20000-1
ISO/IEC 20000-1
IT service management system
Rs 20,500
IAF CertificationFinal price. No GST charged.View certificationINFORMATION SECURITY MANAGEMENT SYSTEM
ISO/IEC 27001:2022 Certification
Information security management system. IAF Certification. Assessment timing is confirmed after scope and audit review.
What is ISO/IEC 27001:2022?
ISO/IEC 27001 is the standard for information security. It requires an organisation to assess the risks to its information, choose controls to treat them and keep the system under review. The 2022 edition groups 93 controls under four themes: organisational, people, physical and technological.
Who needs it?
- IT, software and SaaS companies
- BPO, KPO and data processing firms
- Fintech, healthtech and e-commerce businesses
- Any vendor handling client data
Review the ISO/IEC 27001:2022 preparation checklist
What it can do for your business
- Supports responses to client security questionnaires alongside relevant policies and evidence
- Lower risk of data breaches and downtime
- Supports data protection compliance
- A common requirement in IT outsourcing contracts
FROM APPLICATION TO DECISION
How it works
01
Define scope and buyer needs
Identify activities, sites, the standard and edition, and any buyer or tender accreditation requirement.
02
Confirm the certification route
Check the issuing body, accreditation scope, assessment arrangements and total fees in writing before payment.
03
Prepare documents and evidence
Submit initial business documents and the records needed to demonstrate how your management system operates.
04
Complete review and assessment
The applicable review or audit may require additional evidence and corrective action. Timing depends on scope and readiness.
05
Decision and ongoing review
Issuance depends on successful review, not payment alone. Check the issued scope and arrange applicable surveillance and renewal.
STARTING YOUR APPLICATION
Initial business documents
These establish who is applying and the proposed business scope. They are the starting point; the service-specific review or assessment can require additional operational evidence.
Business registration
Udyam, incorporation certificate or shop licence.
Letterhead or visiting card
Your business name and contact details.
One business invoice
A recent sales or purchase invoice.
Your business scope
What you do, in one or two clear lines.
Prepare for ISO/IEC 27001:2022
Use these information security management system checks to organise your preparation. For each item, identify the responsible person, the procedure used and a recent record showing what happens in practice.
- Define the scope of the information security management system
- Information security risk assessment and treatment plan
- Statement of Applicability against the Annex A controls
- Policies, access control, awareness and supplier security
- Incident management, internal audit and management review
Make your evidence match your scope
- Describe the actual activities and locations to be reviewed, including outsourced work and responsibilities retained by your business.
- Choose current examples from your own operation. Record the date, responsible person and outcome so the reviewer can connect the evidence to your stated scope.
- Identify missing records or unfinished actions before assessment. A policy or blank template alone does not show how a process operates.
- Ask which records apply to your selected service and scope. This preparation checklist is not an exhaustive assessment or a promise of certification.
BEFORE YOU COMMIT
Confirm these details in writing before payment
Use the published price alongside the agreed scope and service terms when deciding whether the offering meets your requirement.
- Scope and deliverable: the applicable standard or scheme, edition, activities, sites and exclusions, and exactly what document or support the service provides.
- Issuing or assessment body: its name and role. If accredited certification is required, confirm the accreditation body and that the relevant standard and scope are covered.
- Buyer acceptance: share the actual tender or customer clause and confirm that the proposed route meets it. A certificate title alone does not establish acceptance.
- Assessment arrangements: required documents, audit or review stages, remote or on-site work, travel, readiness requirements and expected timing.
- Fees and exclusions: the selected service price, what is included, and any separate implementation, testing, site visit, travel or statutory registration costs.
- Ongoing obligations: applicable surveillance, renewal or reassessment, their fees, and how changes to your activities or locations should be reported.
Certification and accreditation have different roles. See ISO's guidance on choosing a certification body.
ICS✓
CERTIFICATE OF REGISTRATIONIAF Certification
ILLUSTRATIVE LAYOUT
ILLUSTRATIVE LAYOUT
Good systems.
Great possibilities.
Great possibilities.
This is to certify that the management system of
YOUR BUSINESS NAMEhas been assessed against the requirements of
ISO/IEC 27001:2022
INFORMATION SECURITY MANAGEMENT SYSTEMCertificate numberSAMPLE-XXXXXIAF Certification
SAMPLE
Authorized
signatory
signatory
SAMPLE · NOT A VALID CERTIFICATE
A credential. Not a question mark.Independently checkable, right here.
A VERIFIABLE RECORD
More than a piece of paper.
The sample shows the layout. Issued records include your company, certified scope, applicable standard, dates and status. Specialist schemes follow their own issuer requirements.
Verify a certificateQuestions about ISO/IEC 27001:2022
01What changed from the 2013 edition?+
The controls were reorganised from 114 to 93 and grouped into four themes, with new controls for areas such as cloud services and threat intelligence.
02Does it make us compliant with data protection law?+
It supports compliance by putting security controls in place, but it does not replace legal obligations under data protection law.
03Is it only for IT companies?+
No. Any organisation that holds sensitive information, such as hospitals, banks' vendors or consultancies, can apply it.
A stronger system, together.
Explore related standards for your business.
27018
ISO/IEC 27018:2025
Protection of personal data in public cloud
Rs 6,000 Rs 9,000
Non IAF CertificationFinal price. No GST charged.View certification22301
ISO 22301:2019
Business continuity management system
Rs 6,000 Rs 9,000
Non IAF CertificationFinal price. No GST charged.View certificationA SMALL STEP. A STRONGER BUSINESS.
Start your applicationReady to make it official?
ISO 9001: Non IAF Certification from Rs 2,500 · IAF Certification from Rs 4,000.
Non IAF Certification & IAF Certification · No GST chargedLET’S TALK ABOUT YOUR BUSINESSQuestions before
Questions before
you start?
Tell us what you need. We’ll help you understand scope, documents and the certification process.
A REAL PERSON. A CLEAR ANSWER.
Let’s get you certified.
Leave your details. We’ll help with the rest.
ISO/IEC 27001:2022 preparation by city
Explore business scenarios and the records to prepare for your operating location.
Navi Mumbai: Warehousing and logisticsMohali: Software and IT servicesNoida: Electronics and software deliveryGurugram: Business process and corporate servicesBengaluru: Software and IT servicesHyderabad: Technology and life-science suppliersPune: Engineering and product developmentMumbai: Professional and financial services
Explore all city guides →