Do you perform the certification audit yourselves?

No. We prepare the company and support it through to audit. Certification is done by an independent body. We help close gaps and assemble evidence.

Can you start from scratch with no existing policies?

Yes. We design the ISMS, draft the required policies and procedures for your business, then set up the processes to run them.

How is this different from SecBoard?

This is consulting and operational ISMS support in the company. SecBoard is the software platform for risk, compliance, and incidents. They can be combined.

Where should we start?

With a short description of the business, existing policies, and the goal (PCI DSS, ISO 27001, or building an ISMS). Then we agree scope and a work plan.

Direction

ISMS preparation and support

We help companies build an ISMS from scratch or strengthen an existing one: internal policies, processes, controls, and readiness for PCI DSS and ISO 27001 / 27005 certification.

ISMS directions 9

Three steps: direction → task → needed outcome. You can select several items. We help build an ISMS or strengthen an existing one, and prepare for PCI DSS or ISO 27001 / 27005. Certification, compliance, and price are not guaranteed without agreed terms.

Choose a direction

Build an ISMS from scratch 7

You need to build an information security management system and define core rules and processes.

Strengthen an existing ISMS 7

You need to order documents, strengthen processes, and close control gaps.

Prepare for PCI DSS 7

You need to define cardholder-environment requirements, assess alignment, and prepare evidence of fulfilment.

Prepare for ISO 27001 7

You need to create or improve an information security management system aligned with the standard.

Risk management to ISO 27005 7

You need to organise identification, assessment, treatment, and monitoring of information security risks.

Normative documents and internal policies 8

You need to develop, update, or align internal information-security documentation.

Control, audit, and continual improvement 7

You need to check ISMS operation, assess control performance, and plan improvements.

Ongoing ISMS support 7

You need regular help maintaining the system, meeting requirements, and preparing evidence.

Need advice on requirements 6

Not sure which standard or work format you need — we will help orient.

Request a callback

To make the request more precise — pick an ISMS direction in the tree nearby.

What the engagement covers

Current-state assessment, ISMS design, drafting and updating internal policies, process setup (risk, incidents, access, continuity), readiness for PCI DSS and ISO 27001 certification, risk management per ISO 27005, and ongoing support after go-live.

PCI DSS, ISO 27001 / 27005

We prepare the company for external audit: gap analysis, remediation plan, evidence pack, policies and procedures, and training for accountable owners. ISO 27005 guides information security risk assessment and treatment within the ISMS.

When this service fits

When the company has no ISMS yet, documents are scattered, or certification / compliance evidence is required for customers and partners. Where useful, we combine consulting with SecBoard to track risk, compliance, and incidents.

Questions

Do you perform the certification audit yourselves? No. We prepare the company and support it through to audit. Certification is done by an independent body. We help close gaps and assemble evidence.
Can you start from scratch with no existing policies? Yes. We design the ISMS, draft the required policies and procedures for your business, then set up the processes to run them.
How is this different from SecBoard? This is consulting and operational ISMS support in the company. SecBoard is the software platform for risk, compliance, and incidents. They can be combined.
Where should we start? With a short description of the business, existing policies, and the goal (PCI DSS, ISO 27001, or building an ISMS). Then we agree scope and a work plan.

Discuss a project Projects

Products in this direction

SecBoard Comprehensive information security management platform RiskBoard Transaction Risk cabinet: score 0–100 with clear reasons

Other directions

Information security software This direction focuses on custom builds for information security teams: a cabinet, roles, statuses, and evidence around your process. SecBo… Cybersecurity We help protect corporate infrastructure: networks, security controls, event monitoring, and information security incident handling. GDPR and data protection We help build personal data protection under GDPR: documents, processes, DPIA, consent records, and data subject request handling.