Can a verification statement be revoked?

Yes. A verification statement may be revoked if:

• New evidence of non-compliance is discovered.
• The organization fails to maintain required cybersecurity measures.
• Misrepresentation or fraudulent information is found in the submitted documentation.