Skip to content
CYRENTIQ
All servicesCompliance & certification

ISO 27001 Certification Readiness

Understand what you need to put in place before seeking independent certification for managing information security.

What this helps you decide

What must be established or evidenced before engaging the independent certification body?

When you need it

Customers are asking for assurance, or you are planning an ISO 27001 programme. Understand the gap between your current practices and an effective information security management system.

Business impact & an example

Certification preparation is more than producing policies. Your organisation needs a defined scope, responsible owners and evidence that information security practices operate in daily work.

A question worth asking

Can we demonstrate how risks are assessed, controls are operated and improvements are reviewed?

Examples guide the scope; they are not promised findings.

What’s included & what you receive

Agreed coverage

  • Agreed ISMS boundaries and business context
  • Gap assessment and evidence review
  • Risk and control priorities
  • Readiness roadmap and responsibilities
  • Readiness against ISO/IEC 27001:2022

Your deliverables

  • Gap register with supporting observations
  • Prioritised readiness actions
  • Evidence and ownership plan
  • Next steps toward independent certification
Exclusions & limitations

We help you prepare for certification. The certificate itself is issued by an independent accredited certification body; audit fees are separate. We do not guarantee certification outcomes.

References to standards are not claims of certification, accreditation or endorsement.

How it works

  1. 01

    Initial conversation

    Tell us what you want to achieve and which systems are involved. You do not need to know the technical details.

  2. 02

    Initial assessment

    We review your situation and confirm a sensible scope. The initial assessment is completed within 3–5 business days.

  3. 03

    Written proposal

    You receive a proposal setting out the scope, deliverables, fees (AUD, ex GST), timing and exclusions.

  4. 04

    Delivery

    We carry out the agreed work, with one point of contact and specialist practitioners matched to your scope.

  5. 05

    Findings and next steps

    We walk you through the results and priorities, and any follow-up or re-checks agreed in your proposal.

Frequently asked questions

How much does ISO 27001 Certification Readiness cost?

Tailored to your scope – quoted after your initial assessment (AUD, ex GST). The final fee is confirmed in a written proposal before any work begins.

How long does it take?

The initial assessment is completed within 3–5 business days. The project timeframe depends on your scope and is confirmed in your proposal.

What do you need from us?

Your input: Access to key people and documents as agreed in scope. Follow-up: Review session and agreed update window included in scope.

Do you issue certificates or audit reports?

No. We provide readiness and advisory services. Certificates (such as ISO/IEC 27001) are issued by independent accredited certification bodies, and SOC 2 reports by independent licensed audit firms. Their fees are separate.

Do you work outside Gippsland?

Yes. We are based in Leongatha, Gippsland, and work with businesses across Australia.

Related services

Technical words, explained simply
Cybersecurity
Protecting your information, accounts and systems from misuse.
Compliance
Showing how you meet the standards or requirements that apply to your organisation.
Penetration test
An authorised attempt to find and demonstrate security weaknesses.
API
A connection that lets two software systems exchange information.
QA and regression testing
Checking that software works and that changes have not broken existing features.
MFA
An extra sign-in check, such as an approval on your phone, alongside your password.
AI governance
Rules for choosing and using artificial intelligence safely and responsibly.
Backup
A separate copy of your files and systems you can restore if something goes wrong.
Threat detection
Tools and people that watch for signs of an attack and respond quickly.
Scope
Exactly what work is included, what is excluded and what you will receive.