top of page

ISO 27001 Readiness and Certification

IDEAL FOR:

Firms whose customers, tenders or partners now require ISO 27001.

Organizations moving from informal security practices to a managed, auditable system.

Certified firms that need internal audits or help preparing for surveillance audits.

ON-SITE
REMOTE

DESCRIPTION

We take you from gap assessment to a passed certification audit. Your information security management system is built the way an auditor will test it, because the person leading it is an ISO 27001 Lead Auditor. The programme Everett built as CIO came through three consecutive external audits with zero findings.

BENEFITS

  • Readiness Assessment: a gap report against ISO/IEC 27001:2022.

  • Scope, ISMS policies and procedures.

  • Risk assessment, risk treatment plan and Statement of Applicability.

  • Controls put in place and evidence collected.

  • Staff awareness session.

  • Internal audit and management review.

  • Support through the certification audit.

  • Mapping to NIST CSF 2.0, so US customers see the same programme in their terms.

HOW IT RUNS

  • Readiness Assessment (weeks 1–3).

  • Build the management system and controls (months 1–4).

  • Run it and collect evidence (months 3–6).

  • Internal audit, management review and certification audit (months 5–8).

bottom of page