Are you working towards ISO 27001, NEN 7510 or other standards and customer-specific requirements? We translate the requirements into practical controls, documents and evidence. Together, we establish a working management system and support you through the audit. This helps you demonstrate compliance and prepare for certification.
Our own ISMS is also certified to ISO/IEC 27001:2022 by EIK Certificering B.V. View our certificate, scope and validity. Our own certification does not automatically apply to the organisations we support.
We prefer to use the Compliance Tool as the central foundation. It keeps standards, controls, tasks and evidence in one place, helping us work efficiently together. If another approach suits you better, we agree this in advance.
You assess requirements, tailor documents to your organisation, implement controls and gather evidence. The Compliance Tool provides the content and organisational foundation.
We agree in advance who carries out each task. We oversee consistency, quality and planning; you provide context, make decisions and carry out the agreed activities.
We coordinate the project and handle as much of the analysis, configuration, documentation, checks and audit preparation as possible. You provide information, validate what happens in practice and make formal decisions.
Implementation support does not itself provide a certificate. If you choose accredited certification, a certification body accredited for that activity carries out the assessment and makes the certification decision. For ISO 27001, DCA also offers a separate route to non-accredited certification that you can discuss with us. Agree in advance what your customer accepts and how the scope, roles and impartiality arrangements will be recorded.
Even when we carry out almost everything, management and process owners remain responsible for information, validation, risk appetite and formal decisions. We advise, coordinate and implement.
Assess objectives, scope and the existing arrangements. Record who carries out each action and what information is needed.
Outcome: a realistic planDevelop the risk assessment, treatment plan, policies and responsibilities. Gather evidence during implementation.
Outcome: a working systemPrepare the internal audit and management review, safeguard the assessment's objectivity and follow up findings.
Outcome: insight into readiness and improvementsArrange a separate assessment for the chosen certification route. Maintain checks and improvement actions afterwards. Guidance and internal assessment are not a certification decision.
Outcome: assessed records and agreed ongoing managementAn organisation with current processes, usable policies and available internal owners needs a different project from one starting from scratch or facing a fixed audit deadline.
The starting price covers guidance. The Compliance Tool, internal hours, improvement measures and external certification are separate parts of your budget. An internal audit is agreed separately. Total involvement depends on the scope and division of work.
View pricing and the division of work →For quality management, read about ISO 9001 implementation and certification preparation. For environmental aspects, obligations and performance, explore our ISO 14001 support.
Also read the ISO 27001 step-by-step plan or the NEN 7510 checklist and audit preparation guide.
Working towards the SNA quality mark? Explore our guidance and software for obtaining and maintaining the SNA quality mark, with an approach to the initial inspection and ongoing management.
Has a customer requested an EcoVadis assessment? Explore our EcoVadis support for reviewing existing documents, preparing for the assessment and creating a practical improvement plan.
Read the ISO 27001 cost guide for the separate budget items. The VORM customer story shows how collaboration on documents, risks and responsibilities works in practice.
Which processes, documents, risk assessments and evidence are already usable?
How many locations, processes, systems and organisational units are included?
How much expertise and time can management, process owners and staff make available?
Is there time for a regular project, or does a customer or audit require a faster approach?
What is needed for your certification? We assess where you stand, what is still missing and which approach fits.