2022 Version
We audit against the 2022 version only; the 2013 version was retired 31 October 2025.
FRAMEWORKS
ISO/IEC 27001
Information Security Management
THE DELIVERABLE
An accredited certificate valid for three years, subject to annual surveillance audits.
WHO NEEDS THIS?
Who needs this?
Companies selling globally, particularly into European or Asian markets where ISO is preferred over SOC 2.
OUR ENGAGEMENT
Our Engagement
We perform the independent audit and issue the report or certificate.
We explicitly do not design controls, write policies, or provide remediation consulting.
BEFORE STARTING
You must have policies written, systems configured, and controls operational. If you are not there yet, you need a readiness consultant.
KEY DETAILS
Key Details
Stage 1 and Stage 2
Stage 1 is a documentation review to confirm readiness. Stage 2 is the main audit evaluating the implementation and effectiveness of the management system.
Controls
93 Annex A controls in four themes. The Statement of Applicability (SoA) is the central document auditors focus on.
TIMELINE / PRICE
Timeline
6-8 weeks for initial certification (Stage 1 and Stage 2).
Price
Starts at $14,500.
REQUEST A FIXED-FEE QUOTE
SOC / 02
Get an exact
figure.
Fill out a short questionnaire with your company size and framework needs. We return a binding fixed-fee proposal within one business day.
Request a quote ↗