From asset inventory to the Statement of Applicability, ISO/IEC 27001:2022 set-up together with KVKK compliance.
From 169,000 TRY
Our information security consulting does not aim to copy all 93 controls as they are, but to select those that suit your risks and to prove them. KVKK technical and administrative measures are mapped to the ISO 27001 controls and managed in one system.
Scope
- Information asset inventory, classification and risk assessment (including methodology selection)
- Risk treatment plan and Statement of Applicability (SoA) in the 2022 structure
- Access management, backup, incident response and business continuity policies
- Evaluation of cloud services and supplier security
- Awareness training and social-engineering tests
- KVKK VERBİS, privacy notice and inventory work
Duration and approach
For a mid-size software company the project typically lasts 16 to 20 weeks. For technical controls we work with your IT team; penetration tests and security scans can be bought from an independent provider. We stay with you throughout until the certification body audit.
Scope of service
- 2022 SoA structure
- Risk methodology
- KVKK mapping
- Awareness training
ISO 27001 Information Security and KVKK Consulting — get a quote
Fill in the form and we will get back to you as soon as possible.
Frequently asked questions
What is the difference between consulting and certification?
The consultant helps you set up the management system; the certification body audits the system independently and issues the certificate. For impartiality the same organisation cannot both consult and certify. We provide consulting only.
How long does it take to get an ISO certificate?
For a small or medium-sized business an ISO 9001 project typically takes 12–16 weeks, ISO 27001 16–20 weeks and an integrated system 20–28 weeks. Your existing documents and the time your team can set aside affect the duration.
How is the consulting fee set?
Consultant man-days are calculated by headcount, number of standards, number of sites and current readiness level and a fixed package price is given. You can see your approximate budget with the estimator on our site.
Is the readiness test really free?
Yes. The ISO 9001 readiness test on the site is free; your answers are not stored on the server. The result shows which areas to prioritise and an estimated timeline.
What do I see in the project portal?
The stages of the package you bought, the documents requested for each stage, the files you uploaded, consultant notes and a progress percentage appear in the portal. Files are stored privately and only the assigned consultant and you can see them.