With prospective clients looking now more than ever for partners with whom they can confidently share their business data, ISO 27001 Certification helps businesses to demonstrate that information security is critical to the way they work.
The need to protect your data, reduce risk, secure systems and maintain continuity of service are some of the key aspects covered by ISO 27001 Certification. It's the fastest growing management system and is being adopted by businesses worldwide - with information security on the conscience of businesses and consumers, it will continue to grow in demand and importance.
An Information Security Management System takes some effort to implement but with the help of experienced and knowledgeable ISO Consultants the areas that are often problematic can be overcome.
Whether you are in charities, healthcare, print, professional services, transport, marketing, technology or any other sector, 2SB are experienced ISO 27001 Consultants and will help guide you to certification.
Consultation – initial fact finding conversation on the phone or in person to understand more about your business
Proposal – when we understand what your needs are, we will produce a proposal that outlines the support required to get you certification
Implementation – once the proposal is approved, implementation can begin. We will work with you over a series of onsite and offsite days to prepare your management system for the audit
External audit – you will be visited twice by an external certification body who will test your system and award you the ISO certificate
Ongoing support – we want to build lasting relationships and help you constantly improve your business. We have extensive experience working in SMEs across industry sectors and take a pragmatic approach to providing sound business advice
Firstly you will need to have implemented or be in the process of implementing the specific management system you are hoping to achieve certification against.
You don’t need to have fully implemented the system before contacting the certification bodies, however having made a start or knowing how far you have to go can help set a date to aim for.
Once you have in mind a date that you feel is realistic to work towards, the next step is to contact one or more certification bodies to ask for quotes. You will be required to provide information about your business (i.e. nature of your work, number of employees and the roles they do, number of sites) so the certification body can make a good approximation about how many days it will take an assessor to audit your business.
We recommend contacting at least two certification bodies since the price and number of days they expect the audit to take can vary. 2SB recommend that you always approach UKAS accredited certification bodies, as these certificates carry much more weight and you can be assured that your business is being correctly assessed.
Based upon the quotes received, you will need to decide the most appropriate body to certify with and set a date for your Stage 1 and Stage 2 audits.