Request a callback

GRC · Service

ISO 27001 certification support

Get ISO 27001 certified, with an information security management system your team can run after the audit.

Timeline
3 to 6 months
Who does the work
Infofacility consultants, working remotely as part of your team
Price
On request

What you get

  • A gap assessment against ISO/IEC 27001:2022 and its Annex A controls.
  • The risk assessment, the Statement of Applicability and the policies, written with your team.
  • An internal audit and a management review before the certification body arrives.
  • Support through the Stage 1 and Stage 2 audits, and answers to any nonconformities.

What it covers

Gap assessmentRisk assessmentStatement of ApplicabilityInternal audit

The scope is agreed on the scoping call and written down before the work starts.

How an engagement runs

First weeks

Gap assessment

Where you stand against the standard or the law, and a plan that fixes the biggest gaps first.

Middle

Build

Policies, records and controls written with your team, in the tools you already use.

Before the audit

Run and evidence

The controls running, the evidence collected, and an internal check before anyone external looks.

The audit

Audit and after

Support through the audit or assessment, and a handover so your team can run it.

The requirements it answers

The frameworks, laws and regulators whose requirements this work gives you evidence for.

ISO/IEC 27001:2022ISO/IEC 27002:2022
Read What is ISO 27001? in the library

Pricing

ISO 27001 certification support

Price on request

Scope sets the price. Book a scoping call for a written quote, in USD or rupees.

Request a callback

Request a callback

Tell Infofacility what you need and by when. A consultant calls you back to agree the scope and send a quote.

Request a callback

Your details are used only to answer this request. The button opens your email app with the request filled in.