An ISMS that works in daily operations, and passes the audit.
We guide you from gap analysis to certification under ISO/IEC 27001:2022. Lean documentation, clear ownership, and controls that match your real risks. Legal and data protection topics are handled by our sister company SDG.
Six phases to certification.
Book the full path or only the phases you need. Each phase ends with a defined deliverable.
Gap analysis
Current state against all clauses and Annex A controls. Result: a gap report with effort estimate.
ISMS build
Scope, context, roles, information security policy and the core processes the standard requires.
Risk assessment
A risk method your team can maintain. Asset-based assessment and a risk treatment plan.
Statement of Applicability
All 93 Annex A controls, each justified as applicable or excluded, with implementation status.
Internal audit
An independent internal audit and management review, so the certification body finds a working system.
Certification audit support
Preparation for Stage 1 and Stage 2, presence during the audit and support with any nonconformities.
One management system, two requirements.
An ISMS covers most of what Article 21 of NIS2 asks for. We map both from the start, so you build once and document once.
Already certified? We check where NIS2 goes further, for example incident reporting deadlines and management training, and close those gaps inside your existing ISMS.
Planning a certification?
Tell us your target date. We'll tell you what it takes to get there.