ISO 27001 readiness
We help prepare your information security management system for ISO 27001, assessing practices, risks and documentation to identify missing processes.
01 / ASSESSMENT
Prepare the scope, risk assessment, controls, policies and audit evidence for an information security management system. This service supports ISO/IEC 27001 readiness. Certification is issued separately by an accredited certification body.
PRACTICAL SCENARIOS / TTP
TTPs are an adversary’s tactics, techniques and procedures. We analyse these approaches and select scenarios for your environment and the scope agreed in writing, connecting each assessment result to practical defensive guidance.
Define which activities, services and data the management system covers. Derive risks from business processes and harm scenarios, beyond scanner findings. Document risk ownership, evaluation criteria and acceptance decisions.
Separate the rationale for a control from evidence that it works. Align the Statement of Applicability, policies and responsibilities. The goal is a manageable, auditable security process rather than more paperwork.
Prepare internal audits, corrective actions, management review and reassessment. Highlight missing evidence and ineffective controls. The service supports certification readiness; issuing a certificate remains a separate independent certification process.
02 / OUTCOMES
Work proceeds under the system owner’s written authorisation, a contract and a confidentiality agreement. Assets, methods, timing, stop conditions and data handling are defined before work begins.
Send your requirements through CyberTrust. We will clarify asset count, assessment depth and expected outcomes with you, then set out timing and pricing in the proposal.