StandardOS

All services

ISO 27001 gap assessment, in 10 working days

Remote work with you, in StandardOS: the Statement of Applicability drafted from your answers, each clause and Annex A control read against what you do today, and the order in which to close the gaps before an audit.

What you get
A drafted Statement of Applicability, a gap list by clause and Annex A control, and a prioritised plan to certification, with a call to open and a call to close.
How long
10 working days from the opening call
Price
€1,200 fixed, excl. VAT, paid up front
What you provide
The scope you have in mind, a person who knows how you work, and the documents you already have.

Ask for a start date

Tell us who you are and when you would like to start. The founder writes back to agree the dates and the payment.

What is delivered

  1. 1Statement of Applicability drafted

    Every Annex A control marked applicable or excluded, with the reason, drafted from your answers and kept in StandardOS for you to own.

  2. 2Gap list by clause and control

    Each clause of the management system and each applicable Annex A control: in place, partly in place or missing, with the evidence an auditor would ask to see.

  3. 3Prioritised plan to certification

    The gaps in the order to close them, what each needs and who owns it, up to the point where you choose a certification body.

  4. 4An opening call and a closing call

    The first agrees the scope and the sources; the last walks through the result and what is left to do. Between them the work happens in writing, in the workspace.

  5. 5StandardOS during the work

    A workspace for the engagement, where every document is kept, and which stays yours afterwards.

What we need from you

  • The scope you have in mind: the organization, sites and services the certificate should cover.
  • A person who knows how the company works day to day, for the two calls and for questions in writing.
  • The policies, procedures and records you already have, in whatever form they exist.

What this does not promise

It does not certify you and does not predict the audit: an accredited certification body decides. The plan says what is missing; closing it is your work, and StandardOS keeps track of it.

StandardOS is included while we work. When the engagement ends, your workspace continues on the ordinary subscription, or you export everything and leave.

This page in:DeutschFrançaisNederlandsEspañolDansk