Step 01
Start and scope
Define what belongs inside certification and what should stay outside.
ISO 27001 Audit Readiness
Turn security into proof customers can trust. We prepare your ISMS for ISO/IEC 27001:2022 certification with structure auditors expect and routines your team can actually run.
fpd-iso ~ controls · audit · compliance
CONTROLS
○A.5.1Information security policies
○A.6.1Internal organisation
○A.8.1Inventory of assets
○A.9.1Access control policy
○A.12.1Operational procedures
○A.18.1Compliance with legal requirements
COVERAGE94 / 114 CONTROLS
CONTROLS PASS
94 / 114
COVERAGE
0%
NEXT REVIEW
38 days
// iso 27001 readiness
Evidence customers trust. A system auditors can follow.
ISO 27001 is systematic information security management across people, policies, and technology. The work should survive the audit instead of collapsing into a documentation archive.
ISMS scopeGap analysisAnnex A mappingInternal audit
Audit readiness stack
01
scope defined
02
risks assessed
03
controls mapped
04
evidence reviewable
Step 02
Gap analysis
Compare ISO/IEC 27001:2022 expectations with current practice, then prioritise by risk and effort.
Step 03
Implementation
Establish practical processes, policies, and documentation designed for everyday use.
Step 04
Internal audit
Prepare internal audit and review routines that support decisions and withstand scrutiny.
// fit
Who this is for
Build information security systematically
Move from individual measures to clear responsibilities, fixed procedures, and a security structure that works day to day.
Achieve certification efficiently
Prepare the documentation and routines needed for audit without turning certification into a theatre production.
When customers expect proof
Meet value-chain security expectations, make risks manageable, and build trust in your working methods.
Growth, financing, and diligence
Reduce uncertainty in partnerships, financing, or M&A by giving reviewers a structured ISMS to inspect.
What we need from you
A responsible technical or organisational contact
Access to existing policies and processes
Workshop and decision time slots
Frequently asked
Are you the certification body?
No. We prepare and support the implementation. Certification is carried out by an accredited certification body.
How long does implementation take?
Our target is a 12-week implementation path. The exact timeline depends on maturity, scope, resources, readiness, and control complexity.
Do all 93 Annex A controls apply?
No. Applicable controls depend on risk assessment, scope, and the Statement of Applicability. Non-relevant controls can be excluded with justification.