Getting ready for renewal without the panic

Certification lasts twelve months, and most of the pain of renewal comes from trying to reconstruct a year of changes in a single afternoon. A short monthly routine removes that entirely.

Ninety days out, confirm your scope: new starters, leavers, new cloud services and any devices bought during the year. Sixty days out, re-check multi-factor authentication and patching across the register. Thirty days out, refresh your policies and have a director sign the declaration.

Keep a dated snapshot each month. When the assessor asks how long a control has been in place, you can point at a trail rather than a memory.

If something has slipped, fix it before you book the assessment. It is cheaper to spend a week correcting a gap than to fail and resubmit.