Solutions · Security and compliance
Start certification from a proven set of documents
Policies, control mappings and evidence checklists for ISO 27001, SOC 2 and Cyber Essentials, improved over several certifications. We tailor them to how your organisation actually works, so the first draft is close to the final version.
Use cases
Is this you?
Much of the effort in certification goes on documents that look similar everywhere. What differs is how your organisation really operates.
A certification holding up a contract
A customer requires ISO 27001 or SOC 2 before signing, and there is a deadline.
Starting from nothing
You have no policies, no list of controls and no clear idea of how long certification should take.
Policies nobody recognises
Your documents were bought or copied, and they describe an organisation that is not yours.
More than one framework
Different customers ask for different standards, and each one is being handled as a separate project.
What it delivers
A starting set, shaped to you within weeks
This saves you from writing everything from a template on the first day and then correcting it for months.
- Policies written to be followed, not just filed
- Control mappings across ISO 27001, SOC 2 and Cyber Essentials
- Evidence checklists for each control, showing who provides what
- A risk register structure and templates for dealing with each risk
- Supplier assessment templates
- An audit readiness checklist for the final weeks
Evidence kit
Policies
Information security, access, change, incidents and suppliers
Control map
One set of controls mapped to three frameworks
Evidence checklists
For each control, with owner and frequency
Risk register
Structure, scoring and treatment
Suppliers
Assessment questions and risk levels
Audit readiness
The last six weeks before the auditor arrives
What we do around it
Documents are quick. The controls are the real work.
A kit gets the paperwork right quickly. Certification also needs the controls to work in practice, which is engineering work.
- Tailoring
- We rewrite every policy around how your teams actually work, in sessions with the people it applies to.
- Filling gaps
- Where a control does not exist yet, we build it, for example access reviews, logging, backups or change approval.
- Evidence
- We automate the collection of evidence from your systems wherever possible, so the next audit takes less effort than this one.
- Audit support
- We help with preparation, walkthroughs and fixing any findings, all the way to certification.
- Between audits
- We provide ongoing support, so the controls work all year, not only while the auditor is there.
Pricing and demonstrations
Tell us the date you need to be ready
We will show you how much of the kit already fits your organisation, and what is left for you to decide.
Priced according to your size, number of users and the support you need. There are no tiers.