Why faster
Twelve months is a choice. Eight weeks is a method.
Certification takes long because the system of record is built by hand, once, for the audit. ISO Assist starts with the ledger already built, so the work is deciding and evidencing, not typing.
Two paths
Same certificate. Different year.
Typical shape of each path for an organisation pursuing ISO 27001. Switch between them.
- WEEK 1done
Adopt the standard
Every clause and control appears with an owner. Scope statement drafted from your organisation profile.
- WEEKS 2–3done
Answer the assessment, link evidence as you go
Free-text answers interpreted into a proposed status you confirm. Evidence linked from Workspace or M365.
- WEEKS 4–5done
Adapt the policy set
More than 400 templates already mapped to controls. Adapt, approve, distribute, track acknowledgement.
- WEEKS 6–7done
Work the gap list
Plain-English gap summary becomes actions with owners and due dates. Internal audit run in-app; management review from the agenda the standard requires.
- WEEK 8done
Freeze the dossier
Statement of Applicability, gap report and evidence index, hashed. Auditor gets time-boxed read-only access.
- ONGOINGdone
Stay certified
Cadences, expiry, reassessment and notifications keep the ledger true between audits. Surveillance is a report, not a project.
ABOUT 8 WEEKS TO AUDIT-READY · ONE FLAT ANNUAL RATE
Where the time goes
Six things you no longer do.
Writing the documents
More than 400 templates, already mapped to the controls they evidence, adapted from your organisation profile.
Building the control list
Frameworks are content packs. Adopt one and the ledger exists.
Mapping evidence by hand
One item, many requirements, across standards. Suggested mappings you confirm.
Chasing people
Owners, due dates, cadences and per-person notifications. The platform chases; you decide.
Reconstructing the audit trail
Append-only audit log. The history exists because the work happened here.
Second and third systems
Quality, safety and environment on the same spine as security. One audit programme, one management review.
Plainly
What the platform does not do.
It does not certify you. A certification body audits your system and issues the certificate. ISO Assist gets you to that audit with a complete, current, reproducible set of records, and keeps them that way afterwards.
It does not pretend to verify your infrastructure with agents. Evidence here is deliberate: linked, dated, owned, reviewed, and credited to every standard it satisfies.
It does not let AI set a compliance status. Ever.
Start the eight weeks.
Fourteen days free, no card. Adopt your first standard today.