Compliance audit
ISO 27001 readiness
We prepare you for ISO 27001 certification. It starts with the Statement of Applicability. That document marks each of the standard's 93 security controls (Annex A) as applicable or excluded, with a written reason. The applicable ones are scored on the evidence you hold.
What you get at the end. A Statement of Applicability in the portal, with a decision and a written reason for each of the 93 controls.
What is included
- A decision on each of the 93 Annex A controls
- A written reason for every control left out
- Yearly review dates that warn you before they lapse
How it works
Step 01
We agree which parts of your business it covers
Which systems, which people, which premises. The scope decides which controls can be left out. A business with no office and no employees can justify leaving out the controls that assume it has them.
Step 02
Every control gets a written decision
Applicable or excluded, one at a time, with the reason the standard requires for each one left out.
Step 03
The applicable ones are scored on evidence
We name what exists today. The register will not let a control be marked as met unless evidence is attached.
Step 04
It goes in the same register as everything else
Your GDPR and AI Act duties are already there. The ISO controls join them, with review dates that warn you before they lapse and escalate when they do.
Questions
- Does this certify us?
- No. An accredited certification body issues the certificate after its own audit. This is the preparation you do before you call one in.
- We have no office and four people. Is most of it irrelevant?
- Some of it. For our own business, 14 of the 93 controls are excluded: the physical controls that assume an office, and the people controls that assume employees. Each exclusion has a written reason, and the exclusions about employees end the day you hire somebody.
- What happens after?
- The register stays in your compliance record in the portal, with review dates that warn before they lapse.
Book a 20-minute call
Tell us how the work is done today. We tell you what to change first, and what it costs.
Book a 20-minute call