Prepare for certification
ISO 27001 preparation, from implementation to certification audit
We guide your team through ISO 27001 implementation, risk management and audit preparation. You get a security management system that fits your operations, with specialist support through the independent certification audit.
ISO/IEC 27001 Lead Auditor
Our team holds ISO/IEC 27001 Lead Auditor credentials, so we prepare you for the way certification audits are run.
Who this service is for
Build an ISMS and prepare for ISO 27001 certification
- You want ISO 27001 certification to demonstrate security to customers and partners.
- You need a structured way to manage information security risks as the business grows.
- You want the standard’s requirements translated into proportionate, workable controls.
- Your team needs support with implementation, an upcoming certification audit or maintaining the ISMS.
What the work achieves
A proportionate ISMS with support through certification
-
Security management that fits your business
ISO 27001 requirements are aligned with your operations, risks and resources. The information security management system supports daily work with proportionate processes and controls.
-
Documentation and controls ready for use
We prepare the required documentation and advise on technical and organisational controls. Your team gets practical support to put the agreed measures into use.
-
Support through the certification audit
An internal audit identifies gaps before certification. We help resolve findings and support your team during the certification audit; the independent certification body makes the certification decision.
What we cover
Build the system behind the certificate
Boundaries and responsibilities
We define which parts of your organisation your security management system (ISMS) covers, who is responsible and how decisions are reviewed.
Risk assessment method
We agree how you identify security risks, assess them and decide whether to fix or accept them.
Policies and working procedures
We write or update documents around your systems, responsibilities and actual working practices.
Reasons for chosen safeguards
We prepare the Statement of Applicability: the document explaining which safeguards apply, why and whether they are in place.
Technical and organisational controls
We advise on the measures needed to treat your risks and meet the standard, then support implementation with your IT and business teams.
Internal audit and management review
We run the internal audit, help management review the system and prepare your team to fix what remains before certification.
How it works
From assessment to certification support
-
01
Review what you already have
We check your policies and test results, keep what is useful, agree which teams and systems to include and find what is missing.
-
02
Design a proportionate ISMS
We align risk management, policies and control selection with your operations and the standard’s requirements.
-
03
Help implement the system
We prepare documentation, advise on technical and organisational controls, and help teams apply the new processes and review their effectiveness.
- 04
Complete internal audits and prepare for certification
We carry out the internal audit, support management’s review and help resolve findings. We stay with your team during the external audit. An independent certification body decides whether to issue the certificate.
What we need from your team
- A management sponsor who approves the scope, risks and policies.
- Owners for the policies, access reviews and training records.
- Time from the teams in scope for interviews and the internal audit.
- Access to the systems and documents the certificate will cover.
ISO 27001 Certification Consultancy
Certification work grows with teams and systems
The teams, locations and systems in scope, your existing policies and how much preparation remains set the project price.
We agree the work and price with you in writing before we start.
Common questions
Common questions
Related services
Free 30-minute call
Plan your ISO 27001 implementation
In a free 30-minute call, we discuss your certification goals, existing security measures and the support your team needs.
