ISO 27001
ISO 27001 certification readiness
An ISO 27001 certificate is often a condition for a contract with a larger customer. We show how close you are, then prepare you for the certification audit with working processes and evidence rather than a folder of policies.
Scope and price are confirmed in writing before work starts.
Discuss your caseThe benefit for your organisation
- You know how close you are to certification and how much work is left.
- You go into the certification audit with working processes and evidence.
- The certificate opens contracts with larger customers.
Gap analysis
A comparison with the ISO/IEC 27001:2022 requirements (clauses 4–10) and the Annex A controls, a proposed certification scope and a plan to the certification audit.
from €4 900usually 2–3 weeks
Programme to certification
Building the management system, implementation and evidence, internal audit, management review and support during the certification audit.
by quotationdepending on scope and what exists
The path to certification
- The scope of the information security management system: which activities, sites and systems are certified.
- Risk assessment and treatment and the Statement of Applicability: which of the 93 Annex A controls apply and why.
- Policies, procedures and records that match how you actually work.
- Implementing missing measures and gathering evidence that they work.
- Internal audit (clause 9.2) and management review (clause 9.3) before the certification audit.
- A two-stage certification audit by an accredited certification body, and closing the findings.
ISO 27001 and NIS2
A certificate helps but does not automatically cover every NIS2 obligation, for example incident reporting deadlines and management training. We check those too, so the work is not done twice. See the NIS2 quick assessment.
Independence
If we build the system, the internal audit is carried out by another auditor or only for parts we did not work on. See the annual internal audit.
Boundaries
- We are not a certification body. The certificate is issued by an accredited certification body under a separate contract.
- We do not guarantee the outcome of the certification audit.
- The base gap analysis covers one organisation of up to 100 staff; a larger scope is quoted in writing.
General information, not a legal opinion.