We help you design, implement and run an Information Security Management System (ISMS) to ISO/IEC 27001:2022, from gap analysis to your certification audit. Certificates are issued by an independent, accredited certification body. We prepare you for its Stage 1 and Stage 2 audits.
Assessment against every ISO 27001:2022 clause and the Annex A controls, with a prioritised plan.
Scope, context, risk method, Statement of Applicability (SoA) and the required documents.
Guidance on implementing the 93 Annex A controls (organisational, people, physical and technological).
Risk register, treatment plans and residual-risk reporting.
We run your internal audit and support your first management review.
Mock audit, evidence packs and support during your certification body's audits.
Where you are against the standard, and the plan.
Policies, procedures, risk register, SoA and controls.
Full internal audit and management review cycle.
Support through Stage 1 and Stage 2 with your chosen certification body.
We built and implemented an Information Security Management System for Tendaji aligned to ISO/IEC 27001:2022, including risk management, policies, Standard Operating Procedures (SOPs) and staff training.
It depends on your scope, size and starting point. We give you a timeline after the gap analysis.
Yes. We can suggest accredited certification bodies (for example, accredited by the United Kingdom Accreditation Service (UKAS) or the Kenya Accreditation Service (KENAS)), help you prepare, attend the audits with you and help you close any findings. You choose and contract the certification body directly.
Book a consultation. We'll agree scope, timings and next steps.
Book an ISO 27001 gap analysis