ISO 27001 pre-assessment
From $3,500
A snapshot of your readiness: a scoping workshop, clauses 4 to 10, 93 Annex A controls, documents and practices, with a status per item.
See the pre-assessmentISO 27001 implementation
ISO 27001 implementation, complete or by module
We put your information security management system in place, through to certification audit preparation. Take the full offer, or one module at a time.
What the full offer includes
Four steps, from the first snapshot through preparation for the certification audit.
- 01
Assessment and gap analysis
Establish your starting point and compare your practices to ISO 27001 requirements and Annex A.
- 02
Implementation
Policies, controls, evidence and governance sized for your SMB.
- 03
Internal audit
Validate the ISMS and close gaps before the external audit.
- 04
Certification
Preparation and support through the certification audit.
ISO 27001 goes further than these steps and the modules below. The standard includes clauses 4 to 10 and the 93 Annex A controls. We prepare your organization. The certification body issues the certificate.
Duration depends on company size, current maturity, technology complexity, existing processes and the number of stakeholders.
Or only one piece
Each topic can be taken on its own: risk, governance, access, suppliers, and the rest. Same standard, same team, without committing to the whole journey.
Choose the full programme or the right module
The pre-assessment maps your gaps and shows whether full implementation is the next step, or which module to tackle first.
Why organizations take on ISO 27001
- A client or contracting authority requires ISO 27001
- The organization must continually answer security questionnaires
- ISO 27001 becomes an advantage in RFPs
- The company wants to demonstrate security maturity
- Leadership wants a structured approach rather than isolated measures
An internationally recognized certification can answer client requirements more credibly than an assessment based on a proprietary method.
ISO 27001 does not automatically replace every supplier questionnaire and does not by itself guarantee security. It structures a verifiable approach.
Frequently asked questions
- Can we buy only one module?
- Yes. The main offer is full implementation. A single module is possible when one topic is enough for now. The pre-assessment helps you choose.
- How long does full certification take?
- For a prepared SMB, often 6 to 12 months. Duration depends on maturity, scope and internal pace.
- Does ISO 27001 replace client questionnaires?
- Not automatically. It gives stronger international evidence, but some clients keep their questionnaires.