親愛的客戶 您好：
Dear Client,

感謝  貴公司長期以來選擇愛台灣驗證 (AiTC) 作為您的資訊安全管理系統 (ISMS) 驗證合作夥伴。
Thank you for your long-term choice of AiTC as your certification partner for Information Security Management Systems (ISMS).

為確保本公司的驗證服務持續符合國際標準要求，依據國際認證論壇 (IAF) 發布之 IAF MD 29:2024 強制性文件，本公司已啟動對應 ISO/IEC 27006-1:2024（資訊安全管理系統稽核與驗證機構之要求）的轉版作業。
To ensure that our certification services continue to comply with international standard requirements, and in accordance with the mandatory document IAF MD 29:2024 published by the International Accreditation Forum (IAF), our company has initiated the transition process for ISO/IEC 27006-1:2024 (Requirements for bodies providing audit and certification of information security management systems).

為保障 貴公司權益並順利銜接新版標準，特此通知下列針對既有客戶之重要變更與配合事項：
To protect your company's interests and ensure a smooth transition to the new version of the standard, we hereby notify you of the following important changes and compliance requirements for existing clients:

一、 生效日期 Effective Date

新版稽核作業規範與人天計算標準原則上將於 2026 年 1 月 1 日 生效 (如果屆時認證機構仍未通過審核，將以其通過日期計算)。
The new audit procedures and the standard for calculating man-days will generally take effect on January 1, 2026 (If the accreditation body has not completed its review by then, the effective date will be calculated from the date of their approval).

二、 對既有客戶之主要影響 Key Impact on Existing Clients

本次轉版核心變動在於稽核時間（人天）的計算標準調整。自 2026 年度起，貴公司的年度追查稽核 (Surveillance) 或重新驗證 (Recertification) 稽核人天將依據新版標準進行核算，重點如下：
The core change in this transition is the adjustment of the standard for calculating audit time (man-days). Starting from the 2026 calendar year, the man-days for your company's annual Surveillance or Recertification audits will be calculated in accordance with the new standard, with the following key points:

1. 稽核人天重新評估： 本公司將依據新版規範重新檢視既有客戶的稽核人天需求。
   Re-evaluation of Audit Man-Days: Our company will reassess the audit man-day requirements for existing clients based on the new version of the standard.

2. 驗證範圍異動之額外工時（重要）： 依據 ISO 27006-1:2024 之要求，若 貴公司在未來的追查稽核中，因組織變動需更新驗證範圍內的人數（例如：組織擴編導致驗證人數增加，涉及延伸範圍），稽核時間將可能增加，以確保稽核取樣之有效性與符合性。
   Additional Work Time for Changes in Certification Scope (Important): In accordance with the requirements of ISO 27006-1:2024, if your company needs to update the number of personnel within the certification scope due to organizational changes during future surveillance audits (e.g., organizational expansion leading to an increase in certified personnel, involving scope extension), the audit man-days may increase to ensure the effectiveness and conformity of audit sampling.

三、 貴公司需配合辦理事項 Required Client Compliance Actions

為了順利完成 2026 年度的稽核排程規劃，請協助配合以下作業：
To successfully complete the audit schedule planning for the 2026 calendar year, please assist and comply with the following procedures:

1. 查收與填寫新版調查表： 本公司將於 2025 年 12 月 31 日前，陸續寄發更新版之「客戶基本資料及驗證申請表 (表單編號：CB-4-21101)」。
   Receive and Complete the New Survey Form: Our company will progressively issue the updated "Client Basic Information and Certification Application Form (Form No.: CB-4-21101)" before December 31, 2025.

2. 確認驗證資訊： 請務必依據 貴公司實際現況，詳細填寫上述表單並回傳。本公司將依據回傳資料，評估採用新版標準後，是否會造成驗證人數認定上的改變，並據此精確計算 2026 年度之稽核人天。
   Confirm Certification Information: Please ensure the above-mentioned form is completed in detail according to your company's actual current status and returned. Based on the submitted data, our company will evaluate whether the adoption of the new standard will result in a change in the determination of certified personnel and will precisely calculate the audit man-days for the 2026 calendar year accordingly.

四、 其他說明 Other Notes

1. 遠端稽核： 由於 AiTC 目前未開放遠端稽核服務，故新版標準中關於遠端稽核之要求（9.1.3.3）對目前的稽核模式無影響。
   Remote Audits: As AiTC currently does not offer remote audit services, the requirements regarding remote audits (9.1.3.3) in the new standard do not affect our current audit model.

2. 人員資格： 本公司稽核團隊已完成相關轉版訓練，將持續以符合新版標準之資格為您提供專業服務。
   Personnel Qualifications: Our audit team has completed the relevant transition training and will continue to provide you with professional services that comply with the new standard's qualifications.

若您針對本次轉版或新版人天計算有任何疑問，歡迎隨時聯繫服務貴公司的業務經理，或致電本公司洽詢。
If you have any questions regarding this transition or the new man-day calculation, please feel free to contact your dedicated Account Manager or call our company for consultation.

再次感謝您的配合與支持。
Thank you once again for your cooperation and support.

順頌 商祺
Yours sincerely,

愛台灣驗證股份有限公司 (AiTC) 執行長                葛皇濱  /  Gabriel Ger
Ai Taiwan Certification Co., Ltd. (AiTC) CEO

(本公告內容依據 AiTC 內部文件 AB-ISO 27006-1-2025 V1.1 制定
The content of this announcement is based on AiTC internal document AB-ISO 27006-1-2025 V1.1)