ISO 27001

Frequently Asked Questions

What is an Information Security Management System (ISMS)?

An information security management system (ISMS) is a management system outlining processes and procedures required to ensure information security.

If you are considering getting ISO 27001 certified, you must first build out an ISMS that meets your organizational needs and objectives.

Do I need an ISMS for getting ISO 27001?

Yes.

If you are considering getting ISO 27001 certified, you must first build an ISMS that meets your organizational needs and objectives while also meeting the standard requirements.

How long does it take to get ISO 27001 certified?

The time it takes to get ISO 27001 certified depends on the scope of the certification as well as the maturity of your organization's security posture and efforts. Typically, the more mature - the faster.

It is all about planning and organizing documentation and evidence in a way that easily aligns with the 27001 requirements to ensure a smooth certification process.

We can help you better understand where your organization is - and is not - meeting the requirements for the ISO 27001 certification.

How is ISO 27001 certification different from a SOC audit report?

First, the ISO 27001 is certification process where the organization actually gets certified and can attest to conducting ongoing security compliance.