ISM-0102 Removed History 2008 Re-certification should be undertaken on all certified gateways every 12 months, or sooner where the change management process is assessed to have altered the integrity of the gateway’s security.