Services

Evidence, ownership and operating discipline - not just templates.

ISO 27001 support for companies that need their ISMS to work in practice: before certification, before a surveillance audit, and between cycles.

Which engagement fits where you are?

Service	Duration	Best for	Output
Readiness Review	7-10 days	Quick, honest diagnosis	Report + top gaps + 30-day plan
Readiness Sprint	4-6 weeks	Pre-audit remediation	Evidence map + gap tracker + readiness report
ISMS Maintenance	Monthly	Certified companies	Monthly ISMS status + evidence review + risk updates
Vanta / Drata Cleanup	2-4 weeks	Compliance platform users	Control ownership + evidence quality + cleanup plan

Know where you stand before the auditor does.

You receive · 7-10 days

Fix the gaps that put certification, surveillance or enterprise deals at risk.

Who it is for: Teams remediating before a certification or surveillance audit.
What it covers: Structured remediation across risk, SoA, policy, process and evidence.

You receive · 4-6 weeks

Keep risk, evidence, suppliers, reviews and controls alive all year.

Who it is for: Certified companies keeping the ISMS audit-ready between cycles.
What it covers: Ongoing operating discipline across the ISMS lifecycle.

You receive · Monthly

A compliance platform collects evidence. It cannot decide whether your scope, risks and control ownership make sense.

Who it is for: Teams using a compliance platform but lacking operating discipline.
What it covers: Scope, risks, SoA, control ownership and evidence quality.

You receive · 2-4 weeks

Start with a short call. If a readiness review is not the right first step, we will say so.