ISMS360 · ISO/IEC 27001 Readiness
A practical path to an information security management system.
A right-sized ISMS: gap analysis, risk assessment, Statement of Applicability and the core policies, so you are ready to engage an accredited certification body.
Best forSMEs and regulated organizations
Duration4 – 10 weeks
Indicative price$4,000 – $12,000
The challenge
ISO/IEC 27001 can feel like a mountain of documents. Many organizations stall between deciding to certify and being ready for a certification audit.
What's in scope
- Clause 4 – 10 and Annex A gap analysis
- Information security risk assessment
- Statement of Applicability
- Core policies and procedures
- Internal audit readiness
What you receive
- Gap analysis report
- Risk register and treatment plan
- Statement of Applicability
- Policy set tailored to your organization
- Certification-readiness roadmap
When teams choose ISMS360
First-time ISO 27001 projectsCustomer-driven certification requestsRe-baselining an existing ISMS
How the engagement runs
- Scoping callAgree objectives, assets and constraints.
- Proposal & authorizationFixed scope, timeline, price and signed rules of engagement.
- AssessmentAuthorized, quality-reviewed work with regular updates.
- ReportingExecutive and technical reports, plus a walkthrough call.
- Follow-upRemediation questions and retest where contracted.
Make your next security decision a confident one.
Tell us what you need to protect, assess or prove. We'll reply within one business day with a practical next step and a clear scope.