When it fits
You have built an ISMS, with a compliance platform, with consultants or on your own, and an ISO 27001 certification is planned. Whether an auditor accepts your evidence only shows when the evidence itself is examined. The review answers that before the certification audit.
What's included
- Benchmark against all 93 controls (Annex A, ISO 27001:2022)
- Independent review of your existing Statement of Applicability (SoA)
- Prioritised findings list: critical / notable / minor
- Clear rating: Ready / Attention Required / Not Ready
- NIS2 synergies mapped: where work counts twice
- Written report and executive session
How it works
- Asynchronous document reviewYou upload policies, risk assessment and evidence to a secure data room. Review happens flexibly, without blocking your team.
- Bundled interview slotsInstead of days on site: precisely timed calls of 45 to 60 minutes, bundled into a maximum of 2–3 days.
- Report and closing meetingWritten findings plus a virtual review meeting.
Your result
A written report with prioritised findings and a clear rating of certification readiness, discussed in an executive session.
Scope and limits
The certification itself is issued by an accredited certification body. The review prepares for it and does not replace it.
We are auditors and consultants, not lawyers. This service is not legal advice.