Service
ISO/IEC 27001:2022 Readiness Assessment
Who it is for
AI-enabled companies whose customers, investors or procurement teams require ISO/IEC 27001 certification, or a SOC 2 report in the United States.
When clients call
- A customer contract conditional on certification
- A security questionnaire you cannot answer with evidence
- A certification body audit booked without a readiness check
Scope
- Clauses 4 to 10 of ISO/IEC 27001:2022
- All 93 Annex A controls, with evidence sampled
- Statement of Applicability review or draft
- SOC 2 Trust Services Criteria cross-map where required
Method and standards
- ISO/IEC 27001:2022
- ISO/IEC 27002:2022
- AICPA TSC (SOC 2)
Deliverables
- Gap register by clause and control
- Draft Statement of Applicability
- Sequenced remediation plan with owners
- Readiness verdict and recommended audit date
Engagement arrangements
Dates, responsibilities and any ongoing review cadence are agreed in the written scope. Retesting is included where stated in that scope.
What happens after the scoping call
Written scope and fixed-fee proposal within one business day of your scoping call. The scope names the standards applied, the deliverables, the dates and the people doing the work.
Questions
Do you issue the certificate?+
No. Certification is issued by an accredited certification body. We prepare you for that audit and are independent of it.
Can this cover SOC 2 as well?+
Yes. The gap register cross-maps to the SOC 2 Trust Services Criteria so one remediation plan serves both.
How is the fee set?+
The written proposal defines the fixed fee, responsibilities and deliverables. Any change to scope is agreed in writing before additional work begins. Ongoing advisory includes an agreed review cadence and availability.
How is our evidence handled?+
Evidence is held under NDA, encrypted at rest and in transit, restricted to the named engagement team and destroyed on the schedule stated in the scope. It is never used to train any model.
Tell us what changed.
Thirty minutes, no obligation. Written scope and fixed-fee proposal within one business day of your scoping call.
Book a Strategic AI Readiness Assessment