ISO/IEC 27001:2022

ISO 27001 is a risk based information security management system. It is about how you organise yourself and how you identify and manage information security risks. It is an internal standard that can result in an ISO 27001 certification and ISO 27001 certificate that you can share with customers and clients to demonstrate that you are managing information security risks.

ISO 27001 certification is the independent assessment by a third party against the requirements of the ISO 27001 standard and the relevant ISO 27001 Annex A controls. It results in an ISO 27001 certificate.

An ISO 27001 certificate is a one page document issued by an independent third party that states the scope of your certification and the time period for which the certificate is valid. It is issued on successfully demonstrating that you meet the requirements of the ISO 27001 standard.

ISO 27001 costs vary based on the size of your organisation, the scope of your ISO 27001 certification and the way in which you go about it. It can range from as little as a few hundred pounds / dollars up to tens of thousands pounds / dollars.

ISO 27001 certification is important to your customers and sales process as it demonstrates that you are managing your information security risks and meet the international standard for ISO 27001. It is often a requirement of doing business.

ISO 27001 is important to you as it provides a robust framework for managing information security based on the internally recognised standard.