Services / ISO 27001 from zero

No ISMS, no platform, a customer waiting. Now what?

We set up an open-source compliance platform in your own account, build the ISMS with you, and finish with a readiness assessment before Stage 1. You hold the keys.

A first ISO 27001 without the six-month panic.

You get

• A compliance platform set up in your own account (self-hosted open source by default). You hold the keys.
• Scope, gap assessment, risk assessment, risk treatment plan and Statement of Applicability
• The full policy set and procedures, written for how your company actually works
• Controls and evidence set up for the scope agreed in the proposal, a staff awareness session and a management review
• A written readiness assessment before Stage 1

Timeline

Typically 3 to 4 months. Not guaranteed: it depends on your team's availability and the size of the scope.

You provide

• A named owner with authority to decide and sign
• A cloud account or server for the platform, and access to the systems in scope
• A few hours a week from the owner, and time from the staff who run the controls
• Management sign-off on the policies, risks and scope

Price

$20,000. Fixed price. Scope and platform fit are agreed in the proposal before work starts. Prices exclude VAT and other taxes.

What is not included

Who does the work

Questions

What if we do not pass the certification audit?

The certification body decides, and nobody can promise its decision. If the audit raises nonconformities, its report says what to fix and by when. If you want our help closing them, we scope it in a short proposal with the price stated up front.

Can you do the implementation and the internal audit?

Not in the same certification cycle. An internal auditor has to be independent of the work being audited, so if we implement your ISMS, someone else does your internal audit. If we audit you, we did not build it.

Remote or on-site?

Remote by default, in English. On-site days are possible when we agree them in the proposal.

What currency do you invoice in?

US dollars. Better ISMS EURL, a French company, invoices you. Prices exclude VAT and other taxes, and payment terms are set in the proposal.

How is this related to ISMS Copilot?

Better ISMS makes ISMS Copilot, the AI assistant for ISO 27001 and GRC work. We use our own tools to do the drafting and checking faster; a person decides and signs off. You do not need an ISMS Copilot plan to hire us.