Enterprise Solutions, Consulting & Research
ISO/IEC 27001 Certification & Surveillance
Certification readiness, internal audit, management review and continuing surveillance for ISO/IEC 27001.
Certification is an audit of evidence, not intent. We assess the ISMS against ISO/IEC 27001 clause requirements and Annex A, close gaps, and prepare the documentation, records and interview evidence a certification body will sample.
We facilitate internal audit, management review and corrective-action tracking, then support Stage 1 and Stage 2 audits and the closure of findings. After certification, we maintain the surveillance cycle with annual audits, risk reviews and continual improvement.
Engagements can cover first certification, transition from ISO/IEC 27001:2013 to the 2022 revision, or recovery after a failed audit.
What the engagement covers
- Gap assessment against ISO/IEC 27001
- Internal audit programme
- Management review pack
- Stage 1 and Stage 2 audit support
- Surveillance and improvement plan
How engagements start
Most projects begin with a scoping call and a written technical approach covering assumptions, deliverables, dependencies and acceptance criteria. Fixed-price and retainer models are both available.
Next step
Ready to scope this properly?
Send us the requirement — coverage, capacity, service definition or the problem you are trying to solve.