Certification to ISO/IEC 27001 Information Security Management

Keep your information confidential with a certified ISO/IEC 27001 system and show that you have information security risks under control. Compliance with world-class standards can help you win customer trust and new business opportunities.  


How to get certified to ISO/IEC 27001

We make the certification process simple. After we have received your application we appoint a client manager who will guide you and your business through the following steps.

  1. Gap analysis -
    This is an optional pre-assessment service where we take a closer look at your existing information security management system and compare it with ISO/IEC 27001 requirements.  This helps identify areas that need more work before we carry out a formal assessment, saving you time and money.

  2. Formal assessment
    A two-stage process. First your BSI Client Manager will review your organization’s readiness for assessment by checking if the necessary ISO/IEC 27001 procedures and controls have been developed in your organization. We will share the details of our findings with you via our Assurance Portal, so that if we find gaps, you can close them.
    Next, if all the requirements are in place, we’ll assess the implementation of the procedures and controls within your organization to make sure that they are working effectively as required for certification of ISO/IEC 27001.

  1. Certification and beyond
    When you have passed the formal assessment you will receive an ISO/IEC 27001 certificate, which is valid for three years. Your client manager will stay in touch during this time, visiting you regularly to make sure your system doesn’t just remain compliant, but that it continually improves.

    You’ll be able to access all the information related to your certification via our BSI Assurance Portal. Available  24/7, you can view essential information, such as your next 12 months of visit dates, audit reports, and certificates to support you with managing your BSI assessments and promoting your success. 
    Find out more about BSI portal


Train with us and certify to ISO/IEC 27001

We use accelerated learning techniques to make sure you fully understand the ISO/IEC 27001 standard. And we put your learning into context with a blend of classroom teaching, workshops and interactive sessions.


How to get certified to ISO/IEC 20000-1

  1. ISO/IEC 2000-1 Service Management system certification should be hassle-free. You’ll be appointed a BSI Client Manager, a trusted expert with relevant industry experience to your business, who can guide you through the process.

    The steps to ISO/IEC 20000-1 certification:

    1. ISO/IEC 20000-1 gap analysis

    An optional service which takes place before your assessment visits. We’ll take a closer look at your existing information security management system and compare it with the requirements of the ISO/IEC 20000-1 standard. It’s a really cost effective way to check if there are any areas you need to work on before we carry out a formal assessment.

    2. Formal assessment

    A two-stage process. First your BSI Client Manager will review your organization’s readiness for assessment by checking if the necessary ISO/IEC 20000-1 procedures and controls have been developed in your organization. We will share the details of our findings with you so that if we find gaps, you can close them. Next, if all the requirements are in place, we’ll assess the implementation of the procedures and controls within your organization to make sure that they are working effectively as required for certification of ISO/IEC 20000-1. 

    3. Certification and beyond

    When you achieve certification you’ll receive your BSI ISO/IEC 20000-1 certificate which is valid for three years. Your BSI Client Manager will visit you regularly to make sure your system doesn’t just remain compliant, but it continually improves and adds value to your organization.