Home / Assessments / ISO 27001
ISO/IEC 27001 readiness
International and enterprise customers increasingly ask for ISO 27001 certification. We measure your gaps and build an information security management system that passes audit and keeps working.
A Fortify Experts ISO/IEC 27001 gap assessment measures your information security management system against the 2022 standard and its 93 Annex A controls, then delivers a remediation roadmap, Statement of Applicability support and certification audit preparation.
What you receive
- ISMS scope and context review
- Gap assessment against clauses 4 to 10 and Annex A
- Risk assessment and treatment approach
- Statement of Applicability support
- Internal audit and management review preparation
- A roadmap to Stage 1 and Stage 2 audits
Building AI products too? ISO 27001 and ISO 42001 share a management system structure, so many controls and audits can be combined.
Questions we hear
How many controls are in ISO 27001?
The 2022 edition of ISO/IEC 27001 has 93 Annex A controls in four themes: organizational, people, physical and technological. You apply the ones relevant to your risks and justify any exclusions.
How does certification work?
An accredited certification body runs a two-stage audit: a documentation review, then an assessment of how the management system operates. Certificates are maintained through annual surveillance audits.
Find out where you stand in one hour
Book a free security strategy consultation. You’ll talk with a senior advisor, not a salesperson, and leave knowing which next step fits.