Every audit gets a technical review of report content, findings, grading and corrective actions before the decision (grant, maintain, suspend, withdraw), with reviewers, deciders and dates recorded; certificates are valid three years from the initial decision. Certificates follow ISO/IEC 17021-1 and the Annex 1 and 3 templates, are in English (a translated scope may follow) and match the Assurance Platform and public register, carry the logo, list head office, off-site and multi-site locations, and show the decision date (new for recertification, version change or scope change, with expiry unchanged for the latter two), the fixed initial certification date, the issue or reissue date and an expiry three years less a day after the decision.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.