ISO/IEC 27001 implementation, from readiness to certification
Clients, partners and regulators increasingly ask for ISO/IEC 27001 certification. IRM-Advisors takes you from a readiness assessment to a successful certification audit, with an information security management system (ISMS) that fits the size of your organisation.
- Effort
- Typically 20 to 40 consulting days
- Pricing
- Fixed price, quoted after a 30-minute scoping call.
Who it is for
- Firms whose clients or partners require ISO/IEC 27001 certification
- Regulated organisations that want a recognised security framework
- Software, fintech and service providers answering security due diligence
What you receive
- A readiness and gap assessment against ISO/IEC 27001:2022
- Scope definition and ISMS design
- A risk assessment and treatment plan aligned with ISO/IEC 27005
- The Statement of Applicability covering the 93 Annex A controls
- Policies and procedures written for your organisation
- Internal audit, management review and support during the certification audit
How it works
- ReadinessAssess where you stand against the standard and agree the scope.
- BuildRisk assessment, Statement of Applicability, policies and controls.
- OperateRun the ISMS long enough to produce evidence: records, reviews, internal audit.
- CertifySupport during the stage 1 and stage 2 audits by your certification body.
Relevant credentials
Selected engagements
- Several organisationsISO/IEC 27001 readiness and implementation, each leading to successful certification.
Frequently asked questions
How long does ISO 27001 implementation take?
The consulting effort is typically 20 to 40 days. The calendar time depends on how long your organisation needs to run the ISMS and produce evidence for the auditor.
Can you also certify us?
No. Certification is performed by an accredited certification body. Keeping implementation and certification separate protects the independence of the audit.
What changed with the 2022 edition?
ISO/IEC 27001:2022 reorganised Annex A into 93 controls in four themes. The transition period for certificates under the 2013 edition ended on 31 October 2025.
What does it cost?
A fixed price, quoted after a 30-minute scoping call.
Discuss your situation in a 30-minute call. No preparation needed.
Book a call