ISO/IEC 27001 Certification Support

Achieve ISO/IEC 27001:2022 with confidence.

We provide practical guidance, hands-on implementation, and pre-certification support tailored to your business.

Our services are designed for small to medium-sized businesses and public sector organisations aiming to implement or renew their ISO/IEC 27001 certification. Whether you’re starting from scratch or preparing for recertification, we’ll guide you through the process clearly and efficiently.

We support clients across the healthcare, legal, sport, PR, and public service sectors – especially where certification is required for tenders or customer assurance.

Our Services

We offer flexible support across the full spectrum of data protection needs – from one-off assessments to ongoing advisory support.

ISO/IEC 27001 Implementation Support

Implementing ISO/IEC 27001:2022 can feel complex and overwhelming, especially for smaller teams. Our experienced consultants will work with you to demystify the process and help implement exactly what’s needed to meet the standard, without overengineering your systems.

With over a decade of experience, we’ve helped more than 50 organisations achieve certification.

What we offer:

Initial gap analysis and risk assessment
Action plan aligned to ISO/IEC 27001:2022 controls
Implementation support for documentation, policies, and controls
Preparation for internal and external audits
Ongoing advice to maintain compliance

Pre-Certification Audit & Readiness Check

Approaching a certification or recertification audit? We can provide a focused, independent assessment to identify nonconformities and readiness gaps before your formal audit.

Benefits:

Identify issues early and avoid surprises
Strengthen audit confidence
Support internal teams with expert guidance

Certification Through Our Partner

Vinula is not a certification body – we focus on high-quality consulting and preparation. Through our partnership with the British Assessment Bureau (BAB), we can connect you directly to a trusted ISO/IEC 27001 certifier.

What this means for you:

One seamless journey from implementation to certification
Confidence in working with a recognised and accredited certification body
Support at every stage, from planning through to the final audit

ISO/IEC 27001 Support

Designed to support companies in achieving ISO27001 certification and support in maintaining their certification during the subsequent years.

Bronze Level

Designed for small businesses or those starting their compliance journey, focusing on foundational support with cost-effective solutions.

Introduction to ISO 27001 requirements and scoping workshop (half-day, online).
Provision of basic ISO 27001 policy and procedure templates.
Guidance on risk assessment methodology and documentation.
Includes Information Security options

£1,900 plus VAT

Silver Level

Targeted at businesses seeking robust compliance and hands-on support to implement security measures effectively.

Full ISO 27001 gap analysis and risk assessment, including asset inventory development.
Customised ISO 27001 policies, procedures, and Statement of Applicability (SoA).
Half-day workshop (in-person or online) on implementing ISO 27001 controls.
Guidance on internal audit planning and preparation for certification.

Enquire for pricing.

Gold Level

Aimed at organisations requiring full compliance, certification support, and ongoing strategic guidance for a mature security posture.

Complete ISO 27001 implementation support, including risk treatment plans and control selection.
Fully customised documentation for certification readiness (policies, SoA, risk registers).
On-site or virtual support during ISO 27001 certification audits (preparation and attendance).
Internal audit training and first internal audit facilitation.
Post-certification maintenance plan and annual review.

Enquire for pricing.

Customers can choose to mix and match different levels of service in the different focus areas to provide a service that meets their needs. In addition to the defined service levels a more bespoke service can also be developed with customers who need something more tailored to their specific requirements in each service area.