Home › Services › ISO/IEC 27001 consulting
ISO/IEC 27001 consulting and certification readiness
ISO/IEC 27001 is the international standard for managing information security. Clients, banks and international partners increasingly ask for it. APOPS Assurance takes you from gap analysis to a working information security management system (ISMS) that is ready for a certification audit. Our team includes ISO/IEC 27001 Lead Auditors and Implementers.
From gap analysis to certification
- Gap analysis against ISO/IEC 27001:2022 and its Annex A controls
- Scope, information security policy and risk methodology
- Risk assessment, risk treatment plan and Statement of Applicability
- Policies, procedures and records that match how you really work
- Staff awareness and training
- Internal audit and management review before the certification body visits
Combine it with the Data Protection Act
Much of the ISO 27001 work also covers the security duties in the Kenya Data Protection Act, 2019. We plan both together, so you do the work once and keep one set of evidence.
Why APOPS Assurance
- Founded in 2016 in Nairobi, working with businesses and institutions across Kenya
- One team for both IT security and physical security, so cameras, access control and networks are designed together
- Our own technicians and auditors, with ISO/IEC 27001 Lead Auditor and information systems audit expertise
- Clear written quotations, and help after installation
Frequently asked questions
How long does ISO 27001 certification take?
Most small and medium organisations need several months, depending on size, scope and how much is already in place. The gap analysis gives you a realistic timeline.
Do you issue the certificate?
No. Certificates are issued by accredited certification bodies. We prepare you for their audit and can support you during it.
Talk to us
Call +254 722 102 317, email info@apopsassurance.com or visit us at Kimathi House, Kimathi Street, Nairobi.