A practical gap assessment with clear priorities and an actionable improvement roadmap.
Provided by Tom S., Fractional CISO | GRC & Security Governance | ISO 27001 | NIS2 | AI Governance — Fractional CISO | Security Governance & GRC | ISO 27001 | NIS2 | AI Governance
Strengthen your security governance and understand where you stand against ISO/IEC 27001. I provide a practical, risk-based assessment of your current security governance, ISMS maturity and key controls.
The engagement is designed for organisations that need clarity on gaps, priorities and the next steps — whether you are preparing for ISO 27001 certification, responding to customer or regulatory requirements, or simply want a stronger security management framework.
The assessment can cover: ISMS structure, scope and governance Security roles, responsibilities and management oversight Risk management methodology and risk register Security policies and supporting processes Asset and supplier governance Control coverage and ISO 27001 Annex A alignment Incident, vulnerability and access governance Relevant NIS2 considerations You receive: A structured assessment of the current state Identified gaps and areas of risk Prioritised recommendations A practical roadmap for improvement Management-level walkthrough of the findings The scope is tailored to your organisation and existing maturity.
The goal is not to generate unnecessary documentation, but to establish a security governance model that is practical, proportionate and usable in day-to-day operations.
I bring hands-on experience establishing and operating ISO 27001-aligned security governance in complex and regulated environments, combined with broader IT leadership, risk management and digital transformation experience.
Remote ISO 27001 and security governance readiness assessment for one organisation or business unit.
Includes: Kick-off and scope confirmation Review of key ISMS, governance and security documentation Up to two stakeholder interviews/workshops Assessment of ISO 27001 management system requirements and relevant control areas High-level NIS2 considerations where applicable Identification and prioritisation of key gaps and risks Written findings and actionable improvement roadmap 60-minute management walkthrough of findings One revision of the final deliverable This is a readiness and governan
Heelr is the cybersecurity services marketplace by Cyberr. Buyers scope work, compare verified providers and pay through protected payments.