ISO & Compliance Implementation
End-to-end ISO implementation and SOC 2 — gap assessment, documentation, audit and certification readiness, plus the regulatory calendar behind all of it.
Where we actually help.
ISO 27001 & ISO 27701
Full ISMS implementation support from scope and risk assessment through to Stage 1 and Stage 2 certification audits.
SOC 2 Type I & Type II
Control mapping against the Trust Services Criteria, evidence collection for the observation period, and auditor coordination.
Vendor & regulatory risk
Third-party risk assessment programmes and tracking of fast-moving frameworks like ISO 42001, the EU AI Act and the EU Cyber Resilience Act.
Start here.
Free to read and use — no form required for the content itself.
ISO 27001 Readiness Checklist
A realistic, stage-by-stage readiness checklist for ISO/IEC 27001:2022.
Open →ISO/IEC 42001 Readiness Checklist
Clause-by-clause readiness for the AI Management System (AIMS) standard.
Open →SOC 2 Type II Readiness Checklist
Map your controls to every Trust Services Criterion.
Open →Regulatory Change Tracker
ISO 42001, the EU AI Act and the EU Cyber Resilience Act — every effective date.
Open →Vendor / Third-Party Risk Assessment Checklist
A third-party security assessment programme that scales.
Open →From the Blog.
Terms used in ISO & Compliance Implementation.
Before you dig in.
Should we pursue ISO 27001 or SOC 2 first?
It depends on your buyer base — SOC 2 is more common in US enterprise SaaS deals, ISO 27001 more common internationally. The related article above walks through the decision in more detail.
Is the Regulatory Change Tracker specific to one country?
No — it tracks EU-origin frameworks (the AI Act, Cyber Resilience Act) and the international ISO 42001 standard, all of which can apply to organizations outside the EU selling into it.
Want this applied to your organization?
Every checklist here is a service we deliver — talk to our ISO & Compliance Implementation practice.