Practical support from initial gap assessment through Stage 1 and Stage 2 audit readiness.
Provided by Tim M., Fractional CISO | ISO 27001 & SME Security | Helping small teams pass audits & get through due diligence. CISA, CISSP, ISO27001 Lead Auditor — Fractional CISO & ISO 27001 Consultant | CISSP • CISA
A structured ISO 27001 readiness engagement for SMEs and technology organisations preparing for certification or strengthening an existing ISMS. I will turn the standard into a practical programme your team can operate and evidence.
Support can begin with an initial gap assessment or focus on specific areas already in progress.
Typical deliverables include: • Scope and certification-readiness assessment • ISO 27001 gap assessment and prioritised remediation plan • Risk assessment and risk-treatment planning • Statement of Applicability review or development • Policy and procedure development • Governance, control ownership and evidence planning • Internal-audit and management-review preparation • Stage 1 and Stage 2 audit preparation The engagement is tailored to your maturity, target date and internal resources.
Related SOC 2, Cyber Essentials and PCI DSS requirements can be aligned where useful.
Eight-hour minimum engagement. Includes discovery, review of your current ISMS position, prioritised recommendations and practical work on the agreed ISO 27001 readiness deliverables.
Heelr is the cybersecurity services marketplace by Cyberr. Buyers scope work, compare verified providers and pay through protected payments.