Managed IT services
ISO 27001 Consultants: Certification-Ready Information Security
Find your gaps before the external auditor does. We take you from first assessment to certification readiness, with clear priorities at every step.
3-6 months
Typical for an SME
Week 1
Gap Analysis
2022
Annex A, 93 Controls
Free
30-minute consultation
Why choose us for ISO 27001
Many ISO 27001 projects are either very expensive or run by consultants with no audit background. We build your information security management system (ISMS) to pass the audit, because we know what auditors look for. [Add your team’s credentials here, such as ISO 27001 Lead Implementer and Lead Auditor, and years of experience.]
- Win tenders and satisfy client security questionnaires
- Meet insurer and supply chain expectations
- Reduce the risk of breaches and data loss
- Reduce the risk of breaches and data loss
Our ISO 27001 service pillars
know where you started
Comprehensive gap analysis
We compare your current set-up with every clause and Annex A control of ISO 27001:2022 and give you a prioritised report of what to fix, so there are no surprises on audit day.
Manage risk
Risk management framework
We run a structured, asset-based risk assessment and write your Statement of Applicability to reflect how your business really works, with a risk treatment plan that is audit-ready from day one.
Save time
ISMS documentation support
We write the mandatory policies, procedures and security standards in clear language, tailored to your business and ready for your certification body. This saves your team hundreds of hours.
Pass first time
Internal audit readiness
A rigorous pre-certification internal audit finds weaknesses and fixes them before your certification body arrives, avoiding the most common reasons for failure.
How it works
Five steps from first call to certification.
Scoping and gap analysis. Where you are today against the standard.
Risk assessment and treatment plan. Identify, score and treat your information security risks.
ISMS build and staff awareness. Policies, procedures, evidence and training.
Internal audit and management review. A full dress rehearsal before the real audit.
Certification audit support. We prepare you for Stage 1 and Stage 2 audits.
Frequently asked questions
How long does ISO 27001 certification take?
For many small and mid-sized businesses it takes about three to six months. The timeline depends on how much documentation, asset control and access management you already have. Our gap analysis in the first week gives you a clear plan and a target date for your Stage 1 audit. [Confirm this timeline matches your delivery.]
What does ISO 27001 consultancy include?
Gap analysis, scoping and risk assessment, the Statement of Applicability, policies and procedures, staff awareness training, internal audit and management review, and support through the Stage 1 and Stage 2 certification audits. After certification we can also support your yearly surveillance audits.
When do the EU AI Act rules apply to us?
No. The transition to ISO/IEC 27001:2022 has ended, so every certificate must now be to the 2022 version, which has 93 Annex A controls. If your documents were written for the 2013 version, we can update them as part of the gap analysis.
What is the difference between ISO 27001 and Cyber Essentials?
Cyber Essentials is a UK technical baseline covering five controls such as firewalls, patching and MFA. ISO 27001 is an international management system covering risk, people, suppliers and continual improvement. Many businesses start with Cyber Essentials and move to ISO 27001 when larger customers ask for it.
Do you carry out the certification audit?
No. To keep certification independent, the audit is done by an accredited certification body. We prepare you, run your internal audit and support you through both certification audits.
Can we implement ISO 27001 ourselves?
Yes, but most businesses underestimate the documentation and evidence an auditor expects. An experienced consultant shortens the project, helps you avoid a failed audit and lets your team keep running the business. We can also coach your staff to run the system themselves after certification.
Also see
Ready to start your ISO 27001 journey?
Book a free 30-minute consultation. We will review your position, explain the certification pathway and give you a clear timeline and fixed-fee proposal, with no obligation.