Certification to ISO/IEC 27001 Information Security Management

What is information security? Keep your information confidential with a certified ISO/IEC 27001 system and show that you have information security risks under control. Compliance with world-class standards can help you win customer trust and new business opportunities.   

We make the ISO 27001 certification process simple. ISO 27001 certification: After we have received your application we appoint a client manager who will guide and your business through the following steps.

1. Gap analysis
   This is an optional pre-assessment service where we take a closer look at your existing information security management system and compare it with ISO/IEC 27001 requirements.  This helps identify areas that need more work before we carry out a formal assessment, saving you time and money.

---

2. Formal assessment
   This happens in two stages. First we review your organisation’s preparedness for assessment by checking if the necessary ISO/IEC 27001 procedures and controls have been developed. We will share the details of our findings with you so that if we find gaps, you can close them. If all the requirements are in place, we will then assess the implementation of the procedures and controls within your organisation to make sure that they are working effectively as required for the ISO 9001 certification.  

---

3. Certification and beyond
   When you have passed the formal assessment you will receive an ISO/IEC 27001 certificate, which is valid for three years. Your client manager will stay in touch during this time, paying you regular visits to make sure your system doesn’t just remain compliant, but that it continually improves.  

---

We pioneered standards more than 100 years ago and today we’re the market leader. We help over 80,000 organizations ranging from top global brands to small ambitious businesses in 172 countries worldwide to gain an edge over their competition. As one of the few organizations that understands standards from start to end, we don’t only assess how well you’re meeting them, we create new standards from scratch and train teams globally to use them and perform better. Our knowledge can transform your organization.