ISO 27001 implementation and certification readiness
From current state to a passed certification audit, with a fixed scope agreed before we start.
Services
ISO 9001 quality management
For companies that want a quality management system alongside their security programme, or need the ISO 9001 certificate for tenders. We can build it as part of one integrated management system so quality, security and continuity share the same audits and reviews.
What we do
Process mapping
How work actually flows through sales, delivery, support and management, documented at the level of detail an auditor needs and no more.
Quality objectives and measures
A small set of objectives and indicators that the management team will genuinely review.
Documented information
The quality manual (if you want one), procedures and records, written for the people who use them.
Internal audit and management review
The clause 9 cycle run once before certification, with findings closed.
Certification support
Selection of the certification body, evidence preparation and support through the audit.
What you receive
- Process map and documented procedures
- Quality policy, objectives and measurement plan
- Internal audit report and management review minutes
- Evidence index mapped to the clauses
Common questions
- Can ISO 9001 and ISO 27001 be audited together?
- Yes. Most certification bodies offer integrated audits, which usually cost less than two separate audits and let you run one management review and one internal audit programme.
Related services
ISMS internal audit, surveillance support and maintenance
Independent internal audits, surveillance preparation and the 2013 to 2022 transition for companies that already hold ISO 27001.
Personal Data Protection Act readiness
Get ready for Sri Lanka’s PDPA, whose core obligations commence on 1 January 2027, and align the work with ISO 27001 so you do it once.
Not sure where you stand? Start with a scoping call.
Forty-five minutes, no charge. We ask about your organisation, what is driving the project and what you already have in place, then send a written proposal with a fixed scope and fee.