ISO 27001 certification, prepared the way your auditor will look at it.
We take startups and scale-ups worldwide from gap analysis to a successful certification audit, with an ISMS sized for your company and evidence your auditor will accept.
The certificate your customers ask for, and a security programme that holds up.
Unblock enterprise deals
Large customers and public buyers increasingly require ISO 27001 in tenders and contracts. The certificate shortens procurement and security reviews.
Answer questionnaires once
Most security questionnaire questions map to ISO 27001 controls. Certified companies answer with evidence instead of starting from scratch each time.
Build security that scales
A management system with clear owners, risks and reviews, ready to support NIS2, DORA or GDPR expectations as you grow.
Everything the certification audit will look for
Deliverables are yours: editable, in your own tools, in English or French.
Scope and context
Organisation context, interested parties and an ISMS scope your auditor will accept, without over-reaching.
Gap analysis
A clause-by-clause review and a check of all 93 Annex A controls, with a prioritised, dated plan.
Risk assessment and treatment
A risk method your team can run again next year, a risk register and a treatment plan with named owners.
Statement of Applicability
Every Annex A control justified: included or excluded, implemented or planned, linked to its evidence.
Policies, procedures and evidence
The documented information the standard requires, sized for your company, plus the records that prove it runs.
Internal audit and management review
An independent internal audit and a management review, so stage 1 and stage 2 hold no surprises.
Prepared by someone who runs certification audits.
Cyberbits Consulting is led by an ISO 27001 Lead Auditor who also audits for an accredited certification body. We know how auditors sample evidence, word their findings and judge whether an ISMS is really alive.
“He supported us throughout our ISO 27001 implementation, from prioritizing clauses and controls to shaping our documentation approach and preparing for the external audit. What stood out beyond his technical expertise was his style: responsive, genuinely supportive, and always available when we needed guidance.”
A dated plan from the very first call
Scoping call
30 minutes, free. Your context, your deadline, a realistic scope.
Gap analysis
A clear picture of the gaps and a dated, prioritised plan.
Build
Regular check-ins, ready-to-use deliverables, and your team stays in ownership.
Certification
Internal audit, management review, then support during stage 1 and stage 2.
ISO 27001 questions
How long does ISO 27001 certification take?
It depends on your starting point, your scope and how much time your team can give. The gap analysis gives you a realistic, dated plan.
How much does it cost?
Pricing is on request. After a free scoping call, we send a fixed-fee proposal based on your scope and starting point.
Can you also run our certification audit?
No. Impartiality rules prevent anyone from certifying a management system they helped build. We prepare you, and an independent accredited certification body certifies you.
What happens after certification?
The certificate is valid for three years, with surveillance audits in years one and two and a recertification audit in year three. Each year also needs an internal audit and a management review, which we can run for you.
Do we need a GRC platform?
No. We work with the tools you already use. If you use a GRC platform, we work inside it with you.
Let's talk about your certification deadline.
30 minutes, free, no commitment. You leave with a timeline and scope estimate.
- Your context, your deadline, a realistic scope
- ISO 27001, HDS or both: what applies to you
- In English or French, by video call