Free guide · ISO/IEC 27001:2022

The ISO 27001 Certification Roadmap

From first meeting to certificate: the steps, the documents, and where teams lose time.

  • The four phases from ISMS setup to certificate
  • Every mandatory document, mapped to its clause
  • What happens at Stage 1 and Stage 2 audits

Get the free guide

Free PDF. We'll email you a copy too.

What's inside

4 sections, built to be used, not just read

Phase 1: Set up the ISMS (clauses 4 to 6)

8 items to check, with plain-English explanations.

Phase 2: Implement and operate (clauses 7 and 8)

6 items to check, with plain-English explanations.

Phase 3: Check and improve (clauses 9 and 10)

4 items to check, with plain-English explanations.

Phase 4: Certification

5 items to check, with plain-English explanations.

Documents auditors ask for first

A quick reference table you can share with your team.

Your next 30 days

A short action plan so the guide turns into progress.

Who it's for

Built for

  • Companies selling into Europe or global enterprises
  • Teams moving from SOC 2 to ISO 27001, or doing both
  • Anyone planning a certification in the next 12 months

Rather talk it through?

We help teams build an ISMS that holds up at Stage 2, and we can run your internal audit before the certification body arrives.

Book a 30-minute call