I will create your iso 27001 isms documentation, risk assessment and policies

Preparing for ISO 27001 certification and not sure what the auditor will ask for? I've been on both sides of the table: 7 years auditing IT controls at PwC, and today I run the ISO 27001, ISO 27701 and PCI DSS certification programme of a payments company, whose latest ISO 27001 audit closed with no major non-conformities.

I work with ISO/IEC 27001:2022 and write documents that fit your company's size, not a 300-page template nobody reads.

What you get:

• Gap analysis of clauses 4-10 and the 93 Annex A controls
• - ISMS scope and information security policy
• - Risk assessment methodology and risk register
• - Statement of Applicability (SoA)
• - Annex A policies and procedures (Premium)
• - 90-day roadmap to your Stage 1 audit (Premium)
• - Editable Word and Excel files

How it works:

1. You answer a short questionnaire about your company, systems and current controls
2. 2. I prepare the documents and we review them together
3. 3. You get the final files, ready for your auditor

Message me before ordering if you want to talk about scope.