ISO 27001 FAQs

Our clients tell us that ISO 27001 certification has brought a lot of value to their organisation. Not only do they feel that their sensitive or confidential information is more secure, they are also more able to access markets with a competitive advantage.

ISO 27001 is often a mandatory requirement for procurers. With the increased risk of data security breaches, it is not surprising that organsiations are becoming more sensitive to the threats. ISO 27001 is possibly the fastest growing of all the ISO Management System Standards.

Once you have implemented your Information Security Management System Standard that complies with ISO 27001, you can gain certification from a body like Centre for Assessment. We will review your System through a two stage audit process, looking to ensure you are compliant with the ISO framework and that you have suitable controls in place.

There are 114 controls set out in ISO 27001. You need to decide which are appropriate for your organisation, either internally, or through the help of a suitably qualified ISMS consultant.

Costs vary widely, depending on the size of your organisation and what activities you undertake. We need to make sure that we apply the correct number of days for your audit so that we can really explore your compliance with ISO 27001 and add value. Get in touch with us and we will calculate your bespoke audit costs.