Security / ISO 27001

Build an audit ready
security programme.

ISO/IEC 27001 is the global standard for information security. We design the management system, implement the controls, and ready you for the audit.

Trusted & Backed by:

Built at IIT Guwahati
Incubated at TIC, IIT Guwahati
Supported by MeitY Startup Hub
Built at IIT Guwahati
Incubated at TIC, IIT Guwahati
Supported by MeitY Startup Hub
Built at IIT Guwahati
Incubated at TIC, IIT Guwahati
Supported by MeitY Startup Hub
Built at IIT Guwahati
Incubated at TIC, IIT Guwahati
Supported by MeitY Startup Hub
Built at IIT Guwahati
Incubated at TIC, IIT Guwahati
Supported by MeitY Startup Hub
Built at IIT Guwahati
Incubated at TIC, IIT Guwahati
Supported by MeitY Startup Hub

What it requires

What 27001
asks of you.

A management system

ISMS

A documented information security management system with leadership behind it.

Risk assessment and treatment

Risk

A risk method, and a plan to treat what you find.

Annex A controls

Controls

The controls that fit your risk, selected and justified.

Internal audit

Audit

Internal audits and a management review before the certification audit.

Continual improvement

Improve

Findings tracked and closed, cycle after cycle.

How we get you there

From gap to
certification ready.

01 / Assess01 / Assess

Find your gaps

A gap assessment against the standard and your current controls.

02 / Design02 / Design

Design the system

The management system, risk method, policies and the control set.

03 / Implement03 / Implement

Put controls to work

We deploy the controls, with the platform for evidence and training for staff.

04 / Sustain04 / Sustain

Stay certified

Internal audits, surveillance support and re-certification, year after year.

Talk to us

Packages

One package,
every stage.

Readiness, Implementation and Sustain, with internal audit and re-certification support.

See packages

Independence

We prepare you, implement the controls and run internal audit. An accredited certification body issues the ISO certificate. Kensara is not a certification body.

Questions

ISO 27001, in your words.

How long does ISO 27001 take?

Readiness and implementation usually run three to six months, depending on scope and your starting point. The certification audit follows.

Do you issue the certificate?

No. We prepare you and run internal audit. An accredited certification body issues the certificate.

Can you help us keep it after year one?

Yes. Sustain covers surveillance audits and re-certification, so the certificate stays valid.

Privacy. Security. Intelligence.

Built for trust.

Tell us what you need to prove. We reply within one working day.