The world’s benchmark for information security. We audit your ISMS against ISO/IEC 27001 and, on the evidence, issue certification — independently of the audit team.
ISO/IEC 27001:2022 sets the requirements for an information security management system (ISMS): managing information risk through a system of controls covering people, processes and technology, selected against a documented risk assessment.
As an independent certification body, Skyeblanc Certification audits your information security management system against ISO 27001 and, where the evidence supports conformity, issues certification. We do not design, document or improve your system — that separation is a requirement of ISO/IEC 17021-1 and is exactly what gives an ISO 27001 certificate its meaning.
Certification is delivered under ISO/IEC 27006-1, with the certification decision made by an independent decision-maker who did not conduct your audit.
The same defined path for every applicant — the certification decision held independent of the audit team.
A readiness review of your documented ISMS, scope and objectives, and audit planning.
On-site or ICT-assisted assessment of the ISMS in operation against ISO 27001.
An independent decision-maker reviews the evidence and grants — or declines — certification.
Annual surveillance audits, then a full recertification at year three renews the cycle.
Audit duration for ISO 27001 is determined per ISO/IEC 27006-1 — never a flat rate. The main factors:
The number of people — including shifts and part-time — is the primary driver of audit duration.
How many sites and where. Multi-site sampling follows IAF MD1.
The range of activities and processes within your certified scope.
Operations across multiple shifts can extend on-site audit time.
Transfers from another accredited body are reviewed under IAF MD2.
On-site or ICT-assisted remote auditing per IAF MD4, matched to risk.
Fees are fixed for the defined audit programme. A fixed fee covers the audit; it never buys an outcome — certification is granted only on the evidence, by an independent decision-maker.
ISO/IEC 27001 applies to any organisation that holds or processes valuable information. We routinely audit across:
Tell us your scope, sites and employee numbers, and we'll return a fixed-fee audit quotation with the programme and timeline.
Prefer pricing first? Request an audit quotation →
