Services › ISO 27001

ISO/IEC 27001 Information Security

Build an information security management system that passes certification audit and survives the surveillance audits that follow.

India:All customer data is stored and processed in India. Our infrastructure runs in Indian data centre regions, and no customer data is replicated outside the country.

Who This Is For

Companies being asked for ISO 27001 by an enterprise customer, and companies whose certificate is up for renewal with gaps they know about.

What You Get

  • Gap assessment against all Annex A controls, scored and prioritised
  • Scope definition and Statement of Applicability
  • Risk assessment methodology, risk register and treatment plan
  • Full policy and procedure set, written for your organisation
  • Internal audit programme and the first internal audit
  • Management review pack and corrective action tracking
  • Stage 1 and Stage 2 audit support, including auditor liaison

How the Engagement Runs

  1. Gap assessmentWhere you are against the standard, control by control.
  2. Scope and riskDefine the ISMS boundary and build the risk register.
  3. DocumentationPolicies and procedures that match how you actually work.
  4. ImplementationEmbed controls, train staff, collect evidence.
  5. Internal auditFind the findings before the certification body does.
  6. CertificationStage 1 and Stage 2 support through to certificate.