Know how far you are from ISO 27001.
A gap analysis against ISO/IEC 27001:2022: the management system and all 93 Annex A controls. You get a rating, an action plan for the audit and an ISMS document pack, with your Statement of Applicability drafted from your answers.
Example result for a fictional 32-person software company.
How it works
Three steps from the first call to being ready.
Gap analysis
A workshop of two to three hours with the people who run IT, HR and operations, through the questions on the management system and the controls.
See the gaps
Your rating, a score per area, and the actions ordered for the stage 1 and stage 2 audits, with the Statement of Applicability drafted.
Close them, then certify
Use the documents to close the gaps, or let us implement with you, then choose a UKAS-accredited certification body for the audit.
Choose how far we go.
A gap analysis against ISO/IEC 27001:2022, then as much help as you want getting to the certification audit.
Gap analysis
How far you are from the audit
from £1,950
- Gap analysis workshop
- Report against clauses 4 to 10 and all 93 Annex A controls
- Statement of Applicability drafted from your answers
- ISMS document pack, filled in (13 documents)
- Results call
Verified
Evidence an auditor will accept
from £3,500
- Everything in Gap analysis
- Microsoft 365 evidence checked: identity, admin accounts, devices, updates, anti-malware
- Evidence reviewed with your team
- Report marked Verified
Implement
We take you to certification
Quote
- Everything in Verified
- Risk assessment and treatment plan built with you
- Policies and controls put in place
- Internal audit before stage 1
- Support through stage 1 and stage 2
Prices exclude VAT, for up to 50 staff. The certification audit is contracted with a UKAS-accredited certification body.
Questions
If yours isn't here, ask us when you book.
Is this the certification?
No. ISO/IEC 27001 certificates are issued by UKAS-accredited certification bodies after a stage 1 and stage 2 audit. We get you ready for them.
How much does it cost?
For up to 50 staff: Gap analysis from £1,950 and Verified from £3,500, plus VAT. Implementation is quoted after the gap analysis.
How long does certification take?
For a small organisation, usually six to twelve months from the gap analysis to the certificate, depending on what's already in place.
We already have Cyber Essentials. Does that help?
Yes. It covers many of the technical controls an ISO auditor checks, and the evidence carries over.
Find out where you stand.
Tell us a little about your organisation and we'll reply within one working day to arrange your assessment.
- We confirm the level and a date for the session.
- You get a short list of what to have ready.
- Nothing is charged until you've agreed the price.