Ready to enhance your information security management system? Our certified experts guide you from implementation to audit.
One standard, three distinct needs. Whether you’re starting from scratch, preparing for an audit or managing an existing certification, choose the support that fits where you are today, with a clear scope and tangible outputs, shaped around your business, risks and deadline.
Build an ISMS your team can run and an auditor can test, delivered by certified Lead Implementers.
Know where you stand before the auditor does, with an independent, evidence-based view of your ISMS against ISO/IEC 27001:2022.
Keep your certification valid and your ISMS audit-ready as people, systems and risks change, without the scramble before each audit.
Exact deliverables are confirmed in your proposal after scoping.
Your budget should account for three elements: consultancy support, the certification body’s fees and your organisation’s own implementation effort.
Bitsecura provides a tailored quote after scoping your requirements. The fee depends on the services you need, the complexity of your organisation and how much work your team has already completed.
| What affects the fee | Why it matters |
|---|---|
| Scope and complexity | Multiple locations, services and systems require more assessment and coordination. |
| Existing security practices | Established controls and usable evidence can reduce the work required. |
| Internal capacity | Some teams need targeted advice; others need more implementation support. |
| Engagement type | A standalone internal audit has a different scope from implementation or ongoing maintenance. |
| Delivery requirements | Delivery is remote by default. Any on-site activity identified during planning, and additional audit support, affect the fee. |
Your proposal should make clear the deliverables, responsibilities, delivery arrangements, fees and any separately priced activities.
Your Bitsecura fee covers the work listed in your proposal. Three other costs sit outside it, and the first is the one clients most often confuse with consultancy fees.
Workshops, document reviews, evidence assessment and many audit interviews can be delivered remotely. We agree meeting times, evidence-sharing arrangements and milestones with your team.
Where physical controls or operational activities need on-site assessment, we identify that requirement during planning. Your certification body determines the arrangements for its own assessment.
Every engagement is led by Arian Sheremeti, Bitsecura’s Principal GRC Consultant and Auditor, with more than 20 years of experience and a background at PwC and Deloitte.
You get a senior ISO 27001 Lead Auditor and Lead Implementer from the first scoping conversation, not a hand-off to a junior team. We work in a documented, repeatable way, and your policies, risk register and evidence stay in your own systems, so the ISMS belongs to your organisation.
There is no single answer. Your timeline depends on the agreed scope, existing controls, internal availability and the certification body’s schedule. We agree a realistic plan with you during scoping.
A credible plan allows time to implement controls, collect operating evidence, complete the internal audit and management review, and address findings.
Yes. We assess what you have, identify the remaining gaps and agree where support will be most useful. You may need help with a specific activity, such as the risk assessment or internal audit, rather than a complete implementation engagement.
An external certification body conducts the certification assessment and decides whether to issue the certificate. Bitsecura provides implementation, internal audit and readiness support.
You can read more about the distinction in ISO’s guidance on certification.
Stage 1 assesses your ISMS arrangements and readiness for the main certification assessment. Stage 2 evaluates implementation and effectiveness through interviews, records and other evidence.
We help you understand what to prepare and address gaps before the relevant assessment.
No. Your organisation can maintain its own ISMS if it has the capacity and competence. Ongoing support is useful when you need additional expertise, independent internal audits or help coordinating maintenance activities.
Tell us whether you need implementation, an internal audit or ongoing ISMS support. We will discuss your existing arrangements and the outcome you need.
Book a free discovery call