2-4 weeks
A compliance platform collects evidence. It cannot decide whether your scope, risks and control ownership make sense.
An independent advisory practice for regulated technology teams.
Typical investment
2-4 weeksFrom $4,500
Typical $4,500-$10,000
What changes it: State of the platform · Number of controls · Scope
We confirm the boundary of your ISMS, the audit or deal driving this work, and what evidence already exists - so effort goes where it matters.
We test controls the way an auditor will: risk register, Statement of Applicability, evidence quality and control ownership - sampled, not assumed.
You get a clear, prioritized view of gaps - what is critical, what can wait - with no jargon and no padding.
A concrete remediation plan with owners and sequencing, so the work continues with or without us.
We tell you what will block ISO 27001 certification before the certification body does.
Learn more →3-6 weeksReadiness finds the blockers. The Remediation Sprint helps remove them.
Learn more →1-2 weeksWe organise your ISO 27001 evidence so your team can show the right proof, in the right order.
Learn more →Certification is issued by accredited certification bodies; DORA supervision is performed by regulators. Kellwick prepares you for these processes; it does not perform them and cannot guarantee their outcome.
Kellwick is an independent advisory practice. We are not a certification body and do not issue ISO certifications. Certification decisions are made only by accredited certification bodies.