ISO 27001 readiness, end to end
Oxana prepares your business for ISO 27001 certification: gap assessment, ISMS build, risk treatment, internal audit, and stage 1 and stage 2 readiness, in partnership with your certifier.
ISO 27001 is a system, not a checklist.
Businesses often fail ISO 27001 not because they lack controls, but because their controls are not part of a managed system. The standard asks for an ISMS: policy, risk, controls, and continual improvement, working together and evidenced.
Oxana builds that system with you, runs the internal audit, and gets you to stage 1 and stage 2 ready, so the certifier finds a working management system, not a binder of policies.
Where this fits
- A customer or tender requires ISO 27001
- You want a recognised international security certification
- You have started ISO 27001 but stalled
- You need an ISMS, not just a checklist of controls
- You want to pass stage 1 and stage 2 first time
What ISO preparation includes
Six stages of ISO 27001 readiness, from gap assessment through to standing with you at the certification audit.
Gap Assessment
We assess your current information security management against ISO 27001 and produce a prioritised roadmap to close the gaps before a certifier ever sees them.
ISMS Build
We build your Information Security Management System: the framework of policy, risk, controls, and continual improvement that ISO 27001 is assessed against.
Risk Treatment
A structured risk assessment and treatment process, with a Statement of Applicability that documents which controls apply and why.
Document Control
Governed, version-controlled documentation so policies, procedures, and records are current, approved, and auditable.
Internal Audit
We run the internal audit and management review the standard requires, finding and fixing issues before the certification audit.
Certification Readiness
We prepare you for stage 1 (documentation) and stage 2 (implementation) audits, and stand with you through the certification engagement.
Frequently Asked Questions
What is ISO 27001 readiness?
ISO 27001 readiness is the advisory work that prepares your business to be certified to ISO 27001. It covers gap assessment, building the Information Security Management System, risk treatment, document control, internal audit, and coaching through the stage 1 and stage 2 certification audits.
How long does ISO 27001 take?
Typically six to twelve months from gap assessment to certification, depending on your starting posture and the maturity of your existing controls. Oxana scopes this in the initial gap assessment and gives you a realistic, staged timeline.
Does Oxana certify us?
No. ISO 27001 certification is issued by a JAS-ANZ accredited certification body following an independent audit. Oxana prepares you for that audit and partners with accredited certifiers so the path and handover are clean. We are deliberately not the certifier, so the assessment stays independent.
What is an ISMS?
An ISMS, or Information Security Management System, is the framework of policy, risk management, controls, and continual improvement that ISO 27001 is assessed against. It is a living management system, not a one-off document set, and it is what the certifier actually audits.
Get ISO 27001 ready
Whether a customer requires it or you want a recognised international standard, we will get you from gap assessment to certified.
Start the conversation