Prepare your ISO 27001 journey with a clear and realistic structure.
FOS supports the implementation of an information security management system adapted to your reality.
Gap assessment
The first step compares your current practices with standard expectations and organizational needs.
- Define the scope
- Review existing policies
- Assess risks and controls
- Prioritize actions to complete
- Build a realistic preparation plan
ISMS implementation
We help your teams structure what is needed without creating unnecessary documentation overhead.
- Information security risk assessment
- Risk treatment plan
- Statement of applicability
- Security policies and procedures
- Incident, supplier, access and asset management
- Team awareness
Audit preparation
FOS prepares teams, evidence and corrective actions before the certification body assessment.
- Internal audit preparation
- Management review
- Evidence organization
- Corrective action plan
- Audit question simulation
- Support through certification stages
Expected documents and evidence
Evidence must show that practices are understood, applied and monitored.
- Asset register
- Risk register
- Approved policies
- Awareness evidence
- Incident and action tracking
- Security dashboards
Frequently asked questions
Does FOS certify ISO 27001?
No. FOS supports readiness. Certification is issued by an independent accredited certification body.
How long should we plan for?
The duration depends on scope, maturity and available resources. An assessment helps estimate the effort.
Can we start without existing documentation?
Yes. The engagement can include progressive creation of useful and adapted documentation.
Have a cybersecurity, IT project or ISO readiness challenge?
Let us clarify your priorities and identify the next actions that will create the most value.