ISO 27001 Consulting: Build a Certifiable ISMS
I set up your Information Security Management System (ISMS) and prepare it for ISO/IEC 27001:2022 certification. As an independent consultant I cover the whole path – gap analysis, risk assessment, Statement of Applicability, the 93 Annex A controls and the certification audit.
What ISO 27001:2022 Requires
The 2022 revision reorganizes Annex A into 93 controls under 4 themes. A certifiable ISMS is risk-driven – not a folder of policies copied from a template.
Risk assessment & treatment
A defensible methodology that identifies information assets, threats and vulnerabilities, and drives a risk treatment plan the auditor can follow.
93 Annex A controls
Organizational, people, physical and technological controls – selected, justified and reflected in your Statement of Applicability (SoA).
Policies that are used
Access control, cryptography, supplier security, incident response and business continuity written for how your organization actually works.
Evidence & metrics
Internal audit, management review and measurable objectives so the system produces the records a certification body expects.
From Gap Analysis to Certificate
A typical ISO 27001 project runs 6-12 months depending on your size and starting point.
Gap analysis
We assess your current state against ISO/IEC 27001:2022 and scope the ISMS around the information and services that matter.
Risk assessment
We build the asset inventory, run the risk assessment and treatment plan, and produce the Statement of Applicability.
Controls & documentation
We implement the selected Annex A controls and the mandatory documented information with your teams.
Audit & certification
We run internal audit and management review, then support Stage 1 and Stage 2 of the certification audit.
Start your ISO 27001 journey
Share your scope (sites, headcount, services) and I will outline a realistic ISMS plan and timeline.
Siteye eklediğim yeni sayfaları ve bilgilendirmeleri e-posta ile paylaşıyorum. Dilediğiniz an tek tıkla ayrılabilirsiniz.
