ISO 27001 Certification Support
ISO 27001 is the international standard for managing information security. Certification shows customers and funders that you protect information in a structured, independently checked way.
How Certification Works
To be certified, an organisation builds an information security management system (ISMS) that meets the standard, then asks an accredited certification body to audit it. Certification itself is carried out by the certification body, not by us.
How to Prepare
- Gap analysis. Compare what you do today with what the standard requires.
- Implementation plan. Decide what needs to change, who owns it and by when.
- Staff training. Make sure everyone understands their part in keeping information secure.
- Documentation. Write down the policies, procedures and records the standard asks for.
- Internal audits. Check that your ISMS works before an outside auditor does.
- Certification audit. An accredited certification body assesses your ISMS and decides whether to certify.
How We Help
We can help with benchmarking, gap analysis and implementation planning, and support you through each step above.
Frequently Asked Questions
How long does it take to get ISO 27001 certified?
Many organisations take between six and twelve months from the first gap analysis to the certification audit. The time depends on your size, how much is already in place and how much time your team can give.
What does it cost?
Our fee depends on the scope of the work. The certification body charges separately for its audit. We explain both after a free discovery call. All prices exclude VAT.
What do you need from us?
A senior sponsor, a named person to lead the work in your organisation, and time from the people who run your processes and systems.
Do you carry out the certification audit?
No. An accredited certification body does this. We help you prepare so that you go into the audit ready.