ISO 27001 Implementation

From gap analysis to a working ISMS. We build the management system around how your organisation actually operates, then help your people run it, so certification is the result of good practice, not a paperwork exercise.

1. 01

   Set scope and ownership

   Define boundaries, interested parties, governance, roles and certification objectives.

2. 02

   Assess the gaps

   Map current practices against ISO/IEC 27001:2022 clauses and Annex A controls.

3. 03

   Build the risk process

   Establish the method, risk register, treatment plan and accountable risk owners.

4. 04

   Shape policies and controls

   Adapt documentation and operating procedures to your real environment and obligations.

5. 05

   Create the Statement of Applicability

   Record control decisions, justifications, implementation status and links to evidence.

6. 06

   Make it audit-ready

   Coach control owners, build the evidence trail and prepare management for certification.