Certification · ISO/IEC 27001:2022
ISO 27001
The international standard for information security management. The certificate global enterprise buyers ask for first.
Overview
What is ISO 27001?
ISO 27001 sets out the requirements for an Information Security Management System (ISMS): a risk-based way of deciding which security controls you need, operating them, and improving them over time. Certification is issued by an accredited certification body and recognised worldwide.
Who needs it
- B2B and SaaS companies selling to enterprise or government customers
- Businesses expanding into Europe, the UK, the Middle East or Asia, where ISO 27001 is the expected benchmark
- Organisations handling sensitive customer, financial or health data
What’s involved
The path to ISO 27001.
- 01
Define the ISMS scope
Which products, systems, locations, teams and suppliers are covered, and how they connect.
- 02
Assess and treat risk
A documented methodology, a risk register and a treatment plan that leadership signs off.
- 03
Statement of Applicability
Every Annex A control marked as applicable or excluded, with a justification for each.
- 04
Operate the controls
Policies, access reviews, supplier management, incident response, continuity and secure development, all producing evidence.
- 05
Internal audit and management review
Mandatory checks that the ISMS works, before the certification body arrives.
- 06
Certification audits
Stage 1 reviews your documentation. Stage 2 tests that controls operate effectively.
How we help
We carry the documentation. You bring the decisions.
One program, built around your business, mapped to every framework you need.
- Scope definition and ISMS design
- All mandatory ISMS documentation and security policies
- Risk register and Statement of Applicability
- Implementation guidance and evidence in Vanta
- Internal audit and management review
- Auditor selection and Stage 1 and Stage 2 support
- Ongoing surveillance audit support
Ready to start on ISO 27001?
Tell us where you are and where you need to be. We will spend 30 minutes understanding your situation and give you an honest view of the fastest sensible path.