ADDITIONAL SERVICE · CUSTOM QUOTE

Your documentation.
Your path to assessment.

Practical support for teams preparing for ISO/IEC 27001 certification or a SOC 2 examination. Start with a clear scope, a useful documentation pack and an agreed roadmap.

Discuss documentation & guidance
01

Define the scope

Map your product, systems, data, team and customer requirements. Choose ISO/IEC 27001, SOC 2 or a coordinated readiness plan.

02

Build the documentation

Prepare and tailor policy drafts, procedures, ownership registers and evidence templates to the controls your team actually operates.

03

Close the gaps

Create a prioritized action plan with owners, dates and evidence requests. Review implementation and organize the assessment workspace.

04

Find the right assessor

Help compare qualified certification bodies or CPA firms, define the engagement scope, and understand proposals and ongoing obligations.

FOUNDATION DOCUMENTS

A pack tailored to your business

  • Information-security policies and assigned responsibilities.
  • Asset, vendor and risk registers; treatment and remediation plans.
  • Access, incident-response, change-management and continuity procedures.
  • Evidence index, control-owner checklist and operating calendar.
  • Customer-questionnaire and assessor handoff preparation.

Deliverables are agreed after discovery. Drafts need your organization’s review, approval and implementation; documents alone do not establish working controls.

FRAMEWORK-SPECIFIC SUPPORT

The right path for your target

ISO/IEC 27001: ISMS scope, risk approach, Statement of Applicability preparation, internal-audit and management-review planning, plus certification-body selection guidance.

SOC 2: system-description preparation, control and evidence mapping, Type I versus Type II planning, and CPA-firm selection guidance.

Your independent assessor confirms its requirements and assessment terms. ISO certification is issued by an external certification body; a valid SOC 2 report is issued by a licensed CPA firm.

Custom pricing. Clear responsibilities.

Choose a documentation project, guided readiness engagement or optional ongoing evidence support. Scope, milestones, delivery format and fees are agreed in a written proposal. Audit, certification, testing and platform fees are separate. No provider partnership or guaranteed outcome is represented.

Initial enquiries need only your website, framework, team size and target date. A private evidence-sharing arrangement is agreed before restricted materials are collected.

Request a documentation proposal