Compliance & Certification

ISO/IEC 27001:2022 Certification

Establish, certify and continually improve an ISMS aligned to Annex A 2022.

Overview

End-to-end ISO 27001 implementation covering Clauses 4–10 and all 93 Annex A controls under the 2022 revision — organizational, people, physical and technological themes. Stage 1 and Stage 2 audit support from an accredited certification body.

Outcomes

What you get

  • Certified ISMS scope aligned to business objectives
  • Statement of Applicability with full Annex A justification
  • Internal audit program and management review cadence
  • Recertification-ready posture through the 3-year cycle
Scope

Engagement scope

01

Context and scope

Clause 4 — interested parties, boundary, ISMS scope statement.

02

Leadership and planning

Clauses 5–6 — policy, roles, risk assessment methodology, risk treatment.

03

Support and operation

Clauses 7–8 — competence, awareness, communication, operational planning.

04

Performance and improvement

Clauses 9–10 — monitoring, internal audit, management review, corrective action.

05

Annex A 2022

All 93 controls across A.5 organizational, A.6 people, A.7 physical, A.8 technological themes.

Deliverables

What ships

ISMS documentation setRisk assessment and treatment planStatement of ApplicabilityInternal audit reportsManagement review minutesISO 27001:2022 certificate from an accredited body
Timeline

How it unfolds

Gap analysis
Week 1–3
Current-state against Clauses 4–10 and Annex A.
Implementation
Week 4–14
Documentation, controls, training, internal audit.
Stage 1 audit
Week 15
Documentation review by certification body.
Stage 2 audit
Week 18–20
Implementation audit and certification.
FAQ

Frequently asked

How does 27001:2022 differ from 2013?+

The 2022 revision restructures Annex A from 114 controls in 14 domains to 93 controls in 4 themes, introduces 11 new controls (threat intelligence, cloud services, data masking, etc.) and merges 57 legacy controls.

Ready to scope your ISO/IEC 27001:2022 Certification program?

A senior consultant will respond within one business day with a scoping questionnaire and proposal outline.