III.2.7.

Do we need to have a valid ISO 27001 certificate if we want to register as a third party RRM?

Answer: There is no requirement to acquire a valid ISO 27001 certificate. Nevertheless, nothing prevents RRMs from doing so. It can be proven useful when demonstrating compliance to the technical and organisational requirements.