ISO 27001 implementation consultants in the North East & UK
Practical ISO/IEC 27001 information security management system (ISMS) implementation for businesses handling sensitive information. From County Durham, we support organisations across Newcastle, Sunderland, Teesside and the UK, preparing systems for independent certification assessment.
Free, no-nonsense consultation ↗By Microsoft Teams or phoneISO/IEC 27001:2022 guide
Starting points to identify gaps, not complete implementation manuals. Resource terms.
Need help closing the gaps?
Support at your premises or online. Thinking Freely Ltd can assess your current arrangements, identify the gaps and help you put the requirements into practice.
What does ISO/IEC 27001 do?
ISO/IEC 27001 is an international standard for information security management. It provides a structured way to identify and manage risks to business information, including its confidentiality, accuracy and availability. It covers people, processes and technology, rather than relying on IT tools alone.
You already manage these issues in some form. Our job is to compare your current arrangements with the requirements and help close the gaps, not make you adopt an entirely new system.
How we help you implement ISO/IEC 27001
We establish the relevant scope, review the information you handle and assess existing security arrangements. We help close gaps in risk assessment, risk treatment, applicable controls and evidence, working with your IT team or provider where needed.
- Understand the requirement. We confirm the standard, the activities to be covered and any customer or tender deadline.
- Review what you already have. We look at how the business works, not just whether documents exist.
- Close the gaps. We explain the necessary changes in plain English and help your team put them into practice. No replacement system or nice-to-haves.
- Check readiness. We support internal audit, management review and action follow-up before independent assessment.
- Support you through assessment. We help you prepare and respond to findings. The certification body decides whether to certify; ongoing internal audit support is available afterwards.
Meet customer requirements. Strengthen your tenders.
Customers handling sensitive or commercially important information may require certification before appointing a supplier. A relevant certification scope and clear security evidence can support due diligence and tender responses; certification does not replace customer-specific security checks.
Where a buyer awards marks for relevant certification or management system evidence, this can help you score higher. Where certification is a pass/fail requirement, it may help you qualify rather than earn extra marks. We start with the actual customer requirement so you invest in the right scope and evidence.
Certification can remove a barrier to becoming an approved supplier to customers who require it before using your services. Approval and contract awards still depend on the buyer’s full criteria; some procurements also permit equivalent evidence.
Discuss your customer or tender requirement ↗ISO/IEC 27001 without the confusion.
We start with your current management system and the way you already work. We keep what meets the requirements and help close the gaps needed for certification. We do not build a replacement system or add nice-to-haves.
What we work on together
Your project can cover information security risks, access controls, supplier security and incident response. We agree the scope and assess the arrangements and evidence you already have before recommending changes.
We support implementation in day-to-day work, rather than treating a set of documents as a finished management system.
From first review to ongoing support.
ISO gap analysis
Know where you stand before you spend.
Explore service ↗ISO/IEC 27001 SUPPORTISO implementation
Your existing system. The gaps closed.
Explore service ↗ISO/IEC 27001 SUPPORTISO transition support
Update your system without starting again.
Explore service ↗ISO/IEC 27001 SUPPORTInternal audits & maintenance
Stay ready between certification visits.
Explore service ↗Bring your team with you.
Help managers and staff understand the purpose of the standard, their responsibilities and the evidence needed in practice.
Explore ISO/IEC 27001 awareness training ↗Your questions, answered.
Will ISO/IEC 27001 help us score higher in tenders?
It can where the buyer awards marks for relevant certification or evidence. Where certification is a pass/fail requirement, it helps address eligibility rather than automatically increasing the score. The tender criteria, scope and acceptable evidence must be checked.
Will you replace our existing management system?
No. We review your current management system, retain what meets the requirements and help close the gaps needed for certification. We focus on what is necessary, without consultancy jargon or nice-to-haves.
Do you provide ISO/IEC 27001 certification?
No. We help you implement and maintain the management system and prepare for independent assessment. The certification body makes the certification decision.
Can you help if we already hold certification?
Yes. We can review your current system, provide internal audits, support maintenance and help plan updates to applicable revised requirements.
How much does support cost?
Scope, complexity, locations and existing arrangements affect the work involved. Start with a free consultation so we can agree a proportionate scope and provide a tailored quotation.
Implement an ISMS suited to your information risks
We help define the ISMS scope, identify information assets and risks, select and justify appropriate controls, establish the Statement of Applicability, improve incident and supplier processes, and build evidence through internal auditing and management review. We provide consultancy, not ISO certification.
Clients may retain us for outsourced internal auditing and management system maintenance after implementation. We can also integrate additional ISO standards as the business develops.
Explore integrated management systems ↗ Ongoing internal auditing ↗
Discuss an ISO 27001 implementation ↗No jargon.
Just the help you need.
Tell us how you work now. We’ll discuss what you already have, where the gaps may be and the next step towards certification.
Microsoft Teams or a phone call. Your choice.