Services

Evidence, ownership and operating discipline - not just templates.

ISO 27001 support for companies that need their ISMS to work in practice: before certification, before a surveillance audit, and between cycles.

Which engagement fits where you are?

Service	Duration	Best for	Output
Readiness Review	7-10 days	Quick, honest diagnosis	Report + top gaps + 30-day plan
Readiness Sprint	4-6 weeks	Pre-audit remediation	Evidence map + gap tracker + readiness report
ISMS Maintenance	Monthly	Certified companies	Monthly ISMS status + evidence review + risk updates
Vanta / Drata Cleanup	2-4 weeks	Compliance platform users	Control ownership + evidence quality + cleanup plan
Security Questionnaire Support	48h triage	Deals blocked by security reviews	Evidence pack + answer quality + reusable answer library

Whatever the engagement, we look at the same artifacts an auditor and an enterprise buyer will. We work from evidence, not opinions.

Know where you stand before the auditor does.

You receive · 7-10 days

Fix the gaps that put certification, surveillance or enterprise deals at risk.

Who it is for: Teams remediating before a certification or surveillance audit.
What it covers: Structured remediation across risk, SoA, policy, process and evidence.

You receive · 4-6 weeks

Keep risk, evidence, suppliers, reviews and controls alive all year.

Who it is for: Certified companies keeping the ISMS audit-ready between cycles.
What it covers: Ongoing operating discipline across the ISMS lifecycle.

You receive · Monthly

A compliance platform collects evidence. It cannot decide whether your scope, risks and control ownership make sense.

Who it is for: Teams using a compliance platform but lacking operating discipline.
What it covers: Scope, risks, SoA, control ownership and evidence quality.

You receive · 2-4 weeks

Stop letting enterprise security reviews stall your deals. We help you answer questionnaires accurately, with evidence.

Who it is for: Teams whose deals are blocked by enterprise security reviews.
What it covers: Questionnaire triage, evidence pack, answer quality and trust story.

You receive · 48h triage

Pricing

Engagements are scoped based on company size, ISMS maturity, audit timeline and evidence quality. Final pricing is confirmed after a readiness call.

Fixed-scope readiness reviews are available. Pricing depends on scope, timeline and current ISMS maturity.

Start with a short call. If a readiness review is not the right first step, we will say so.