A stage-by-stage timeline for ISO 27001 certification, from first decision to certificate, with the factors that speed it up or slow it down, from a certification body that runs the audits.
Resources
Written by auditors, for the people preparing for one
Straight answers on what the audit involves, what it costs, what goes wrong, and how to choose who does it. No gated PDFs.
Latest
Audit insight
Audit insight5 min read
ISO 27001 Stage 1 vs Stage 2 audits: what the auditor is actually looking for
The difference between the Stage 1 readiness review and the Stage 2 certification audit, what is examined at each, and how to prepare, explained by the people who conduct them.
Audit insight6 min read
The nonconformities we raise most often in first ISO 27001 audits
The recurring findings from initial ISO 27001 certification audits, why they happen, and what a clean implementation looks like, from a certification body that sees hundreds of ISMSs.
Buying advice
Buying advice4 min read
ISO 27001 certification cost: what actually drives the audit quote
How accredited certification bodies calculate ISO 27001 audit fees, what IAF MD 5 audit time means for your quote, the hidden costs to watch for, and how to compare quotes fairly.
Buying advice4 min read
ISO 27001 vs SOC 2: which one does your customer actually want?
A practical comparison of ISO 27001 certification and SOC 2 reports: what each proves, who asks for which, how they overlap, and how to decide whether you need one or both.
Buying advice4 min read
How to choose an ISO 27001 certification body: nine questions to ask
What to check before signing with an ISO 27001 certification body: accreditation, auditor competence, scheduling, pricing over the cycle, impartiality, and the questions most buyers forget.
Standard
Standard5 min read
The 11 new controls in ISO/IEC 27001:2022, explained
What changed in ISO/IEC 27001:2022, the four control themes, and what auditors expect to see for each of the 11 new Annex A controls, from threat intelligence to secure coding.
Ready to scope your audit?
Tell us about your organization, your ISMS scope, and your target date. We reply with a fixed-fee quote and available audit dates within two business days.