Get Certified.
Prove your posture.
Four pathways to a proven, defensible security posture. Choose the one your customer, regulator, or contract requires, and Oxana will get you audit ready, with a clear line between advisory and independent certification.
Four ways to get certified with Oxana
Select an option to see the full breakdown and book a readiness call.
We prepare you. The certifier
certifies you.
Oxana does the advisory work that gets you audit ready. The certification itself is issued by an independent, accredited certifier. Keeping these separate keeps the assessment honest.
Advisory
What Oxana does
Gap assessment, control implementation, policy and evidence, internal audit, and readiness coaching across all four pathways.
Certification
What the certifier does
The independent, accredited decision that you meet the standard. Oxana partners with certifiers so the path and handover are clear.
Outcome
A defensible posture
A certified, documented, audit-ready posture aligned with ACSC and ISM guidance that stands up to customers, regulators, and insurers.
Frequently Asked Questions
Does Oxana issue the certification?
No. Oxana provides advisory and readiness. The certification itself is issued by an independent, accredited certifier, CyberCert for SMB1001 and a JAS-ANZ accredited body for ISO 27001. Oxana prepares you to pass that audit, and we partner with certifiers so the path is clear. We are deliberately not the certifier, so the assessment stays independent.
What is the difference between advisory and certification?
Advisory is the work that gets you ready: gap assessment, control implementation, policy, evidence, and internal audit. Certification is the independent decision, made by an accredited certifier, that you meet the standard. Oxana does the advisory. The certifier does the certification. Keeping these separate is good practice and avoids a conflict of interest.
Which certifications can Oxana prepare us for?
Four pathways: SMB1001, the ACSC Essential Eight, ISO 27001, and government supplier contract presentation. Choose the one your customer, regulator, or contract requires, or combine them into a single readiness program.
How long does certification readiness take?
It depends on your starting posture and the framework. Essential Eight uplift to a target maturity level can take a few months; SMB1001 certification readiness typically takes three to six months; ISO 27001 readiness usually takes six to twelve months. Government supplier readiness depends on the contract requirements. Oxana scopes this in an initial gap assessment and gives you a realistic timeline.
Ready to prove your posture?
Start with a gap assessment against your chosen pathway. We will tell you exactly where you stand and what it takes to get certified.
Book a gap assessment