A stage-by-stage ISO 27001 certification timeline, from first decision to certificate, with the factors that speed it up or slow it down, from auditors who run them.
Resources
Written by auditors, for the people preparing for one
Straight answers on what the audit involves, what it costs, what goes wrong, and how to choose who does it. No gated PDFs.
Latest
Audit insight
Audit insight5 min read
ISO 27001 Stage 1 vs Stage 2 audits: what the auditor is actually looking for
The difference between the Stage 1 readiness review and the Stage 2 certification audit, what is examined at each, and how to prepare, explained by the auditors.
Audit insight6 min read
The nonconformities we raise most often in first ISO 27001 audits
The recurring findings from first ISO 27001 certification audits, why they happen, and what a clean implementation looks like, from auditors who see hundreds of ISMSs.
Buying advice
Buying advice4 min read
ISO 27001 certification cost: what actually drives the audit quote
How accredited certification bodies calculate ISO 27001 audit fees, what IAF MD 5 audit time means for your quote, hidden costs to watch for, and how to compare quotes.
Buying advice4 min read
ISO 27001 vs SOC 2: which one does your customer actually want?
A practical comparison of ISO 27001 certification and SOC 2 reports: what each proves, who asks for which, how they overlap, and whether you need one or both.
Buying advice4 min read
How to choose an ISO 27001 certification body: nine questions to ask
What to check before signing with an ISO 27001 certification body: accreditation, auditor competence, scheduling, cycle pricing, impartiality, and what buyers forget.
Standard
Standard5 min read
The 11 new controls in ISO/IEC 27001:2022, explained
What changed in ISO/IEC 27001:2022, the four control themes, and what auditors expect for each of the 11 new Annex A controls, from threat intelligence to secure coding.
Ready to scope your audit?
Tell us about your organization, your ISMS scope, and your target date. We reply with a fixed-fee quote and available audit dates within two business days.