Know where your ISMS stands before your customer or auditor asks.
A pre-audit of your information security management system against ISO 27001 and your customers' security requirements, ending in a clear plan to close the gaps.
Preparation for certification, not certification itself.
| Area | Readiness |
|---|---|
| CIA framework | Ready |
| ISMS in place | Partly in place |
| InfoSec baseline controls | Partly in place |
| Customer compliance | Missing |
| Third-party risk management | Ready |
| Incident response | Missing |
What we do
We help companies show that their information security is under control: ISMS pre-audits, review of customer security requirements, and third-party security assessments.
How it works
- Scoping callWe agree what is in scope, which customer requirements apply, and a fixed price and timeline.
- Document and evidence reviewWe go through your policies, records and system settings against the standard.
- WalkthroughShort conversations with the people who run the processes, to check practice matches paper.
- Report and roadmapYou receive the findings and a prioritised plan, and we go through it together.
Common questions
Will this get us ISO 27001 certified?
No. Only an accredited certification body can certify you. The pre-audit shows you how ready you are and what to fix first.
How long does it take?
It depends on the size of your company and how much is already documented. You get a fixed timeline and price after the scoping call.
Can you help us fix the findings?
The plan is written so your team can act on it. If you want hands-on help, we can agree that separately.
Is it only for ISO 27001?
No. If a customer sends their own security requirements, we can check your position against those as well.
Want to know where you stand?
Book a free call and we will tell you what a pre-audit would involve for your company.
Book a free call