ISO 27001 Readiness Sprint
ISMS skeleton, risk register, Statement of Applicability and an internal audit dry-run.
ISO-01Duration: Indicative 3–4 weeks, depending on scope and availability of participantsAssurance
Outcome
An ISMS skeleton for audit preparation including risk register and SoA draft. Certification is decided by the external body.
Who it is for
Organisations planning ISO 27001 certification within 6–12 months.
Deliverables
- ISMS skeleton per Annex A
- Risk register (initial pass up to 30 assets)
- SoA draft per control point
- Checklist for an internal audit dry-run
- Accountability matrix (owner per control)
- Management-review template
In scope
- 1 entity, up to 30 in-scope assets
- Document reviews + 4 steering sessions
Out of scope
- Certification itself (by the external body)
- Process build during live operations
Prerequisites
- Access to existing processes/tools
- Named ISMS manager
Acceptance
- Acceptance via ISMS skeleton, risk register, SoA draft and dry-run result.
Human approvals
- ISMS manager confirms risk ratings
- Management reviews SoA before release
Frequently asked questions
Is certification guaranteed?
No. We reduce gap risk and prepare; whether and when certification is granted is decided solely by the external certification body.