transition to ISO 20252:2026

---

Free for all ADIA members – no rush, you have until September 2029.

The ISO 20252:2026 Standard is now published, and ADIA Academy has built a complete transition package to walk certified members through it – step by step, at your own pace.

Eighty percent of the 2019 Standard hasn’t changed. This training focuses on the part that has: AI and automation, data quality, and a more risk-based approach to information security. You don’t need to rebuild your system. You need to update it.

---

The Five-Stage Transition Package

Work through the stages in order, and don’t start the next one until the previous stage is implemented and internally audited.

Stage 1 – Global Release (allow 1 month)
Why the Standard was updated, what’s changed since 2019, and answers to 22 frequently asked questions.

Stage 2 – Transition Plan (allow 2 months)
Organising your project, reviewing your Statement of Applicability, addressing ICT and AI, and building your training and awareness plan.

Stage 3 – Framework (allow 2 months)
Clauses 4.1 to 4.7, worked through clause by clause with every change identified.

Stage 4 – Annexes A to G (allow 1 month)
The methodology Annexes, including new Annex G for panel development and lifecycle management. (Note: Annex A has split in two – if you previously attested to Annex A for panel work, you’ll now need Annex G as well.)

Stage 5 – 3-Year Certification Cycle (ongoing)
The seven recurring requirements that keep you audit-ready between certifications.

---

What’s Included

• Five stage presentations, self-paced and self-serve
• A Gap Analysis Template to compare your existing system against the new requirements – this becomes your change management tool for the whole project
• A Technology Management Table for ICT and AI
• An example training plan
• Updated Academy training modules – 10 for management, 6 for employees, five minutes each, for initial training and annual refresher awareness
• Internal auditor training, for organisations that need more trained auditors

---

Getting Started

Three things to do before you open Stage 1:

1. Purchase the ISO 20252:2026 Standard
   Make sure you buy the 2026 version – the 2019 Standard remains on sale for now, but it’s not the one you need.
2. Inform senior management of the planned changes. Stage 1 is written to be used for exactly this conversation.
3. Use the ADIA Gap Analysis Template to compare your existing system against the new requirements.

If you’re unsure about something, ask before you rebuild your system.

---