Increasing pressure from regulators, clients and the public for better assurances about the way in which organisations manage confidential and sensitive data has resulted in rapid growth of certification to ISO 2700.
ISO 27001 is the international standard that lays out the specifications for implementing an ISMS (information security management system). An ISMS can be audited by an independent CB (certification body) as a way to assess whether it conforms to the requirements of the Standard.
Need help preparing for ISO 27001 certification?
We have helped more than 600 companies achieve ISO 27001 certification, and because we are backed by the team that led the implementation of the world’s first ever ISO 27001-compliant ISMS, we can guarantee certification. Your journey to success starts with us.
Prepare for certification
How long does ISO 27001 certification last?
Once certification is granted it is valid for three years, although the ISMS will need to be managed and maintained throughout that period. Auditors from the CB will continue to conduct surveillance visits every year while the certification is valid.
How we can help you get certified
No matter your business or location, our team can help you implement an ISO 27001-compliant ISMS. Our unique combination of practical information security know-how and management system expertise, reinforced by years of experience and understanding what auditors expect, means you can apply for certification with your chosen accreditation body with confidence.
For more information, you can download our consultancy brochure here
The ISO 27001 certification process
Once you are ready for certification, you will need to engage the services of an independent, accredited CB. These CBs have been assessed by the relevant national authority based on their competence, impartiality and performance capability through a rigorous assessment process.
The certification process consists of two stages and is conducted by a qualified auditor.
Stage 1:
The auditor will review your documentation to check that the ISMS has been developed in accordance with the Standard. You will be expected to present evidence of all critical aspects of the ISMS, but how much depends on the CB’s requirements.
Stage 2:
If you pass the first stage, the auditor will conduct a more thorough assessment. This will involve reviewing the actual activities that support the development of the ISMS. The auditor will analyse your policies and procedures in greater depth, and review how the ISMS works in practice, with an on-site investigation. The auditor will also interview key members of staff to verify that all activities are undertaken following the specifications of ISO 27001.
Why choose IT Governance for your certification needs?
Drawing on our unique blend of practical cyber security know-how and proven management system consultancy expertise, our team will work with you to implement an ISO 27001-compliant ISMS quickly and without hassle, no matter where your business is located.
Proven approach
We have a proven and pragmatic approach to assessing compliance with international standards, no matter the size or nature of your organisation.
You have control
You can keep complete control over your ISMS because we teach you how to maintain it following certification.
Transparent pricing
All of our pricing and proposals are completely transparent, so you won’t get any surprises.
Honed methodology
Our ISO 27001 implementation methodology has been honed over 15+ years - so you know you're in good hands.
Global authority of ISO 27001
We are known as global authorities of ISO 27001 - our management team led the world’s first ISO 27001 certification project.
Build a strong business case
You receive crucial input to help you develop a business case, allowing you to secure the necessary investment.
Choose your certification body
We support independently accredited certification – you can use the certification body you want.
100% certification guarantee
If you follow the advice of our consultants, you are assured of a 100% guarantee certification.
Deep technical expertise. Business-focused results.
We combine deep technical expertise and ISO 27001 best practice with a practical understanding of the realities of running a business. We’ll help you transform your information security by working closely with you to achieve your goals.
For more information, download our free ISO 27001 consultancy brochure
Achieve ISO 27001 certification with IT Governance
Backed by the team that led the implementation of the world’s first ISO 27001-compliant ISMS, we’ve helped more than 600 clients achieve
ISO 27001 certification and compliance and provide a 100% certification guarantee. Start your journey to achieving certification with us today.
Speak to an ISO 27001 expert
One of our qualified ISO 27001 lead implementers is ready to offer you practical advice about the best approach to take for implementing an ISO 27001 project and discuss different options to suit your budget and business needs.