-JS-20240807%20PNG.png)
ISO 27001
ISO 27001, without
the paperwork hangover.
ISO 27001 is how you prove to customers, investors and auditors that you're not winging it with their data. I help small teams get certified, stay certified, and I'll audit you impartially when the standard says someone has to.
ISO 27001 INTERNAL AUDITS
Clause 9.2, sorted.
Every certified ISMS needs an internal audit, done by someone impartial. That's me. I audit the whole system against ISO 27001:2022, clauses 4 to 10 and the Annex A controls you've chosen, talk to the people who actually run it, and give you a report your certification body will recognise.
What you get: a clear report with findings graded by risk, a plain-English summary for the board, and a debrief call on what to fix first. Pre-certification or annual, remote or on site. From £2,250 for teams over 10 people.
THREE WAYS IN
Pick where you are today.
01
Internal audit
A full ISO 27001:2022 internal audit to meet clause 9.2, pre-certification or annual. Findings graded by risk, a board summary and a debrief.
From £2,250 (teams over 10 people)
02
Audit & get ready
The internal audit, then hands-on help closing the gaps: risk assessment, policies, Statement of Applicability, evidence, and prep for the certification audit.
From £7,000
03
Managed ISO 27001
I run it for you: a continuous compliance platform like Vanta or Drata, a fractional CISO, management reviews, risk reviews and audits on a calendar.
From £18,000 a year
WHY BOTHER
What the certificate actually buys you.
Bigger deals
Enterprise buyers love a certified supplier. ISO 27001 gets you past the 147-question security spreadsheet and shortens the sales cycle.
Trust at scale
As you grow, so does the scrutiny from customers, partners and investors. A certificate answers the question before it's asked.
Structure, not bureaucracy
Done right, ISO 27001 is just your house in order: clear owners, sensible controls and a rhythm of reviews. Your team moves faster, not slower.
WHAT CLIENTS SAY
Certified, and still talking to me.
“Despite the time pressure, Dan helped us prioritize the most critical areas, provided hands-on support, and gave clear, practical advice throughout. Thanks to his guidance, we successfully achieved certification. We're very grateful for his expertise and collaboration.”
Martin K. · CTO, Seenons
“I highly recommend Dan as an outstanding cybersecurity professional. As our CISO, he played a pivotal role in steering us through the complexities of achieving ISO 27001 certification. Dan's pragmatic approach, deep expertise, and ability to simplify challenges into practical steps made him an invaluable part of the team. He is not only highly knowledgeable but also approachable.”
Guy E. · CTO, Granular Energy
“Dan Steel provided excellent support during our ISO27001:2022 internal audit. His personal approach, deep understanding of the standards, and ability to explain complex issues clearly made the entire process smooth and efficient. Dan didn't just point out areas of improvement; he offered practical guidance and actionable steps. His constructive feedback was invaluable, helping us strengthen our compliance framework. We truly appreciate his professionalism, attention to detail, flexibility and the time he invested in helping us succeed.”
David C. · Ops Lead, Vocalls