SV-18 / SERVICES
ISO 27001 readiness, made practical
ISO/IEC 27001 is the international standard for an information security management system (ISMS). Customers, partners and procurement teams increasingly ask for it as evidence that you protect information systematically.
ISO/IEC 27001 is the international standard for an information security management system (ISMS). Customers, partners and procurement teams increasingly ask for it as evidence that you protect information systematically. The standard is about managing risk with defined ownership and evidence, not about buying a particular tool. We help you understand what it asks of your organisation, see what is already in place and build a proportionate plan for the rest.
What’s included
- Scoping: deciding which parts of the business, systems and locations the ISMS covers
- Gap review against ISO 27001 clauses and the Annex A controls
- Information asset inventory, risk assessment and risk treatment planning
- Statement of Applicability and the policies, procedures and records the standard expects
- Supplier, access, incident, backup and change-management processes, tailored to how you work
- Staff awareness, internal audit and management review preparation
Best for
Software, fintech, data and service companies responding to customer security requirements, and organisations wanting a structured approach to information security.
How we work
- Understand context, scope and obligations. 2) Gap review and risk assessment. 3) Build the ISMS: controls, documents, ownership. 4) Prepare for the certification audit with an internal audit and management review.
What you receive
Gap report, risk register, Statement of Applicability, policy and procedure set, evidence map, internal audit report and an audit-readiness plan.
The result
A shared, evidence-led view of readiness and clear next steps toward certification.
Frequently asked questions
Do you certify us?
No. Certification is awarded by an independent, accredited certification body after an audit. We help you prepare for it.
How long does readiness take?
It depends on size, complexity and how much is already in place. A gap review gives a realistic estimate.