How can we help you?
Type of provider
ISO 27001: find the right partner.
Certification body, consultant, tooling or internal auditor. One request gets you several quotes. That way you always find the best partner and never pay too much. Free and without obligation.
What is ISO 27001?
ISO 27001 is an international standard for information security. The standard describes requirements for an Information Security Management System (ISMS): a structured approach to protect the confidentiality, integrity and availability of information.
ISO 27001 helps you to systematically identify, manage and reduce information security risks.
Who is ISO 27001 relevant for?
IT companies, software developers, MSPs, but also organisations that handle a lot of personal data or confidential customer data. You mostly find ISO 27001 in these sectors: IT services, financial services, healthcare, government, retail and e-commerce.
Which themes does ISO 27001 cover?
- Confidentiality
Only authorized persons have access to information
- Integrity
Information is correct and complete and has not been changed without authorisation
- Availability (Availability)
Information is accessible when needed
- Help with these themes?
A consultant helps you put them in place in your organisation.
Request support
How does the path to ISO 27001 work?
At every step you see which partner can help. Only the internal and the external audit are mandatory.
Mandatory Optional
- Optional
Implement the standard
You set up your organisation according to the requirements of ISO 27001. Implementation support saves time and prevents unnecessary mistakes.
Implementation support - Optional
Maintain your management system
Tooling keeps your documents, risks and actions organised. That also makes it easier for the auditor.
Tooling - Mandatory
Internal audit: the mock exam
To prepare for the external audit, you test whether your management system works. This is often done by an independent expert.
Internal auditor - Mandatory
External audit: the final exam
A certification body assesses whether you meet the standard. It is never the same party that did your internal audit. Pass it and you are certified.
Certification body - Mandatory
Every year again
A management system is not a one-off project. Every year brings an internal audit and a surveillance audit, with recertification after three years. Every year you can reassess your provider, and you can always switch without losing your certificate.
Switch certification body
Why compare quotes through CertificeerWijzer?
For the same standard, the price can differ by up to 75%, depending on the providers you choose. That difference can be explained, because paths differ more than you think: in how much you do yourself and how much you hand over, in the quality of the tooling, in the specialisation of the certification body, in how soon a party can support you and in the certifications of the providers themselves.
So when comparing, do not look at price alone, but also at these factors:
- Price of the whole path Compare the costs over the full three-year cycle, not just the first quote.
- Specialisation in your sector A partner who knows your industry asks the right questions and understands your processes.
- Norms and values Pragmatic or thorough, on site or remote: a partner that fits the way you work.
- Capacity A partner with time when you need it, so your deadline or tender is not at risk.
- International recognition Working with clients abroad? Then the name and reputation of your partners matter.
- Qualifications An accredited certification body, a qualified auditor and a consultant with proven experience, so the result is recognised.
We know the providers personally. We are in direct contact with every connected provider, so we have the most up-to-date information on their prices, specialisations, approach, certifications and availability.
How to get the best partner at a good price
You enter your details once and receive several quotes. Then you choose which party may support your company.
-
“Thanks to CertificeerWijzer we switched to a certification body that fits our organisation much better. We save €1,500 a year and the audits are at least as good.”
Director, FleGo B.V. -
“As a start-up founder you already have enough on your plate. Quickly finding the right partner so you can keep building your company is worth its weight in gold. Happy with our certification body and auditor”
Founder, Dufond B.V. -
“The switching process went smoothly and professionally. Within 3 weeks we had switched, and the new certification body understands our process approach much better.”
Managing Director, Zeno Zorg B.V.
Looking for a provider and not sure where to start?
Get in touch with Nathan, we are happy to help you on your way.
Frequently asked questions about ISO 27001
Is ISO 27001 mandatory?
No, ISO 27001 is voluntary. But more and more clients do require it, especially in IT, finance and healthcare. It also helps you comply with the GDPR and the new NIS2 directive.
What is the difference between ISO 27001:2022 and the previous version?
ISO 27001:2022 has a revised Annex A with 93 controls in four categories (previously 114 in fourteen categories). Eleven new controls have been added, including for cloud security and threat intelligence. The transition deadline was 31 October 2025.
Can I get ISO 27001 without a consultant?
Yes, especially if you already have experience with management systems. For smaller organisations with a manageable IT environment it is feasible. A consultant can speed up the process, but is not required.
What is accreditation and why does it matter?
Accreditation means that a certification body is checked by a national accreditation body, such as the Dutch accreditation body, UKAS (UK) or DAkkS (Germany). Through the IAF agreement these certificates are recognised internationally. Always choose an accredited certification body.
How often is there an audit after certification?
After your initial certification, a surveillance audit follows every year. After three years you need a full recertification. This cycle then repeats.
Can I switch to another certification body?
Yes, you can switch at any time. Your new certification body takes over your file and plans a transfer audit. Your certificate remains valid during the switch.
